e5a5fcaf7db1c2c2d23c8ae2f17a45482215e5ce612ff045de1fda3da77b66b0

Analysis

max time kernel
148s
max time network
134s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260617-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260617-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
22/06/2026, 03:23

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sh.html
Size 42B
Sample260622-dxt5rahv5w
SHA256 e5a5fcaf7db1c2c2d23c8ae2f17a45482215e5ce612ff045de1fda3da77b66b0
MD5 fd6866f1634d734f9daa7d1900967fa3
SHA1 983b472312cb71278da6849490e9590d080c3bc3
SHA512 69461bf87de3dbbb1ef07d2f33dc4d0c309a31a85fc91ebdc09d30af7ada57de56744d6df8d2eb3e6062afcf44396cb333394844af5a9b8ea12a9fcef88aa730
MD5 SHA1 SHA512

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2180	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134265722302505176"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3655380807-1096177077-1670381078-1000\{3CA4D85A-7AD0-4560-8894-26C5E20C3F62}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3900	msedge.exe
3900	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5848	msedge.exe
5848	msedge.exe
5848	msedge.exe
5848	msedge.exe
5848	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5848	msedge.exe
5848	msedge.exe
5848	msedge.exe
5848	msedge.exe
5848	msedge.exe
5848	msedge.exe
5848	msedge.exe
5848	msedge.exe
5848	msedge.exe
5848	msedge.exe
5848	msedge.exe
5848	msedge.exe
5848	msedge.exe
5848	msedge.exe
5848	msedge.exe
5848	msedge.exe
5848	msedge.exe
5848	msedge.exe
5848	msedge.exe
5848	msedge.exe
5848	msedge.exe
5848	msedge.exe
5848	msedge.exe
5848	msedge.exe
5848	msedge.exe
5848	msedge.exe
5848	msedge.exe
5848	msedge.exe
5848	msedge.exe
5848	msedge.exe
5848	msedge.exe
5848	msedge.exe
5848	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5848	msedge.exe
5848	msedge.exe
5848	msedge.exe
5848	msedge.exe
5848	msedge.exe
5848	msedge.exe
5848	msedge.exe
5848	msedge.exe
5848	msedge.exe
5848	msedge.exe
5848	msedge.exe
5848	msedge.exe
5848	msedge.exe
5848	msedge.exe
5848	msedge.exe
5848	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 5848 wrote to memory of 5332	5848	msedge.exe	88
PID 5848 wrote to memory of 2180	5848	msedge.exe	91
PID 5848 wrote to memory of 2292	5848	msedge.exe	90
PID 5848 wrote to memory of 2292	5848	msedge.exe	90
PID 5848 wrote to memory of 2292	5848	msedge.exe	90
PID 5848 wrote to memory of 4064	5848	msedge.exe	92
PID 5848 wrote to memory of 4064	5848	msedge.exe	92
PID 5848 wrote to memory of 2812	5848	msedge.exe	93
PID 5848 wrote to memory of 1240	5848	msedge.exe	94
PID 5848 wrote to memory of 2812	5848	msedge.exe	93
PID 5848 wrote to memory of 2812	5848	msedge.exe	93
PID 5848 wrote to memory of 1240	5848	msedge.exe	94
PID 5848 wrote to memory of 1240	5848	msedge.exe	94
PID 5848 wrote to memory of 1544	5848	msedge.exe	95
PID 5848 wrote to memory of 5396	5848	msedge.exe	96
PID 5848 wrote to memory of 1544	5848	msedge.exe	95
PID 5848 wrote to memory of 1544	5848	msedge.exe	95
PID 5848 wrote to memory of 5396	5848	msedge.exe	96
PID 5848 wrote to memory of 5396	5848	msedge.exe	96
PID 5848 wrote to memory of 5464	5848	msedge.exe	98
PID 5848 wrote to memory of 1292	5848	msedge.exe	99
PID 5848 wrote to memory of 5464	5848	msedge.exe	98
PID 5848 wrote to memory of 1292	5848	msedge.exe	99
PID 5848 wrote to memory of 5536	5848	msedge.exe	101
PID 5848 wrote to memory of 4908	5848	msedge.exe	105
PID 5848 wrote to memory of 1380	5848	msedge.exe	106
PID 5848 wrote to memory of 5092	5848	msedge.exe	107
PID 5848 wrote to memory of 1508	5848	msedge.exe	108
PID 5848 wrote to memory of 1508	5848	msedge.exe	108
PID 5848 wrote to memory of 3900	5848	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sh.html
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2d0,0x7ffe46b4c188,0x7ffe46b4c194,0x7ffe46b4c1a0
  2⤵
  PID:5332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1560,i,9874118480069850230,738476395405442372,262144 --field-trial-handle=2152,i,5346780479612761365,11565255094559616476,262144 --variations-seed-version --mojo-platform-channel-handle=2156 /prefetch:2
  2⤵
  PID:2292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1692,i,16926309595600809513,4976522954716248944,524288 --field-trial-handle=2152,i,5346780479612761365,11565255094559616476,262144 --variations-seed-version --mojo-platform-channel-handle=2208 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2348,i,2554048539957317807,11369642018337632566,524288 --field-trial-handle=2152,i,5346780479612761365,11565255094559616476,262144 --variations-seed-version --mojo-platform-channel-handle=3108 /prefetch:13
  2⤵
  PID:4064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3568,i,9698437641922271069,2763203649511735172,2097152 --field-trial-handle=2152,i,5346780479612761365,11565255094559616476,262144 --variations-seed-version --mojo-platform-channel-handle=3576 /prefetch:1
  2⤵
  PID:2812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3572,i,11105168527004959927,15408595795514952848,2097152 --field-trial-handle=2152,i,5346780479612761365,11565255094559616476,262144 --variations-seed-version --mojo-platform-channel-handle=3580 /prefetch:1
  2⤵
  PID:1240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4168,i,5612818096952179998,5698561172354700512,2097152 --field-trial-handle=2152,i,5346780479612761365,11565255094559616476,262144 --variations-seed-version --mojo-platform-channel-handle=4772 /prefetch:1
  2⤵
  PID:1544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4228,i,15226218467163529332,602173499419611220,2097152 --field-trial-handle=2152,i,5346780479612761365,11565255094559616476,262144 --variations-seed-version --mojo-platform-channel-handle=3552 /prefetch:9
  2⤵
  PID:5396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5356,i,13854712700041014050,2511954165331852502,524288 --field-trial-handle=2152,i,5346780479612761365,11565255094559616476,262144 --variations-seed-version --mojo-platform-channel-handle=5252 /prefetch:14
  2⤵
  PID:5464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5348,i,16486118404986355461,4746794068770058339,524288 --field-trial-handle=2152,i,5346780479612761365,11565255094559616476,262144 --variations-seed-version --mojo-platform-channel-handle=3576 /prefetch:14
  2⤵
  PID:1292
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6128,i,2475558929307876079,1585269882020256213,524288 --field-trial-handle=2152,i,5346780479612761365,11565255094559616476,262144 --variations-seed-version --mojo-platform-channel-handle=6116 /prefetch:14
  2⤵
  PID:4996
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6128,i,2475558929307876079,1585269882020256213,524288 --field-trial-handle=2152,i,5346780479612761365,11565255094559616476,262144 --variations-seed-version --mojo-platform-channel-handle=6116 /prefetch:14
  2⤵
  PID:5536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5152,i,10453069854532627017,6420185115721723848,524288 --field-trial-handle=2152,i,5346780479612761365,11565255094559616476,262144 --variations-seed-version --mojo-platform-channel-handle=4960 /prefetch:14
  2⤵
  PID:4908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5156,i,16727135043471714400,16434675203795682594,524288 --field-trial-handle=2152,i,5346780479612761365,11565255094559616476,262144 --variations-seed-version --mojo-platform-channel-handle=6116 /prefetch:14
  2⤵
  PID:1380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5140,i,14862136260908712735,16363945564401212741,524288 --field-trial-handle=2152,i,5346780479612761365,11565255094559616476,262144 --variations-seed-version --mojo-platform-channel-handle=6616 /prefetch:14
  2⤵
  PID:5092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5396,i,10374156017773611746,8466669308366960251,524288 --field-trial-handle=2152,i,5346780479612761365,11565255094559616476,262144 --variations-seed-version --mojo-platform-channel-handle=5296 /prefetch:14
  2⤵
  PID:1508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6088,i,8816410948159813863,10780788043304133135,262144 --field-trial-handle=2152,i,5346780479612761365,11565255094559616476,262144 --variations-seed-version --mojo-platform-channel-handle=6092 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3900

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:616

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5356

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a73b32029b5d0c6ff7ae727c0f35079c0207fb5160bb2094317e96e23daf1cee
MD5 5fd2ab1b84f4c46ecb80443cacd9d150
SHA1 dd5f53ee71d94f4de7f9196f7dd42d06437a3320
SHA512 80afd342835e5b7c47013c2e8821b8636a9782f5c0541da2d81ad7da7f1be3e061af3ccb4f9143b3b85ff16c6113c3f6bf41ea64da18da643b2cf34c67ef65d1
TLSH
T1C2D0C0303300F601C0CA24B4FC106311123B8A1230E3C21D7020D00DEE940D0EB8B45B
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 02e83107bdf4cefad04d7dffca4065fb67146265abf734fc1a0a6c97297b321d
MD5 e502aaa276aa06e6296f6ef4749253aa
SHA1 99b55990cdf0fa9357771717d8ade2d2ba1023a1
SHA512 2f9d794c6e91e4888f5f7323dc7b92a27fbabf3cf561300c11be8833a6a0a6f5855daaa7cfc1901faab9b2932d40d1361bee35e50c2951c0e558a06150e71a6f
TLSH
T131D080707755F505D5CA25B9FD146315523B8A5220E3C61D7160D00DEE940D5EB8B457
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 8459c5473176b8969110bec21096d3a4fd7dc3d6c553f530341ff0135ee0ef91
MD5 0ac19792ac320269160762c51ed1040c
SHA1 5d5ea0846be704cef7f27870f7edf6d3fa6908bf
SHA512 b686ea8b7a836997e7ae971cf199dd26cc318a8d1fa5ea4ad7d351593577c5f8e27a3c6ae49e2f4e54049126dec54981a71a6de131790f9165df43d25fc11edc
TLSH
T19C61B567D4652066FF778135A4D2908537B4F8457E9B2F26A3D0B0388EFABC135418D2
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59a60a.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59a60a.TMP
Size 3KB
SHA256 7b50f45909c76a28f42c697e81631c5144eafba76f2d0d4d5f9a5b20bf0b0e43
MD5 d2ecb886c709aa582ed1e9e10d80f06d
SHA1 86a8eeeaae025867965090d3f2f0a3323112a012
SHA512 870a675186dd10ee4940661339b0c6e948494e2407a75ec413e37e2c691362d1868f906915c9b832e345c03e9497bcc61706420d54ebefb0496d2bee2cb32635
TLSH
T14C61B567D5652066FF778035A4E2908937B4F8557E9B2F26A3D0B0388EFABC135418D2
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 a1b9783b8d05e088230a76086f5a58a4827a4cb5443f5e6898ee1edced596588
MD5 de492729fd93c3ec702455c225379fe4
SHA1 5a6e6e41d681f9bd2183b25e536d0315482b82dd
SHA512 072b5053fd005929aac7f735acf80c11e6a3bdddb3a864a31acef1b3154d90d6040e29c34c5c4b8c01f3d709523fce96abf22fd1db2154bb0ccbf7b7983fe527
TLSH
T1AE419BF3C3E8866D890146F4BB157E1BCE2D0914932C3D5AC9E4AF1B93E28B1E14195F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 c4c9c6e18b2272c34ec9339c9e7d5b615a08735a34b7e52b7e7593e418c7ce98
MD5 1d882348482804c1657b80faba569bb4
SHA1 df9db51dff29b6a4bea8509cd55e82f117121cc8
SHA512 06a161ea4d1d84a3f854e9309cec157c37ad34be9a6e63d38809f00f00aeca747322f2202964f933bd5807fe0a4f9c536125b97f748b97cf6a3d82dbc48b9ccd
SSDEEP 192:sxRuRqyM/jK1Ml8wF1/fUsZt2sjbRzoA8p41/g6+WNIY5xLtt+GS6IgDSJ:sxRukb1/fUsZtpbMo/5I2XAaa
TLSH
T14952C9069A34593BCCCBD219FA957F53D6F81532B2941E48AAFCDA0C04E6ADD2213C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 28e6c502f7af88c27cb91b723783279ae3be2901ea9d1bc71eac9b9e110a91b6
MD5 cd816a40c59c42022c3091c16193acea
SHA1 672ad24491ef2c76adbd2cce7a75888324c5dc40
SHA512 006df5977f42cf5d99f444829f7c99ee72fa979e178e9796dd5bdaf11c3acd44c3cd39b78ecd923112485fb1a7eb977dd24d204d4e689b962c5c0b1a3843500f
SSDEEP 192:sxRuRqyM/jK1Ml8UQSF1/fUsZk2sjbRzoA8pe1/g6+WNIY5gLtt+GS6IgDIJ:sxRukqY1/fUsZkpbMe/5IhXAaY
TLSH
T13262C8069A34597BCCCBD219FA957F53D6F81432A2941E48AAFCCA0C00E6ADD2213C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 6de6d29c020b64dd92176e49532c42aafd874ce820122d51913f0f4b09c89eeb
MD5 41ec8aae0017e7f12d713388c145d674
SHA1 b088726dc2fe9d48e1c67b331cf6ff7d7e01cc29
SHA512 c86207d8d2d7f6cb634d6644838e82a672ffbb44c5ed5e4539c555ec0c0336d3c466589ee2a5b8c8db46d6017161709dad27f0e054a6362ed464ea2eab1ef192
SSDEEP 192:sxRBRqyM/jK1Ml8wF1/fUsYt2sjbRzoA8p41/g6+WNIY5xLtt+GS6IgIJ:sxRBkb1/fUsYtpbMo/5I2XAas
TLSH
T17652B9059A34593BCCDBD219FA957F53D6F81523B2941E48AAFCDA0C04E6AED2213C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 5d17ab32509a6c862c3d4ae4746fd4177847a67aabf4e47491f71a6fd9cc6a2c
MD5 533241e76b6ca111a68d601122afc4bd
SHA1 6023e87ac03dd0a23e270106bba09d6bc47e6c94
SHA512 a891cfe6c923eb04c2a1bbb94b013da39189c357384751feb50ea3a37cf74125cea364f3ed47fea2b2a60136f4be3c75065e854a222da8ef798f540449a90aea
SSDEEP 768:QMUhBCWgmcfXw8F1+UoAYDCx9Tuqh0VfUC9xbog/OVY2oKICro2Q/Uiuy:QMUhBCWgmcfXwu1ja1dKIZ2Q/Huy
TLSH
T1EDC20B2B640CC77E4F844EACFC2AAE966DD801CB57988D5447EE890C03C67EB521A5DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

503bbcdd-11fc-4b11-885b-d6b0a735d636.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\503bbcdd-11fc-4b11-885b-d6b0a735d636.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 5cc06d767b37f9960702bc4259ef2b1ef6f0336bbbd0d347e668e6077e43321f
MD5 459233a327a9dcb9cead3ab6aaf05fa8
SHA1 0c67007be5ad2409173c7fbcd9f2dc8716fe4c27
SHA512 a2ed0995d5cc62189ac1840a952098595a35f3531098c1fc4e98e71316da0d793b6be152fd378debec9af9a339b3010254a2841680b84f8a0273935f9307ca85
SSDEEP 768:Mj+9Ns3WTQj0rjfdfsTt9fs5Z0SEbuRpag62Dai+fAhPdxBv2:L9Ns38fdfifXijag6E+I5pv2
TLSH
T1A3F2BF319874CD778CE7A384B5193A4A6EB45513D2C52F8899DC6F0E0ACB6EE0747C1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 976bedc65c5a09b003b6882289b77c54d749063c5a20af60b0f46f2ad09f1ed0
MD5 37652edc85cda8a1d17fcc5f8c1fd3de
SHA1 000f1ae2b7f9d65dad5ec31a9672d49fe47fac7a
SHA512 9e52c5efdc02a3d2d32f8b9daf4c73c7e432df138ac103011fca86db7bb0c68bc521c1818fe2b9f52ea3125b1934b2957b79132544814e8257b9d0fd8d54dd7f
SSDEEP 768:tj+9Ns3VTUj0rjfdfsTt9fsPZ0SEbuRpag62Dai+fAhPdxBv2:I9Ns35fdfif/ijag6E+I5pv2
TLSH
T1A0F2BF319874CD778CE7A3C475193A4A6EB4561392C92F8899DC6F0E0ACB6EE0747C1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 f2194721c9a79a49cd1b1d9b65e88cc03736cd1896fce126e0e136afade8dcc5
MD5 b58f2bdbd61dcc03182122e5645b78c9
SHA1 f8a9522b4db61350e0edc873c355d0166bc52572
SHA512 998812f5cd8c4dbf2272cee08dc142c7480607b46150e267fc800d02d16fba3c0fc460360be63001dd90a2c5e13361a505e8fb89ab4084771739a6dc2ed2e44c
SSDEEP 768:0F1j+9Ws3+wgCTUj0rjfdfsTt9fs1Z0SEbuRpag62Dai+fAhPdxBv2:Z9Ws37fdfif9ijag6E+I5pv2
TLSH
T18A03AE328D64CD7B8CF79784BA193646AEB05153C5C5AF88EACC6E0E06DB1ED0347C1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 e6165466141a5aab7c78d797433b5baad8d2ce457cb07c141089a9a3ace25dba
MD5 ff046cdfc5f46321addbc2fbb54d2fce
SHA1 12a960f6a6360cb56656af76cb5f1b4d9b6513bf
SHA512 b9b9d7a75f1d48b0ec1e13551aec69355081c635fe852a18c136cbd3db00ade7bcf6be5321d6296b3d1c26661c972c073d715fb643d9ee491e856992ca8a8966
SSDEEP 768:GjaeqD4MlshiLdMmi38h0rjfdfsTtCZ0SEbuRpag62Dai+fAdwyjWtUkTu:GqcjhIdMl3Nfdfyijag6E+Ieyj2U
TLSH
T10303C07698744C778CF762857A163A966E740583C6D57F8C9DDC270E02EB6DE1303827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8657a722-64e6-425c-af69-b182588eb4c7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\8657a722-64e6-425c-af69-b182588eb4c7.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download