969488e116dbaff9e49be825ce69dedfe3812a9f7aa0d72ed72d16e0f178a50c

Analysis

max time kernel
148s
max time network
152s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/09/2026, 12:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
popup.html
Size 3KB
Sample260910-pc1ycabq6x
SHA256 969488e116dbaff9e49be825ce69dedfe3812a9f7aa0d72ed72d16e0f178a50c
MD5 4a8c5202f8b2eee20cb76dec03e114ff
SHA1 e1a01f008599d834ad4550a3bd1aecaa38995b54
SHA512 f0120c743b6d56b592cb537b9eebdffe55d9a493214a2edf18073b9818ab037e0ae594f7f1a1babb6f3e2e236351c513160dc773483e38b7d0a6512f5494a6b9
TLSH
T1FE81B02AD644114678B792749B6347B7F9D44603C243822836FC72A24F76D18EA67F48
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5332	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134335159346794590"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3989226554-2204910950-1522900112-1000\{C85AB7E5-61D2-4F1D-8F41-E9D8251E09A5}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3948	msedge.exe
3948	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2404	msedge.exe
2404	msedge.exe
2404	msedge.exe
2404	msedge.exe
2404	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
2404	msedge.exe
2404	msedge.exe
2404	msedge.exe
2404	msedge.exe
2404	msedge.exe
2404	msedge.exe
2404	msedge.exe
2404	msedge.exe
2404	msedge.exe
2404	msedge.exe
2404	msedge.exe
2404	msedge.exe
2404	msedge.exe
2404	msedge.exe
2404	msedge.exe
2404	msedge.exe
2404	msedge.exe
2404	msedge.exe
2404	msedge.exe
2404	msedge.exe
2404	msedge.exe
2404	msedge.exe
2404	msedge.exe
2404	msedge.exe
2404	msedge.exe
2404	msedge.exe
2404	msedge.exe
2404	msedge.exe
2404	msedge.exe
2404	msedge.exe
2404	msedge.exe
2404	msedge.exe
2404	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
2404	msedge.exe
2404	msedge.exe
2404	msedge.exe
2404	msedge.exe
2404	msedge.exe
2404	msedge.exe
2404	msedge.exe
2404	msedge.exe
2404	msedge.exe
2404	msedge.exe
2404	msedge.exe
2404	msedge.exe
2404	msedge.exe
2404	msedge.exe
2404	msedge.exe
2404	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2404 wrote to memory of 5248	2404	msedge.exe	89
PID 2404 wrote to memory of 4568	2404	msedge.exe	90
PID 2404 wrote to memory of 5332	2404	msedge.exe	92
PID 2404 wrote to memory of 4568	2404	msedge.exe	90
PID 2404 wrote to memory of 4568	2404	msedge.exe	90
PID 2404 wrote to memory of 5720	2404	msedge.exe	93
PID 2404 wrote to memory of 5720	2404	msedge.exe	93
PID 2404 wrote to memory of 1216	2404	msedge.exe	94
PID 2404 wrote to memory of 1216	2404	msedge.exe	94
PID 2404 wrote to memory of 1216	2404	msedge.exe	94
PID 2404 wrote to memory of 2948	2404	msedge.exe	95
PID 2404 wrote to memory of 2948	2404	msedge.exe	95
PID 2404 wrote to memory of 2948	2404	msedge.exe	95
PID 2404 wrote to memory of 2580	2404	msedge.exe	96
PID 2404 wrote to memory of 2580	2404	msedge.exe	96
PID 2404 wrote to memory of 2580	2404	msedge.exe	96
PID 2404 wrote to memory of 4776	2404	msedge.exe	97
PID 2404 wrote to memory of 4776	2404	msedge.exe	97
PID 2404 wrote to memory of 4776	2404	msedge.exe	97
PID 2404 wrote to memory of 6040	2404	msedge.exe	99
PID 2404 wrote to memory of 3920	2404	msedge.exe	100
PID 2404 wrote to memory of 6040	2404	msedge.exe	99
PID 2404 wrote to memory of 3920	2404	msedge.exe	100
PID 2404 wrote to memory of 5464	2404	msedge.exe	102
PID 2404 wrote to memory of 3220	2404	msedge.exe	106
PID 2404 wrote to memory of 3388	2404	msedge.exe	107
PID 2404 wrote to memory of 6064	2404	msedge.exe	108
PID 2404 wrote to memory of 4592	2404	msedge.exe	109
PID 2404 wrote to memory of 4592	2404	msedge.exe	109
PID 2404 wrote to memory of 3948	2404	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\popup.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2c0,0x7ffe4fa6c188,0x7ffe4fa6c194,0x7ffe4fa6c1a0
  2⤵
  PID:5248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1576,i,4122640394433977568,16142323691681060437,262144 --field-trial-handle=2884,i,13266326535916206386,3011176812798040755,262144 --variations-seed-version --mojo-platform-channel-handle=2880 /prefetch:2
  2⤵
  PID:4568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1852,i,9748537773895465343,2765895973134495568,524288 --field-trial-handle=2884,i,13266326535916206386,3011176812798040755,262144 --variations-seed-version --mojo-platform-channel-handle=2912 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2388,i,3730463752556281891,10467900158273944609,524288 --field-trial-handle=2884,i,13266326535916206386,3011176812798040755,262144 --variations-seed-version --mojo-platform-channel-handle=3232 /prefetch:13
  2⤵
  PID:5720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3632,i,14358830127650233239,14025616026861018831,2097152 --field-trial-handle=2884,i,13266326535916206386,3011176812798040755,262144 --variations-seed-version --mojo-platform-channel-handle=3640 /prefetch:1
  2⤵
  PID:1216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3628,i,13946975037738969729,8750628798768818851,2097152 --field-trial-handle=2884,i,13266326535916206386,3011176812798040755,262144 --variations-seed-version --mojo-platform-channel-handle=3660 /prefetch:1
  2⤵
  PID:2948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4348,i,4355683308719257117,13511621934745273444,2097152 --field-trial-handle=2884,i,13266326535916206386,3011176812798040755,262144 --variations-seed-version --mojo-platform-channel-handle=4392 /prefetch:1
  2⤵
  PID:2580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4388,i,8742043415784120149,13425987380093156608,2097152 --field-trial-handle=2884,i,13266326535916206386,3011176812798040755,262144 --variations-seed-version --mojo-platform-channel-handle=4432 /prefetch:9
  2⤵
  PID:4776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5416,i,9443596137563221373,8836179351359085106,524288 --field-trial-handle=2884,i,13266326535916206386,3011176812798040755,262144 --variations-seed-version --mojo-platform-channel-handle=5372 /prefetch:14
  2⤵
  PID:6040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3812,i,3202678355171741442,2700579208694631721,524288 --field-trial-handle=2884,i,13266326535916206386,3011176812798040755,262144 --variations-seed-version --mojo-platform-channel-handle=5324 /prefetch:14
  2⤵
  PID:3920
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5984,i,17696721839226559816,10366015985210599876,524288 --field-trial-handle=2884,i,13266326535916206386,3011176812798040755,262144 --variations-seed-version --mojo-platform-channel-handle=6016 /prefetch:14
  2⤵
  PID:2444
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5984,i,17696721839226559816,10366015985210599876,524288 --field-trial-handle=2884,i,13266326535916206386,3011176812798040755,262144 --variations-seed-version --mojo-platform-channel-handle=6016 /prefetch:14
  2⤵
  PID:5464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4328,i,8160160050289201628,5034859683936331715,524288 --field-trial-handle=2884,i,13266326535916206386,3011176812798040755,262144 --variations-seed-version --mojo-platform-channel-handle=5364 /prefetch:14
  2⤵
  PID:3220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5404,i,5452763773623465520,16756228827111685055,524288 --field-trial-handle=2884,i,13266326535916206386,3011176812798040755,262144 --variations-seed-version --mojo-platform-channel-handle=6400 /prefetch:14
  2⤵
  PID:3388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5368,i,14063120490379263068,9092574972830995334,524288 --field-trial-handle=2884,i,13266326535916206386,3011176812798040755,262144 --variations-seed-version --mojo-platform-channel-handle=6632 /prefetch:14
  2⤵
  PID:6064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5612,i,16323844148871106354,16254456158986339985,524288 --field-trial-handle=2884,i,13266326535916206386,3011176812798040755,262144 --variations-seed-version --mojo-platform-channel-handle=5692 /prefetch:14
  2⤵
  PID:4592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6492,i,14156536926757171837,1163306772976540770,262144 --field-trial-handle=2884,i,13266326535916206386,3011176812798040755,262144 --variations-seed-version --mojo-platform-channel-handle=6508 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3948

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5180

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3672

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7f7f7efafb9f87082470af84df3b906033b9d533fb7a188458a4e181362f2170
MD5 8af1f60999c332d8cf9a392cd968a81c
SHA1 93834a1f070ff24041a0deb17d95d868998c98ba
SHA512 95d5c6b0fed3c3dce459178eafa2e9fa13b06caf50a5b294d66ecf16bf91357eccebec57e01d50e054232862c252fc80f7300e865318ec24078f9288a88c63d4
TLSH
T17BD02B206A444A4CCDC0B03064A2EA18E2104135680013C44001B06988901830B970DF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 5e34bc4625bf22507150f49d8c28444bda8222ea36c2a7d431bbdaae5c134a9d
MD5 e1ae04b3e73ad5ac4854b3b71e22d4d3
SHA1 221461b4f2d9e84e2f881b5a79edfef3705178db
SHA512 58529610d3f5dd7778bff3b81dd8abd9d79702eff78583d0294f3999089de0bbf84f0abad703269c0988835522b1d8d48e9f3c65472a409c5868fc3547c3fb1b
TLSH
T138D02B206A54494CCDC0B03464A3EA18E2004135140013C44001F07988901830B970CB
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 f5d74aeb6941ba9a42f985bd9fdeaf2dbf50fd2aaab2bdc99a0c6b5f7c88ec79
MD5 b6f07fa6e18d19d3e18eb771326b7af8
SHA1 92bdd5ec0a87dae50fed0621a03d9a2f095044df
SHA512 cb94b41f5d4ccc8697cae207c7238d093b076d7435e714720649e5f33dd6f5195de9f335a6734a3d8e2d8e88135ccb893a5f590cc9170f45c17c388b87e0e6cc
TLSH
T1FC512C588BA65BD3F36058F1D5EA80ADBBF0E0E900076F1A53E13DF8490AF4920D21D3
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe596c2d.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe596c2d.TMP
Size 2KB
SHA256 cb82d568da40a93b3705d1b92c669e0ace8d299309158175b3a898634c3e726f
MD5 f22d7009706419e116405682ff606862
SHA1 f427db90f154bcbe22e257f9146476ae7f39b823
SHA512 0bc2026be4e6054859d9f2f02538cfc0afc083c5592c46939856b47d04891e6b4cbaf2a98691e17b512a6ac14c2b2fc0f5db5c344cb36abed67e9746aeb69e63
TLSH
T10F512C588BA65BD3F36058F1D5EA80ADBBE0E0E900076F1A53E13DF8490AF0920D31D3
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1bb56cd2-ec80-4215-a42e-9e5d9e19a5c1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\1bb56cd2-ec80-4215-a42e-9e5d9e19a5c1.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 6f8476a4495e7e9e7bc4f63b35963c812faa93177b6f0027795bfc3bde8c1f0d
MD5 95575ae8d57214ce00d37451748b5899
SHA1 69cbe6e7eac2dd9a09578a5f847f979ffe14b2aa
SHA512 b93c25fdeed7b13b633cc2f4c8f5695d2dcc02140fccc97be8447d1956593941a07a4dc6a66f7ddf23262dc188723636673fe4de34bdf6472ae3266580fe4304
TLSH
T1FA31BCF387F4956E8A0196F0AA18AE2FCE2D0515431C7C6AC5E0AE2793E3472E041A5F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 cd308c490bd4044d5d7e236f9be6f73c04f61d90a958b368c9bd52da41a6d15d
MD5 738abc70c28cb8b508b1d9b17eae6319
SHA1 3d747bbf1a549b653a29e07d80afb9a65a44042f
SHA512 fe8370c6e06b32966985fe9840184a137f412758ed58b96b0d189ab6c6bcd31097937149197d3a9889e91650a4ab82a728561ef547ed5f49bf013651a4fa2d8c
SSDEEP 192:sxRaR7bL/fRskDHm2Sm7aeJzoD8p42/g6+WNIY3B2qsGYIgIJ:sxRaVL/fRsW2kn/5IAWs
TLSH
T18332B716AD28A97B8CC7D21DFA65BF53D6F9503261D02E58B7FC860C04E6ADD520780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 258cac385b37ea3f7db04171b20633d5408685e4b776be473df1ac74b01d8b90
MD5 4fef9deabab5b466fadc46a3be9b88cf
SHA1 19a5827bc729890a2bea888d57ae1d7c521ce8db
SHA512 dd14336b785a01868f3a66729bf3570d966302b3cbae8440abbf2abcc6cce05b07b584eb4f47ea9d559b452d397408787fc5459fb65d70119c09a5ae3e69c23e
SSDEEP 192:sxRdR7bL/fRsl6Hm2Sm7aeJzoD8p42/g6+WNIY3pEsGYIgDbJ:sxRdVL/fRsc2kn/5IOx
TLSH
T1B832C716A928A97B8CC7E21DBB55BF53E7F9503261D02F48B7FC860C04E6ADD520780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 4eb99374e3b5341898273fc8c2e8bdab6e6a6e0fcb4f7981ee06bb6d5d6558df
MD5 f967ab41569b1b666a597d893bbefa31
SHA1 cd5bc05036c9791820e212d3f7c526b8b85c0489
SHA512 dd00bee702fed1e88ee3be0883b18f3383b81664d2ff5bd2bd14f5fcc3963776f36809271c5115430029f39cd9f863fc7cefdb93cf756c8035f81523844a6e4b
SSDEEP 192:sxRdR7bL/fRslDHm2Sm7aeJzoD8p42/g6+WNIY3B2qsGYIgDVJ:sxRdVL/fRsN2kn/5IAWz
TLSH
T18A32B716A928A97B8CCBD21DFB65BF53D6F9503261D02E58B7FC860C04E66DD520780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 3173bc7107c00e6f7a73906108cfb6b44fc33519f4aa20724ee8461acb90d072
MD5 2daa5a37689676050ecd5e3fbd1d4b02
SHA1 e4d86bfa98c24941e2724c03667af4d3f91fe175
SHA512 645ca379841135a62114871c9660bd9a6b6bb1b1077e8618ebe0e0b83ee75252a920a59d269eedb942424c1ae98e839f6bb67958a9eb9ebb96bdd6f7ab703622
SSDEEP 384:GMgEbt2fCtg0+FfKsKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVKO9W+RTUroOL1:GTEbtkWg0CfKs8F1+UoAYDCx9Tuqh0VN
TLSH
T1A2B2DA2F600DCB7E9F804AADAC59AFD76D5802C79B588D4047FE990C02C77FA911A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 ae32743a48dacb946566a1babc8608274d9b115d0b7305c4cbed8034dbe2e7b3
MD5 0df1ee2c0870de4624975fab1e8d37b9
SHA1 1eae27bf3fe2f29beb6f6b547a89f02e5b5f9034
SHA512 59a8d2320af1b494efac8c299b694d6faf69a4d1559ed91d7841f206808b099b7c404b4162960af095373fe8599194aa5011ada0a35e2a26d99e8829b60589f9
SSDEEP 96:KR1i7PF/DnWrw+gXnK4mgpnct1o7zsHEFw0Oy2UWS/fg8UK4Rg2Uc00/uUJOtuKj:C1i7PF/DWrwfX9mgpct1o7zsHEFw0OyT
TLSH
T117912F92B03A1240387EA91C85B4C95F968274F33469E52B3FA825A14F67E074EFD8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 ed4be576967405d6e865407c601c1c47860b4e63e8d553787b7da8a388542b46
MD5 a67a2653ea324ba0068e4bb81b51c5cf
SHA1 d93e292b0c20c06308d36b4adee128bc2078a973
SHA512 7df493592224480a90cd188bb0bed65def4357eb5e449e75301f9c8472bae4dea33dce076b133abae3aa947191874b7afddf3e538a495e210e7d2f241a92f6dc
SSDEEP 768:2M3rCa0Hc+wfZO8f466WfY666vShCQRjMgsY8:2M3WZwfXfr6WfL66vSfMgT8
TLSH
T105F2AFB1EC645D739CE6D39877466B12BEF49273C9C89A48D5DD4B0D00C379E270B82A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 b98710c5198a07ac407575a6008407fbf83a37dac036c91831ed9ccc020cd106
MD5 9033b3a3b47ecaf5380d55af5c2ea7a9
SHA1 c564a1ce8daf095061ce3bc7b47a62aca221fb60
SHA512 ad2f4f61a67259e81f271f2ad94fabf621debd1c61819ed129f5107294a8f8cc691dba9cf692a28a4a336f920f12256d5c844634698ad3c700ad7451da0efd09
SSDEEP 768:vrv+4UNbd43Ilc+wfZO8f466WfY66zvShCQsj2bwWV:vbsbO3cwfXfr6WfL6zvSo0wO
TLSH
T15903CF72E86859339EE782487646BB53BEB99263C8C54784DACD0B0D01C369F370FC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 2af943745dfc2b212e043fc6141eab371fdfb36fb6428d43232dc40d25c05377
MD5 b85008a68ea6a72596f759403dd38c93
SHA1 5ac2a70762fe7ec12b2f461a195909d9212c15c2
SHA512 c2c6b72bf1d04c05e9348d527f6de5f745fe29ebe6b15f908821ca848fd9d7b00a49a0ec2f5aea4b24d9746da33b721e3f951df0bb66fc2af1b78fab9581ed0b
SSDEEP 768:zrv+4UNbd/3sCa5Hc+wfZO8f466WfY66rvShCQRjfd:zbsbh3p6wfXfr6WfL6rvSfF
TLSH
T19C03CF71E8785A739DE68258B6467B53BFA85263C8C84788D9DD4B0D01C36EE270FC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 b5b01233a87b2f73884be74a8191882b98ccb0e1a8fd85c5bfcb3587dc51e793
MD5 e1b0ffc88a5cd5fe456bd6d5fb5f71ba
SHA1 5a2679f1f88baf7cbc82d06f4deabe38a8191f69
SHA512 c9352ded28224fa4a468684dc63eb9a44312e8ed689654da86f4989f53587d5f55fe538b52edd13888353d834909973f036af32aa94b3bc2c50359bbfc47fc8b
SSDEEP 768:0FQ13XwgjCa0Hc+wfZO8f466WfY66avShCQRjMgsY8:X130ZwfXfr6WfL6avSfMgT8
TLSH
T18DF2AFB2DC949977DDE68788BB466712FEF15273C8C89684D6DD8A0D00833DE270BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 737db00a3df1d7e2e9bcf0bb4d0cc4e22111e5aa257c30dbf767d225d68f5b74
MD5 353bfa030c3f18c6484a0a567cb36bd9
SHA1 04fde82f3415fbb08630605ad140ace7bdaa0181
SHA512 a8333e6b22e5dfc05806ae104666f381a03f10d200e49e84cace79b70ba3d6be7d4f219fbd637f86e669b01519a26724c378406a7301be9ebb70ca0d5d89d9fd
SSDEEP 768:pM34Ca0Hc+wfZO8f466WfY666vShCQRjMgsY8:pM3VZwfXfr6WfL66vSfMgT8
TLSH
T15AF2BFB1EC605D739CE693587B466B12BEF49273C9C85A48D9DD4B0D00C379E270B82A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 bb3e594af67df65db434c88acab3b771e0a99900c1747bd25230dcf206f07276
MD5 43d377a1cbd26931c3af9522242d68fe
SHA1 8a286d8c47ebdda2ce0ec0282750f2159705cbe1
SHA512 49f75284d45a07e854ba5ec6e5cdc78a6c7ed0d9994b9ea691ba631b0ed7a8dc4da5deb85b2b602bb3c71a431504afbfbafae06979705afc222b06fec22887a9
SSDEEP 768:Rrv+4UNbd43MUkc+wfZO8f466xvShCQtS2bwWV:RbsbO3M5wfXfr6xvSO0wO
TLSH
T13903CF72E86859339EE782487646BB63BEB85273C8C54784D6DD4B0D018369F370BC67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download