dcfe49342f1299dba6ca46b586ca54735647720eb5ae8b0ed141faa3da1ed2f0

Analysis

max time kernel
148s
max time network
156s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
26/08/2026, 18:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
ftx/page.html
Size 6KB
Sample260826-w2e6havamd
SHA256 dcfe49342f1299dba6ca46b586ca54735647720eb5ae8b0ed141faa3da1ed2f0
MD5 09ce5b1b09eff858cb67db21eb2a2abe
SHA1 51421040424125aaf7517766fe7ccf997b365a77
SHA512 17bb93fabc1512590fc5506b7338707f949de891f9f17e9d3acb8cae0bbd07c5471f1ce665b570fa35feef00ec5ccc5f220d73381894c1a215ba233cd61463de
SSDEEP 192:BrRS2fsVcOgyExA9vzp9wRp6kU+RvVa2HMpG5:BrdU4vVa2R5
TLSH
T1C4D18443839742796C0A826C5BB12904306AC817E178F5F47FDF1486EF4E9D068AA7DE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5144	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134322422992916192"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3797332335-34111092-3597280141-1000\{15A7C144-2350-454E-8580-C87D0E1CC3CB}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3144	msedge.exe
3144	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe
1160	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 1160 wrote to memory of 4900	1160	msedge.exe	88
PID 1160 wrote to memory of 2884	1160	msedge.exe	91
PID 1160 wrote to memory of 5144	1160	msedge.exe	90
PID 1160 wrote to memory of 2884	1160	msedge.exe	91
PID 1160 wrote to memory of 2884	1160	msedge.exe	91
PID 1160 wrote to memory of 2568	1160	msedge.exe	92
PID 1160 wrote to memory of 2568	1160	msedge.exe	92
PID 1160 wrote to memory of 3540	1160	msedge.exe	94
PID 1160 wrote to memory of 3256	1160	msedge.exe	95
PID 1160 wrote to memory of 3540	1160	msedge.exe	94
PID 1160 wrote to memory of 3540	1160	msedge.exe	94
PID 1160 wrote to memory of 3256	1160	msedge.exe	95
PID 1160 wrote to memory of 3256	1160	msedge.exe	95
PID 1160 wrote to memory of 4856	1160	msedge.exe	96
PID 1160 wrote to memory of 4736	1160	msedge.exe	97
PID 1160 wrote to memory of 4856	1160	msedge.exe	96
PID 1160 wrote to memory of 4856	1160	msedge.exe	96
PID 1160 wrote to memory of 4736	1160	msedge.exe	97
PID 1160 wrote to memory of 4736	1160	msedge.exe	97
PID 1160 wrote to memory of 1496	1160	msedge.exe	99
PID 1160 wrote to memory of 1996	1160	msedge.exe	100
PID 1160 wrote to memory of 1496	1160	msedge.exe	99
PID 1160 wrote to memory of 1996	1160	msedge.exe	100
PID 1160 wrote to memory of 3276	1160	msedge.exe	102
PID 1160 wrote to memory of 4452	1160	msedge.exe	106
PID 1160 wrote to memory of 3100	1160	msedge.exe	107
PID 1160 wrote to memory of 3700	1160	msedge.exe	108
PID 1160 wrote to memory of 4172	1160	msedge.exe	109
PID 1160 wrote to memory of 4172	1160	msedge.exe	109
PID 1160 wrote to memory of 3144	1160	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\ftx\page.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x284,0x7ffe2b0dc188,0x7ffe2b0dc194,0x7ffe2b0dc1a0
  2⤵
  PID:4900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1808,i,1917356590468158776,373462526438931494,524288 --field-trial-handle=2564,i,7137369678684972237,1991567435414183007,262144 --variations-seed-version --mojo-platform-channel-handle=2608 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1580,i,3455633775214470248,581335169974594801,262144 --field-trial-handle=2564,i,7137369678684972237,1991567435414183007,262144 --variations-seed-version --mojo-platform-channel-handle=2556 /prefetch:2
  2⤵
  PID:2884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2228,i,4362383865323678031,3525467935796218346,524288 --field-trial-handle=2564,i,7137369678684972237,1991567435414183007,262144 --variations-seed-version --mojo-platform-channel-handle=2636 /prefetch:13
  2⤵
  PID:2568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3512,i,9647377521634254356,18093422254250964407,2097152 --field-trial-handle=2564,i,7137369678684972237,1991567435414183007,262144 --variations-seed-version --mojo-platform-channel-handle=3532 /prefetch:1
  2⤵
  PID:3540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3516,i,1869513867420400867,14500151121936895966,2097152 --field-trial-handle=2564,i,7137369678684972237,1991567435414183007,262144 --variations-seed-version --mojo-platform-channel-handle=3600 /prefetch:1
  2⤵
  PID:3256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4328,i,16939924416721881797,18189954391543913993,2097152 --field-trial-handle=2564,i,7137369678684972237,1991567435414183007,262144 --variations-seed-version --mojo-platform-channel-handle=4780 /prefetch:1
  2⤵
  PID:4856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4336,i,7595424781207742464,9968566810135219879,2097152 --field-trial-handle=2564,i,7137369678684972237,1991567435414183007,262144 --variations-seed-version --mojo-platform-channel-handle=4784 /prefetch:9
  2⤵
  PID:4736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5292,i,12373066862130066695,14379632727756204135,524288 --field-trial-handle=2564,i,7137369678684972237,1991567435414183007,262144 --variations-seed-version --mojo-platform-channel-handle=5408 /prefetch:14
  2⤵
  PID:1496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5264,i,8372708151131464095,17837920160334699118,524288 --field-trial-handle=2564,i,7137369678684972237,1991567435414183007,262144 --variations-seed-version --mojo-platform-channel-handle=5428 /prefetch:14
  2⤵
  PID:1996
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5892,i,1137239643446074868,13682969333415825086,524288 --field-trial-handle=2564,i,7137369678684972237,1991567435414183007,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:14
  2⤵
  PID:5400
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5892,i,1137239643446074868,13682969333415825086,524288 --field-trial-handle=2564,i,7137369678684972237,1991567435414183007,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:14
  2⤵
  PID:3276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5004,i,8194497085193500885,9291087839243670179,524288 --field-trial-handle=2564,i,7137369678684972237,1991567435414183007,262144 --variations-seed-version --mojo-platform-channel-handle=4832 /prefetch:14
  2⤵
  PID:4452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4988,i,901017704841360444,13196147195730092073,524288 --field-trial-handle=2564,i,7137369678684972237,1991567435414183007,262144 --variations-seed-version --mojo-platform-channel-handle=4324 /prefetch:14
  2⤵
  PID:3100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4992,i,3963657248098156158,15202563771424922435,524288 --field-trial-handle=2564,i,7137369678684972237,1991567435414183007,262144 --variations-seed-version --mojo-platform-channel-handle=4980 /prefetch:14
  2⤵
  PID:3700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6132,i,7640686469648104802,16208409174021735816,524288 --field-trial-handle=2564,i,7137369678684972237,1991567435414183007,262144 --variations-seed-version --mojo-platform-channel-handle=5008 /prefetch:14
  2⤵
  PID:4172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6480,i,16109667909690091820,15832024741162345706,262144 --field-trial-handle=2564,i,7137369678684972237,1991567435414183007,262144 --variations-seed-version --mojo-platform-channel-handle=6476 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3144

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5880

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1340

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e413e02b9e80ee8d76d52c1043fc32251e2d7634d4b2fbd970df9ace9d91831a
MD5 22959b3a06a842ac30237dd57e8a3801
SHA1 0b7c28071a592034aa2607038000f085c7bb6362
SHA512 644add9ab912ad7fdfc55bc7a1b84482c75cc9bc69a59d169bae63a0400619d999846ebbadb0ef2bd6d35c2bd08a5f07053b600874dd5dfcbda7e8f3076131fe
TLSH
T1A5D02BE476408A0CC980203335F6524092018910D801D1480040B325CC845C1257F0DF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8aaa68aad07ba45abe53bd513aa5f7e7b21bd1b29db6e1d5c1e0a79a5f4eb890
MD5 74012bbce5fada7634c1da1b567562b3
SHA1 09db27f38f27e35986cfd407b57f6f83c8fc59f8
SHA512 c1a6a98f972793c84274c29552107bfe07b775c7c8121e5fdf137ebf9a7cc3f4eb43fe9eadfc842e7b92ca7281bbcea3d660bdd8fc9adc56add068510c41e48d
TLSH
T1FBD02BE07640890CC980203335F75240920189108401D1480040F335CC845C1257E0CF
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 dbeed54f8c95f450865e3aa97be566c6cb87a51a0ed26c66b49dc070258ce09a
MD5 b580aef4918cd3833e0d14c15fd68b46
SHA1 e2ad1027a279291f13790a7d7d2f6d081109ab22
SHA512 117ccb79f3bee8b3d7770249ec58b0201bc5b8194f3a34d433a31e53e416ac6741d3ec34ab709f2a573f43804fff2a41ca73c8de24d1bd59c2b3ec3dc75d4d7d
TLSH
T1FA612E090B121EC2CB6543BA59D524DCBAFDC9D103876A5080ABED7E7883F1B5BD522F
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59889f.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59889f.TMP
Size 3KB
SHA256 582ab76fde5df76ef961d7ae0ddd9470ac1e105bae4d44b5b69665985745abdc
MD5 a84506f20a11afe8dd0cffc906ff8af3
SHA1 c1bc41124d2fa8ef59ea2ba9d63ea0a5b99d97d0
SHA512 0b9c03ef75e6e9e3a7aa4e76e7320c46d217a8abf0899d629c1d81ae7f25acb4e884de4a81e5313ca9044f483c708a43ec116bb91e0c10f7c725dea7e4ddae42
TLSH
T184612E090B121DC2CB6443BA59D524DCBAFDC9D503876A5180ABED7E7883F1B5BD122F
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

a56d5ff5-3937-43a3-9daf-9da890da072e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\a56d5ff5-3937-43a3-9daf-9da890da072e.tmp
Size 2KB
SHA256 03c79a8e325adc4be4aa19eb3af9dfb36a95b8b36a3e77bd5ab367a802a952ce
MD5 e6771b3ca3c5a2a2891c60d6460f1298
SHA1 5a038c334ab2c76d6a503e68982500332d785dd5
SHA512 41602dfe09c4c7498abcbf0c9e131496018821569595bf191fccee2db41004df3c07dfcf06d0ef9255a34493884ecfcf28d3ae7471ee2085fe981bf8c5aa434c
TLSH
T13851BBF783E4867E890156F0AA14AE2BCE1D0526432C3D66C9E4AF6BD3F3471E10265F
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 66b98b1ac8303e7811162641985493f47fd93317dd0c1c1b0d666a0b5754c4ff
MD5 f2f451818525d4ab5afec853339e5c16
SHA1 5ad0e999897e8f15e5c7511c2c8e4318969f6c7f
SHA512 787b5e6f4508cd8fc4081b9eb646474a7c811d7cd73b42d712f2daf813404584b00a6703dbf545e26c24ccdda2d0c8b6b28bc7e5d52a4985ae6597cfde6bf217
SSDEEP 192:sxRLRgb0/f4sn6OprQ5ozoA8p4x/g6+WNIYn8eIhHGmIgDGJ:sxRLw0/f4sn6O4k/5ITv3O
TLSH
T18A32A5166A68AD3B8CCBE21DFB55BF53D2F95032A1D51E58A6FC8A1C04E76CD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 15392be510cd82f1b9cb301c964d0341947a72f8e6f96834c067cccd6f07ac35
MD5 2b10611a25f7ca6d9ac6f7bc66cea0a3
SHA1 ba057777da0ab1a1ef66f033ee348cea8ebbf998
SHA512 f312dc23f93e599cf9a748603ab2db2139944932acb4e7bac4421fe327c19c6b6ff66a1c260c36f22ff0fdf2967726ec1b422a17b1383d66b9d5a71e30e495fc
SSDEEP 192:sxRLRgb0/f4sn6zprQ5ozoA8p4x/g6+WNIYn8UahHGmIgDUJ:sxRLw0/f4sn6z4k/5ITh30
TLSH
T15732B6166A68AD3B8CCBD21DFB55BF53D2F95032A1D51E58A6FC8A1C04E76CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 50abf20ab68e14b3cebc99deda5dbd41fb559a9943de7d1a9bb3a7d6d9074081
MD5 7a0a950a9a01958cc63fe8ac2e405b5e
SHA1 6dd32b8e2cce2c9764a0315ec1118a049231f665
SHA512 13bca50d28aed3654d14b8c2f19a22d0f9fba7000dcfe3d58aedd4ba2b05a480c447364b8273d34e45e8b769889d53e0d55e855f86f91a51f76abe7b3f37572f
SSDEEP 192:sxRERgb0/f4sW6zprQ5ozoA8p4x/g6+WNIYn8UahHGmIgIJ:sxREw0/f4sW6z4k/5ITh3s
TLSH
T17B32B6156A68A93B8CC7D21DFF25BF53D2F96032A1D51E58A6FC8A1C04E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 4c8c7a6ff01172d796afade5c59f20ae739b8036cf053ade822db40a442bed7b
MD5 b6caff38078aae22efa7978b592ae035
SHA1 d0cede15b785c318ec4bd83c3653760156e05574
SHA512 c16344c52f3347cb21df9b14c543b049c07ccf1ed8f03f3813eabcd5bf31dcb5b85963139b97771d6be46a5b9ba9b0853d0ffc8d9074854d4b2e4b646bd004ee
SSDEEP 384:wum8dzAfCtgoSFf6MKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVU494oRP/rohMn:wb8dz6Wgouf6M8F1+UoAYDCx9Tuqh0V0
TLSH
T1F8B2EC3B604DCB7E5F800A9DEC19AFDB6D9802C79A988D4447FE950C03C77EA51194DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

b9c0de9b-6e44-4279-95ff-3954cbb587bd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\b9c0de9b-6e44-4279-95ff-3954cbb587bd.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 102d28dc10224702ed34aac4fef88211c30b63ccbc7a93eca0bc606f8334a35d
MD5 d2f69b1cd6fd7b44b9e4d0cb970f7e76
SHA1 c748dde6a49a0f8d0bff0dc5556700c56ccdf5bf
SHA512 e313a742e9d59922aead45db8bf6e5718b198aec43d4e863b5c678446f9074e73853dc2d8e11e6498cdeeed5214eb4517e9c43fabf395896f1c37637891d107b
SSDEEP 768:gi3qPL9LDZIO0BoGXNzc4ReyIsPxkRri2:gi3OOtc44bs2s2
TLSH
T151F2AF72AC68DC67ACF59282F94736437DF58117C2C82EA095ED6F0C094B6EE035B817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 776fea23dd33abab0cbf6285227f35426a56ad19425665996a7d7cdbe83806c9
MD5 5bcf2bbab6a25c156f7e554e5da3bc0a
SHA1 6db0a8d615564d060b7daca80a7d940364589fa1
SHA512 269f56c27a6caf7840ce478a233d3a27f2f61ac86d79b26f8c371a7c40af20dc7739aca6d757efc4b7b961f953adb93d22e56b559e77853d4df714735cebc424
SSDEEP 768:7rv+4UNbds3jjBDZIO0BoGgNzc4ReyIs2xkeVH1S5D:7bsbS3Tztc44bsJEH1Y
TLSH
T10003BE32A868DA33ACF6A686B44775537EF8911782C91ED0C4DE2F4C4A4B1DD031F927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 6ae3887142dc080c17daffe0fcb7c01887f551e1a0fb8ba9f911819553a1e8a4
MD5 1e92daced1c84a1b6f4b03585fb848ba
SHA1 a3c0ac8b552b835d8b7f416de64644ca1effe401
SHA512 9fc082b80cc2e7e756c94ff7ce2d4e56bab713376cd24b9da5527f33cfd2eca215ad6bd31185ec81dfe98dd72dd12bb81864e35d5af8aa0a277c6977b08e4811
SSDEEP 768:krv+4UNbdR3xPu9LDZIO0BoGXNzc4ReyIsPxkRrf:kbsbn3COtc44bs2J
TLSH
T1F403BE32B968D963ADF69282F50B35437EF8411782C92EA4C5DD2F4C4A4B5EE131F913
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 a102d4d9eb7c11b7851170881000acfb0c720fb1cca177c42ffb1e9597e5dcd3
MD5 7abb6ae2996cc8537f16b6be0ae04e6b
SHA1 3a24966e8809101215e5ef354b342e5323f75f99
SHA512 1c5a1a493343d6fde87c6e7ac885735fd439f9526e75554af064b6199588d9be70d43b19c7fa125282bc6054d6176be32c7985a357a3b25072fcaab83dc5d8d0
SSDEEP 768:Ai3BPL9LDZIO0BoGXNzc4ReyIsPxkRri2:Ai3tOtc44bs2s2
TLSH
T12BF2AE72AC68DCA7ACF59282F94736437DF58117C2C82E9495ED6F0C094B6EE035B817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 5646360b359e6c31013e4f094c12f30a49f8975f1b50bf6e7933c118ab07295e
MD5 002d1093a696bdbd2acf46ae8838de69
SHA1 9510e0b71cf77856855a68801478373a79146c39
SHA512 53fd3709d7876cfc3396396b9b54be0a6d0a3ccd2b17c8db638cbee9015ad5a09a2e966be55b5a48ccecea293f162d13bc4020d8a52af0a75d31e1ba2de22b99
SSDEEP 768:3FQy3Wwg9PL9LDZIO0BoG1Nzc4ReyIsPxkRri2:Ky3Aqtc44bs2s2
TLSH
T14DF29D72ACA8C977ACFA9782FA063202ADF54167C5D96EA0D2DD6F0C05571ED034BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 91c556ec80bc456f7c8851859edf52a3b085eb5a7a5159527a6c13b152166f5d
MD5 f43fef4919514e01a83b563466c7d1be
SHA1 ccffe67bed85db482eba3c76826a0843299f6bcd
SHA512 189cb4b5f60b51e1b18f000588d0777634af773e76e47caf424d84f6197fef168531212d4b8871e79c4c13909c3cc8eecf25403ff00be0befb5b59b7506dbfd7
SSDEEP 768:6rv+4UNbds33DDZIO0BoGRNzc4ReyIsXVeVH1S5D:6bsbS39qtc44bslEH1Y
TLSH
T19503CE32A878CA77ACF6A786B54776533EF8512B82981ED0C5DE2F0C464B1DD130B927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

415222cd-42a2-4a4a-9a44-e96177ddf908.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\415222cd-42a2-4a4a-9a44-e96177ddf908.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download