hxxps://www[.]facebook[.]com/privacy/center/

Analysis

user interaction
yes
max time kernel
149s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
23/08/2026, 15:00

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://www.facebook.com/privacy/center/
Sample260823-sdg4eahl3v

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4684	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134319708376291402"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-540052884-2969440504-464782435-1000\{1329F4D6-C18C-4354-9907-E387965E78E7}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5708	msedge.exe
5708	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe

Suspicious use of WriteProcessMemory 37 IoCs

description	pid	Process	procid_target
PID 4532 wrote to memory of 4180	4532	msedge.exe	83
PID 4532 wrote to memory of 4684	4532	msedge.exe	84
PID 4532 wrote to memory of 4728	4532	msedge.exe	85
PID 4532 wrote to memory of 2260	4532	msedge.exe	86
PID 4532 wrote to memory of 4728	4532	msedge.exe	85
PID 4532 wrote to memory of 4728	4532	msedge.exe	85
PID 4532 wrote to memory of 2260	4532	msedge.exe	86
PID 4532 wrote to memory of 4784	4532	msedge.exe	87
PID 4532 wrote to memory of 4832	4532	msedge.exe	88
PID 4532 wrote to memory of 4784	4532	msedge.exe	87
PID 4532 wrote to memory of 4784	4532	msedge.exe	87
PID 4532 wrote to memory of 4832	4532	msedge.exe	88
PID 4532 wrote to memory of 4832	4532	msedge.exe	88
PID 4532 wrote to memory of 5020	4532	msedge.exe	89
PID 4532 wrote to memory of 3668	4532	msedge.exe	90
PID 4532 wrote to memory of 5020	4532	msedge.exe	89
PID 4532 wrote to memory of 5020	4532	msedge.exe	89
PID 4532 wrote to memory of 3668	4532	msedge.exe	90
PID 4532 wrote to memory of 3668	4532	msedge.exe	90
PID 4532 wrote to memory of 2324	4532	msedge.exe	94
PID 4532 wrote to memory of 2324	4532	msedge.exe	94
PID 4532 wrote to memory of 2324	4532	msedge.exe	94
PID 4532 wrote to memory of 1576	4532	msedge.exe	96
PID 4532 wrote to memory of 312	4532	msedge.exe	97
PID 4532 wrote to memory of 1576	4532	msedge.exe	96
PID 4532 wrote to memory of 312	4532	msedge.exe	97
PID 4532 wrote to memory of 2220	4532	msedge.exe	102
PID 4532 wrote to memory of 5680	4532	msedge.exe	117
PID 4532 wrote to memory of 5688	4532	msedge.exe	118
PID 4532 wrote to memory of 5696	4532	msedge.exe	119
PID 4532 wrote to memory of 5924	4532	msedge.exe	121
PID 4532 wrote to memory of 5924	4532	msedge.exe	121
PID 4532 wrote to memory of 3708	4532	msedge.exe	123
PID 4532 wrote to memory of 3708	4532	msedge.exe	123
PID 4532 wrote to memory of 2220	4532	msedge.exe	125
PID 4532 wrote to memory of 2220	4532	msedge.exe	125
PID 4532 wrote to memory of 5708	4532	msedge.exe	127

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.facebook.com/privacy/center/
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffe71f3c188,0x7ffe71f3c194,0x7ffe71f3c1a0
  2⤵
  PID:4180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1872,i,2252481072092734305,10627107146170768391,524288 --field-trial-handle=2268,i,4879796866311532838,567231449796373959,262144 --variations-seed-version --mojo-platform-channel-handle=2308 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1652,i,830577738926275247,11778213281577817090,262144 --field-trial-handle=2268,i,4879796866311532838,567231449796373959,262144 --variations-seed-version --mojo-platform-channel-handle=2264 /prefetch:2
  2⤵
  PID:4728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2400,i,3804499273905155599,15966858808869483909,524288 --field-trial-handle=2268,i,4879796866311532838,567231449796373959,262144 --variations-seed-version --mojo-platform-channel-handle=2252 /prefetch:8
  2⤵
  PID:2260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3440,i,8879044551647389617,16186850997413479193,2097152 --field-trial-handle=2268,i,4879796866311532838,567231449796373959,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:4784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3444,i,17593582320557108577,12382766038007297102,2097152 --field-trial-handle=2268,i,4879796866311532838,567231449796373959,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:4832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4208,i,1221167804679505724,17594902842512684850,2097152 --field-trial-handle=2268,i,4879796866311532838,567231449796373959,262144 --variations-seed-version --mojo-platform-channel-handle=4216 /prefetch:1
  2⤵
  PID:5020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4232,i,10935305892223833771,1122916650518977040,2097152 --field-trial-handle=2268,i,4879796866311532838,567231449796373959,262144 --variations-seed-version --mojo-platform-channel-handle=4268 /prefetch:2
  2⤵
  PID:3668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3600,i,13896924286152607929,5753627653894731728,2097152 --field-trial-handle=2268,i,4879796866311532838,567231449796373959,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:2324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5304,i,7616110575706439978,11778108885246943149,524288 --field-trial-handle=2268,i,4879796866311532838,567231449796373959,262144 --variations-seed-version --mojo-platform-channel-handle=5016 /prefetch:8
  2⤵
  PID:1576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5296,i,6880584335478656478,3729169967782037226,524288 --field-trial-handle=2268,i,4879796866311532838,567231449796373959,262144 --variations-seed-version --mojo-platform-channel-handle=5324 /prefetch:8
  2⤵
  PID:312
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6000,i,4614536877973366849,4010428224039243772,524288 --field-trial-handle=2268,i,4879796866311532838,567231449796373959,262144 --variations-seed-version --mojo-platform-channel-handle=6012 /prefetch:8
  2⤵
  PID:4192
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6000,i,4614536877973366849,4010428224039243772,524288 --field-trial-handle=2268,i,4879796866311532838,567231449796373959,262144 --variations-seed-version --mojo-platform-channel-handle=6012 /prefetch:8
  2⤵
  PID:2220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3492,i,3773727095515601778,344545270085959648,524288 --field-trial-handle=2268,i,4879796866311532838,567231449796373959,262144 --variations-seed-version --mojo-platform-channel-handle=5080 /prefetch:8
  2⤵
  PID:5680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5696,i,12915479486105225926,13454234428839301957,524288 --field-trial-handle=2268,i,4879796866311532838,567231449796373959,262144 --variations-seed-version --mojo-platform-channel-handle=4308 /prefetch:8
  2⤵
  PID:5688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4280,i,2769734464831599717,10941047492033596372,524288 --field-trial-handle=2268,i,4879796866311532838,567231449796373959,262144 --variations-seed-version --mojo-platform-channel-handle=4492 /prefetch:8
  2⤵
  PID:5696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2968,i,4350580734897136699,9778051687627943266,524288 --field-trial-handle=2268,i,4879796866311532838,567231449796373959,262144 --variations-seed-version --mojo-platform-channel-handle=2648 /prefetch:8
  2⤵
  PID:5924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5412,i,6257389551659079698,13313280234748003551,524288 --field-trial-handle=2268,i,4879796866311532838,567231449796373959,262144 --variations-seed-version --mojo-platform-channel-handle=5328 /prefetch:8
  2⤵
  PID:3708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6052,i,10342184904759128098,887218349706429028,524288 --field-trial-handle=2268,i,4879796866311532838,567231449796373959,262144 --variations-seed-version --mojo-platform-channel-handle=6328 /prefetch:8
  2⤵
  PID:2220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5040,i,13916642141001876497,2526311630708150895,262144 --field-trial-handle=2268,i,4879796866311532838,567231449796373959,262144 --variations-seed-version --mojo-platform-channel-handle=2644 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5708

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3108

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 cc11c2ba3ec4cb292b61dd36af338e083bb0ce5868e654b17f3c58ecf3c8fdfb
MD5 22bfe5ff5070c92c37e54f6f278efd25
SHA1 2fc94025f3a738879f1fcececb95937cbaa0cdd1
SHA512 b57abd220e674cf733b39ea299fc66d6fe964ab448ae0758482efe80597e3678909cd989b9635acc0317001af0fe6dbbbccfd3cf110ec5ad1b9e4c084de22188
TLSH
T16FD09220B719A2C3E24704BA94A6AB52A916C57AA0B7F7017232640CAE65089F28F192
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 201729318e073e437978c4f830a6df095e397d14193bbab8cb94016e3e0e1540
MD5 038903102cb76ddedd18207430e00005
SHA1 e694b970e01eb43fddfb00d36857e2b64f8c931b
SHA512 bacb50167c8d736bccc259f2ffbffff915c7c6dc188c6c2c1476ded8cbd822ff968f690173d1b8e35c352ec62f9ace3913a556b80bc1a59211be000ee9ea7447
TLSH
T17DD092207759A6C3E24704BA94A5AB52A916C57AA0B7F7027232640CAE66089F28F192
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 faa1f1613729446e59248ebae25d13ab590fc484cfb7d86cf34906ff822d128b
MD5 7514e7be2553ca2d0a664d1f3afa3599
SHA1 968dfc31186d235f19dbb08f75972a79141572c4
SHA512 f91af5eaecacea127e1bdf2125e269f891d7f494acc94859ff59fa14e6b59c2fa4058e386770a5c12b0a3d8d3c476617a43289b70285ba61e56022615190f782
TLSH
T134E020850AC7C32DE5406487515C970C9190370BA2C4AE8557048845FAC2480E2876E5
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 7e46d4cf7ff711552680b38c334b11cfc331d03dac0faf361658317aca5ed8d8
MD5 c0903cb94a8bd095755a29886e83e551
SHA1 5848d1f0891e73a8ef23c85baa0b4c97a9f7c55f
SHA512 ab44219f02a47b2185abd2d99a5dbffc0ebb78c677e366d8f4a14b205c90a6aeaae79af0435bb58044308dd38e12c8d19918d4ba751d322ec7258f9265c7e1f6
TLSH
T1198171FA1AE71F52EB12F2706EC10287713085EBFA17ED235E80C7FA6D137216946198
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe589342.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe589342.TMP
Size 3KB
SHA256 96692d5805398116edf71bc646a5912fc3422a2828ca1a14d2c0ebb062e07579
MD5 d679601577fa8180286da3a1bb825ea9
SHA1 8b2b4848659ed3d5f7009a7fa877da98b164ef40
SHA512 d17a12ed5df51aaac2ac80b05e2aac215e6d43f06e6bec6624becb630f7dd1368c4fd31b65f693e76011a8831ae38a85722fb3ca392be9c70df0c42487e23a67
TLSH
T118716DFE18E30FA5EB22F2705AC10242B13081EBF613ED238D80C7FB6D12731899A158
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 1089702ec85b72ac028aefbbb1719503c39509783d8f18182b177d4e1c05c9f1
MD5 9fac1cdc3dd79579adff8beb116aae88
SHA1 4004960a166ecbd14a1c45a1281316f78f06a00f
SHA512 2bd56a23e7ea3c1f13c5938677a1c69d62d17c9fe076c32f533993b6fff4aee0eecd994e1c131ac8e49d8434aadd8662c9aa747fea284fe6fedc1fc99f6c8e7b
TLSH
T1B8418BE2C3D4966DDC2156F09A157E2BCF2E0D14922C3D5BC8D5AF9BA3E6030E101E5E
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 96bbc761156291e6fd154dfb30c371ea7b345492ccf34948160448f1d50342eb
MD5 4eda9f317615cc5a11143eda033109cd
SHA1 59626fa8b2909c6b23bf628e1f7b7eb61e034ccd
SHA512 b91e5e1499c5a0ad476bbf119a1b3947b84aee6bcdd15fd0af7ac895c89fd4ee5a6b7d988b437fdcef7f7c7cb97a46779436d4c053ad9ef1d63c7eb5402c59a3
SSDEEP 192:sxZIRwkg/fS/s+onIdp5GDFE/W6+WN0RX/YIik6YhIg5wJ:sxZIdg/fKs+ooSgb2/w+q
TLSH
T13732D9126E3899774CC7E209FA15BF53E3F5803291956E44AAFCD62C05E76DD220B80B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 fe2652428a9633aa6be4f719260d6f204d59dcdd2f293365d6406f568abcc255
MD5 a6bb305718d69e8438a9f5da007e0aad
SHA1 26d3195797b397a877f5202b55b0e046934d30db
SHA512 c7ad3d7e3ea99880efbd107b0ae50d985ebb4e84d53b71a2aa7799f4fea6006f6bae21bac93f39837fcac362d77412eae7beff4bfa5885fae8e614ecfadbce5a
SSDEEP 192:sxZIRwkg/fS/s+JnIdp5GDFE/W6+WN0RX/YI1uYhIg5aJ:sxZIdg/fKs+JoSgb2/vQ
TLSH
T11832D9126E38A97B4CC7E219FA15BF53E3F5803191D56E48AAFC952C05E76DD220B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 26fe9b5ccd896588c2c73f12f4f7235ae1b10130a728c8e5e99a0e0da28d9cb6
MD5 814b3a566a68c4b807a205ac2bc0d845
SHA1 94e26cf50e9b4e4f11a75173f2ec91dc9852dbdd
SHA512 abd000c06435f07a7fd6123c48e9ffed88bfadf7d48ac10f24f6f14fde869ef57d101357f5b60428f4a40e33c2baa5bd64f3876fb9ae600ff5fce71272122635
SSDEEP 192:sxZIRwkg/fS/spJnIdp5GDFE/W6+WN0RX/YI1uYhIgrJ:sxZIdg/fKspJoSgb2/v9
TLSH
T16F22E9126E38A93B4CC7E219FA15BF53E3F5803191D56E58AAFC952C05E76DD220B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 f3160e263d2cae0f033778467939ae061c5b2e840e327050ab24fd39d238f212
MD5 5d226044d35bb10ba579414fc67f114a
SHA1 e92dbd6c86ac3dba0b3496ce97019653af66d7df
SHA512 e2f1fbf5103fc3dda739a7e700d0349484fe4ebbdeeacb3eb6ce1476f921198843ecfe4d9da3c390f9eee57f1e00426c26ed5052050e6a3679815f028e4afe79
SSDEEP 768:b2yqbblWvJDjT8F1+UoAYDCx9Tuqh0VfUC9xbog/OVE4Ll6AR7wro9Cu:b2yqbblWvJDjTu1jah4LAs7b9l
TLSH
T14DC2F93B654CCA7E4FC00AADDD5A6FD73E9802C7A6588D4047FA994C02C77EA512A4CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9ece3b9f-1fbd-45a4-af5e-4c47b3bbd5cb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\9ece3b9f-1fbd-45a4-af5e-4c47b3bbd5cb.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 316adc994b5c8d94c2d5d9f92ea9c43231e52d39d04d90ebaa5945be1a4a8929
MD5 904dd8853dcee116c9bd71624ba21248
SHA1 dbbda2779c7fd0de7f469505b01a485483614a4e
SHA512 810b67521c6876d161fa39fd95e68c3f72d537e188ae33ffa5ef264e097d64eb1111bcec9098595c3b73907c20409d017ba85c9e5a759784a836fcd59eb0a9ab
SSDEEP 384:CviFiZcIOsNI8TUNTUlIlNYeb+cuVRN3OKZ9QyPiv0+aFo5:C6FQOdwg9sH3Om9/PiclFu
TLSH
T141C24BF259E78836D9AE9743E73D2D078EBCC067B584A940B3885A1CCC965BFC306C12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 c5f4097cd12dd43bcb43523ea8f6c2aefab3a557424f394aab82a60fd2dd349e
MD5 7279a580e64acfca6464ee9f2849de4d
SHA1 59649e5594e68833ecd633ee184255ec30d857f1
SHA512 1ec73bd07f6ad693393a2e5bf6ed148d0d761d25d9943ef02acf782a8d979a08b681dfabc335aeec83ba0bb731d5faa56f36a92c4789b0f2cd764d1926b3f626
SSDEEP 192:usLsNYaQ5ruYkRbFYQmiU1pzB4VRN3OmNOmSC9QjMfSRdqfWU8:lsNYaYeb+LuVRN3OKZ9QNPU8
TLSH
T15132183179389C774EE3A544F54736139FB4902B9A892F8496DC2B1C01DB69C230AD1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 25e22a7efbfce7d48b10c05134603ac6919f7890d51a98cf4d4f7650fd922928
MD5 40e624515c2e74dcf0de7ff339fea5d4
SHA1 078ee45f2eadc91ccdc16d72926f198c8111e507
SHA512 ae2f817d8c582bb1a0d583a26b12fd63bfa2a972da1cef3d283b64493d18060459584ab1d136ebd6cfa100e4ea16ad4f7d190f97b00b8b403eea5f0b2be3fb1d
SSDEEP 192:tONK6JkRtQmiUyTxW+RN3OmNOmFHh3WROFU6:tONK6UraW+RN3OKBpjU6
TLSH
T1C402F9357C382C7B8EF2AE09B98B27135FA4202BE9952F84DAD81B1C01D765C2307836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 1243a8011a6ccb9b81bc3c82eb0128ef3bc841bdea9208f45744797079539adc
MD5 b2bc55f1c482d08ce4c9a35baad0aa1c
SHA1 b60c6a3d288239a00254e4c56e8be0eb499c22ee
SHA512 5befe677693b4f87f1b36bbd1fd43cb5e7a312f5091e07f4b824e2f1c3e3be075d4207e3c426e2023184269c43f91d4b4d280d186a910e9916ccf84f6fd5c8d0
SSDEEP 384:UZcIhsNYNYeb+LuVRN3OKZ9QNPiv0+aFo5:ShksH3Om9ePiclFu
TLSH
T1F0829D716D385C7219F6A144FA4636179FB8D03B96CC7E8094DDAF2D01EAA9C130BD27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 29b76076bd192b3e579c0ba8a9e06f6d8924d2140cde074a89e8105c1d0b7468
MD5 753580a1cab63b36de0791573ec4c74f
SHA1 2da3685dae4824ed68bdeba6ecfe6ffd9a3471fa
SHA512 b7b2339d576e59c7d86031d9d25d923fe8d5009a38a1da7f7da4d35b360447081121658cd61fcb45c05e90ebd2fcace160cbcc564aa6d19944b4e51a953fbc2c
SSDEEP 192:zONZ6JkREQmiUyTxK+RN3OmNOmSC9QjM1VcdqfWU6:zONZ6UU4K+RN3OKZ9QjPU6
TLSH
T108120A3179385C7B4EE26945F54736174FA8913BEA897F80D5DC2F1C01EBA9C230AC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

da249dc8-daf3-4f80-8735-ea3bb59c118d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\da249dc8-daf3-4f80-8735-ea3bb59c118d.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 1bbc62d25fcb405685eb41fe1d74d0e08b624bc6b336d3195814419ad31f46a4
MD5 91c8108cc50dff23c1c0f95b85c3970e
SHA1 7848c53545b6724037285dcec6dcfbbfdc1f6f8b
SHA512 030a2cad290dbbb62b2fdb583d7031341e169b06a16b20fdee534d279e9ce40588c7fa91dbee480fd5d31c1c7d57c68d1c02d254c6add6a2ce7549fbd6b11682
TLSH
T1CC41075CA6F91148B3B36E5A9FF7596D587E78372E0B849D00010E4E4B26B00CD72B77
MD5 SHA1 SHA512 TLSH

Submit Download