1e067226da4ab122b4673b04214df4ee24cdd0face702ef370ebeec1d871cf7d

Analysis

max time kernel
148s
max time network
151s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260618-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
25/06/2026, 12:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
gpdi-api/dashboard.html
Size 34KB
Sample260625-pgcfjsbx7m
SHA256 1e067226da4ab122b4673b04214df4ee24cdd0face702ef370ebeec1d871cf7d
MD5 311fea6ddce380be77cbd1cbd9db91bc
SHA1 36ba7155ed2421982d77c33bd5b61a49c620d47c
SHA512 89364be49b1832c26bb5fdb71203b014880da0e3a7a4ca8bfa27cd3ad686db4d1a720f194fb57663c80658417f822ac272b17de375f7b6ac5abe44492a2ba980
SSDEEP 768:u9/hVnCKtYxGZgZyJbaYXTiAjVy9/ke2mb3BHWIZ0fnZnBMje3V5ac:2VnCKtYxsakmPKP
TLSH
T162F2C6226191212240BBB7BAC7B3CB09FA60D127D7434A553EAC16C74FF9C648567FAC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
976	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134268634660844038"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-537605601-1362463912-856654178-1000\{4BA87BB4-775C-4A4A-BD82-D484C601AB24}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3508	msedge.exe
3508	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4864 wrote to memory of 2392	4864	msedge.exe	88
PID 4864 wrote to memory of 1368	4864	msedge.exe	89
PID 4864 wrote to memory of 976	4864	msedge.exe	90
PID 4864 wrote to memory of 1368	4864	msedge.exe	89
PID 4864 wrote to memory of 1368	4864	msedge.exe	89
PID 4864 wrote to memory of 464	4864	msedge.exe	91
PID 4864 wrote to memory of 464	4864	msedge.exe	91
PID 4864 wrote to memory of 3360	4864	msedge.exe	93
PID 4864 wrote to memory of 6060	4864	msedge.exe	94
PID 4864 wrote to memory of 3360	4864	msedge.exe	93
PID 4864 wrote to memory of 3360	4864	msedge.exe	93
PID 4864 wrote to memory of 6060	4864	msedge.exe	94
PID 4864 wrote to memory of 6060	4864	msedge.exe	94
PID 4864 wrote to memory of 3840	4864	msedge.exe	95
PID 4864 wrote to memory of 3840	4864	msedge.exe	95
PID 4864 wrote to memory of 3840	4864	msedge.exe	95
PID 4864 wrote to memory of 3948	4864	msedge.exe	96
PID 4864 wrote to memory of 3948	4864	msedge.exe	96
PID 4864 wrote to memory of 3948	4864	msedge.exe	96
PID 4864 wrote to memory of 4500	4864	msedge.exe	98
PID 4864 wrote to memory of 4584	4864	msedge.exe	99
PID 4864 wrote to memory of 4500	4864	msedge.exe	98
PID 4864 wrote to memory of 4584	4864	msedge.exe	99
PID 4864 wrote to memory of 5912	4864	msedge.exe	101
PID 4864 wrote to memory of 5440	4864	msedge.exe	105
PID 4864 wrote to memory of 5472	4864	msedge.exe	106
PID 4864 wrote to memory of 5716	4864	msedge.exe	107
PID 4864 wrote to memory of 2432	4864	msedge.exe	108
PID 4864 wrote to memory of 2432	4864	msedge.exe	108
PID 4864 wrote to memory of 3508	4864	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\gpdi-api\dashboard.html
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x238,0x288,0x7ffbc9dac188,0x7ffbc9dac194,0x7ffbc9dac1a0
  2⤵
  PID:2392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1560,i,13475253168284274298,9301800788114088028,262144 --field-trial-handle=2592,i,64485215648417191,16028333197705887531,262144 --variations-seed-version --mojo-platform-channel-handle=2588 /prefetch:2
  2⤵
  PID:1368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1836,i,13656094530990044739,6906392945371994898,524288 --field-trial-handle=2592,i,64485215648417191,16028333197705887531,262144 --variations-seed-version --mojo-platform-channel-handle=2848 /prefetch:11
  2⤵
  - System Time Discovery
  PID:976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2300,i,18248780812196776009,8109894368893273395,524288 --field-trial-handle=2592,i,64485215648417191,16028333197705887531,262144 --variations-seed-version --mojo-platform-channel-handle=2936 /prefetch:13
  2⤵
  PID:464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3632,i,7777012373779528748,3066494430598562345,2097152 --field-trial-handle=2592,i,64485215648417191,16028333197705887531,262144 --variations-seed-version --mojo-platform-channel-handle=3652 /prefetch:1
  2⤵
  PID:3360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3664,i,18398225228484233719,15872889762433682191,2097152 --field-trial-handle=2592,i,64485215648417191,16028333197705887531,262144 --variations-seed-version --mojo-platform-channel-handle=3668 /prefetch:1
  2⤵
  PID:6060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4148,i,14034618370332025492,16809781962134077588,2097152 --field-trial-handle=2592,i,64485215648417191,16028333197705887531,262144 --variations-seed-version --mojo-platform-channel-handle=4820 /prefetch:1
  2⤵
  PID:3840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4284,i,17809138945043585699,12831351558324038662,2097152 --field-trial-handle=2592,i,64485215648417191,16028333197705887531,262144 --variations-seed-version --mojo-platform-channel-handle=4844 /prefetch:9
  2⤵
  PID:3948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5392,i,6845689707913068581,5547720581546583542,524288 --field-trial-handle=2592,i,64485215648417191,16028333197705887531,262144 --variations-seed-version --mojo-platform-channel-handle=5428 /prefetch:14
  2⤵
  PID:4500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5396,i,4369245514731120112,2677826930312509152,524288 --field-trial-handle=2592,i,64485215648417191,16028333197705887531,262144 --variations-seed-version --mojo-platform-channel-handle=5448 /prefetch:14
  2⤵
  PID:4584
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6060,i,13730019518981087910,2181276663310824243,524288 --field-trial-handle=2592,i,64485215648417191,16028333197705887531,262144 --variations-seed-version --mojo-platform-channel-handle=6080 /prefetch:14
  2⤵
  PID:4000
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6060,i,13730019518981087910,2181276663310824243,524288 --field-trial-handle=2592,i,64485215648417191,16028333197705887531,262144 --variations-seed-version --mojo-platform-channel-handle=6080 /prefetch:14
  2⤵
  PID:5912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5092,i,2406107492316030621,17574747471651201407,524288 --field-trial-handle=2592,i,64485215648417191,16028333197705887531,262144 --variations-seed-version --mojo-platform-channel-handle=5204 /prefetch:14
  2⤵
  PID:5440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6108,i,6576215198313587739,8282188023319211544,524288 --field-trial-handle=2592,i,64485215648417191,16028333197705887531,262144 --variations-seed-version --mojo-platform-channel-handle=6076 /prefetch:14
  2⤵
  PID:5472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6180,i,1049788743443891963,2479215373325419333,524288 --field-trial-handle=2592,i,64485215648417191,16028333197705887531,262144 --variations-seed-version --mojo-platform-channel-handle=6400 /prefetch:14
  2⤵
  PID:5716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5560,i,5407178379938344229,4853482416311529142,524288 --field-trial-handle=2592,i,64485215648417191,16028333197705887531,262144 --variations-seed-version --mojo-platform-channel-handle=5328 /prefetch:14
  2⤵
  PID:2432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=3720,i,10319040023743926441,10464169035650815253,262144 --field-trial-handle=2592,i,64485215648417191,16028333197705887531,262144 --variations-seed-version --mojo-platform-channel-handle=5692 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3508

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1548

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ff19e848916f9346514f95113e3d80cd569935b36d785719b19d90f9f740fbd6
MD5 5ab41182d14eb22e7143c63d2e18b77b
SHA1 ca8c747e1a5e38b0f0a08b492fcea6d3a75865c2
SHA512 bbecb67f89826ee2bd219f14bbc8ca87fb260f8a22bd2d52b6ccdb72d47a4b58eeb897a42a6e591bd4e75fe870419162172353d5d3ec7f1fb0fbc7b5dc6adcf1
TLSH
T1AED080757B467B11D58F0472D424E271A737455135D296057170C10E55602D1FFCA0B7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 5f46172781024fe58b7a7d87a406b81679d17de445e9e90110d33f5747ecc226
MD5 08a5ef0e8eb4590a7f0e6f821698071e
SHA1 1b756aceae48cf2649d310d7ab4883595c2e5bde
SHA512 95c72989df00c3caf1230ca41b6dcbc24f8a592c45202f7b16044b8d574fe569d4db8614652b0d1695d3fe1d795b07ea334de5b4fa9dcbb9d27de40a55592586
TLSH
T155D080757B467A11D58F0476D424E271A737455125D296057170C10E55602D1FFC90A7
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 4527714d6cf51e373f600cb242a17fa25e7ba8daf31b1e488f582decf4e8280b
MD5 0f8930b4e9415947debf241436a14f92
SHA1 ea6d5ac7f9ded1a9a5047265e589d75944dca9f0
SHA512 45db3ae85280ab88b2453bed10696842b773d3097f476f92a2bc3f70ef94f18dc6e89fa0dea96bb19e1001ec5cb8f415821079c248908bfe4162829846f49dff
TLSH
T11E614D31E0EED8A5E7E209FAE0DD208F3377E436B1AB1D01039DBCB89906370B05A124
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe592532.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe592532.TMP
Size 3KB
SHA256 17b9663991feb12282e8432b9e0db9bb4701e6090ed57f3f9d8d1e0d3c716833
MD5 eeafeacd0c821f9e31524577add2caa9
SHA1 0ac0a6b7704c98fbc61a952e6b7d8298fe67e065
SHA512 24e96dfa7d545e8b1ab9c2e10faa003d5dbd4fc0db85dda4fd4bb7c2d3524f92e9e4d929837f3de6f2a5bbe521e6b7a5a67b3778dfe04163c8dcdd0dd1681e1a
TLSH
T19B613E71E0EED9A5E7E209F6E0ED208F3377E476B5AB1D11039DBCB89906370B15A124
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

53b44d16-524a-48a7-ae36-7cab644d1c2b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\53b44d16-524a-48a7-ae36-7cab644d1c2b.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 875e95672b360162559a67bd3ef5285f4a0a8261f94cff9c81b33aff99a0dd53
MD5 09ae4e707682917b28b688b9a9be711d
SHA1 72f7ca8d2109e730b79c8f80988e4ef6eff1fcdd
SHA512 df1e899f3cf28c6ac74e37a66879a8a0e0c03a95f03da7b2dcc77c048d48756d654d99e948367b3e3d527ae17c3f8888b22e8d57796414b88c9a5414d8cda9fc
TLSH
T1165190F7C2E8866D891156F0AB257E2BCD1D052583283D5689F4AF4FA3F2471D101A5F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 b35445b63de5785c87a19b3592b4884d9ccab0c7f87d3a0e0b93cee1c53c8ba3
MD5 1481e40a85592901f9ffe73886181535
SHA1 8c3f173f12795f84a5e2ad70d637fa1ece1be1b6
SHA512 f1c11e2d24306a97156b91d2e3a01455854a3005f579a94d9a39d6c899110fcafd27800e4f33df55c41911be8fc5f6ddaff67a295492a2d9b75da49090dc7404
SSDEEP 192:sxRoR0yM/jK1Ml8wF0/fUsocQzMdybTzoA8p4V/g6+WNIY4pjvGlIgIJ:sxRoib0/fUsobIzc/5Ius
TLSH
T1E052C916663499778CDBD309FA51BF53D6F91573A2901E44AAFC9A0C00E6EED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 ab8fbe814629522bdf051bc1ae146d4b6fd7fa8b28de2178bb216662ac950cb8
MD5 616f9d2a1a4141d0afddc7d5af800c51
SHA1 bb5614490d39541c51760871e89b93e5adae6a3a
SHA512 a2ff62cafacd4888633d10fc690d6b3489b0b60c367429f81dfc50af0d5c7175e9e7276271ffe7b5caf75bf13dbe7647ee0137833c70efb3c33a2f1be37318c0
SSDEEP 192:sxRfR0yM/jK1Ml8UQXF0/fUs5cUzMdybTzoA8peV/g6+WNIY4pfvGlIgDDJ:sxRfiq10/fUs57Izi/5IqR
TLSH
T15862B916A63499778CDBD209F651BF53D6F91572A2901E44AAFCDB0C00E7EED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 366f90aa02d325dab528158008e9a8c529f50adec4240a0dad857a1c32e502aa
MD5 31f75805aa1ae72b66ff27c0e0eb17b8
SHA1 244eeec88fc716dad22e7b7a8932629db3d7f9c2
SHA512 9124114583c6adcce24da59628919f8022ced8d04edda2cb4830bd0cd8f7dceaa354c26c322b367810e0bd5cad40728bedfea64f5783548da8a565ac96db1b4e
SSDEEP 192:sxRfR0yM/jK1Ml8wF0/fUs5cQzMdybTzoA8p4V/g6+WNIY4pjvGlIgDtJ:sxRfib0/fUs5bIzc/5IuT
TLSH
T14052C916A63499778CDBD209F651BF53D6F91572A2901E44AAFC9A0C00E6EED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 432d5f4d7f7312aec09d3945f6c562ff15f4379302db23fc2cbcffa3dcd5d6b1
MD5 3976b4319f9a020cc87936d0ca79fb32
SHA1 80a159135119349fd19efb130b0035204bba2f81
SHA512 588e8d04ffaefd98090c609c5a4bd6c59772230eb1fc34f69b5740e3add1251d6df444968037a8b48ebf962953da66ee7fd971d44568ba4d67e2cbe2d95c16cb
SSDEEP 768:NmymipWgvHfSv8F1+UoAYDCx9Tuqh0VfUC9xbog/OV1LxgUroRLPR2DA:NmymipWgvHfSvu1ja8Ng/RLPU0
TLSH
T1CBC20C3B640CC77E4F845EADEC29AE976DD801CB9B588D5447EA880C03C67FB911A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59bf3f.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59bf3f.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 1ef2d993479999f0b520434d1d8ab007f8f0c4e09d90fe2c97a70b537a02291d
MD5 6126a8abb519abf6ad37db99c4144bbe
SHA1 c881cfb007ac6b989a0d38cb1ddd3106060fdca3
SHA512 61998c278cce653bc717ab25b4e5b403618e7d3666d062fedc7113afb0d862700527e2c3c0b52b6c1aa1e108ba235c4ab974edefa4a285ce2c58b048a3d99ca4
SSDEEP 768:1j+943TaXfyjfI7f0A7NpespIRM0UmkTziwjgzSuwn12bfuf:A943TufYfOfJQsZ0UmYOKyK
TLSH
T13EF2AE72D8245E634DF6EA8D7547360BAFE0022392C42A849CDD9F4D85D76EC630BD2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 530a60ab0dc7598ee66898a294576a548d6655a67eac993d63f483246c5c3fb2
MD5 92b355ca54e2df94b70e44aef7f709e0
SHA1 04f34b73c48f1ebc4da1568f345e80304bd716b8
SHA512 99a957bbb8003553e50b5cdd9bf7825169220fea4372ba900041070dfbda4494a789065b481fbd7c6deba004706301731e352879206265327caa5080cff8b592
SSDEEP 768:mj+943M2XfyjfI7fSEA7NpespIRM0UmkTziwjgzSuwn12bfuf:1943MifYfOfS5QsZ0UmYOKyK
TLSH
T11EF2AE32D8245E634DF6EA8D7547360B6FE0026392C42A449CDD5F4D85D76EC630BD2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 e400f3fb019e05c04eda68b117aa05d105cd78ead5d8722656daeb7e2ae36af0
MD5 7bbdb6771e376a4477ab9ea999634236
SHA1 741c3c1b1489b14bd1f1f2f8a7af1a190afd2edf
SHA512 81ce1297aca1a27fefb2d2768094dafc70be914fd27a743c054f81ccc3ac36bf340a0b2c6dbcc42849271bbb25ebc37c8cf8b54a2ef9213f88a5d0ea93d8805b
SSDEEP 768:eOF1j+9S3dwglaXfyjfI7f9A7NpespIRM0UmkTziwjgzSuwn12bfuf:29S3RufYfOfkQsZ0UmYOKyK
TLSH
T1C903AE33D8648E675DF6DF89760A320BAFE00263C1C42A9499DD8E4D41D76EC230BD6A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 857d5748b051d3d05c0fd1b61ae02802fcb1edf64a6c31f563a14334b1e2c442
MD5 5e57372f72a1601ac6cea17653ab1df6
SHA1 b0fb1d23603e3b57375d310b613dc4deae509b06
SHA512 76146c6547dfda9340cc17631dafca137fdb636f64d736b788170b24f2208b5b822af5dde5739cf37144b8248d31d44411bfc855efc01c0dda5dc932fd8b4cef
SSDEEP 768:3jaeqD4MlshiLdMmf3/DfyjfIpA7NpespIRM0UmkTziwjgzG0nApXLPQTU:3qcjhIdMo3bfYfDQsZ0UmYMnKXD
TLSH
T11203CF3298205EB38CB6E68A264376576FB00253C2C43FC8DCDE6E0D41976DD630B96B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

72785e46-4731-4e09-befe-6ebbcca52ef1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\72785e46-4731-4e09-befe-6ebbcca52ef1.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download