4e84ea6a504652cfa2040b8352e0e133cd3b5955ca45b30e4fc069024af25916

Analysis

max time kernel
149s
max time network
149s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
14/07/2026, 12:29

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Manual/a_topic_without_number_print.htm
Size 1KB
Sample260714-pn13gsft21
SHA256 4e84ea6a504652cfa2040b8352e0e133cd3b5955ca45b30e4fc069024af25916
MD5 3071fb27b1dd22970cca74b2ad644b0c
SHA1 b389d7636493db693ae1f725b75a6952315b0da2
SHA512 c8fe75b86de23d946b102d6511c375e5b38f8b879fa113d762fa64dec216550bbbb8db2db340930e5ec8ccf126865e9942d271ff25d2f4307214a71fe9c7fc91
TLSH
T14C2193216440F66381C343A2A072972C24A3CF4BE657959878F0433BE3CEDC4A8321E9
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4132	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134285058924237261"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2115213192-531537726-3295841909-1000\{BA73D512-48F0-4074-8702-A89714502C22}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5900	msedge.exe
5900	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4368 wrote to memory of 4376	4368	msedge.exe	87
PID 4368 wrote to memory of 4132	4368	msedge.exe	89
PID 4368 wrote to memory of 4136	4368	msedge.exe	90
PID 4368 wrote to memory of 4136	4368	msedge.exe	90
PID 4368 wrote to memory of 4136	4368	msedge.exe	90
PID 4368 wrote to memory of 4780	4368	msedge.exe	91
PID 4368 wrote to memory of 4780	4368	msedge.exe	91
PID 4368 wrote to memory of 5932	4368	msedge.exe	93
PID 4368 wrote to memory of 5864	4368	msedge.exe	92
PID 4368 wrote to memory of 5932	4368	msedge.exe	93
PID 4368 wrote to memory of 5932	4368	msedge.exe	93
PID 4368 wrote to memory of 5864	4368	msedge.exe	92
PID 4368 wrote to memory of 5864	4368	msedge.exe	92
PID 4368 wrote to memory of 5960	4368	msedge.exe	94
PID 4368 wrote to memory of 5960	4368	msedge.exe	94
PID 4368 wrote to memory of 5960	4368	msedge.exe	94
PID 4368 wrote to memory of 1452	4368	msedge.exe	95
PID 4368 wrote to memory of 1452	4368	msedge.exe	95
PID 4368 wrote to memory of 1452	4368	msedge.exe	95
PID 4368 wrote to memory of 2604	4368	msedge.exe	97
PID 4368 wrote to memory of 2604	4368	msedge.exe	97
PID 4368 wrote to memory of 1064	4368	msedge.exe	98
PID 4368 wrote to memory of 1064	4368	msedge.exe	98
PID 4368 wrote to memory of 560	4368	msedge.exe	100
PID 4368 wrote to memory of 4948	4368	msedge.exe	104
PID 4368 wrote to memory of 5688	4368	msedge.exe	105
PID 4368 wrote to memory of 1740	4368	msedge.exe	106
PID 4368 wrote to memory of 4172	4368	msedge.exe	107
PID 4368 wrote to memory of 4172	4368	msedge.exe	107
PID 4368 wrote to memory of 5900	4368	msedge.exe	109

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\Manual\a_topic_without_number_print.htm
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x274,0x7ffb7cd9c188,0x7ffb7cd9c194,0x7ffb7cd9c1a0
  2⤵
  PID:4376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2144,i,14119268690607069781,11958490869160507038,524288 --field-trial-handle=2728,i,8686236794447735631,13496006029186531302,262144 --variations-seed-version --mojo-platform-channel-handle=2736 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1984,i,4818078871022188658,9615727933339910891,262144 --field-trial-handle=2728,i,8686236794447735631,13496006029186531302,262144 --variations-seed-version --mojo-platform-channel-handle=2724 /prefetch:2
  2⤵
  PID:4136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2512,i,7904192280328523115,14828521610847201006,524288 --field-trial-handle=2728,i,8686236794447735631,13496006029186531302,262144 --variations-seed-version --mojo-platform-channel-handle=2792 /prefetch:13
  2⤵
  PID:4780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3492,i,13651785007038276716,16739472073709385275,2097152 --field-trial-handle=2728,i,8686236794447735631,13496006029186531302,262144 --variations-seed-version --mojo-platform-channel-handle=3556 /prefetch:1
  2⤵
  PID:5864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3496,i,15497023013867586049,505627371348568692,2097152 --field-trial-handle=2728,i,8686236794447735631,13496006029186531302,262144 --variations-seed-version --mojo-platform-channel-handle=3560 /prefetch:1
  2⤵
  PID:5932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4052,i,10343000716851217591,2730324921593656887,2097152 --field-trial-handle=2728,i,8686236794447735631,13496006029186531302,262144 --variations-seed-version --mojo-platform-channel-handle=4404 /prefetch:1
  2⤵
  PID:5960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4056,i,9930914689958451896,5744788430165207107,2097152 --field-trial-handle=2728,i,8686236794447735631,13496006029186531302,262144 --variations-seed-version --mojo-platform-channel-handle=4668 /prefetch:9
  2⤵
  PID:1452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5400,i,14097600009535527293,15775888778851349253,524288 --field-trial-handle=2728,i,8686236794447735631,13496006029186531302,262144 --variations-seed-version --mojo-platform-channel-handle=5232 /prefetch:14
  2⤵
  PID:2604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5396,i,13829274337271006878,9786463385230009282,524288 --field-trial-handle=2728,i,8686236794447735631,13496006029186531302,262144 --variations-seed-version --mojo-platform-channel-handle=5440 /prefetch:14
  2⤵
  PID:1064
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6048,i,11404632788404681115,6657295357983228417,524288 --field-trial-handle=2728,i,8686236794447735631,13496006029186531302,262144 --variations-seed-version --mojo-platform-channel-handle=6060 /prefetch:14
  2⤵
  PID:4752
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6048,i,11404632788404681115,6657295357983228417,524288 --field-trial-handle=2728,i,8686236794447735631,13496006029186531302,262144 --variations-seed-version --mojo-platform-channel-handle=6060 /prefetch:14
  2⤵
  PID:560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1216,i,12203842858969383617,10886319803192628625,524288 --field-trial-handle=2728,i,8686236794447735631,13496006029186531302,262144 --variations-seed-version --mojo-platform-channel-handle=6196 /prefetch:14
  2⤵
  PID:4948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1240,i,1602424334355244061,7777940240220293007,524288 --field-trial-handle=2728,i,8686236794447735631,13496006029186531302,262144 --variations-seed-version --mojo-platform-channel-handle=4232 /prefetch:14
  2⤵
  PID:5688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1256,i,2627146977475623423,16070503644241638382,524288 --field-trial-handle=2728,i,8686236794447735631,13496006029186531302,262144 --variations-seed-version --mojo-platform-channel-handle=3928 /prefetch:14
  2⤵
  PID:1740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5720,i,10405759803373474077,15062468468681408851,524288 --field-trial-handle=2728,i,8686236794447735631,13496006029186531302,262144 --variations-seed-version --mojo-platform-channel-handle=5048 /prefetch:14
  2⤵
  PID:4172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5900,i,5950537946824377711,2603006086547444638,262144 --field-trial-handle=2728,i,8686236794447735631,13496006029186531302,262144 --variations-seed-version --mojo-platform-channel-handle=816 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5900

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5676

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2380

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c80f71026fa07cc9b3e69c8779d4b4b40710cf7bc2893b740943db0d0f79591a
MD5 590eca05f11ec72644a09f205b548fbc
SHA1 c6521700bee3b500259ee3a70292b90201f20597
SHA512 fddd457c35c61ceb727f99bd39f55314cdeb7d062798c573a377675121f972ed95109fec329f911c502139a1794b70e5a98a57dd3b21b5a70e6518890a361f66
TLSH
T1E7D02B7A37C40404C0D0747221F24602D530C520AC4C81088801702CCC207C3010B8EF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ee00825bbd5a4f21308ad2e10e5a9d3c4512f07fbd288ec8ac76788de6019e25
MD5 c3584e6bc22b3ad2f168ede48d20a993
SHA1 ffb4ecef8f65638ca17e16a32806195193977c7e
SHA512 5fd777359305e67e9f30fc404af9013a876846b1d6db271fa73dfcf2ee22fb25a8e26d4d0c970cc3a8219df11038dc6b4c2c411db652593bda1c3d7643753c0b
TLSH
T18AD02B7637C40404C0D0747621F34602D530C520584C81088801B03CCC207C3010A8DB
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 f389f68a4637a072092607593b6e1d76a7810aae10279ff5572acf090095cd0b
MD5 41eb407115dd848a308a92696662efe9
SHA1 0213d489bcd72214ed66ac6f70ebe3cd94829911
SHA512 26642c5677dbfbfef36c1297b12bd65619a1550fceff9146ee0c33c017aaeffa4f39778a7aab9cbcdd339d9100124ef6b08b75fcbccf58d181f0ce947a5d2b18
TLSH
T10141BC50472719C1CB3375B7D9E1CBB67EFE847D4607AF1D81A4A2B8AA02F745012632
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59ecc7.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59ecc7.TMP
Size 2KB
SHA256 0c83609f13399b1bf00fa9f2492458df3baa5de73861ec937477756a8d407575
MD5 63c53b071229db3c77a622c718122238
SHA1 d0708a9586efe6453253c1a9e5978ee51f5ee0bf
SHA512 89abffbb57cdbf91941bfcdfba6e4fdd22118bd3fc6a0db5d608e79ea63aaf14be1434de4e609928400963cf73f4e9d4f8cde3c3d991f9e5e8ea8e3bfb11090a
TLSH
T16741CE50472719C1CB3775B7D9E1CBBA7EFE84BD4607AF1D81B4A2B8AA06F745012232
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

47e78973-91ee-422a-b3d1-5b65de7fa509.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\47e78973-91ee-422a-b3d1-5b65de7fa509.tmp
Size 2KB
SHA256 b7ed4f8fbce7cbed4d4918c67fe44f8ac367419503e0e90d0c75b033b38910a9
MD5 34ec4a6bc8eb07ed6026bc50f469bd43
SHA1 72989a5fa392d59afb6fcb0cd53cc3b6338dd39d
SHA512 dc75417171a5b34d6b545faa01dba4b4a4f7a2def008a8a2f6f42cf4d90361ca0bf30d91070c89638295eeb81856ec6fe168065e72b01b23f017947ba9e013bd
TLSH
T1ED51BCF3C7E8867DCA0156F0AA147E2BCE1D0915432C3D5AC9E4AE1BA3E2471E14199F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 7b3c0011ce240a97dea79ece96fca33e6597ed0fa376bb96e804fa622892de18
MD5 496df8ad95243ffebb56c55e40d0b914
SHA1 772487b5151298819f0e547c803f324130fbefd8
SHA512 d56bf2f5d120ee67569aed317ee8b169061e60d77dd74706a0bf6beabfc8ec62f1b671a9024e2e5167c54b533a99f516d399174c048c089f003722f432e26d03
SSDEEP 192:sxRSR/yM/jK1Ml8wbU/frsXq73AtGzoA8p4x/g6+WNIYZFLKX+GhIgIJ:sxRSTlU/frs67EE/5ISGDs
TLSH
T13052D8156A24997B8CDBD30DFA557F93D6F85573A2901E44AAFC8B0C00E6AED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 ceb3cbdf2b6b509a0d22d258ff9f4d875a685a5e037cca27fca944b21ca77601
MD5 7b6d8573330b5079c82f2719b1caaf7e
SHA1 338372c1c384a2a849a61d72d827b34093548552
SHA512 4e211236d4b4cdde57874139893b0b08be9972f46ce82692d051a6a4218a38217b812e800c15cfc49d2aa4ca0b5bcda35861d894efe7a6f01c3f5172d4f9a756
SSDEEP 192:sxRxR/yM/jK1Ml8wbU/frsdq73AtGzoA8p4x/g6+WNIYZFLKX+GhIgDfJ:sxRxTlU/frs47EE/5ISGDd
TLSH
T11C52D9156A24997B8CDBD309FA557F93D6F85573A2901E44AAFC8B0C00E6BED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 82396d0f6fdd3943e771f342e04d8a05f697dfc58aafbd1444f498c69499cca0
MD5 8e66ef9a4be948c07e840cf674538633
SHA1 dfb7284bf5b9445cf08802560d8b0b544e1fda5c
SHA512 eb77eecc13bcd737dc23e5d5ecc1eebc2094f96ee396e1841224a243151316d765ed06c6606de827ace8c92895bfabba0b053ce10caa5a8ca703a2c60694e77f
SSDEEP 192:sxRxR/yM/jK1Ml8UQ0bU/frsdqR3AtGzoA8pex/g6+WNIYZFLAX+GhIgDBJ:sxRxTqyU/frs4REO/5ISgDn
TLSH
T13A62D8166A24997BDCDBD309FA457F93D6F85573A2901E44AAFC8B0C00E7ADD221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 e9668e1e132ae3727e011d1dd929656d7cb97e8f82912f05f0ae8a070248a0a0
MD5 6131bbd88e6ea3d3e3b70463a5d3a2fa
SHA1 8be13651a19008e88842b035d8177aeee8c68823
SHA512 91fd2b3c314807102aa1865645b123d2527043b0279ffd212d96f8c4fb806a6e37676a01d819301740b519d2898e40e477114a7765b3c64c09e04fc80772f069
SSDEEP 768:KduETwWgNhfsN8F1+UoAYDCx9Tuqh0VfUC9xbog/OVywLINroJqxo:KduETwWgNhfsNu1jaXgImJqxo
TLSH
T14CC2FC3B640CCB7E4F844EACEC29AED66DD801CB66988D5447EB894C03C67EB511A4DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

27929d30-232f-4d18-9e69-be85dd05b8bf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\27929d30-232f-4d18-9e69-be85dd05b8bf.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 22030d2a9f505b78294a13c39f859844fa26286158363b546b3afdb9bd507b4f
MD5 583ef0533381955c261d36aadedd0a8b
SHA1 c93e029412c9bb49e5a70c75b21103a307872b72
SHA512 9f9c8f5c052a3044da9cd091a95e532945f089b1fb335827cbbec89120499b9721c2231e2b223ef1469d34684b6b2faabc98bd2e5caf1432c1b901a92d0f5fd7
SSDEEP 768:dj+9b35TEG+LeSFOUJVX4fouOToPvB2thtA9VAg4G+wcJC4:Y9b3ksnnwthttdG+wcJC4
TLSH
T17EF2BF72A8958D27DCD6C7D8730B76526FF0815396C12F888EDD6B0D029B7AD470BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 a5e4b1e85964c2c301150fe45fa5379ec5ba12603dbd7b8143747b4541118d33
MD5 d648ae336c25c83e07e8dce8d911f6e0
SHA1 f776d162f0aeee82508d228efde1a2d9bc40a815
SHA512 e47cebd630320841baa7922b442945e827c314bde04fca77606c946e30ef6b01ae715069b66c6ba0a4b73136a50d6369171ea4a27b1060a41f49a886323377f3
SSDEEP 768:mj+9b36YG+LeSFOUJ0X4fouOToPvB2thtA9VAg4G+wcJC4:19b3MsnnwthttdG+wcJC4
TLSH
T1A1F2CF72A8958D27DCD6C7E8730B76526FF0815396C11F888EDE6B0D029B7AD470BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 aaa915c72941913c382df76989eac96ede007ff9aa6c748fc954867a44ea1f4a
MD5 9a1ce9dea4a7464e6a62bd9a9133305d
SHA1 9ac6e3d26093c8b529ddca103def5a4e9f05d50c
SHA512 b72539c6bdd65b9d66670ae4f573f235f88e38fd81df907b4e567ab206e02f3749c08434989ed17d28d1ddefffc3c8d7e7e25100c71cd3024e97471f7d85fa6c
SSDEEP 768:jF1j+9Y37wgOYG+LeSFOUJIX4fouOToPvB2thtA9VAg4G+wcJC4:y9Y3asnnwthttdG+wcJC4
TLSH
T1D103AE739894892BEDE6CBD8B30E7256AFF041A395C16F949BCD6B0D01976EC430BC19
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 b894f8c50b012824c63011ac408dd8389975ce304d995f79311d094fd1ab06b5
MD5 0a1be95d251e7451f3b9da8750ef0bba
SHA1 09fe481dc23f33c72ed7a08cb62e3d89b618ccc8
SHA512 56d3b8fe6773e8297cd22509b3b450b0ea6f11c9c5116530d6444dd9bad5b04dd21b89891b5e16f8aac3f1ec21a39262e13a881980b1a87b8168ad30904fdcac
SSDEEP 768:grv+4UNbdH3UI+LeSFOU5X4fouOToPvB2thtA9VAwqeVH1SlX:gbsbh3gsnnwthttPEH1Y
TLSH
T17503CF32A8A88A33DDE6D398710B76473FF491539A900FC499DE1B4D079B9DD070BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download