4b5f9c1caa76bdf51ec203ee07c68ec5d10ae1570a6da51eb7a88d619c03283a

Analysis

max time kernel
148s
max time network
133s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
28/07/2026, 18:23

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
.html
Size 1KB
Sample260728-w1sefaba36
SHA256 4b5f9c1caa76bdf51ec203ee07c68ec5d10ae1570a6da51eb7a88d619c03283a
MD5 5a2f115fcfecb00fffb2ab8b3f4ddb80
SHA1 64c0b8459b79856e0f1883c926445dcc4c610855
SHA512 3f059d526cd104d5c363f4f27bf6bab8c95828cc32ad31f1113babe2fb22c9f3a2be84ea5ab044a282b02c456c48385863104ccb67ace93f1773f0dc75223918
TLSH
T12841FE2D01B30009E283986437FB7A5176A0B4878AC9CB0D761C9615CFCA2B1A9A73CD
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2460	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134297367759987558"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3986082593-3624157295-3514260330-1000\{55440205-09A3-4C1C-8572-F9ED6D401E9D}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1348	msedge.exe
1348	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 5476 wrote to memory of 3476	5476	msedge.exe	89
PID 5476 wrote to memory of 3596	5476	msedge.exe	91
PID 5476 wrote to memory of 2460	5476	msedge.exe	92
PID 5476 wrote to memory of 3596	5476	msedge.exe	91
PID 5476 wrote to memory of 3596	5476	msedge.exe	91
PID 5476 wrote to memory of 248	5476	msedge.exe	93
PID 5476 wrote to memory of 248	5476	msedge.exe	93
PID 5476 wrote to memory of 52	5476	msedge.exe	94
PID 5476 wrote to memory of 52	5476	msedge.exe	94
PID 5476 wrote to memory of 52	5476	msedge.exe	94
PID 5476 wrote to memory of 4468	5476	msedge.exe	95
PID 5476 wrote to memory of 4468	5476	msedge.exe	95
PID 5476 wrote to memory of 4468	5476	msedge.exe	95
PID 5476 wrote to memory of 3520	5476	msedge.exe	96
PID 5476 wrote to memory of 3520	5476	msedge.exe	96
PID 5476 wrote to memory of 4300	5476	msedge.exe	97
PID 5476 wrote to memory of 3520	5476	msedge.exe	96
PID 5476 wrote to memory of 4300	5476	msedge.exe	97
PID 5476 wrote to memory of 4300	5476	msedge.exe	97
PID 5476 wrote to memory of 1412	5476	msedge.exe	99
PID 5476 wrote to memory of 4848	5476	msedge.exe	100
PID 5476 wrote to memory of 4848	5476	msedge.exe	100
PID 5476 wrote to memory of 1412	5476	msedge.exe	99
PID 5476 wrote to memory of 4144	5476	msedge.exe	102
PID 5476 wrote to memory of 4544	5476	msedge.exe	106
PID 5476 wrote to memory of 4284	5476	msedge.exe	107
PID 5476 wrote to memory of 4708	5476	msedge.exe	108
PID 5476 wrote to memory of 3952	5476	msedge.exe	109
PID 5476 wrote to memory of 3952	5476	msedge.exe	109
PID 5476 wrote to memory of 1348	5476	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x328,0x7ff8e6b9c188,0x7ff8e6b9c194,0x7ff8e6b9c1a0
  2⤵
  PID:3476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1788,i,4596443984118067544,4466840028161837118,262144 --field-trial-handle=3216,i,13500577342885107064,11271870518453400831,262144 --variations-seed-version --mojo-platform-channel-handle=3212 /prefetch:2
  2⤵
  PID:3596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1752,i,6815052544698894374,816505578893587732,524288 --field-trial-handle=3216,i,13500577342885107064,11271870518453400831,262144 --variations-seed-version --mojo-platform-channel-handle=3320 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1724,i,12976269009481820992,5909648289004149841,524288 --field-trial-handle=3216,i,13500577342885107064,11271870518453400831,262144 --variations-seed-version --mojo-platform-channel-handle=3460 /prefetch:13
  2⤵
  PID:248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3400,i,18100548775893810386,739579075389235647,2097152 --field-trial-handle=3216,i,13500577342885107064,11271870518453400831,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:52
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3404,i,9395867756013023809,12245976127947236388,2097152 --field-trial-handle=3216,i,13500577342885107064,11271870518453400831,262144 --variations-seed-version --mojo-platform-channel-handle=3652 /prefetch:1
  2⤵
  PID:4468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4316,i,8589658065280334719,6948085899627628715,2097152 --field-trial-handle=3216,i,13500577342885107064,11271870518453400831,262144 --variations-seed-version --mojo-platform-channel-handle=4332 /prefetch:9
  2⤵
  PID:3520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4300,i,3586046842193992781,15824519790368273689,2097152 --field-trial-handle=3216,i,13500577342885107064,11271870518453400831,262144 --variations-seed-version --mojo-platform-channel-handle=4328 /prefetch:1
  2⤵
  PID:4300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5312,i,4799586242766721508,17067486508894290792,524288 --field-trial-handle=3216,i,13500577342885107064,11271870518453400831,262144 --variations-seed-version --mojo-platform-channel-handle=5400 /prefetch:14
  2⤵
  PID:1412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5148,i,12484328697732823,1736546100468442785,524288 --field-trial-handle=3216,i,13500577342885107064,11271870518453400831,262144 --variations-seed-version --mojo-platform-channel-handle=5380 /prefetch:14
  2⤵
  PID:4848
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6076,i,8963773922800282373,13420564808893286663,524288 --field-trial-handle=3216,i,13500577342885107064,11271870518453400831,262144 --variations-seed-version --mojo-platform-channel-handle=6120 /prefetch:14
  2⤵
  PID:3608
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6076,i,8963773922800282373,13420564808893286663,524288 --field-trial-handle=3216,i,13500577342885107064,11271870518453400831,262144 --variations-seed-version --mojo-platform-channel-handle=6120 /prefetch:14
  2⤵
  PID:4144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5048,i,1560119581844563641,13168746073825261441,524288 --field-trial-handle=3216,i,13500577342885107064,11271870518453400831,262144 --variations-seed-version --mojo-platform-channel-handle=4920 /prefetch:14
  2⤵
  PID:4544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5236,i,994855451823903894,5153346204617828606,524288 --field-trial-handle=3216,i,13500577342885107064,11271870518453400831,262144 --variations-seed-version --mojo-platform-channel-handle=6608 /prefetch:14
  2⤵
  PID:4284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5216,i,8322995045486724483,1317305958349600627,524288 --field-trial-handle=3216,i,13500577342885107064,11271870518453400831,262144 --variations-seed-version --mojo-platform-channel-handle=4904 /prefetch:14
  2⤵
  PID:4708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5684,i,15696871488784008113,18315919723436593186,524288 --field-trial-handle=3216,i,13500577342885107064,11271870518453400831,262144 --variations-seed-version --mojo-platform-channel-handle=5236 /prefetch:14
  2⤵
  PID:3952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6420,i,7129377283691315756,11036084846624828490,262144 --field-trial-handle=3216,i,13500577342885107064,11271870518453400831,262144 --variations-seed-version --mojo-platform-channel-handle=2732 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1348

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3056

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1196

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 da739d58d61b2ac7b5d9bb7ad60982cb15b364d9c7c9297fd0c9719c271cd985
MD5 2d2e0ac0da9a175b4b6a8be7c9d51cce
SHA1 ff15c8a5ff11faefae3f7491c7968a2163702b81
SHA512 0ae78f15909f04e1a81109917b8eeb5b8062a49558d8a40f15c02076b087f36e82b88b329e9d984fc68c62cb15408123b9db7f705f2745bfefc30b5aa2e164e6
TLSH
T1EAD09B5A72455D4CD641343224E55217E3108821754546194253F0768DD668717ABD9E
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 18a644ba613d5b4137dabc346f57eca622b6888922eaec751025ab3c0a002fd5
MD5 5eddc74c05def624cfd47ea0a7e304a5
SHA1 b5f795fcc3846bb781e66e0373fce119975b2659
SHA512 1c777d774c154e89b80817ce7344495d83eecf133c36e0ad7c60dd14d76e628697535cc3fc379ca4eeb776f3bea5096f94d0fd76a2394ecd2e52f5ca8dc0053f
TLSH
T133D09B5672455C4CD641343224E55217E3008821654546194353F0768DD668717ABD9A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 d8909982822a14043c9404363b7e0d9b601af904da64318493dd30e3ba2c52a1
MD5 e040e972ba7fc89e2943cda86aca3b5e
SHA1 cf096acb963611e6c6dace2e5290828211acaf11
SHA512 a24e82c66472932daf83ffe86f7e0515031db8775fb1e06c3d5b6e636d4ca14974716c25c5525ff7d55461cc4ac7aa6261d31bf2b1ee03f8a27e2e2e833234f1
TLSH
T1EF614291732F0791DB27EEBA17D1E4C5B1F86816A20B6A00DC843D74E086F167EE8467
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59c1fe.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59c1fe.TMP
Size 3KB
SHA256 3dd54ba58c0fbb5fe2707c25f79eed09a843c7fbd2cecb2a0b2d45c33efa02dc
MD5 c61935f6ac796281ff65a2f3ceee5fd7
SHA1 67c0524facc29ff9a3de52091a6ab54d3617a24b
SHA512 290a3a89286ba8febe10edcedac851a2837482d9781006fba6111c244f2d0edb39b02e2c36e661102db4aebbe21096cde2619ce18853f934e3b087e2cd828c77
TLSH
T1B6614291732F0791DB27EEBA17D1E4C5B1F86856A20B6A00CC843D74E086F167EE8467
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 831350f253a9b54c1d605dd9dd38cfd15c4f97a89629e22f66b578cadc5c1bf3
MD5 a2328e9df0527c38afe6bfef1730d226
SHA1 be0b6c170616d7b9860d9b07ce84edaad7f3dd9a
SHA512 3cf4476e563ce38d8022956ccdc0112b2f83d33d28266dc4fd54198abc9ce786044f55de0bc0ea5ff02fa50c91bd32ddec6fed39bfcf6f25761d3dc163f328a5
TLSH
T17441CEF7C7E4857E890156F0AB146E2BCE2C0915832C7D5AC9E4AF1B93E3871E14195F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 cb4390df5be99e22436850ed4b53324f56dc0ee8a49b2554ffc0f36e6aa63f5c
MD5 6c27e58d6b7334f4a5d0b33690295649
SHA1 5a8f003652a520cb789799f6ba524acbb5512311
SHA512 f38b6326649556289dfa58fe968dc713ab1b429f51080e540b301275780353a348b21c20a3a547dc1fbb62aeeb3fa0c2489f316db3451c4b04cca30e62109b6e
SSDEEP 192:sxRdR9bMf/fMs8CYCbAzoA8p4v/g6+WNIYEV3Y+GqpIgDpJ:sxRdnMf/fMs8CP5e/5IVYCv
TLSH
T18442C7166A28997B8CCBE21DBB56BF53E6F95432A1941E48B6FC870C04E76DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 8ecd8979c895ce7549060d2339648ae5be66f6a9e2ce5846e2d33a780b329730
MD5 ca3f00080d84f2d7380a46103b419037
SHA1 8a1c7d2dd34fc47e6d46c32dd648c64c221aa2d2
SHA512 18ce0fa9ca4462bc042e6673b0e72e9a1bf3c08be63a8b2ad0216a8b38dd471661a02f407b491be32b808ebe44738e94ec1bc1e9cc09153b98b1cb20f5cd73fb
SSDEEP 192:sxRWR9bMf/fMsCxYCbAzoA8p4v/g6+WNIYE93Y+GqpIgIJ:sxRWnMf/fMsCxP5e/5INYCs
TLSH
T11332C8066A28997B8CCBD21DFB66BF53E6F95432A1945E48B6FC870C04E76DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 88a09c5a52a764d2c30903df7ad11388d4a34ed09cf2ae903f639b405218f607
MD5 0a7641b9a363142753ad081f22985f4d
SHA1 3b6dc7f0078cc436d0348d4cc6672b81c6802c2d
SHA512 1e2dfcd622392ef18806006e9ee6a0381b3353fbb7f23f9a9d0a1ef161f810b9d625bcf4f22d364b9791ec15a5cc1812b3ea0e4c0ab8d1c2be78dbdd823de4ae
SSDEEP 192:sxRdR9bMf/fMs8xYCbAzoA8p4v/g6+WNIYE93Y+GqpIgDXJ:sxRdnMf/fMs8xP5e/5INYC1
TLSH
T12332C8066A28997B8CCBD21DFB66BF53E6F95432A1941E48B6FC870C04E76DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 2150077d04eab5a68ed2f149e56aecabb888bc996a801f2113b3e5af0ed611b4
MD5 8f6c792a63bbcf93914cb63cd8eb9bb3
SHA1 dfabf538b884d8a170a71ebb822242f9987f7ebf
SHA512 cb38fdb50a415f9709daaa4ce46b5865a7fc7d3b86a3d8395de8ae1a4336e01834148d6401137b204f5a7594c7e6606155c208cb00e0506b786006a740876d61
SSDEEP 384:40DxK6DJQD810DrfCtgQ6DRFfIQDFKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVR:40Dk6DJQD810DbWgQ6DjfIQDF8F1+Uo8
TLSH
T18FB2EB2F640DCB7F5F804A9DAC196FDB6D9802C796988D8047FE990C02C77EE92194DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

aced4565-7906-4bd3-a06c-6c818b12e7df.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\aced4565-7906-4bd3-a06c-6c818b12e7df.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 0655a3bae503e85a00237c6b85ec7a23af2d0b51f5173a7454462310c10152ce
MD5 aedcb847294e476ecec746e3a0baafc9
SHA1 f8aef07a30cec3a068a9dc517538171aa82acef9
SHA512 3838e7cb6fd617857810e3371c237e7ef600a4e815bd5e1b06e4763065a29a687002cebeee7e2679b20f05ca277e78f24adcb5462b022c20e2a566a7d287f72b
SSDEEP 768:Mrv+4UNbdq31+vkDTd+ZgtxtGeX6+qTko0u229a4vsTHeVH1Sdq:Mbsbg3UEvVTVKa4KEH1R
TLSH
T1B313BF32E8788D778DE2D784714775072FB85263C6C80B94D9DDAA0D469B5AC230FE2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 44KB
SHA256 91978b7e0b33fddcc2a7b66de1f566a0bbda000001e1a9a89424b91db8ee41ed
MD5 8d61f38bc845ee1a787655318dab7e1d
SHA1 b4b4ee8a2eab20988005c8585fa5675f6e369235
SHA512 786a2d8108d7c7be1a247ef67bdfca511db30f901cc4b5e554e5b4a15d49bcacd4b251928d1f3b21fc1cb362b280958958d44e7c20966a59e623ba56b75120fd
SSDEEP 768:XF0rv+4UNbd/3jwgZ+vkDTd+ZgtxtteX6+qTko0u229a4vsTHeVH1Sdq:WbsbV3WTvVTVKa4KEH1R
TLSH
T11213BF33E86889779DE79BC4B14B35076FB45263C6C85794DADD6A0C019B0AC230FE27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 d78ca4f824599eda2b1cbe0e0cc7b1e703daa482aa2d32aa2d965c879943e32f
MD5 8215db3aa8ae5922803117df1b674f0b
SHA1 57ae12cfd3c4bc330efc1512517fe9d8c22771a5
SHA512 18bc69dae2a93f105b3d3147005401e9f69e9cdc2c516fc6b0f474370a4d8490ea1b698d86f3b9ca428dee52b7c757881e6daafc99e8d1028ad95cf9d6c8b8a9
SSDEEP 768:XFQg3Ywgh+vkDTd+ZgtxtieX6+qTko0u229a4vsTHJ0nwy:qg3pyvVTVKa4Kol
TLSH
T188F2BE73EC648C7B9DB6DBC4B61B36079EF54273DAC86690A6DDA90C00571AC130BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 5b8c08b0e713fee80d8b978ee2ec9d6c979f89b43f10f68e8db3fa8e5433e201
MD5 d2a71c863493de459d0b3f17b319c549
SHA1 cc65811629b3992cd1ee57247800c752a9b07ef8
SHA512 8782cb9f27d61d90d7582b698b0a5cab0958101553e322eff10686d4e99763c22e4bf8392b80410643535d0b583f3d5427c3ca56e74c2ff2c1515693ed21a5c5
SSDEEP 768:frv+4UNbdq3IpvkDTd+ZgtxtGeX6+qTko0u229a4vsTHeVH1Sdq:fbsbg3AEvVTVKa4KEH1R
TLSH
T19813BF32E8788D778DE39784714775072FB85263C6C80B94D9DD6A0D469B5AC230FE2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 f5d87ddb2889f4e7557578ec757e64be7e9d6d4bd819e26be569d5d3e42277db
MD5 30ed62f72dc1c2e66590e57f4d1c516c
SHA1 acbf031104edc9fb3de28a339d037559cfb8bd06
SHA512 3fcaf68516d6b91197a99ac69d56ffab4a850a1d5bc765cb5be507bc56db078797405022f106d96bb7f88706edb88a5d13ea62c89c927ba97cf0ca30c8ebb13a
SSDEEP 768:prv+4UNbdG31VXqDTd+ZgtYeX6+qTko0u229a4vsDweVH1SdW:pbsbU330vVTVKa41EH1h
TLSH
T17503CF32E8648D778DE79784714B75473EB95163CBC80B80D9ED6B0D069B5AC230BE2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

60d59203-722b-419c-b690-c83e4278e9fc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\60d59203-722b-419c-b690-c83e4278e9fc.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download