5fd55da8747d933410bb637571802aca2eedf3314039722e2b9d6f37afdad97e

Analysis

max time kernel
148s
max time network
142s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
19/07/2026, 06:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
188394.html
Size 552B
Sample260719-g228psf161
SHA256 5fd55da8747d933410bb637571802aca2eedf3314039722e2b9d6f37afdad97e
MD5 eac0a6a53d4a4353aace122055b4b4c8
SHA1 b400d2a40c870dd448eed9b418297c3038b9d023
SHA512 5cb7ce5f3f827714d73fdd452a71f1c1cd33fe9e8452292e7fd1fdb21dc597a3433a5fc3b8148cfe61b3fa50936d45615496749a6d892dc99bf628db89da59d8
TLSH
T119F06DAB5F11383F2E679571F4C35168CF680952FB9825E28348011F7A8A04549B5FAD
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5752	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134289155409651916"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2246396966-3025826688-3847171515-1000\{9A7CF9D8-BD5A-4C73-9E0C-F3379791AF65}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3940	msedge.exe
3940	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4604 wrote to memory of 5268	4604	msedge.exe	89
PID 4604 wrote to memory of 1104	4604	msedge.exe	90
PID 4604 wrote to memory of 5752	4604	msedge.exe	91
PID 4604 wrote to memory of 1104	4604	msedge.exe	90
PID 4604 wrote to memory of 1104	4604	msedge.exe	90
PID 4604 wrote to memory of 1948	4604	msedge.exe	92
PID 4604 wrote to memory of 1948	4604	msedge.exe	92
PID 4604 wrote to memory of 1732	4604	msedge.exe	95
PID 4604 wrote to memory of 408	4604	msedge.exe	94
PID 4604 wrote to memory of 1732	4604	msedge.exe	95
PID 4604 wrote to memory of 1732	4604	msedge.exe	95
PID 4604 wrote to memory of 408	4604	msedge.exe	94
PID 4604 wrote to memory of 408	4604	msedge.exe	94
PID 4604 wrote to memory of 5628	4604	msedge.exe	96
PID 4604 wrote to memory of 5628	4604	msedge.exe	96
PID 4604 wrote to memory of 5628	4604	msedge.exe	96
PID 4604 wrote to memory of 3076	4604	msedge.exe	97
PID 4604 wrote to memory of 3076	4604	msedge.exe	97
PID 4604 wrote to memory of 3076	4604	msedge.exe	97
PID 4604 wrote to memory of 4992	4604	msedge.exe	99
PID 4604 wrote to memory of 3484	4604	msedge.exe	100
PID 4604 wrote to memory of 3484	4604	msedge.exe	100
PID 4604 wrote to memory of 4992	4604	msedge.exe	99
PID 4604 wrote to memory of 5776	4604	msedge.exe	102
PID 4604 wrote to memory of 2996	4604	msedge.exe	106
PID 4604 wrote to memory of 4648	4604	msedge.exe	107
PID 4604 wrote to memory of 4552	4604	msedge.exe	108
PID 4604 wrote to memory of 3360	4604	msedge.exe	109
PID 4604 wrote to memory of 3360	4604	msedge.exe	109
PID 4604 wrote to memory of 3940	4604	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\188394.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2b8,0x7ff81657c188,0x7ff81657c194,0x7ff81657c1a0
  2⤵
  PID:5268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1628,i,10577454262139407475,2815969213690997664,262144 --field-trial-handle=2264,i,2824395727115181811,17049936291171290419,262144 --variations-seed-version --mojo-platform-channel-handle=2256 /prefetch:2
  2⤵
  PID:1104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1928,i,3185407545841602049,13601330199349020797,524288 --field-trial-handle=2264,i,2824395727115181811,17049936291171290419,262144 --variations-seed-version --mojo-platform-channel-handle=2300 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2460,i,7874130239139376444,9921273528270604723,524288 --field-trial-handle=2264,i,2824395727115181811,17049936291171290419,262144 --variations-seed-version --mojo-platform-channel-handle=3140 /prefetch:13
  2⤵
  PID:1948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3608,i,16820315841259515657,6794120859246910402,2097152 --field-trial-handle=2264,i,2824395727115181811,17049936291171290419,262144 --variations-seed-version --mojo-platform-channel-handle=3680 /prefetch:1
  2⤵
  PID:408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3660,i,5115272657732419085,13974360655208924766,2097152 --field-trial-handle=2264,i,2824395727115181811,17049936291171290419,262144 --variations-seed-version --mojo-platform-channel-handle=3756 /prefetch:1
  2⤵
  PID:1732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4360,i,10562145439996666922,4485040765744433250,2097152 --field-trial-handle=2264,i,2824395727115181811,17049936291171290419,262144 --variations-seed-version --mojo-platform-channel-handle=4480 /prefetch:1
  2⤵
  PID:5628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4384,i,485458694791734355,57824745455692686,2097152 --field-trial-handle=2264,i,2824395727115181811,17049936291171290419,262144 --variations-seed-version --mojo-platform-channel-handle=4568 /prefetch:9
  2⤵
  PID:3076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5372,i,15852278635600968447,928703078906755733,524288 --field-trial-handle=2264,i,2824395727115181811,17049936291171290419,262144 --variations-seed-version --mojo-platform-channel-handle=5404 /prefetch:14
  2⤵
  PID:4992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5380,i,18273203838877245694,4535417100295859722,524288 --field-trial-handle=2264,i,2824395727115181811,17049936291171290419,262144 --variations-seed-version --mojo-platform-channel-handle=5456 /prefetch:14
  2⤵
  PID:3484
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5960,i,10708662338479325837,11697328666900044916,524288 --field-trial-handle=2264,i,2824395727115181811,17049936291171290419,262144 --variations-seed-version --mojo-platform-channel-handle=5976 /prefetch:14
  2⤵
  PID:2984
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5960,i,10708662338479325837,11697328666900044916,524288 --field-trial-handle=2264,i,2824395727115181811,17049936291171290419,262144 --variations-seed-version --mojo-platform-channel-handle=5976 /prefetch:14
  2⤵
  PID:5776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4536,i,8019030450822670143,194965259053162950,524288 --field-trial-handle=2264,i,2824395727115181811,17049936291171290419,262144 --variations-seed-version --mojo-platform-channel-handle=5244 /prefetch:14
  2⤵
  PID:2996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5028,i,9719674662271885055,15244047040870224146,524288 --field-trial-handle=2264,i,2824395727115181811,17049936291171290419,262144 --variations-seed-version --mojo-platform-channel-handle=4356 /prefetch:14
  2⤵
  PID:4648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4568,i,13788897753426646847,131135694789058110,524288 --field-trial-handle=2264,i,2824395727115181811,17049936291171290419,262144 --variations-seed-version --mojo-platform-channel-handle=5216 /prefetch:14
  2⤵
  PID:4552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5536,i,12201587460321389803,16937327305013636912,524288 --field-trial-handle=2264,i,2824395727115181811,17049936291171290419,262144 --variations-seed-version --mojo-platform-channel-handle=5520 /prefetch:14
  2⤵
  PID:3360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5300,i,16824043777075224445,18403117076170694222,262144 --field-trial-handle=2264,i,2824395727115181811,17049936291171290419,262144 --variations-seed-version --mojo-platform-channel-handle=5756 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3940

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4408

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:856

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

3a234bb7-1990-4b32-9a30-a60eb7518b42.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\3a234bb7-1990-4b32-9a30-a60eb7518b42.tmp
Size 479B
SHA256 df971de1d83c4ec8d8a5317c7da912d8feaad9129307ead7cac91d8819c039d1
MD5 60aeec055cd3bd04b686b14115275140
SHA1 226ad5a7a3c53e4dbc2166906cae70250583b691
SHA512 0567a6078a9f2c06a9054f75a9bf6b745ad3e3735d4b341e44089627a2e31febb2df182dfc3b521cc3bc180bae5d381bff6248f2806a7339a8f3037dff530336
TLSH
T115F0544E8C2EC994FE0955F500D5C3732415AC408EB55E7D6D0856D364861684CC9752
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 67b546fed422708faf33930b82ff4826bc323bc64f67af30b02bb9e565fa27ee
MD5 04925ec9b8ab191e010732cba0eeefe1
SHA1 a6847bd1b4e86ab3cf9f2a8e109e78b04f51204d
SHA512 25e65b33281d8c58aaf4bad265d912d01bcadd9284dc1ce818ccc1dcf59200f57de5e8d8f4ce5ef6da06c777b54dd4dbee7a3aad7a16da9542538e92104e9c68
TLSH
T1C7D0C0343948E288C9832172DCA033117320007074B147054031B41CCE2049323DF5CF
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 ca07f3b8efca6e13b1fcf0bb902684dc3e997f750d0ae61d3c4a05bbcb6e043c
MD5 0cb38a8f0d84f96fb0cab244bc962f88
SHA1 0cf824e993fdf8ff4a032d113cfdb5ba583aa34b
SHA512 012e5f5dc4a31f0a280e79b0b13e1b11f546ed88bf13384ac4e00df9cff41b2a5db7e91b747f93bf463243e62f50850f9f36c56e6e404fe9b2f065fae48f9ad2
TLSH
T194412E9063270997CB6F75F952EA82FF33F95B786D03FB1285B02277192A3583E12611
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 40866321ab37a63236e8e4f71a9ab59dfa37b62a8841f477d53d0185aad87f0e
MD5 53b96d137421233c7d85cb766c52ebb4
SHA1 b791b3c79c89e7676f85a35e31ba569e399dbcaf
SHA512 d3169a386e3d6c12d7b07ed70678d21c0af0fcf197cf313a63c3f35995e4c6778fc2eae3de0c36e64601c17765eaf2e51f513a29f7746919196c71c69559d7e1
TLSH
T17341CCF3C3E8897E890146F4AB146E1BCE1D0915832C7D5AC8E4AF2BA3E3871E14195F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 f3f09dc8e915ebd9706a06e7d362062d4c2aca478251039c3a4bd5cd11cd7d83
MD5 4bd9519a3fbf4776c0d0c4b9ba24a03d
SHA1 06b188751eda159a8570e11e6da04626ebc23bb3
SHA512 62320e9304f7037842e43b627df2e2796786fb9cec43f59a33eb12e3ab4385e16f4504b6e65514c1ad441e715fa5fd65710fe358d209368b6b84e1d2b84422f2
SSDEEP 192:sxR+R6bW/f4sxVY/vDzoA8p46/g6+WNIYZ7PKsSGlIgIJ:sxR+aW/f4sxVYXyL/5I63s
TLSH
T1B232B6166968993B9CC7D20EFA567F53E2F95033A1D41E58ABFC871C04E76DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 a23e35d6edb8049ca9ae2455c1d02de851af587cc1d04aa8d544a4820d7c3bfe
MD5 5686ffb5be07a6ca78516c74ba7f943a
SHA1 ba4651546b65ba5c53e8ec3d4739f4f3cd6d0880
SHA512 072e46d5be64464a4c047602e7c351c130f4a3b89e2ed3fabd1caafb2bc362c3f2c81f5a95b4cce7f94ae29af47c7ba0ce02e0eb254f3efdc44fdd3409da7216
SSDEEP 192:sxR9R6bW/f4siVY/vDzoA8p46/g6+WNIYZ7PKsSGlIgDCJ:sxR9aW/f4siVYXyL/5I63q
TLSH
T13F32B6166968993B9CCBD21EFA567F53E2F95033A1D01E48ABFC871C04E76DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 bd629a0c46c4df806faf93a7b93076439adbe48e1d18d8352e80a4b08e846238
MD5 67562866539716882e91da544cfb59ff
SHA1 1cff077248a74fbee1f1785a41ed707051b155a5
SHA512 dfea9f3c04dd907290fc86d15460ff994abccc79b2b7586542fcde4bd7cfd61890f7e7b1844b768ff6449b02f74937c82f8db9934dbfcb0e678f8671d4712a7f
SSDEEP 192:sxR9R6bW/f4siVy/vDzoA8p46/g6+WNIYZ7PIsSGlIgD4J:sxR9aW/f4siVyXyL/5Iu3o
TLSH
T15E32B7166968993B9CCBD20EFA567F53E2F95033A1D51E48ABFC871C04E76CD220781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 cfa80f3efe43fe6089c779ae5432267bb2940d16da86923c00e7ac5563f059b9
MD5 0585ce0ae9036a63804e2e7c00b2bdab
SHA1 3a8975b9fb9bfd391cb7567f0132ba0fc209d9c0
SHA512 ff8af2c7ac9b2eb4298dab1716125d85812b574da5e80a28b8ec053913c17ca701dab4bd851a704e996da64b61a1655d0ebdda4f099ca3484f214ecc061b2b02
SSDEEP 384:kyr2SGXfCtgdDFf/bKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVA89VXR6YroOpH:ky2SGvWgd5f/b8F1+UoAYDCx9Tuqh0Vu
TLSH
T179B2DA2B604DC77F9F801A9DAC196FDA7D9802C797588D4047FED90C03C77EA922A4DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 74e7b6b66932f14d6cbf1729d8e59d567072e0ee80a340a07f1abdc09408f1de
MD5 1fd5a0a0b1980c3b094744b4a48178ab
SHA1 23516a471267c8d417aad9c4e27896e89e211257
SHA512 880e8aa32e52904c0339dbbcb276f3636ad8be56769ecb4c07dc6cb8b62b373de41a3df1e17f835bae8def6e89b73ce9878bb16c42fed677ec6957436b16a776
SSDEEP 24:KSitEiFiQiSPi3SiEiQiz1iAivDiCI4iMizKXichPiOiz1RiKijSrid5i4JiQiQk:Ks6IPKjaovyRwInKZmkHU+IfK7iE/yR
TLSH
T104911A92713B420439BE290884B5C667C6C770E73519A42F3BE951F60B6AF520FFE9C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59e3af.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59e3af.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 b8a9d5579a2da2e0ae6f236f3e210d0ac92ea013ed94c02624ccddf643493508
MD5 a97c9645fef8310511fd8d4e693ca0e5
SHA1 73e0933bd5402b3f57a63598b1f32886be88b380
SHA512 ea05b48b8f2ae9a2ede4ef925472dc64bc64d10321b3eb038bf0fb40e4a1f9283464bb5b52ed75dac46eb650e91df1da809ccc490c9c99074b56fd0fda8c4e57
SSDEEP 768:6rv+4UNbd43sbEqFLmQ/CyAam6aQMGdjWca4Ghf9cPxUQ:6bsbK3D3cmaME6pcx
TLSH
T127F2AE32A868D9339DB792D5F21F6643BEB0516389C80E84C9D86B0D439B1DE230BD17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 9ef1a07a77a1114d7e2d023a3a6ee1e1cc35d674f3e845862f3983a1bfd3629b
MD5 998836d443160238dbff2794a2bfe6f6
SHA1 b36b1ea18c62d5fbdb2375b60e466e54f1dbc23b
SHA512 fdd5c5b7c0f03073d5821661deefbd299c6917141b464a0dafe3e05a03eb3fedcc0eb7d092eb9e16b926dd204cf917c416b19664953b3766a425f377909d7a2a
SSDEEP 768:/rv+4UNbd43f+EqFLmQ/CNAam6aQMGdjWca4Ghf9cPxUQ:/bsbK3133maME6pcx
TLSH
T11303AE32A868D9339DB792D5F21B7683BEB0516389C80E84C9DD6B0D079B59E230BD17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 01c7a3c59a158bf5dcfbae3b6678c381b6c02bcd148b948681ab5e250635fa57
MD5 99794c1229a09ee51c90c0a17cc932c1
SHA1 90dddcb1131225f6d47cffe6a9e1912a6184e493
SHA512 e75e19846db515f489ebabde291a7b4bee60b1c9cd7893d27d02d147961d174074cbda5148d5923d01edf73ae539c90bc50431572824cbe0fa72780d22ba003f
SSDEEP 768:Grv+4UNbd43s+EqFLmQ/CNAam6aQMGdjWca4Ghf9cPxUQ:GbsbK3+33maME6pcx
TLSH
T154F2AE32A868D9339DB792D5F21B6683BEB0516389C80E84C9D96B0D47DB1DE230BD17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 32KB
SHA256 4e8315e5b573ea9e41ff95ab25412759bb23bbc3d9357e8ea1a92201ff082b22
MD5 0154c5efb5e610ddcc5588851da74c01
SHA1 f1e90887a45e3d1b60067cd4e34f7e681b52b505
SHA512 1f7c477f3c453406d0e0a00f833a42f9b2be0dcaba5bc55527569ab211cf88bc9432374961e85abf136e2069364a668a7ca44751fe95c974ca42a8bd3ada7bcf
SSDEEP 768:eF1j+9a3DwgC+EqFLmQ/rAam6aQMGdjWca4Ghf9cUx:b9a3GImaME6pc0
TLSH
T192E28E325C98C9779DA69BD5F71F2247EEF041A3C8C86E84D6DCAE0D029729D130BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 0807738ffd50c84281f525e9089b1df3e8f5f373834e6cbfe017b022405fb0e1
MD5 f41ad2c1e69c9222a55e37d3ec228b0d
SHA1 62199762dc998d03cd5a73e3c7e5d8fa08c38c40
SHA512 f17efabf1a5a8fa915702230743391bd3e4c713d5f8648ed0e2d0e4abd932970f50f57a1131ed87c0ca872bb108c1d06f0ec694ca9d04641535ef2e73c15c766
SSDEEP 768:/rv+4UNbdq3FdqFLm4AAam6aQMGdjWca4GhfBtPeU/:/bsbc3v4KmaME6p1H
TLSH
T105F2BE31A86C9973DDB79A99F21B6787BEF021A384D40E84C9D95B0D43970CE2307D2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

VariationsSeedV1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\VariationsSeedV1
Size 2KB
SHA256 52e60a3550a0bf11b60546f36647cb183a546ab179be808c7ec9eea51f8056d7
MD5 882a7ec093ecd33232f7255b8f8054f7
SHA1 ad43e0d687cc809cbf268398c52636da772cd559
SHA512 412793f0b664ab5c4771583e7d488673edef62a0eaff245cccf703ffafc4d962ac84d6376e18aec6e79526c4b785854f7a2df33a799cc74bda2d2e477cda33c2
TLSH
T1A751396626A283BF8E752EB6DF04A6607ED8CEB016675040C2220A914CDB0770C073FE
MD5 SHA1 SHA512 TLSH

Submit Download

5537bef7-6635-4f1c-9c4f-5af2643913ff.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\5537bef7-6635-4f1c-9c4f-5af2643913ff.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download