7f2a327e88bd802405af6e51b4815af4aca32be5ce2a40f47b2b96f413dcbb8b

Analysis

max time kernel
148s
max time network
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
11/08/2026, 00:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
portfolio-2.html
Size 4KB
Sample260811-ak55psbd86
SHA256 7f2a327e88bd802405af6e51b4815af4aca32be5ce2a40f47b2b96f413dcbb8b
MD5 8bfa78b6e512f0a53d4a6c9978ea903d
SHA1 a0fbd3e4342d83046ffe9f896766294271acd1ab
SHA512 116426b621568fcfc712dbc182eb32ed554cab649b1d91ba9f8ac7429eaff316a322534b22df57396273d1ca0da35c0d72c91114eb528ecdd3eda9f22fdeaeb9
SSDEEP 48:REtj29McaK5/VsUGo8pfw7y/WobuS6ykaHHW:R82LRVV585wWOobuS6ykaHHW
TLSH
T1F191772128D5683306B786880E316F1AFFD6A247D61AAB5232FD67CB1FB7D15CC0340A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3940	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134308810440099508"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-552508041-2681165170-3229858294-1000\{45A3CE2C-B295-4DF2-8DA1-020C908ACA95}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3024	msedge.exe
3024	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 1856 wrote to memory of 3800	1856	msedge.exe	88
PID 1856 wrote to memory of 3940	1856	msedge.exe	90
PID 1856 wrote to memory of 3484	1856	msedge.exe	91
PID 1856 wrote to memory of 3484	1856	msedge.exe	91
PID 1856 wrote to memory of 5148	1856	msedge.exe	92
PID 1856 wrote to memory of 5148	1856	msedge.exe	92
PID 1856 wrote to memory of 5148	1856	msedge.exe	92
PID 1856 wrote to memory of 5416	1856	msedge.exe	93
PID 1856 wrote to memory of 5416	1856	msedge.exe	93
PID 1856 wrote to memory of 5416	1856	msedge.exe	93
PID 1856 wrote to memory of 5208	1856	msedge.exe	94
PID 1856 wrote to memory of 5208	1856	msedge.exe	94
PID 1856 wrote to memory of 5208	1856	msedge.exe	94
PID 1856 wrote to memory of 1472	1856	msedge.exe	96
PID 1856 wrote to memory of 1472	1856	msedge.exe	96
PID 1856 wrote to memory of 1472	1856	msedge.exe	96
PID 1856 wrote to memory of 3476	1856	msedge.exe	97
PID 1856 wrote to memory of 3476	1856	msedge.exe	97
PID 1856 wrote to memory of 3476	1856	msedge.exe	97
PID 1856 wrote to memory of 2760	1856	msedge.exe	100
PID 1856 wrote to memory of 2760	1856	msedge.exe	100
PID 1856 wrote to memory of 2324	1856	msedge.exe	99
PID 1856 wrote to memory of 2324	1856	msedge.exe	99
PID 1856 wrote to memory of 1708	1856	msedge.exe	102
PID 1856 wrote to memory of 4928	1856	msedge.exe	106
PID 1856 wrote to memory of 4940	1856	msedge.exe	107
PID 1856 wrote to memory of 1964	1856	msedge.exe	108
PID 1856 wrote to memory of 576	1856	msedge.exe	109
PID 1856 wrote to memory of 576	1856	msedge.exe	109
PID 1856 wrote to memory of 3024	1856	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\portfolio-2.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ff83f1ac188,0x7ff83f1ac194,0x7ff83f1ac1a0
  2⤵
  PID:3800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1816,i,7213300240503211806,11319977799033229794,524288 --field-trial-handle=2404,i,2411460404412835543,13589395843258075476,262144 --variations-seed-version --mojo-platform-channel-handle=2440 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2240,i,14987827206498985755,8841198830766770254,524288 --field-trial-handle=2404,i,2411460404412835543,13589395843258075476,262144 --variations-seed-version --mojo-platform-channel-handle=2680 /prefetch:13
  2⤵
  PID:3484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1556,i,10952277360921563002,13668225514804518148,262144 --field-trial-handle=2404,i,2411460404412835543,13589395843258075476,262144 --variations-seed-version --mojo-platform-channel-handle=2400 /prefetch:2
  2⤵
  PID:5148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3444,i,1928759067910389898,13898481499033013619,2097152 --field-trial-handle=2404,i,2411460404412835543,13589395843258075476,262144 --variations-seed-version --mojo-platform-channel-handle=3456 /prefetch:1
  2⤵
  PID:5416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3440,i,6467487901513822279,682712190160822949,2097152 --field-trial-handle=2404,i,2411460404412835543,13589395843258075476,262144 --variations-seed-version --mojo-platform-channel-handle=3376 /prefetch:1
  2⤵
  PID:5208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4332,i,6570837948823479624,5224085213743825830,2097152 --field-trial-handle=2404,i,2411460404412835543,13589395843258075476,262144 --variations-seed-version --mojo-platform-channel-handle=4348 /prefetch:1
  2⤵
  PID:1472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4412,i,10919575333667406827,4487977028268970281,2097152 --field-trial-handle=2404,i,2411460404412835543,13589395843258075476,262144 --variations-seed-version --mojo-platform-channel-handle=4480 /prefetch:9
  2⤵
  PID:3476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5344,i,7660061224648098400,10930189163388109691,524288 --field-trial-handle=2404,i,2411460404412835543,13589395843258075476,262144 --variations-seed-version --mojo-platform-channel-handle=5444 /prefetch:14
  2⤵
  PID:2324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5356,i,11938704432464265486,15336687710723174996,524288 --field-trial-handle=2404,i,2411460404412835543,13589395843258075476,262144 --variations-seed-version --mojo-platform-channel-handle=5464 /prefetch:14
  2⤵
  PID:2760
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6176,i,7565640895957148540,15375643857429197523,524288 --field-trial-handle=2404,i,2411460404412835543,13589395843258075476,262144 --variations-seed-version --mojo-platform-channel-handle=6164 /prefetch:14
  2⤵
  PID:4740
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6176,i,7565640895957148540,15375643857429197523,524288 --field-trial-handle=2404,i,2411460404412835543,13589395843258075476,262144 --variations-seed-version --mojo-platform-channel-handle=6164 /prefetch:14
  2⤵
  PID:1708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4404,i,15756886220640596576,11714407066072245577,524288 --field-trial-handle=2404,i,2411460404412835543,13589395843258075476,262144 --variations-seed-version --mojo-platform-channel-handle=4864 /prefetch:14
  2⤵
  PID:4928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4400,i,8695077009768312022,17649037928671611592,524288 --field-trial-handle=2404,i,2411460404412835543,13589395843258075476,262144 --variations-seed-version --mojo-platform-channel-handle=5252 /prefetch:14
  2⤵
  PID:4940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4476,i,7625822727828333126,9804554370099394120,524288 --field-trial-handle=2404,i,2411460404412835543,13589395843258075476,262144 --variations-seed-version --mojo-platform-channel-handle=6272 /prefetch:14
  2⤵
  PID:1964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6288,i,6639563244216985517,16296752695120179815,524288 --field-trial-handle=2404,i,2411460404412835543,13589395843258075476,262144 --variations-seed-version --mojo-platform-channel-handle=6284 /prefetch:14
  2⤵
  PID:576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=2056,i,3449978404155977023,16299223156614416913,262144 --field-trial-handle=2404,i,2411460404412835543,13589395843258075476,262144 --variations-seed-version --mojo-platform-channel-handle=3544 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3024

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5760

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5648

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f8dff5315a0bd3856381f405c1a16257337fd6ff2d8043dd8bea22404cd35129
MD5 5e53a2cd139f0cce4f8ceab3e015f7da
SHA1 1bd884dbaaa352a724c53bfb8f4bfad2623c93f5
SHA512 27cc4cb62f9aa4af6b521efd824b001f3b689bae2ffe57263da18e2bb22d0b13ba656141d7e6ea1d1c202d5f461a44243a00d604f78bd5b04fe6b8512e260ac1
TLSH
T178D02B1463108D04D441F13214D13311B1110833A80C96440050E1284CB634206738DD
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 1f3bc43c50f7d0fa02f98500baf5d78052a5560603459a9325b17de989d121f4
MD5 46a6445fd2c83830bb8c6e03f85bafc0
SHA1 46b07e35efbd47692fdc81ef0e82e2964da2831b
SHA512 800f82b05756fd6fab3fe29924147f0b86afeec21da661e646b431c6ca03903eb45bb09803f5cdaf3d2d1bb16f95d0f2e53a1f9ddde57505b0f3e1580c384ed1
TLSH
T188D02B1063208C04D441F13214D23311B1010833540C96440150E1384CB634206728CD
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 f364e7cc4ae2c65055524d39d9f7f1d9ba785dc5b0828a7ca5e74b3b6dfea89e
MD5 9cc1995ac736ef5633014ddf76263e5f
SHA1 8639bd3e0913c3e74faaa16e0f522bf4aceb564f
SHA512 482baa74ca57401ac16df783f779edf7c94d1092b115a8853c0a77a531f93a6e81f46f1c83730e0040788a2b51f3fe9b1866dc6a77e2f2d86a09e90cb756ebbd
TLSH
T1CA61D6A3936325D1E76B6472E3F1980937F8A44B81AB2E0343D25D38180AF4CD5DF667
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe599fef.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe599fef.TMP
Size 3KB
SHA256 48b2bd72dcb237309ffddb4938eb34472fa043abea6d8ba81abd5550a740aec2
MD5 b34fcfbf81e6874f2fa15d73ebcd6cfa
SHA1 361cbc3b16071dd4b379275146a2dd54d42358e6
SHA512 be357eb205e6350a05aea4237e5c27a5fefbdd6f9632380afe86e1cf4b851bf0a46927d1b063f50c194e2bc0668a379bd680b4051cc3d2e3982346c786e6fcb8
TLSH
T10C61E8A3836325D1E76B6472E3F0580937F8A45B81A72E0303D25D745806F4CD5DF267
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 8e90352a70134a7ebc674c0f1570c5c25c41818dce441a258a1692762dc42948
MD5 99348a029ae4e9d3b4a726ec5209aed4
SHA1 e1fc64331aa2249aaed239cb0fe742f044f67c19
SHA512 12377d00ea923db7857fba8204e71163330072c5be04ee4c0e8c91c4e2ba2643103bb32c17893da83de44cd9e26297a9d6ef4521ea4086301fcdf797152c72aa
TLSH
T13431E2F383B4857E8A0196F0AA04AE1FCE2D0515432C7C6985E0AE2793F3472E041A9F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 15d70d5c32d0cd80a9d11604cb256a065354eafc37546677c6542024e40088a6
MD5 e578fee785ed7b7aec3f7a43b054867e
SHA1 b1966e5d8aade7346e5145eb82ca015df46b0795
SHA512 ff3ec0a8e77c0325e2e0cbda7e241fdc655194ad65a5a7476b1479a7e7b01f14ab9c9e400d7b8eaa766d9070a98c4633242446395ab50a1d9fda03f0f9909524
SSDEEP 192:sxRXRObK/fjskroHtdDde5lSQzoD8p4W/g6+WNIYC/QuOJGAIgD5J:sxRXuK/fjskrWdc5lbT/5I6rH
TLSH
T1E742C7566D2CA93B8CCBE20DBB557F53D6F95033A1901E58BBFC961C04EAADD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 e1cf0ab7d7cfb96a8b85e3f56f17683e961f9dc27130452b2821b798e83dfeaf
MD5 3218ca49b17db48ec32a0deff5cd2b6e
SHA1 499078d6cb8399d98cde6d33c47b523f59362236
SHA512 6a1b08e701de51a2773f42a44c40a1f5afd777558f34582dd6873f7f531dc2b00fcc717b9c84c681761c606ac0e77a7ee54061a1d3c30021fa613a3581fbf313
SSDEEP 192:sxRMRObK/fjscroHHdDde5lSQzoD8p4W/g6+WNIYCNIuOJGAIgIJ:sxRMuK/fjscrAdc5lbT/5IMrs
TLSH
T11B32A7165E2CA93B8CCBE20DBB557F53D6F95033A1901E58BBFC961C04EAADD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 18d0fdf8135092a820ae5011a7eb3e978d00edcf562f2076f52c2ce1ef115059
MD5 87ead5b8809839c7d238d92d6388b6ce
SHA1 ca5ed01d369d9e4b05b75db80c1af0cf559ff149
SHA512 19e890635eca5e91d90000c5f9e9b5de5deeb25a914f1ef3c2bc4263dbf1490f375d23975da09a9f531d3dc65581bac78519377e828c4d0f5aac642df30c54ad
SSDEEP 192:sxRXRObK/fjskroHHdDde5lSQzoD8p4W/g6+WNIYCNIuOJGAIgDnJ:sxRXuK/fjskrAdc5lbT/5IMr9
TLSH
T18A32B7165E2CA93B8CCBE20DBB557F53D6F95032A1901E58BBFC961C04EA6DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 9cf1bf17e24f66ce736b848fb3199e9ac098def412edc4b5762d0ca7c0bff4e2
MD5 3af3259fefa71d63f1de4a9cd95ce127
SHA1 55418729f72461358331df1d22f40ee2990cf2cb
SHA512 d0dea5c83ec5de18b35814e3d11947a04c31ba5437358a35678d6e4422cd5f6e0315383da6dbfadaed8faf4062641177d1d7009ff5e6de472804aff8a659f2bf
SSDEEP 384:jjm+vhKfCtgQCFf4+KhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVmC9qyRvEroZSy:jC+vhQWgQ+f4+8F1+UoAYDCx9Tuqh0Vw
TLSH
T106B2EA2B600DCB7F4F800AADAC197FD76DA802CB97589D5047FED94C02C77EA92194DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5a3e52.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5a3e52.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 5500221da7e6d90842cc668760abf0471d77acf78673d61b8bb7a434457f2efd
MD5 f14f39fad18522be7d2ebcd4ad0afec1
SHA1 00c62f164f34df83b36d09eec94fe655eae3feb4
SHA512 fe20f08cda485c18557560862e65fd278eb6facf5df73f30fbfcc155100f3ebb9da2e76372c9f050ac23d3f6b309ed38302ad106610982de452e9721029331b3
SSDEEP 768:xD3yWtO/ZiVp8+p3bd66j+4BRv86aLIWbojKgqmUe:xD3yWEij8+p3Z6n4yZfgRUe
TLSH
T13DF2BFB1E8699A338CF5D689B6863743AFF48113D6C02EE8A8DD7B0D05571AD170B837
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 7939ec011231a16ed1418c01835fa36f16fb040d8e4009e25b392d3c09691555
MD5 686316fcc2262e497a83f42548473b5c
SHA1 0cbfed5473dfe087ada6d0881e0e00701362aed8
SHA512 73b21672a4dd32753e5ea00541bb0393eb6b596713b4a96696d3e3b89f9fe47b51357a2ef026fdbc1ade424ce7544de372b70ad599357022ba3c7d2ad3fcd9bc
SSDEEP 768:Irv+4UNbdD3+cZZNp8+p3bd66j+4BRv86aLIi22bwCl1:Ibsbp3/ZL8+p3Z6n4y80ww
TLSH
T18B03CF73F9A899339CF6C648B2467B437FF851A396C10AC4D4DD2B4E419A19E230BC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 c1ed2ed90cfb6c5eab312e444fd7c60d8a353e0e2595fa7ce53993a648c1933f
MD5 b4bea3fa1393857c1c8953a93d4258b4
SHA1 7878c691c36f58d69849639c07f4d9e6dea1bf0a
SHA512 5718f8dcdaa694a50c11def3152ce0d683236984167139d6e2fceb9fca9665784b5794cb68e50ab31834856ef88321e6aa876f1957bad37e4bbb48789c788db0
SSDEEP 768:Nrv+4UNbdg3fWtT/Zi7p8+p3bd66j+4BRv86aLIWbR3z:NbsbS3fWrid8+p3Z6n4yZp
TLSH
T19C03AE72F86CDA338DF2C644B1863A437FF85153D6C11AA8E8CD6B4D419A1AD230BC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 f5ef4ca5cea9ebe04f5514719e6eb9640b2a25c837851d87e358caf5659e21b5
MD5 33476a541904b03e5b8b790d2793176e
SHA1 287c2f154457e9ab3b87ce4f78a774e927f30710
SHA512 89dfb2cff0dd8fdea1d05d7b29d4fd1d7bc43cd6c5f9911f1a176f8e4b5e37a34b3a1e3e3ecce44ec4218b8ae6f5442c474b5518b393b334181f3a43bcc10ec4
SSDEEP 768:jD3fWtO/ZiVp8+p3bd66j+4BRv86aLIWbojKgqmUe:jD3fWEij8+p3Z6n4yZfgRUe
TLSH
T1F9F2BFB1E8699A338CF5D689B6863743AFF48113D6C02EE8A8DD7B0D05571AD170B837
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 8f1903b56f08e7c9dad4169f8c5f334ba0a034067fcb588871f8e9a1e7a5b59c
MD5 34fa6e49f3b37d7b45d7bf3b0c990c5c
SHA1 9a9b0fd1192c558953f96b3f9f9221c09f41254e
SHA512 4d9b75f8c15e9fbadfdbd0306413902a5f5cabde5894245c2044d600dce867bb5cf4109805a799ec7293504015ba91215251143bdbb314f04ee81c2b570019b3
SSDEEP 768:jFQH3uwgLWtO/Zrp8+p3bd66j+4BRv86aLIWbojKgqmUe:GH3YWEN8+p3Z6n4yZfgRUe
TLSH
T1EF03AE72D898DA37DCF9DB84B68A3743AFF44163CAC06AE4A6DD6E0D015719D130BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 3da6526128608513fd8c8d4db03ecfe00b1191f45c3c382a9c2e5c5a69a4ceb2
MD5 3d4ac21612fa4c9d03607708abd2d08c
SHA1 c4b47026e4e623fa8103e74660192688f6224c85
SHA512 c375becb8719c829a5922318e17ce3160d8039eb0c9308607586bbdbfd8f5b88e4c6e938953a67e48e3dbcfee26dc8c9b2e1bfb10231b3dc452161d75c7a1f7d
SSDEEP 768:krv+4UNbdD3aJZiNp8+p3bd66j+4BRv86aLITb2bwCl1:kbsbp3EiL8+p3Z6n4ym0ww
TLSH
T14503BF73E96899339DF6CA44B1867A437FF85193D6C10AD4D8CD2B4E419A19E230BC37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

011e8362-1eff-4ae0-a022-d3e865a7b8b4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\011e8362-1eff-4ae0-a022-d3e865a7b8b4.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download