71f2510c039332715353822a99c4fbf9db510a94c75c40aec0ad96f6b39cd87d

Analysis

max time kernel
149s
max time network
155s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
26/08/2026, 12:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
about.html
Size 476KB
Sample260826-pptpssdn91
SHA256 71f2510c039332715353822a99c4fbf9db510a94c75c40aec0ad96f6b39cd87d
MD5 16ff3bea871ecb441c1cb68f203f5c47
SHA1 ada91dc57510175631e8762c057d887ff1acf065
SHA512 d171d841bf972ce6f74bef8f0a3eda4c5f1639ac97663adc5a2f2ce5f5449704c8e01f61a686c11692bee704fe9c1f415919eae3618c0eb864747ed4fc7d7257
SSDEEP 6144:dBP2Y1K99d9MEhMDSufpvTmYDHtC2Ow3eMXM:TPx1Kzh30ZC2Ow3eMXM
TLSH
T1F3A4AE7462086C3E4EC712DFB652BF0D21AC9412ECC14669F8FD5A6415E3AE912A373F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3548	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134322210928010880"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1738198120-2966725515-3980530802-1000\{561832B5-898E-456A-8227-B54FD32B6242}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4580	msedge.exe
4580	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2656	msedge.exe
2656	msedge.exe
2656	msedge.exe
2656	msedge.exe
2656	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
2656	msedge.exe
2656	msedge.exe
2656	msedge.exe
2656	msedge.exe
2656	msedge.exe
2656	msedge.exe
2656	msedge.exe
2656	msedge.exe
2656	msedge.exe
2656	msedge.exe
2656	msedge.exe
2656	msedge.exe
2656	msedge.exe
2656	msedge.exe
2656	msedge.exe
2656	msedge.exe
2656	msedge.exe
2656	msedge.exe
2656	msedge.exe
2656	msedge.exe
2656	msedge.exe
2656	msedge.exe
2656	msedge.exe
2656	msedge.exe
2656	msedge.exe
2656	msedge.exe
2656	msedge.exe
2656	msedge.exe
2656	msedge.exe
2656	msedge.exe
2656	msedge.exe
2656	msedge.exe
2656	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
2656	msedge.exe
2656	msedge.exe
2656	msedge.exe
2656	msedge.exe
2656	msedge.exe
2656	msedge.exe
2656	msedge.exe
2656	msedge.exe
2656	msedge.exe
2656	msedge.exe
2656	msedge.exe
2656	msedge.exe
2656	msedge.exe
2656	msedge.exe
2656	msedge.exe
2656	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2656 wrote to memory of 1924	2656	msedge.exe	89
PID 2656 wrote to memory of 3548	2656	msedge.exe	90
PID 2656 wrote to memory of 2092	2656	msedge.exe	91
PID 2656 wrote to memory of 2092	2656	msedge.exe	91
PID 2656 wrote to memory of 2092	2656	msedge.exe	91
PID 2656 wrote to memory of 2072	2656	msedge.exe	92
PID 2656 wrote to memory of 2072	2656	msedge.exe	92
PID 2656 wrote to memory of 2564	2656	msedge.exe	94
PID 2656 wrote to memory of 5340	2656	msedge.exe	95
PID 2656 wrote to memory of 2564	2656	msedge.exe	94
PID 2656 wrote to memory of 2564	2656	msedge.exe	94
PID 2656 wrote to memory of 5340	2656	msedge.exe	95
PID 2656 wrote to memory of 5340	2656	msedge.exe	95
PID 2656 wrote to memory of 5428	2656	msedge.exe	96
PID 2656 wrote to memory of 5476	2656	msedge.exe	97
PID 2656 wrote to memory of 5428	2656	msedge.exe	96
PID 2656 wrote to memory of 5428	2656	msedge.exe	96
PID 2656 wrote to memory of 5476	2656	msedge.exe	97
PID 2656 wrote to memory of 5476	2656	msedge.exe	97
PID 2656 wrote to memory of 5460	2656	msedge.exe	99
PID 2656 wrote to memory of 5460	2656	msedge.exe	99
PID 2656 wrote to memory of 4668	2656	msedge.exe	100
PID 2656 wrote to memory of 4668	2656	msedge.exe	100
PID 2656 wrote to memory of 2744	2656	msedge.exe	102
PID 2656 wrote to memory of 1964	2656	msedge.exe	106
PID 2656 wrote to memory of 5376	2656	msedge.exe	107
PID 2656 wrote to memory of 1540	2656	msedge.exe	108
PID 2656 wrote to memory of 5024	2656	msedge.exe	109
PID 2656 wrote to memory of 5024	2656	msedge.exe	109
PID 2656 wrote to memory of 4580	2656	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\about.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2d8,0x7fffd37dc188,0x7fffd37dc194,0x7fffd37dc1a0
  2⤵
  PID:1924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1884,i,3621355994093193318,2089515347274879280,524288 --field-trial-handle=2164,i,6297586479382010470,3526740578468656376,262144 --variations-seed-version --mojo-platform-channel-handle=2348 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1556,i,3508981749012439377,13799343094971173851,262144 --field-trial-handle=2164,i,6297586479382010470,3526740578468656376,262144 --variations-seed-version --mojo-platform-channel-handle=2160 /prefetch:2
  2⤵
  PID:2092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2400,i,17930756365836757611,17661731666952520209,524288 --field-trial-handle=2164,i,6297586479382010470,3526740578468656376,262144 --variations-seed-version --mojo-platform-channel-handle=2500 /prefetch:13
  2⤵
  PID:2072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3508,i,18088666903126823749,17142823547959770575,2097152 --field-trial-handle=2164,i,6297586479382010470,3526740578468656376,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:2564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3512,i,18342777499179208809,9280713051919088662,2097152 --field-trial-handle=2164,i,6297586479382010470,3526740578468656376,262144 --variations-seed-version --mojo-platform-channel-handle=3692 /prefetch:1
  2⤵
  PID:5340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4280,i,7918785227264734495,14655464044009158829,2097152 --field-trial-handle=2164,i,6297586479382010470,3526740578468656376,262144 --variations-seed-version --mojo-platform-channel-handle=4412 /prefetch:1
  2⤵
  PID:5428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4300,i,10702918219757735637,3547771280690373727,2097152 --field-trial-handle=2164,i,6297586479382010470,3526740578468656376,262144 --variations-seed-version --mojo-platform-channel-handle=4888 /prefetch:9
  2⤵
  PID:5476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5396,i,17840225737268083346,6778907316621573528,524288 --field-trial-handle=2164,i,6297586479382010470,3526740578468656376,262144 --variations-seed-version --mojo-platform-channel-handle=5464 /prefetch:14
  2⤵
  PID:5460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5420,i,16953606295356883576,16939825466663396673,524288 --field-trial-handle=2164,i,6297586479382010470,3526740578468656376,262144 --variations-seed-version --mojo-platform-channel-handle=5492 /prefetch:14
  2⤵
  PID:4668
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6128,i,14349835123968140864,331064743411742134,524288 --field-trial-handle=2164,i,6297586479382010470,3526740578468656376,262144 --variations-seed-version --mojo-platform-channel-handle=6148 /prefetch:14
  2⤵
  PID:4340
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6128,i,14349835123968140864,331064743411742134,524288 --field-trial-handle=2164,i,6297586479382010470,3526740578468656376,262144 --variations-seed-version --mojo-platform-channel-handle=6148 /prefetch:14
  2⤵
  PID:2744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5152,i,3707814374741968795,16327957540113729606,524288 --field-trial-handle=2164,i,6297586479382010470,3526740578468656376,262144 --variations-seed-version --mojo-platform-channel-handle=5392 /prefetch:14
  2⤵
  PID:1964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5156,i,1529022620757790772,668881523583258809,524288 --field-trial-handle=2164,i,6297586479382010470,3526740578468656376,262144 --variations-seed-version --mojo-platform-channel-handle=6148 /prefetch:14
  2⤵
  PID:5376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4288,i,6904699942347706077,5827838609506660990,524288 --field-trial-handle=2164,i,6297586479382010470,3526740578468656376,262144 --variations-seed-version --mojo-platform-channel-handle=6196 /prefetch:14
  2⤵
  PID:1540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6640,i,4345204081724053135,12970776933608888113,524288 --field-trial-handle=2164,i,6297586479382010470,3526740578468656376,262144 --variations-seed-version --mojo-platform-channel-handle=1304 /prefetch:14
  2⤵
  PID:5024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6400,i,9342987957088408523,13678556449262848064,262144 --field-trial-handle=2164,i,6297586479382010470,3526740578468656376,262144 --variations-seed-version --mojo-platform-channel-handle=6752 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4580

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1832

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4672

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ac1b1f93ff87eb876027f4166d705375c0f5d3d22dcb03f6a66f6100e88dd10f
MD5 b99f03c5cfe71b03836f8b5fcf09425b
SHA1 8a5078499c0b5ea40183efb77f9c1028c196409c
SHA512 6b9feec4ead7bf05f67d0d480907e21a3b770d8d12dedd2b0d785904186eac7448583e61abacb23582948de55c8ea2043bfd6908efd7faecdd82cee91404cfe6
TLSH
T16DD02BE037909D18C440353163D0122091006C30880923090100A02C8D3E2C3054F0BE
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c95a47aec5edba88214fad580cb869417b6620a91d8ee97e2d0b7801d3372be5
MD5 aad5f2ca0dd16bb2ea6c7757ea569c50
SHA1 5228b0b132542be004ea1bb32f3748964d065af5
SHA512 9d59c0291d741bd9d6cf50c22972d4baef00e7c1a48d6a3311a6cc82c04ceeba6e2be9458334cb954878915cc9eb91a8fd8bc4a47c966d57a2a05d6ee8211640
TLSH
T1D4D09BE177A19D18C545353567D1522591416D31451927194241E13D9D7E2C3455F0AA
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 3658bac678f2441461d6894c28696851c20f867766f1c9ba92b9ead543f86772
MD5 21c385619cbe499390920eb933fd06cd
SHA1 58366d543ff713cb4a9a8c15fe31f4bdd4073169
SHA512 1a8ef02d8b0124d5676e6f18660d61d5366f407d431eaa319bfbb5f54eecd35292534fa8d093b0aff11efc08410726ef8f49e877154fa1d16d65642ddef61054
TLSH
T12E513E512BAB1BD2C72687F19DEA046A36F0C84861CF6E30404E6C336B02F2E5BD1023
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59f93b.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59f93b.TMP
Size 2KB
SHA256 e41e397ef3a4b08b6415f16244d31916f79ee898b6c2ffd99cb028186736c93d
MD5 1e8039b7261d9f75b935bf7b1eddbc20
SHA1 da2a5d61d4e3569e636dae6cca255af0c002e01a
SHA512 8685d3826eb250f732881cc28ff4848325e37da5ebbf57e508576414fd2c0a448b2ff8040cabf2fc35dd607c2c974d732d80c805a59a64089c8a05c8e6b0782b
TLSH
T192513E512BAB5BD2C72687F1DDEA056A36F1C84865CF5E30404E6C336B02F2E5BD1023
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 cc8f9998a6ce1d39bea10084ed35156c1071623f32f2d48ff22f3f6dd502d616
MD5 e088c10423c29d4e9b69a43a0d785580
SHA1 0dfe207272c9ec0ea97ad288d8c1ac21128fa45b
SHA512 71a554c6029d82ae23922bc4005d145fb352826a576b3e5f815a0d2851701eea40e00d82391c2ca25a0b589b6f84bda32c1a5753455429dec200d60afce855d4
TLSH
T12F818CF7C3E5867E891562F09B156E2BDE1D0516422C3C66C8F4AF1BA3E24B1E20169F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 2ec2b8c4e12e523c32b6c099111d72d8a2a84db0a050b6afdf407633a4acfdaf
MD5 466a2269f72e74c0d6acbc69ae436b9e
SHA1 abbc3b248399a4ecd29bf2954887ef1c958ec48e
SHA512 86cffaa4abc1d7a1e3dd5f1957a22827a7a4532a3e0afa1ec090fb06206e22b61db41b3b5e4f65e89650cb29f6533ad843448b7a07102380943cad1f15dfbc18
SSDEEP 192:sxR7RmbF/fesLgwGMzoA8p4x/g6+WNIYo5aCYHG3IgDPJ:sxR72F/fesLgp9E/5IPJN
TLSH
T1D332A6156968AD3B8CC7E21DFB65BF53D6F9103261D42E48A7FC861C05EAADD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 0639ef77db818eb8e18e30cea337ae15729ebff0c8ebbe632c250169411ca1fc
MD5 a8f306a65a6fcb379e7b3399bc02f213
SHA1 6541bfcfa4736eed665c9374f5c2ce1909f4f1ae
SHA512 5496102e831a8c06ad41a5f50c223dfbcb65de1244eb070a589a2b0c38ca914e3b66df539e047ba0424325d858469872847856dd4ba21473996e8366869c2baa
SSDEEP 192:sxRIRmbF/fesYgwGMzoA8p4x/g6+WNIYo5SCYHG3IgIJ:sxRI2F/fesYgp9E/5I7Js
TLSH
T18332A6156968AD3B8CC7E21DFB65BF53D6F9503261D42E48A6FC861C04EBADD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 5e9023cba3162d0c11a923b4a192660d31d9f9a3968d7a2675139a19e7f5b5f7
MD5 adc89a2a900baa429422295aa3b8eeb9
SHA1 7893e82563ef87ad24225a9bdf4f3d7023304485
SHA512 efb820811c6428aae21df20295e51b5d1ec7b2cb9370085978198b6409bf331fb15849d33ed2b8166120738b5d07ce60d8b13b30ccb8fdbdbfc2568cbc14d594
SSDEEP 192:sxR7RmbF/fesLEwGMzoA8p4x/g6+WNIYo1sCYHG3IgDxJ:sxR72F/fesLEp9E/5IxJX
TLSH
T1E742B6156968AD3B9CC7E21DFB65BF53E2F9503260942E48A7FC861C05E7ADD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 e17ebd3590e2f1e2d1aab06b4f5bb9ab6222bf9cc590a77160900132aba5614d
MD5 1fc357e7fddbc951b4d9f582884211c4
SHA1 97278a8e8e476cda90a1b0dbf3b9708c47371eb7
SHA512 57ab81f847c27680a3829e68853185c8ad863a12e44df977f6415f094e930d1d47172b7a6fef855da4692e664d9a2bf530b2448c9dce811556691a887575ab72
SSDEEP 384:jzK6H0dfCtgsqFf02KhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVvf9uaRXvro98V:j26H0RWgs2f028F1+UoAYDCx9Tuqh0VU
TLSH
T10DB2EB2B640DCBBE5F800A9DDC19AFDB6D9802C79B588D4047FE994C03C77EA911A4DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

985b8afd-ae83-4075-bf21-16fdc4c474ae.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\985b8afd-ae83-4075-bf21-16fdc4c474ae.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 8e295ea555b7bb9803136dfd18dc447b4b379201c2b8cfcbf90c29de735870cf
MD5 85dab3e3d1a869a8caab5b9f2da62cf6
SHA1 e1b13034debf4d4ab1f12da643e2fceec0e0dcd1
SHA512 fcf67eea12527c60fc04fdd426bd8097a3699293285a945fe987273a8046cbf6e1c86eca992e0d7698a23628dd36f2c801c94ac595abfcc0ba45f096079b3a34
SSDEEP 768:trv+4UNbdF3ad/TBOWGatDtLONXyer1IRCzni9aN:tbsbL38/SIqnpN
TLSH
T16203BF32E4A8AE334DE2A3D6B10776037FB8505795C44790EDDA2F4D068B9AE230F957
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 505a1fbcf2e67ea3f9747cb1da90abc6d797c1a5b4303e1fe25a3f80a422f3d2
MD5 d9b9ca4dc6bae7ee9f4e9e2939ce20a2
SHA1 281c0e900339a1ab29cce9b4a34ded301487aacd
SHA512 eb2cfa6d0b58bbdead9412c385b0dfcde43310ff1c1c75c971887bd85ceb1ed549ca0d16143d435199ae3200c383026b77cf94e9f061e5390f34137af3b4cb76
SSDEEP 768:463td/TBOWGatDtHONXyer1IRCzni9aFN5mE:463jjSIqnpFNAE
TLSH
T179F2AE71D8A59D234CE2F3C6B6067703BFF89067D6C85A809DD96B1E058766E130F82B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 682ece982cf22cac142a6663655ee4bd6a1fed484185577a4ce182bec2308746
MD5 92b00173d2e20550321ca590e4b1aa70
SHA1 2d66ca6499f70d133ec33a0454a64d9c97f8508f
SHA512 0d2036522172cea9685e43dfdad443b3e9a3371b7eb3c1fa673b5d41f889639bc54ca956cc31279a34b00df7f124e4d8a3c94b5428c656f65c3b5640ed531d0a
SSDEEP 768:Erv+4UNbdz3nz/TBOWGatDtZONXyer1IRCzniwaeVH1SK7:EbsbV3zdSIqnGEH1l
TLSH
T1E803BF32A0A89E334DE2A3D6B14772037FB85057D6840B90EDDA2F5E069B59E130F957
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 61666807ab15ed45276aa9524545f537f91c47f4da2a8204cf88b61ad634c1c7
MD5 f30f3786b476d89c85dc9150a3ac0ee4
SHA1 501ec1ebb763b4497201c43361191d70f1a6a6f9
SHA512 009279340c9085c517dbb00270cf059e93e5bd53aea0e39895a4147df5e896a1ce033ebc73fcc1dbe654f948fe9763d512db8578c281c1554738e53c5d7e229f
SSDEEP 768:H63qd/TBOWGatDtHONXyer1IRCzni9aFN5mE:H63MjSIqnpFNAE
TLSH
T103F2AE71D8A59D234CE1E3C6B6067703AFF89067D6C85A809DDA6B1E058766E130F82B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 ceea42dd66454e027bef29ddd2051392c3be29cf694ca833f6297deac7d8a143
MD5 0347d92be04c99d3e870f4caa8485cc0
SHA1 0764aa39f74784dfbf063522549697652aae5777
SHA512 7116a62746e310d5affd0ed3c47a18c9c88af602829afe1378db3ecb50816665c168381a3c51bd4045ea582301b92f2f05aa43a36a5bfb8f60da0302c8816b1b
SSDEEP 768:gFaC3pwgzd/TBOWGatDtUONXyer1IRCzni9aFN5mE:XC3RASIqnpFNAE
TLSH
T13AF2AE7298D4DE375CE6A7C6F60A7303AFF440A7C5C49A90AAD96F0D01875AE130FC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 7cb2b7363ecc45271dcc85ec2dc883682a6c03e00d9141b9b58dad9bf3e9779f
MD5 70312afddb43c0dba5695e7c21a74cbb
SHA1 6eccea673892c1c4c8c2fdaa86109ca94bd766b0
SHA512 7fa6eb587a15ed738c910b73224975db0073339f5df3ef91d53fb7d587cbffcf2d44d92fca7842df9c0eca98c370849000a3f6a671186158dc09d4d102e1345f
SSDEEP 768:hrv+4UNbdz32u/TBOWGa9ONXyer1IRCzniB0eVH1SK7:hbsbV3/NSIqnbEH1l
TLSH
T13503BF36A0A89E338DE2A386B14776137FF86057D6840B90EDDA1F4E069B59D230F917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2248d248-52f5-4597-9082-edb8c2654533.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\2248d248-52f5-4597-9082-edb8c2654533.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download