2b1ee39db5b4bdcdcd3261c597c244297d031dc17ffce771899ba039ef502a8e

Analysis

max time kernel
149s
max time network
146s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
26/08/2026, 12:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
blog.html
Size 742KB
Sample260826-pptpssdn91
SHA256 2b1ee39db5b4bdcdcd3261c597c244297d031dc17ffce771899ba039ef502a8e
MD5 4adf0a20ff85990274abce3759b7e68d
SHA1 7e0b92cf55b427b6b26466cfeb8cbf39190d284c
SHA512 01c2f7d33b9ea6a09f6add43fdab335c102f18e04afadea04dbafb78b86e310e4a4ea30a3f9ae0f8037426aa8d119945db8532bb4f882162df899eb89536267c
SSDEEP 6144:Q1ck41K99d9MEhMDtoOMjMaa2jgY+7CGAKiERk1BT3VNVF1L5FYoYDPGFFttWXx:wcR1KzhHQapkEtVyyFFttWXx
TLSH
T191F46C68A20D64399DA702AF7548BB2D29765903FFC24ADDFDD94E9009C36F302B3719
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4336	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134322211453725620"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1014449518-1831897916-4205727055-1000\{0BB73445-E0A0-40C3-A18C-676B36A4918E}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
6292	msedge.exe
6292	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe

Suspicious use of WriteProcessMemory 24 IoCs

description	pid	Process	procid_target
PID 3524 wrote to memory of 6500	3524	msedge.exe	90
PID 3524 wrote to memory of 1520	3524	msedge.exe	91
PID 3524 wrote to memory of 4336	3524	msedge.exe	92
PID 3524 wrote to memory of 1520	3524	msedge.exe	91
PID 3524 wrote to memory of 1520	3524	msedge.exe	91
PID 3524 wrote to memory of 1860	3524	msedge.exe	93
PID 3524 wrote to memory of 1860	3524	msedge.exe	93
PID 3524 wrote to memory of 4380	3524	msedge.exe	96
PID 3524 wrote to memory of 4380	3524	msedge.exe	96
PID 3524 wrote to memory of 6604	3524	msedge.exe	95
PID 3524 wrote to memory of 4380	3524	msedge.exe	96
PID 3524 wrote to memory of 6604	3524	msedge.exe	95
PID 3524 wrote to memory of 6604	3524	msedge.exe	95
PID 3524 wrote to memory of 1444	3524	msedge.exe	98
PID 3524 wrote to memory of 6600	3524	msedge.exe	99
PID 3524 wrote to memory of 2376	3524	msedge.exe	100
PID 3524 wrote to memory of 2228	3524	msedge.exe	101
PID 3524 wrote to memory of 2628	3524	msedge.exe	102
PID 3524 wrote to memory of 2228	3524	msedge.exe	101
PID 3524 wrote to memory of 2628	3524	msedge.exe	102
PID 3524 wrote to memory of 4716	3524	msedge.exe	103
PID 3524 wrote to memory of 4716	3524	msedge.exe	103
PID 3524 wrote to memory of 1680	3524	msedge.exe	106
PID 3524 wrote to memory of 6292	3524	msedge.exe	109

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\blog.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x268,0x26c,0x270,0x264,0x2b4,0x7ffd3eadc188,0x7ffd3eadc194,0x7ffd3eadc1a0
  2⤵
  PID:6500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1552,i,11410077431104843318,13704254263608760119,262144 --field-trial-handle=2292,i,12302495910914712292,2445832124549632319,262144 --variations-seed-version --mojo-platform-channel-handle=2260 /prefetch:2
  2⤵
  PID:1520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1908,i,11983965282860456882,1485256571793904225,524288 --field-trial-handle=2292,i,12302495910914712292,2445832124549632319,262144 --variations-seed-version --mojo-platform-channel-handle=2424 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2408,i,9235624731387404345,8623562245595144830,524288 --field-trial-handle=2292,i,12302495910914712292,2445832124549632319,262144 --variations-seed-version --mojo-platform-channel-handle=2572 /prefetch:13
  2⤵
  PID:1860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3656,i,9402744424843891007,3804392067229975794,2097152 --field-trial-handle=2292,i,12302495910914712292,2445832124549632319,262144 --variations-seed-version --mojo-platform-channel-handle=3704 /prefetch:1
  2⤵
  PID:6604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3664,i,7525991578462776323,10574102050458892678,2097152 --field-trial-handle=2292,i,12302495910914712292,2445832124549632319,262144 --variations-seed-version --mojo-platform-channel-handle=3684 /prefetch:1
  2⤵
  PID:4380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5392,i,13729017467416692270,8720930265927334574,524288 --field-trial-handle=2292,i,12302495910914712292,2445832124549632319,262144 --variations-seed-version --mojo-platform-channel-handle=5384 /prefetch:14
  2⤵
  PID:1444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5388,i,9876641017134705814,3180128368004696267,524288 --field-trial-handle=2292,i,12302495910914712292,2445832124549632319,262144 --variations-seed-version --mojo-platform-channel-handle=5400 /prefetch:14
  2⤵
  PID:6600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5076,i,17919147106989918855,12286588275440780492,524288 --field-trial-handle=2292,i,12302495910914712292,2445832124549632319,262144 --variations-seed-version --mojo-platform-channel-handle=5460 /prefetch:14
  2⤵
  PID:2376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2020,i,6206225617142604200,13435158568109462961,524288 --field-trial-handle=2292,i,12302495910914712292,2445832124549632319,262144 --variations-seed-version --mojo-platform-channel-handle=5384 /prefetch:14
  2⤵
  PID:2228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3508,i,11977141046397408497,3239455726709222238,524288 --field-trial-handle=2292,i,12302495910914712292,2445832124549632319,262144 --variations-seed-version --mojo-platform-channel-handle=5512 /prefetch:14
  2⤵
  PID:2628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5668,i,1010852758659926056,9202995041672991329,524288 --field-trial-handle=2292,i,12302495910914712292,2445832124549632319,262144 --variations-seed-version --mojo-platform-channel-handle=5672 /prefetch:14
  2⤵
  PID:4716
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6332,i,3744898068573526248,5060826821692390655,524288 --field-trial-handle=2292,i,12302495910914712292,2445832124549632319,262144 --variations-seed-version --mojo-platform-channel-handle=6348 /prefetch:14
  2⤵
  PID:2804
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6332,i,3744898068573526248,5060826821692390655,524288 --field-trial-handle=2292,i,12302495910914712292,2445832124549632319,262144 --variations-seed-version --mojo-platform-channel-handle=6348 /prefetch:14
  2⤵
  PID:1680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=3224,i,8893908115751913673,2532774571074790706,262144 --field-trial-handle=2292,i,12302495910914712292,2445832124549632319,262144 --variations-seed-version --mojo-platform-channel-handle=6244 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:6292

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2720

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5664

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ba1406dd0117e6bb02a18e1f0ca40a20fdf33f68d611dcf6b59a242ae289374a
MD5 8a26ea5cde92773cb558eb116e113216
SHA1 2f807e9fd5e13c4ff550fceca7d90f11683ae33e
SHA512 dca9db1a71d0ad99193f78ee9f9221519b875eb1beb13ebfbd9d64a1b449eb8a027a5b2ceadf9158001b4548f036b26ed4f2c36ce3e8b981af5a54590c0e94a5
TLSH
T1B8D0C030B7286803D5141931D022CB007A17002321BBD1025160C00C2C3BCB163CA141
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e9e31f5fb014f6a7439a4e224bdae6d3d8b22db7c287d9c004b0184cc18e6bf8
MD5 00fe8112e1beaff1b09c3e772b0b70e6
SHA1 1d234f4d61d2fe0153bb63a7a246d37e6fc0aabe
SHA512 aaafc34862d38399e66858477aa9d3d624e9e071371fe2961aac0159845c41dbe1ed0ae62f8b9c52f327e4e4a97abdaf614ae741bcfd2627ec55b1d4f6fb6d74
TLSH
T1EAD08071B7286847D9551931D432CB017A57546365BAD1025160410C6C7BDB553CA155
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 3d25f3026834cc6774907787c426de4ab81b3a9967c77337cb5dee2851e426fc
MD5 f9cc3fe7440863d120b498708d4c4cb5
SHA1 22617da63556d56a9d020aa2e4530ceaf372302e
SHA512 c869737ace15ff44cdf3d21034b330dfecf23a258fab90795d9196fa8b23802c3b837153766e521dd601b3085a3a7a3c0fa8060e70c40c9876f892b3a8a39ee2
TLSH
T126E0E559C922BC275DFC1B18A2954647E740131B3B50884B3A3C816D4FB063B468A85C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 e80469fca1e715e47bfda3eb56d3b015a56b8a47e433331499de269b7d9127cf
MD5 aa319723690311764c95fdadee717bbb
SHA1 b8356a2580c136215bd7ce393da9b1cd9ef2bd3a
SHA512 32489f0845b65247cd3015959158b3ad65d4b8ebba10e6ab304713ebcdde826aee4b5c8dd2568c880a8478255398db0cb92f9e478257699857e268b068df7410
TLSH
T16A41E2F783F4856ECA0195F0AA18BE2FCE1C0515432C3D6AC9E0AE1793E3471E141A5F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 3f831f32e4e28fb4aaaa8f5288e5ef1de23e48199887cc7c641a7f520d5cffb2
MD5 eb58426c1e5eeadf67d72552cfe63b01
SHA1 18f455145073d1de28d51801250dd0de288eb660
SHA512 ad67c3b60f3d5cac36f99b0bcad5d758fb71455461ebb76029109abd3975c96db248e63955accd51736c147c7992fc48fd1c742f332d9fad6b45a59993ee382c
TLSH
T11E819DF7C3E4877E991152F09B156E2BCE1D0516422C7C66C8F4AF1B63E24B1E24269F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 428bbad86c664402b607c4f0ba98e0d429d69862e99744a9ce64cefb0f133d75
MD5 331436aee05155a8da17e07ed79fb628
SHA1 f2b596d7fe7d343631c85b06eaa8e3df36b85292
SHA512 290ba3781d61afa5fdb3bf315888f7cf45791e9d2e0fa0a2fc553061e4f43a810e3f40271f285fe81bb88743e3a74ee29eeb56e7f9ec652ff7ca3f740b06bc5d
SSDEEP 192:sxRMR4yMqZjK1Ml8wb2/fbsZPNRZbKzoD8peI/g6+WNIYcC4ClsGQT+GEIgjRJ:sxRMvl2/fbsZPN/b2D/5IW4gsGQT2jb
TLSH
T18A62D915AA749D7BCCCBD209FA55BF93D6F81173A1945E44AAFC8A0C00E67ED211382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 43eedb9f239fc81d21f1680c5421472ce5b296b4cf39abf7961539a2bb5f688f
MD5 7702ea5387cd7405f3738b4ab914e45d
SHA1 3497af1a09df210edd2a2f523718596b0e4b658d
SHA512 1a6d9d352dd869aa6e479d0811c00ba9f218666ae77cfe9182340ee1ff37e97baf6fd0ef8a7dd1dbd34d1df305a9502321129bfbf254c0fc3fad58124e336a6c
SSDEEP 384:sxRMvqF2/fbsGl2N/b2D/5IW4NsGQTARb:sASF2/fn0e/5IW4NsGQTS
TLSH
T18A72D815AA749D7BCCDBD209FA55BF93D2F81123A1905E44AAFC8A0C04E7BED211781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 a4d4b6d728dfc7c536d3d6bcb19fad00638687f76418bbc84d9bf210e4905258
MD5 6f39294cf14ca60e275cfa7cc5358dd1
SHA1 20656405029fa7fa9cb6192130afd97c5fbdfec0
SHA512 c22d3054358983bd8c5a7a39c9e261ba1ef2eb198577010a99472ce441058e643759d9b93918b82c166c1c587eb5437c044cca436c27dbfc7511dad19230e500
SSDEEP 768:Ob4YATWg1NfwB8F1+UoAYDCx9Tuqh0VfUC9xbog/OVBbDwzroT4z:Ob4YATWg1NfwBu1jasHwAUz
TLSH
T142C2EB2B244CCB7E4F844A9DAC29AED76DD801CB9B984D5447EB890C03C67FB521A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 aaa6787494c889c528958af525c43d9d23637aad05f78634e7552b6b21740158
MD5 e9bb72a09b6ba26e08dfc28961f46f3d
SHA1 77fef75154e282f56c42de993bb28c83e762ee1a
SHA512 e7b1a853d6abd83b6b33753d58cec17db364091658644ef5759da7be8820420e3cd0af89ff28ae708c1a24ab64701c6eee61d14e9ff528e555c15045fdbcc476
SSDEEP 384:yv+Rp0nYrnhZZuJCXHnbB1S/HqlcDDRPbIhJ9ftN:yv+Rp0nYrnhZZuJCXHnbB1S/HqlcDDR6
TLSH
T1D0B25E11713F4680383EA90C91B8981F96C2B4637519E53F7BA802A65F67E139DFE8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 24KB
SHA256 540244ecc5969c4bc7672e75941d816128a5398fce5890d5d3e1ceb4a33f951e
MD5 ef01d48c3bb4dfc6fc4b083b2706161c
SHA1 276821c53b7622bd54b2bf322cc1a1e311e2b2c8
SHA512 d9f77d296dc31cb37ff106fe1b55f6e65adaf5ffa9d3f6c15cef0b5bd9fd63ef292f1050662ecf2c5f5123c464297653876a3848dc61ed4652d50956f95bf352
SSDEEP 384:ntiF1tNn/s3n9SM8NL98TUNTUlIRLPvuT9WpU5EqfbGGj6P57ClAcaTey2vMB0uQ:kF1j+9hQ9wgBu6UCGmLTeyp0n
TLSH
T174B23A36E895DE7BECE64ED9A70A7647DEE04263818C6AD4D6C85E4C00CB2ED430BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 24KB
SHA256 9c776d5e9274a861f37a3a1cdd8d5c8e6f9e4e9c0676e5c1a2ae87291181e771
MD5 8ac159c97c6731bdae563b8c68ddb369
SHA1 d06b679f1a27d6576fdfcf7a9b8e6bedf2c2e592
SHA512 c6434090227339ee79fbf310e3e65496bf8c0e1dd5250c3b9b6bbb1008701d2813fea2a9555c9531befd6be5de5f39354ff3698eaaf7ee2e59915e62e58c324e
SSDEEP 384:ndiFqtNn/s3n9SM8NL98TUNTUlIRQPvuT9WpU5EqfbGGj6P57ClAcaTey2vMB0uQ:UFqj+9hQ9wgCu6UCGmLTeyp0n
TLSH
T12EB23A36E895DEBBECE64ED9A70A7647DEF04263818C6AD4D6D85D4C00CB2ED430BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 24KB
SHA256 d7093fe928e9450f4eb47baba981c896363a41b8f54beec6bd79b049c5532c2c
MD5 2cd84c6b256d29ed2039c733bf1071ea
SHA1 a6eabd5e3eea7863a7554dd2b1c44586f2214099
SHA512 994262647fa1246a31c14830f91bc6824f5624bb1aeee843f98d1f9a3dc799cf410122812e23f3d1526bf4194ce3a1b510500f4037d30373202118fbb6b70419
SSDEEP 384:ntiFqtNn/s3n9SM8NL98TUNTUlIRLPvuT9WpU5EqfbGGj6P57ClAcaTey2vMB0uQ:kFqj+9hQ9wgBu6UCGmLTeyp0n
TLSH
T1B7B23936E895DE7BECE64ED9A70A7647DEF04263818C6AD4D6C85E4C01CB2ED430BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 a535370554a0ad0317e7a6ef4e19cc7b53065ee9758948c36967f6810801726b
MD5 4e7d907b19605d48a8cd4a5525684687
SHA1 d9f0654a06089eb497eabd74cfb038b3b0908f0a
SHA512 257c930d148e0b7341e3af43f273bcb82fb0f10fa361ae409797f743fe4a33efb162981e51b664b65dbb3b6cdf42f9f564ebbb9777daa18c3304af5cc8ffcf75
SSDEEP 384:neiFvZcIsw8NL98TUNTUlIRXPvuT9WpU5EqfbGGj6P57ClAcaTey2vMB0+LBNj5M:1FnswQ9wg9u6UCGmLTeyp0WN5wZ
TLSH
T190C24B72DCA4CDB7ECEA4F99A64A7607DEF0416385CC9AD4D5D85E0D018B2EE430BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 a2b7fe434108afc148f63362e9557e06ddace79d68784c38c47d761f9e1a5d3e
MD5 17e24e3bbf9bf1bcd15203e96bde35eb
SHA1 653a34e1cdf5d518fcf4b1dd4754f4c6446a2733
SHA512 9c3dd46b04d9ce141f57d79148f0169974b11d514e36e67be0bf46a10639e9c9b854419c34ecfbaa7ef029f4039b3656d864b541382a1b78e8f86a139d723f75
SSDEEP 384:n5iF1tNn/s3n9Sn8Ng98TUNTUlIRiPvuTv4f5EqfbGGj6P57ClAcaTey2vMk0OOG:QF1j+9SX9wgUuuCGmLTeyc029MW
TLSH
T1DED25C32EC54CEB7ECE64ED9B64A7646DEE04263858C5AD4D6D85D0C01CB2ED430BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 aa459f8dec5857376aedc9999dc7f884d0ad55094d1cf0a7f0ee450085c9e3fe
MD5 6821672b3c3af17b16b90fdc4a410fab
SHA1 554c421e926a3f82ba96fcc061138339606ea090
SHA512 11d1e5522180ae97b726f66943b37cc986c107e0edf850d392588896b3cd1222e05822f0ee6bada6416eba6ac08ddd078e5d045d010904413118a7ea85015d07
SSDEEP 384:n7iF1tNn/s3n9Sn8Ngm8TUNTUlIRiPvuTuYfREqfbGGj6P57ClAcaTZL2OObjI9N:WF1j+9SXmwgUuvqGmLT1229MW
TLSH
T145C26B36EC59CEB7EDE64F99B70A7A4AEEE00267849C59D8D6D85E0C00C72DC4307C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download