bf7401b1617f6cf645a926a44f87ab0708726e2a0e9d740a059a15d7e4b88232

Analysis

max time kernel
148s
max time network
135s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
20/08/2026, 12:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
vishal1/privacy.html
Size 29KB
Sample260820-plz3eack4x
SHA256 bf7401b1617f6cf645a926a44f87ab0708726e2a0e9d740a059a15d7e4b88232
MD5 a51fdf6cddcff0bcad07d7771cb2605d
SHA1 7badf31ff87ffef233fdc438cfdc3d5ddafe11c5
SHA512 2963491a42079d1a74b42d275b1d389725ab16cec060869ac43cf4d24cf98cbcaef235d26cfd3f37596409313a36874c19dde15fd90af2a4267733040cfbf6e0
SSDEEP 384:XQJuIx4tN5kDi7N2pYwNOgzW/YzUz2T7F8KpY5zrKQ68IpBzsgSoOiy1QCAW:NN2pL57UHoO71QnW
TLSH
T155D2A667D784226221B202413F53ABA5FF29806B735585A63C6D820E1FF6E189B373DD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1492	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134317023542809072"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1079202589-886135813-2527035092-1000\{D0236220-CDD4-4584-98BD-7137A914D4A0}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
6124	msedge.exe
6124	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 5036 wrote to memory of 3048	5036	msedge.exe	89
PID 5036 wrote to memory of 4896	5036	msedge.exe	90
PID 5036 wrote to memory of 1492	5036	msedge.exe	91
PID 5036 wrote to memory of 4896	5036	msedge.exe	90
PID 5036 wrote to memory of 4896	5036	msedge.exe	90
PID 5036 wrote to memory of 4512	5036	msedge.exe	92
PID 5036 wrote to memory of 4512	5036	msedge.exe	92
PID 5036 wrote to memory of 2244	5036	msedge.exe	95
PID 5036 wrote to memory of 2244	5036	msedge.exe	95
PID 5036 wrote to memory of 2464	5036	msedge.exe	94
PID 5036 wrote to memory of 2244	5036	msedge.exe	95
PID 5036 wrote to memory of 2464	5036	msedge.exe	94
PID 5036 wrote to memory of 2464	5036	msedge.exe	94
PID 5036 wrote to memory of 1344	5036	msedge.exe	96
PID 5036 wrote to memory of 1940	5036	msedge.exe	97
PID 5036 wrote to memory of 1344	5036	msedge.exe	96
PID 5036 wrote to memory of 1344	5036	msedge.exe	96
PID 5036 wrote to memory of 1940	5036	msedge.exe	97
PID 5036 wrote to memory of 1940	5036	msedge.exe	97
PID 5036 wrote to memory of 4504	5036	msedge.exe	99
PID 5036 wrote to memory of 1728	5036	msedge.exe	100
PID 5036 wrote to memory of 4504	5036	msedge.exe	99
PID 5036 wrote to memory of 1728	5036	msedge.exe	100
PID 5036 wrote to memory of 1996	5036	msedge.exe	102
PID 5036 wrote to memory of 5048	5036	msedge.exe	106
PID 5036 wrote to memory of 3408	5036	msedge.exe	107
PID 5036 wrote to memory of 5904	5036	msedge.exe	108
PID 5036 wrote to memory of 1652	5036	msedge.exe	109
PID 5036 wrote to memory of 1652	5036	msedge.exe	109
PID 5036 wrote to memory of 6124	5036	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\vishal1\privacy.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2b8,0x7fffdf9ec188,0x7fffdf9ec194,0x7fffdf9ec1a0
  2⤵
  PID:3048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1568,i,7132958352929915049,8870149330433348390,262144 --field-trial-handle=3076,i,12504200733603671323,8933245072893051093,262144 --variations-seed-version --mojo-platform-channel-handle=2576 /prefetch:2
  2⤵
  PID:4896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1796,i,17128754634813255821,1993771231913503673,524288 --field-trial-handle=3076,i,12504200733603671323,8933245072893051093,262144 --variations-seed-version --mojo-platform-channel-handle=3212 /prefetch:11
  2⤵
  - System Time Discovery
  PID:1492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2296,i,3376174000445916634,32254348245317402,524288 --field-trial-handle=3076,i,12504200733603671323,8933245072893051093,262144 --variations-seed-version --mojo-platform-channel-handle=3240 /prefetch:13
  2⤵
  PID:4512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3644,i,4589495490577795913,5970360988737775291,2097152 --field-trial-handle=3076,i,12504200733603671323,8933245072893051093,262144 --variations-seed-version --mojo-platform-channel-handle=3672 /prefetch:1
  2⤵
  PID:2464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3668,i,10400423602711700546,7150557290368625108,2097152 --field-trial-handle=3076,i,12504200733603671323,8933245072893051093,262144 --variations-seed-version --mojo-platform-channel-handle=3712 /prefetch:1
  2⤵
  PID:2244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4264,i,803293915410048110,4823887016349086196,2097152 --field-trial-handle=3076,i,12504200733603671323,8933245072893051093,262144 --variations-seed-version --mojo-platform-channel-handle=4800 /prefetch:1
  2⤵
  PID:1344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4276,i,13272899624744421532,380233121056395563,2097152 --field-trial-handle=3076,i,12504200733603671323,8933245072893051093,262144 --variations-seed-version --mojo-platform-channel-handle=4804 /prefetch:9
  2⤵
  PID:1940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5360,i,13999937395073507655,13728615994079559608,524288 --field-trial-handle=3076,i,12504200733603671323,8933245072893051093,262144 --variations-seed-version --mojo-platform-channel-handle=5424 /prefetch:14
  2⤵
  PID:4504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5356,i,2962294485865588584,15570460163919781739,524288 --field-trial-handle=3076,i,12504200733603671323,8933245072893051093,262144 --variations-seed-version --mojo-platform-channel-handle=5400 /prefetch:14
  2⤵
  PID:1728
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6092,i,2361647079084252608,17385859781611393800,524288 --field-trial-handle=3076,i,12504200733603671323,8933245072893051093,262144 --variations-seed-version --mojo-platform-channel-handle=6116 /prefetch:14
  2⤵
  PID:5736
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6092,i,2361647079084252608,17385859781611393800,524288 --field-trial-handle=3076,i,12504200733603671323,8933245072893051093,262144 --variations-seed-version --mojo-platform-channel-handle=6116 /prefetch:14
  2⤵
  PID:1996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4804,i,3425397252927031965,6920446950229051499,524288 --field-trial-handle=3076,i,12504200733603671323,8933245072893051093,262144 --variations-seed-version --mojo-platform-channel-handle=4848 /prefetch:14
  2⤵
  PID:5048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4972,i,7851523884503764957,3169258832195654360,524288 --field-trial-handle=3076,i,12504200733603671323,8933245072893051093,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:14
  2⤵
  PID:3408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4260,i,3922224514480530435,11282578027841917,524288 --field-trial-handle=3076,i,12504200733603671323,8933245072893051093,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:14
  2⤵
  PID:5904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5484,i,17428715945864247746,1927878327385048712,524288 --field-trial-handle=3076,i,12504200733603671323,8933245072893051093,262144 --variations-seed-version --mojo-platform-channel-handle=5548 /prefetch:14
  2⤵
  PID:1652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5440,i,12297009727084073758,17910539878712157638,262144 --field-trial-handle=3076,i,12504200733603671323,8933245072893051093,262144 --variations-seed-version --mojo-platform-channel-handle=6068 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:6124

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2760

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2132

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2d6015222f1312f2737e561f5cb789cba16ddda90131d3af679ca4d112ce8de9
MD5 c1a7f665f2c508cc6aaf2ab720e9bbac
SHA1 f10047340073ccfd0dfa0a1ac50f19824703c6c6
SHA512 3b4b2c7997cc3a8e382662b8ab84779147222db6dcf3b614fe3750efba14aade687800978cd24780f580eacb766daa34fe0e560c30dde1f463983613dda767cb
TLSH
T188D092693B904E08C5C4207228E0A6A6A2604A31B82E024840A2B23CF8A5ED6073F4AA
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0c59160a51f6f3c09faaf3593a45b43a14b1da3961c2cccaed8346e6543c20e0
MD5 a2b289a93fce671046a365170f24567f
SHA1 d545bd953aab467815db42a92fd1d54047d5e6af
SHA512 ce7bb8aa1a40366ad652feb8233f60cd807014cb9e8ca999c2c1931eeb40a4afa1dc2c94c60d58639e2cece8c73d3a46da7a30c651ca6da0834f57b890bd2572
TLSH
T1CFD092653BA04E08C5C4207628E1A6A6A2504A31642E024841A2F23CF8A5ED6073F4AA
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 09e23f6309c2db9211d6bd25607305f552737cb86b24a97a804855e683a423da
MD5 3897bdd2986b10da80d9d227e1ec52d5
SHA1 d1b1fc9d268252f3f073573e8b11cadb1a6982d0
SHA512 93c2fab53f26a67d299ba64c769934968e14b6658a9009be70b00de6e9465da193207f6893dc8dda3b46b5119f7486ea7b104043acffa97cc7a01bec326b92d7
TLSH
T188512D97C3E68AA9C764E5F263E1087932F15052014FAB11B07D7EBC5A56F1511DC43B
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe595fca.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe595fca.TMP
Size 2KB
SHA256 ecc2fdbbaaf2a6549dd331ec0328337b7de580a3896815d7ef44f76fe8dc1698
MD5 0bf0c9c02e2c862460cc44d4396dde94
SHA1 9521d8ef506864df393bb380eae74cfd1e7765ec
SHA512 91a360744433e513274cb04b9ae0f76a7008012684c61a4024483315d241f7570d160562fa217b9862982d6995f078500f9ed56b74248955de5d9017834f5031
TLSH
T133513E97C3E689A9C764E5F263E1087A32F15092014FEB12B07D7EBD5A46F0511DC43B
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 6da44600e181970edb06742cc789bb812eb8780f6f23aac68288949942752495
MD5 ab8f2ba6a4221c89d0d3cefaecf4cab8
SHA1 1bfbab0fb6bc8ec6318ea74e7ddf870fc0244861
SHA512 5d6e3264ed7b306aa18879ff47644efb9e610416a0721519d4abbeea268843466660973fc54ccf6ee42c165e3bbf59753826ac37b28b1a0cd8ec2e1c5b9ee9c4
TLSH
T16D318EF783F4956E8A1196F0AA14AE2FCF2D0511431C7C6AC9E4AE2793F3472E141A5F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 2010647d81370c1a8865d128413f5d8b7e1a56daa6de9c374191cae5aa531214
MD5 97a6a1aece4851b6cae7b6404c5f3cb0
SHA1 910dddc289bec513ec664bea86fa3ea2bd83f2a4
SHA512 9a149f29f8e8c5dcd6fd90463230ab22c4ef237ebcb1aaae11e53eb61989c49523e2f92f790e2bba9fe5bb27b106471db80f77ba60ac0247ae22ca2ac9535b6b
SSDEEP 192:sxRoR0bI/ftsKlwHFSamzoA8p4V/g6+WNIYbCuZ6UGZEIgIJ:sxRoQI/ftsMwlSabI/5I46pos
TLSH
T1CF32B8566A28A93B4CCBE21DFF56BF63D6F91032A1905E48B7FC961C04E76DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 e4e05e41c8023ae6023c0b52af9e6bbd03d75d6da7185a57523f12146c464e83
MD5 e5e1d0d9535b37aa9f7ce3c4f6689a22
SHA1 a1cec965e446ac78a533f053b9351842b79698d9
SHA512 65e9ab89ede753dc484e54419ecbbaeb948602a077652f4bd26b877fdf2278e9a6b1eb7761cfca630b95b78682c99cdbeaff120e9a9405ed4974ea35b55e9680
SSDEEP 192:sxRXR0bI/ftsXl0HFSamzoA8p4V/g6+WNIYbysZ6UGZEIgD+J:sxRXQI/fts10lSabI/5Iu6poe
TLSH
T1D742C7566928A93B5CCBE61DBB56BF63E2F9103261905E48BBFCC61C04E76DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 22098253380b1a3f71184fdde11b2973ac1c3503b1106d070b509950592ce90f
MD5 3ce3851c5942e6cdc3a7955466a8e172
SHA1 3e44353d80d6b34078d8956a0386567401520f39
SHA512 1788423f7603fd2ff41645612d9d22458d73069f28a5a1cf6769a4c5d2bc878fbb2298db327e7b5c85c2c906527ac7eaf9b33b23855b0f95f6f5a0dc27ba448b
SSDEEP 192:sxRXR0bI/ftsXlwHFSamzoA8p4V/g6+WNIYbCuZ6UGZEIgDcJ:sxRXQI/fts1wlSabI/5I46poE
TLSH
T15D32C9166A28A93B4CCBE21DFF56BF63D6F91032A1905E48B7FC961C04E76DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 495a64804f5a06b90e536d603c5c8eca9b2d4ab8290804a8c83747e1fbacba0b
MD5 00b16f9fd1203f1d3ccf6fcdc6d8c6af
SHA1 29efd64f3488758b18ebb28b4dee9ef127639588
SHA512 6638903451371c5b62c77fcac361585449ff5d4cb8f2ec59e31ad46deee881042cb17ba18e7fe0b432828533bc27834f74a042580826219f84b73e6eb4951702
SSDEEP 384:Flp1pABfCtgisFfq4KhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVnz98ERFQroAoO:Fb1pAtWgikfq48F1+UoAYDCx9Tuqh0V1
TLSH
T18CB2EB3B600DCB7E5F800A9DEC19AFD76D9802C796988D4447FE994C02C77FA921A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 9eaee10cf729d1d08adbab147c54d62ce3a3418f2b4445e0958999f81a3a4606
MD5 80af7730614b1e7268acdc1424a4f9b7
SHA1 f8677b682d6dd2b72741996134c404241204aecf
SHA512 35ce7fed83a465accf246653bdcfad96932d030fb9791e8cc75cfbdbc9658b24811e7cc5e07f5705c31d366c7d0278b09af599b789cb63759339205adf2231cd
SSDEEP 768:qrv+4UNbdC3R6ABqobGaNltZu4aWADIidy8LbCeVH1S1C:qbsbw3dtZzaNsuVLGEH1d
TLSH
T10E03C036E859DA739CF76284B1877A0B7EF89163C1890AD488CD1B4E45DB4EE130BD17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 4550f37e532409f2fb6db7eef9ed3f834de9ec608d17fbf55927a711c0257232
MD5 2f8f9109d79700280f0ecd105f75af7f
SHA1 1c0c38c12c1b3d35aa446b694e0f9b390bfd79de
SHA512 336c36be132c772ac3ddd7841db9751067f051a2a046a5462140379d2f9ca4905f343280d876523cfa01c7f1825e084243208ff87d1c0f444f97bbc71306455a
SSDEEP 768:erv+4UNbdz3eLmBqobGaNDtZu4aWADIidy8LuCzE7r:ebsbF3HtZzaNsuVLBzEv
TLSH
T1B513AF36E8599A739DB6A2C4B2473A07BFF85193C5890A9889DD1B8E01CB4EE1307D17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 5bfa6a069152d258e36814ef05ca2f52c0095e349bca4bbd3d9fd7db377e9447
MD5 69fce19cac535dbadfdc5ecbea3b7358
SHA1 4b5c39a4b30544d5f01491510b3d961a3a327344
SHA512 13f72293d9d3840e040530138eceb349dcbc72f160c621639b2fb77b65944704f72ff4e82587fa1f92df3ca94c946e8417aa2ada2cf891cd356097140a73c131
SSDEEP 768:srv+4UNbdf3eLmBqobGaNmtZu4aWADIidy8LuCzE7r:sbsbl3qtZzaNsuVLBzEv
TLSH
T12613BF36E859DA739DB6A2C4B2473A07BFF85193C4890A9889DD1B8E01CB4EE5307D17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 19047b30c9eeb9a6ca8528861c4ebbb180c1bfcd05f8d5ef27a8a4251bde440d
MD5 187edbbd785dfac817f822dd132e39c9
SHA1 f1470cb34e0e6775518dc1120e3a564610ca7e4b
SHA512 dcfd1c7ff372e1b47f11d31e5e1c915739bf59f7a3479c02eb7e2a4547267b54e9ca4ead95cd1145b94c53946599ce036c2d8b32c96e241d9977d105e4c1b6ac
SSDEEP 768:4rv+4UNbdz3HMmBqobGaNDtZu4aWADIidy8LuCzE7r:4bsbF3BtZzaNsuVLBzEv
TLSH
T14A13BF36E859DA739DB6A2C4B2473A07BFF85193C5890A9889DD1B8E01CB4FE1307D17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 ea8249e6257b4b5e7f00659b59dd5509020a10e285fb04eaad7a0acc89baac22
MD5 457a0c7e3f1ec34d0089710b22d70458
SHA1 48bd663f35b132ffa2bde7c9dbe52b83ba1ad33e
SHA512 ad6b17919ab2ad97ecf7e619c69983cd084161e14c0037625545e003d44c9f0362014dfade12da0f7953104d1fcf9557bffe4a43b76e84c9ec972cbf46fb7bcf
SSDEEP 768:9rv+4UNbdC3JixBqobGaYpZu4aWADIidy8LqyeVH1S1C:9bsbw3lpZzaNsuVLBEH1d
TLSH
T10003BF36E859CA739CF7A284B1877A0B7EF89163C6880AD488DD1B4E45DB4ED1307E17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

06e7da5d-ae5a-4d10-bc76-33f194da9648.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\06e7da5d-ae5a-4d10-bc76-33f194da9648.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download