f6d8b6c7549caec0b1dd595abba57e14ccff0b024d2545839e77a8dad30a3177

Analysis

max time kernel
150s
max time network
153s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260618-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
28/06/2026, 18:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Templates/main boxes.html
Size 52KB
Sample260628-wt7wjsbs2v
SHA256 f6d8b6c7549caec0b1dd595abba57e14ccff0b024d2545839e77a8dad30a3177
MD5 a8b989c10ecee9a5823c72f08d14c0f9
SHA1 5c09f7e4d93b82397f886bf0594b827ad911537c
SHA512 fb822bb25cb6550719dabfdf8c334e6729a64e6d14fffd320ebaf61d5b8c99a84047163d709e6b4b0c657ad0bc7726b91097958375e5f3852e9b94f30c33a7f7
SSDEEP 384:pTc4FZX/q8VDF58UVJvdOKbTCpWIk+QqWPV3ZAp0:pTcaq8+UVJdbTCpWIk+QqWPVi0
TLSH
T15533CA2599C1A17750B385C58A21BFAAFFE2804BD71B8A0432FD2B9B5FB7E84DC03515
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5196	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134271441231920506"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-537605601-1362463912-856654178-1000\{6FFD8CFF-352F-42FD-B0DB-97A3692BBEAA}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
6128	msedge.exe
6128	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 784 wrote to memory of 1196	784	msedge.exe	89
PID 784 wrote to memory of 3032	784	msedge.exe	90
PID 784 wrote to memory of 5196	784	msedge.exe	91
PID 784 wrote to memory of 3032	784	msedge.exe	90
PID 784 wrote to memory of 3032	784	msedge.exe	90
PID 784 wrote to memory of 4592	784	msedge.exe	92
PID 784 wrote to memory of 4592	784	msedge.exe	92
PID 784 wrote to memory of 6112	784	msedge.exe	94
PID 784 wrote to memory of 2212	784	msedge.exe	95
PID 784 wrote to memory of 6112	784	msedge.exe	94
PID 784 wrote to memory of 6112	784	msedge.exe	94
PID 784 wrote to memory of 2212	784	msedge.exe	95
PID 784 wrote to memory of 2212	784	msedge.exe	95
PID 784 wrote to memory of 876	784	msedge.exe	96
PID 784 wrote to memory of 2528	784	msedge.exe	97
PID 784 wrote to memory of 876	784	msedge.exe	96
PID 784 wrote to memory of 876	784	msedge.exe	96
PID 784 wrote to memory of 2528	784	msedge.exe	97
PID 784 wrote to memory of 2528	784	msedge.exe	97
PID 784 wrote to memory of 1720	784	msedge.exe	99
PID 784 wrote to memory of 1420	784	msedge.exe	100
PID 784 wrote to memory of 1720	784	msedge.exe	99
PID 784 wrote to memory of 1420	784	msedge.exe	100
PID 784 wrote to memory of 1880	784	msedge.exe	102
PID 784 wrote to memory of 5592	784	msedge.exe	106
PID 784 wrote to memory of 5348	784	msedge.exe	107
PID 784 wrote to memory of 5588	784	msedge.exe	108
PID 784 wrote to memory of 2028	784	msedge.exe	109
PID 784 wrote to memory of 2028	784	msedge.exe	109
PID 784 wrote to memory of 6128	784	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\Templates\main boxes.html
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ff9e8f6c188,0x7ff9e8f6c194,0x7ff9e8f6c1a0
  2⤵
  PID:1196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1552,i,4825363381651621377,6709543712305697516,262144 --field-trial-handle=2332,i,689200026962710611,1412117806216223049,262144 --variations-seed-version --mojo-platform-channel-handle=2328 /prefetch:2
  2⤵
  PID:3032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1828,i,12615125436588368583,5711900558381950568,524288 --field-trial-handle=2332,i,689200026962710611,1412117806216223049,262144 --variations-seed-version --mojo-platform-channel-handle=2556 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2260,i,17872158998834760567,13421301176352233925,524288 --field-trial-handle=2332,i,689200026962710611,1412117806216223049,262144 --variations-seed-version --mojo-platform-channel-handle=2492 /prefetch:13
  2⤵
  PID:4592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3152,i,10019982031169496830,10243002056433510071,2097152 --field-trial-handle=2332,i,689200026962710611,1412117806216223049,262144 --variations-seed-version --mojo-platform-channel-handle=3700 /prefetch:1
  2⤵
  PID:6112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3580,i,15934449457275279252,15612731511998668668,2097152 --field-trial-handle=2332,i,689200026962710611,1412117806216223049,262144 --variations-seed-version --mojo-platform-channel-handle=3696 /prefetch:1
  2⤵
  PID:2212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4288,i,13429319918479301279,11592535427851207988,2097152 --field-trial-handle=2332,i,689200026962710611,1412117806216223049,262144 --variations-seed-version --mojo-platform-channel-handle=5004 /prefetch:9
  2⤵
  PID:876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4276,i,9500642510196438677,100872013217392108,2097152 --field-trial-handle=2332,i,689200026962710611,1412117806216223049,262144 --variations-seed-version --mojo-platform-channel-handle=4840 /prefetch:1
  2⤵
  PID:2528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4796,i,13584449274193649715,1948444563863207965,524288 --field-trial-handle=2332,i,689200026962710611,1412117806216223049,262144 --variations-seed-version --mojo-platform-channel-handle=5412 /prefetch:14
  2⤵
  PID:1720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5404,i,4668663741165902716,11779857015824257050,524288 --field-trial-handle=2332,i,689200026962710611,1412117806216223049,262144 --variations-seed-version --mojo-platform-channel-handle=3924 /prefetch:14
  2⤵
  PID:1420
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5972,i,15892871478371490068,8530655829096015298,524288 --field-trial-handle=2332,i,689200026962710611,1412117806216223049,262144 --variations-seed-version --mojo-platform-channel-handle=5988 /prefetch:14
  2⤵
  PID:5660
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5972,i,15892871478371490068,8530655829096015298,524288 --field-trial-handle=2332,i,689200026962710611,1412117806216223049,262144 --variations-seed-version --mojo-platform-channel-handle=5988 /prefetch:14
  2⤵
  PID:1880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4284,i,9195902466920601154,3410234795303136880,524288 --field-trial-handle=2332,i,689200026962710611,1412117806216223049,262144 --variations-seed-version --mojo-platform-channel-handle=1544 /prefetch:14
  2⤵
  PID:5592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5492,i,9199300491125030014,2211616301423883270,524288 --field-trial-handle=2332,i,689200026962710611,1412117806216223049,262144 --variations-seed-version --mojo-platform-channel-handle=4564 /prefetch:14
  2⤵
  PID:5348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5112,i,7366269445974421748,6852826662666939940,524288 --field-trial-handle=2332,i,689200026962710611,1412117806216223049,262144 --variations-seed-version --mojo-platform-channel-handle=6532 /prefetch:14
  2⤵
  PID:5588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5368,i,5682218794287776844,14903567322233952203,524288 --field-trial-handle=2332,i,689200026962710611,1412117806216223049,262144 --variations-seed-version --mojo-platform-channel-handle=5364 /prefetch:14
  2⤵
  PID:2028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5380,i,11219908900708946118,12051347629796706802,262144 --field-trial-handle=2332,i,689200026962710611,1412117806216223049,262144 --variations-seed-version --mojo-platform-channel-handle=3696 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:6128

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5256

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:6084

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ff19e848916f9346514f95113e3d80cd569935b36d785719b19d90f9f740fbd6
MD5 5ab41182d14eb22e7143c63d2e18b77b
SHA1 ca8c747e1a5e38b0f0a08b492fcea6d3a75865c2
SHA512 bbecb67f89826ee2bd219f14bbc8ca87fb260f8a22bd2d52b6ccdb72d47a4b58eeb897a42a6e591bd4e75fe870419162172353d5d3ec7f1fb0fbc7b5dc6adcf1
TLSH
T1AED080757B467B11D58F0472D424E271A737455135D296057170C10E55602D1FFCA0B7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 5f46172781024fe58b7a7d87a406b81679d17de445e9e90110d33f5747ecc226
MD5 08a5ef0e8eb4590a7f0e6f821698071e
SHA1 1b756aceae48cf2649d310d7ab4883595c2e5bde
SHA512 95c72989df00c3caf1230ca41b6dcbc24f8a592c45202f7b16044b8d574fe569d4db8614652b0d1695d3fe1d795b07ea334de5b4fa9dcbb9d27de40a55592586
TLSH
T155D080757B467A11D58F0476D424E271A737455125D296057170C10E55602D1FFC90A7
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 10626c35de8c9d74478e154928fb53411fc296c1a90d808af534bfb7e809935c
MD5 8eb3b7006f25940830996bfa502f277a
SHA1 590a0736b9ca577a5b6b28653135c4d8b99fe46c
SHA512 f5b14746d3d916c0b53ee10b6543287414c4454fa554c8167280bf75179136633b682264623f3536c260bef530adfdfe0e7cd4103510ce6665e1e2b7f6642b91
TLSH
T1AE612AE5704B0426EBE045B62CE228D337F4189CBBC71DED06AE77799D0374C62C1016
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

99a0ecc9-b31f-49fb-9952-d3d8eb842704.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\99a0ecc9-b31f-49fb-9952-d3d8eb842704.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 a9b6b671a985373fcc77d687879aecd64e1e92ef171d02cd48821d0b1a5f6509
MD5 bf8d623c5529ea75e2920fe5f9e67e00
SHA1 ec29d926ed5b544d61e9439bbf37d1ce4603e7b3
SHA512 7255e6a2483f56429dfe2934451dc024fdb09df02794bada1cd2d2e338196d2a437ac451ea7f279e4548c7bb43f5a65563f4cebf7cf7a1cae40181a0500a101d
TLSH
T1C1417BF7C3E4866E8D0196F0BB186E2BCE2D0915432C3D5AC9E4AF5B93E2471E10195F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 f3e2574969add64ae879b2545c986af5397d9bb446c05bfadbc4406a39faeb87
MD5 ce2d907e968074bde0db3658328bfc52
SHA1 39706be656955d81a33396cf455c108ccc35bbed
SHA512 55072924eff2580718e8f0f61a8201fd932a80bcf0fad0a6dd8f55df1534cb908af8098b74649449730da3243d6b41823200865314cc0b70dbff7dfeb4321289
SSDEEP 192:sxRCRHyM/jK1Ml8wFI/fosgjXzMdybyzoA8p46/g6+WNIY4pjFGGIgIJ:sxRCbbI/fosgjXIA//5Ins
TLSH
T15552C8166A385977CCDBD309FA517F53D6F81573A2901E44AAFC9A0C00E7AED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 f947b65c929515f1fef5d972ab346b4397460bb24237a7c7425abfbb1122d4ff
MD5 c57f2d0a75bda212353f84d86a6f29eb
SHA1 3749f43ec4449f6360c6bd79c84dfcac845487d8
SHA512 90b5a9cfe7d09747eb294dca79955576571229d5f1ea70d733c1c8186c5ca630d2a711065638af4016597824265321b54d5a2372e26620a76ee1b75a029de561
SSDEEP 192:sxR5RHyM/jK1Ml8UQgyFI/fosojPzMdybyzoA8pe6/g6+WNIY4prFGGIgDGJ:sxR5bqg4I/fosojPIAZ/5IPW
TLSH
T1FF62B8166A385977CCDBD209F6527F53D6F85573A2911E44AAFCCA0C00E7ADD221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 6448d2874251f2a5c3cdac6c9596a6db3112c2c1effb7973a126d49decef620c
MD5 75b1dfe3cf40820063685f74e7aeef54
SHA1 0e2a4f9995cbddbe83ca63b85ad03f777b50b14c
SHA512 32a8e0b2700f86a97df15638a529e60aa3ff2881ccc3b0489bc1b5f713bf53abc829de663041eeb02b96b75d85f497396ce991118367fd7c1ced3816231b0f2b
SSDEEP 192:sxR5RHyM/jK1Ml8wFI/fosojXzMdybyzoA8p46/g6+WNIY4pjFGGIgDUJ:sxR5bbI/fosojXIA//5Ins
TLSH
T1D152D9166A385977CCDBD309FA517F53D6F85573A2901E44AAFC9A0C00E7AED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 e534d79a720135b2cd884f7d4ca38d771ef09c726f0dc495d9341a58487122c5
MD5 4da6280e6e8be7f634946eb54810907c
SHA1 d83bc697cfa9ad56d7d6dc5dce8755f8e3fe6829
SHA512 5b948c8cf492539d8516c8277c4781bede6c72c9726b55a50bce39d7aaa903437586f1f910ce32850e8c4ea4417f6a29cca584bb095dae602a4b9a213271ec47
SSDEEP 768:NmymipWgvHfSv8F1+UoAYDCx9Tuqh0VfUC9xbog/OV1LxgLroRLPu2Dl:NmymipWgvHfSvu1ja8Ng4RLPBJ
TLSH
T109C2FC3B640CC77E4F845EADEC29AE976DD801CB9B588D5447EA880C03C67FB911A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 2a38506909a2ad2589974275861656ed0887b496b312c599a5e21a965bfa8e9d
MD5 003d2cbbf2131fe37dad52959ca8c071
SHA1 fe53dff6ef6e9be09eda575a45d1e079243546bc
SHA512 3561fd0698a07ee9affe4680fbf0a3966fe958abd7ec5566f32714b6451da8e2bbf2cddffd266109f7495b88cc97b151e20ea45776761f39b4ea926e0d1ece6c
SSDEEP 96:KDr4J9TNJTI52iq1TKSKqvTubj+xJwam8KvqY0gKhiSU:C73gvU
TLSH
T1C591D310397A2281397F250885A4A61F768570F330AAE52B3BBD24F51E67E019EFD9CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

9cfd6b11-9560-45cb-883e-3a42f5b931e7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\9cfd6b11-9560-45cb-883e-3a42f5b931e7.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 0cc83811afea7edea5c4f9e408c0065904423f722f39fa9b7193063f445f7246
MD5 802ba746dd556b370980d08ee83ab7a2
SHA1 dc1ad547e9bd42349d12ed36b553134c83a01113
SHA512 5eeb21aeed6cedece7f68b4c0fe22555b2779f1cf87cfb275e5f0168e45ebda5735300b13dfd082c30afb251c1c2d436ae7915dd52440d588af31b3e25cbb3b4
SSDEEP 768:Yj+9O3bAWfydfd+fEDA7NpespIRM0UmkTziwjgzSNwn12bfZUq:H9O3blfuf0fEmQsZ0UmYtKyZUq
TLSH
T132F2B031D8244EA34DF6DB897947374BAFE0026392C42A4489DD9F0D45C779C531BE2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 5fad13ccd131c53be6369d87024a24fa2fd1c0cac0f8131a574da283eb2d5bd1
MD5 bba18271806fa357011a264b5827512e
SHA1 b98eda252d32a7e083eedd130bd2d813dd21d3c0
SHA512 d2b9cf94d531109db08581cbcaa0c24495808f9bdb3ed745a8b2350b06d9aa49e2cd847fecff4eb4d1bea3dc55b5152b8c4245102a50304da2166f5912d35f5d
SSDEEP 768:yj+9O3A9Wfydfd+fEDA7NpespIRM0UmkTziwjgzSNwn12bfZUq:B9O3AUfuf0fEmQsZ0UmYtKyZUq
TLSH
T1A2F2BF32D8244EA34DF6DB897A47374BAFE0026392C42A4489DD9F0D45C769C531BE2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 444293ce348256151995c5b4d50d7d831ff37f19f19d1089b1b06dcdd99d6760
MD5 82be8b9a0007ed4fb71c56ac069827b0
SHA1 851939cdbf2a22ca443dfac86e700607f408d334
SHA512 4b473b73cdaaf401068d6483263b17a77501d1e3d8ee38cae99376dd2d6f5f544bc8c6f4f0a0b628193210af9991dc4170811eb733dd04238b1bf19723a1171f
SSDEEP 768:3jaeqD4MlshiLdMmf3DqfydfdqA7NpespIRM0UmkTziwjgzG6nApXLPQTU:3qcjhIdMo3WfufRQsZ0UmYinKXD
TLSH
T12003C03698605EB78CB7EA8A264376576FB00253C2C43BC8CCDD6E0D42936DD570796B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 0f59dfb5f2575b2e794c4d46467f33907fdf888032ea27fa49fc456e07385bd5
MD5 c9a441e803333a906e3a940aa58ab831
SHA1 55ecaf44a7dec042fcae56ca67c9ed52d95e39ec
SHA512 0b1aa7ff6efc3751d5fb7d41cd8e244738f8b6c1d69529408c96da669a21c35baedbf84ace2bb6040e8f15e063361a0ad9f93d77986dfad884a0bb89d21046dd
SSDEEP 768:EF1j+9s3AwgaAWfydfd+fECA7NpespIRM0UmkTziwjgzSNwn12bfZUq:J9s31lfuf0fE7QsZ0UmYtKyZUq
TLSH
T135039F3298548E779DFADF89BA47330BAEE00263C1C52A549ADD9E0D41D72DC130BD66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a93ed642-4d01-4639-b99b-076f80b6fc9c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\a93ed642-4d01-4639-b99b-076f80b6fc9c.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download