03dd138a8585253980397cf5fe00607d8c3b34ba04dbffb5d1907d6d16e94ea6

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
05/07/2026, 00:15

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
mbox/assets/bscframe.html
Size 191B
Sample260705-aj61lsft2t
SHA256 03dd138a8585253980397cf5fe00607d8c3b34ba04dbffb5d1907d6d16e94ea6
MD5 c9bbaf12b37090bcd2ae96c1b40690c3
SHA1 dcd8e3a05de9e637037c80c2b15e9ea73670b466
SHA512 8639378100a580ce3d89ae6cb82b338c9dcaaa2334fb580de3f158f722f173ba223b4243374b22a963dcd3faacfd942b6f8ffd1d3623065ea75ff65e683aa00f
TLSH
T15FC012FF381320176610ABE499D9B51C4D414664B049C945A89030BC5AD971ED863795
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1488	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134276841465689776"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1788976790-1541110888-1636651838-1000\{EA0F0C04-CFA3-4BA5-A542-BB683AEEE439}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3300	msedge.exe
3300	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2184 wrote to memory of 5116	2184	msedge.exe	87
PID 2184 wrote to memory of 1488	2184	msedge.exe	88
PID 2184 wrote to memory of 3832	2184	msedge.exe	89
PID 2184 wrote to memory of 3832	2184	msedge.exe	89
PID 2184 wrote to memory of 3832	2184	msedge.exe	89
PID 2184 wrote to memory of 516	2184	msedge.exe	91
PID 2184 wrote to memory of 516	2184	msedge.exe	91
PID 2184 wrote to memory of 3512	2184	msedge.exe	92
PID 2184 wrote to memory of 3504	2184	msedge.exe	93
PID 2184 wrote to memory of 3512	2184	msedge.exe	92
PID 2184 wrote to memory of 3512	2184	msedge.exe	92
PID 2184 wrote to memory of 3504	2184	msedge.exe	93
PID 2184 wrote to memory of 3504	2184	msedge.exe	93
PID 2184 wrote to memory of 1928	2184	msedge.exe	94
PID 2184 wrote to memory of 5024	2184	msedge.exe	95
PID 2184 wrote to memory of 1928	2184	msedge.exe	94
PID 2184 wrote to memory of 1928	2184	msedge.exe	94
PID 2184 wrote to memory of 5024	2184	msedge.exe	95
PID 2184 wrote to memory of 5024	2184	msedge.exe	95
PID 2184 wrote to memory of 4300	2184	msedge.exe	98
PID 2184 wrote to memory of 3968	2184	msedge.exe	99
PID 2184 wrote to memory of 4300	2184	msedge.exe	98
PID 2184 wrote to memory of 3968	2184	msedge.exe	99
PID 2184 wrote to memory of 3080	2184	msedge.exe	101
PID 2184 wrote to memory of 2568	2184	msedge.exe	114
PID 2184 wrote to memory of 5108	2184	msedge.exe	115
PID 2184 wrote to memory of 4796	2184	msedge.exe	116
PID 2184 wrote to memory of 628	2184	msedge.exe	118
PID 2184 wrote to memory of 628	2184	msedge.exe	118
PID 2184 wrote to memory of 3300	2184	msedge.exe	119

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\mbox\assets\bscframe.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ff81ad6c188,0x7ff81ad6c194,0x7ff81ad6c1a0
  2⤵
  PID:5116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1944,i,15563646786341429026,7423781294877892947,524288 --field-trial-handle=2320,i,6936235707755960704,4602605156110852733,262144 --variations-seed-version --mojo-platform-channel-handle=2376 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1652,i,8102949208001567709,17211962191918789581,262144 --field-trial-handle=2320,i,6936235707755960704,4602605156110852733,262144 --variations-seed-version --mojo-platform-channel-handle=2312 /prefetch:2
  2⤵
  PID:3832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2604,i,10607306492822699287,3434766395486059290,524288 --field-trial-handle=2320,i,6936235707755960704,4602605156110852733,262144 --variations-seed-version --mojo-platform-channel-handle=2736 /prefetch:8
  2⤵
  PID:516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3432,i,11243836274581616720,4214082727738234940,2097152 --field-trial-handle=2320,i,6936235707755960704,4602605156110852733,262144 --variations-seed-version --mojo-platform-channel-handle=3440 /prefetch:1
  2⤵
  PID:3512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3444,i,8162417808311071915,12855868589516920325,2097152 --field-trial-handle=2320,i,6936235707755960704,4602605156110852733,262144 --variations-seed-version --mojo-platform-channel-handle=3456 /prefetch:1
  2⤵
  PID:3504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4280,i,13155028624067712311,6627473488687725613,2097152 --field-trial-handle=2320,i,6936235707755960704,4602605156110852733,262144 --variations-seed-version --mojo-platform-channel-handle=4284 /prefetch:1
  2⤵
  PID:1928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4292,i,10683500199792938376,6179580684872860017,2097152 --field-trial-handle=2320,i,6936235707755960704,4602605156110852733,262144 --variations-seed-version --mojo-platform-channel-handle=4352 /prefetch:2
  2⤵
  PID:5024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5052,i,16028631185854800584,14481243137499257047,524288 --field-trial-handle=2320,i,6936235707755960704,4602605156110852733,262144 --variations-seed-version --mojo-platform-channel-handle=5076 /prefetch:8
  2⤵
  PID:4300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5064,i,9632325833651867361,14478214286641972371,524288 --field-trial-handle=2320,i,6936235707755960704,4602605156110852733,262144 --variations-seed-version --mojo-platform-channel-handle=5144 /prefetch:8
  2⤵
  PID:3968
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5828,i,1724769896101646336,15585777658502785803,524288 --field-trial-handle=2320,i,6936235707755960704,4602605156110852733,262144 --variations-seed-version --mojo-platform-channel-handle=5848 /prefetch:8
  2⤵
  PID:2044
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5828,i,1724769896101646336,15585777658502785803,524288 --field-trial-handle=2320,i,6936235707755960704,4602605156110852733,262144 --variations-seed-version --mojo-platform-channel-handle=5848 /prefetch:8
  2⤵
  PID:3080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4352,i,5517461641818330382,7390791382782484525,524288 --field-trial-handle=2320,i,6936235707755960704,4602605156110852733,262144 --variations-seed-version --mojo-platform-channel-handle=4384 /prefetch:8
  2⤵
  PID:2568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4348,i,2659884597771261151,1715769830018193900,524288 --field-trial-handle=2320,i,6936235707755960704,4602605156110852733,262144 --variations-seed-version --mojo-platform-channel-handle=4528 /prefetch:8
  2⤵
  PID:5108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4388,i,2062155329219087341,14609528066642366973,524288 --field-trial-handle=2320,i,6936235707755960704,4602605156110852733,262144 --variations-seed-version --mojo-platform-channel-handle=6172 /prefetch:8
  2⤵
  PID:4796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5256,i,6650282185727516777,11407321980755803331,524288 --field-trial-handle=2320,i,6936235707755960704,4602605156110852733,262144 --variations-seed-version --mojo-platform-channel-handle=5144 /prefetch:8
  2⤵
  PID:628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5744,i,13341512666003667326,18109997050946547990,262144 --field-trial-handle=2320,i,6936235707755960704,4602605156110852733,262144 --variations-seed-version --mojo-platform-channel-handle=6112 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3300

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4476

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 92b83a0e542b7bb3ed324c35b5f2a40c47a6351981065b804e4d9d80ddd6d7ee
MD5 9ea20a12d0c030ae7f84014f382662b7
SHA1 7912569189cf07c1ce092a268e67e9f391b7c8c7
SHA512 39ca414f13163c8479fe7650ae0dd1607b267fe3f319c09aec7bd5f68448e9ac604351069bf6b166b3f897d3afb5d7f35e609b9fc72b9debbcb05bad8fad7d81
TLSH
T132D02B20FF04E002D1072172540047100E0848902093C140E030441CDCEC804D395307
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 d8a76443897622b5dc16a1acd1c1a4a73fa075eae26435b1def31c8d189026f5
MD5 2f6a94999cdc52e32faf291be4a75955
SHA1 3e0128e5d7971008d5efe150f200354dd1090475
SHA512 c833571e8fb72c6e636dd39c393e740dded888905d259e13632d75263ebd99e9e1e8c35615b26672bdf517b136740892a1b2253be2706028d203f63fe87822e6
TLSH
T17C712AB4012E26ACE3965F31C0DE42913771AAFAFD3B5F97DC92A4FED9057604829038
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 60139f381b8dbe552dd0d725432085b1459cd153ae33ecfc5b0e1e22e27a049e
MD5 90df61c89b600e21bbb6434fee9df807
SHA1 793ad2c8340882dd14448a52894421ca20fe0d57
SHA512 22e06279f19f067535b621e2d8735e79a5c85b89ed3330088a44614bdba4b78140cf1cba23bd7fa5e39e7978680980619f2f62a263a1e233502db9ab1bc3a022
TLSH
T13221A0F7C3D5856ECA1156F0AB18BE1BCE1D0501431C3D598AE4EF5793E3479E00295B
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 64c185a3a336a6fe19081b0f568104edf0c7bfa68c6faaf8e905e6513300af46
MD5 7ae6ac24be5adf29aa67f33189221b24
SHA1 e22429a02b050caf60c2a1dd5e48b161c1ec0eaf
SHA512 a173ed63d2cdb6c723a52927adde1b1513549838c9f0cbf25779001f18633879846a1274eb82c946c5e3fd01a85fd945b209f15eaa587ec7ff070435fd9e3647
SSDEEP 192:sxZDRzyM/jK1Ml8Mk9/flsecCTVVnIdpdRHW6+WNGYvrrIRjpIgrJ:sxZDhM9/flsecy4DHbG9n9
TLSH
T1BE42E8126A345977CCDBD20DFA51BF53D6F51472E2940E44A9FCCA0C05E6AED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 d1e3f3d94e1d2c9dc4e56c047e4adaa042c19c1397d53ed6f0491593fcca3a3f
MD5 3c770b5a10889d2d77d3deeeb6bdce3b
SHA1 f8e527b2018e8322eb2f9d744960bc7f97f89e58
SHA512 0d70526ce0f11eda6c4d51e1f8c9a58053db4cdc5716cf77826d7d9040e0d95ba6c1f50a44cfb471f18d42be95fc4f99abff6526ae264436c80ff91018056a8b
SSDEEP 192:sxZDRzyM/jK1Ml8UQ4k9/flsjcCBVVnIdpHRHW6+WNGYvAWRRjpIg5JJ:sxZDhqb9/flsjc04xHbG8n1
TLSH
T1AA52E7126A349977CCDBD60DFA51BF93D6F51472A2940E44A9FCCA0C01E7AED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 556498449503283dee83a67e971da8cc7239324ca557fd62b63f6a8238cbee85
MD5 f07822800a9bf6fac8cab1d470683641
SHA1 3dcec3c2c51d50a32eaf2e319f502777546e3c6d
SHA512 7585e3dcf669a73b3e5cf6e43baac907bf419246b2bdba42cb54f3799060bfc11bcaf1bd174dca35285c1552a5dca5fd4f6e1e32795141734c7b49c19051d56f
SSDEEP 768:RBseJ3xWvhfyn8F1+UoAYDCx9Tuqh0VfUC9xbog/OVYcLly0ppiroQc:RBseJ3xWvhfynu1jaVcL88p5j
TLSH
T12ED20B2B280CCB7E4F844E6DEC266F966EE801CB57984D5487EA884C03C77EB51175DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 063e9ca5b97fa00a78049314259503dad844d196fe992eaa6beb55278e70ad35
MD5 4ff6d30e6b451709301e9e659e95ec83
SHA1 a4e7db3736e9ba6a6e6c77a091454a86ad2b4b71
SHA512 0046392ad7f5a6d6917595d00921e66d893b9311fb555d54c5d585bd30cb39a262d696808167c9a515b7f39c53c3e73d18f22a6d1387900e8beaac0d4202bc68
SSDEEP 96:KYH+KggmC8gKZWiKK0KrCq2JyKScmPY9OoR:49TT33ppPY9OoR
TLSH
T1E5C11346343F0202287E295CB2A79D368E4275633458A4FFBBB904A11E67E215EFDCDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5928ac.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5928ac.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 45369c4b061c90dbf6e9b9f0e44a4e995e421a0f32d379aba378b73c4f10b5f2
MD5 dc0b5dc316aec8ca76c2fdcab36ea26f
SHA1 11865c0c870cc23288638ed4357370c085cb6e0c
SHA512 4a6a592c4cc2a09acbc45abbcfffeb623c6feb2be2cd958b45ea54404c79750687d0e8521faa904bd79d94764ad2024ace9a3858593586bbb881ea6647f349f6
SSDEEP 192:uyTSNWMsnMcPPQLz3XX9VofsNtzQRPw4M7dQkQmiU1PDa4MTZS+FdLK7Fd3El8zY:XtNn/s3n9SfsNtzMe7K0hFGdwdUShuP
TLSH
T12A624C325C746C3B9DE3A585F14637079EF4916BEAC52F84EAECAF0C01DA2AC1307916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 17KB
SHA256 84bb34c880243b052a30c1c14c7be78f8d20c3cc1b2ec35283b78b83164619ce
MD5 40e092bbb27599260c5803c8348591b0
SHA1 d203fce5cdcd83e57e7c59f34f096af2631833f3
SHA512 3e3a32841d4243139aa1315de4cb51997a0d0785a9ad611e6dda41dd6ec292e90928a796626dd371398f674b213783f7fb9493d107cae8ccb308dad81e22a1c0
SSDEEP 384:siF1tNn/s3n9SeTzsN38TUNTUlIlWMe7K0hFGdwdUahuP:XF1j+9b3mwgWBcUUahuP
TLSH
T1528229335C64993BAEE69A84F54A37078EF4416BDAC16A90E7DCAF0C01DB2AC030BD15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 4d908c75f4b4b251e78c9c7909426421438f065600322c5948908b2e231ca8cb
MD5 b1d993793bd2c95081cc79267158e1a2
SHA1 8ae1769c51ad5d73b927226a58e7551f7187a003
SHA512 f8531c8cd3997ef9159106011edb2e6913bbf35b1c16797d5b9b0f6e7bd056043aa35dcc96d69bcbb922da9170c64692dab324d0bad68caa89e9e3c5fd292254
SSDEEP 192:lONnZ6vMtPQmiUyY5ThTZS+FdLF847qSU/u:lONnZ6UtRhTFdJhU/u
TLSH
T119020635AC786C6B9AB3AD46F48A27175FB4507FEA911B50EAEC2F1C00D765C1303827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 0a854fe96c30399f5dc1fc585d921365df82d0768b3375a3c215f17f9b00b4d9
MD5 c24101ea3419190cda6351d65d1c0747
SHA1 b2c1b4bed2f8be23e536346b8975233675c2384f
SHA512 7481751220489311b9bfe2be75943568a299844ffbfacbbea2a45c2ed68581756eb268edaaade5c5998fb391e258a04c6dcff718180264f2b4f768df3c968dc7
SSDEEP 192:u2TSNWMsnMcPPQLz3XX9VofsNtWQRPw4M7dQkQmiU1PDa4MTZS+FdLK7Fd3El8zY:PtNn/s3n9SfsNtWMe7K0hFGdwdUShuP
TLSH
T14A625C325C746C2B9DE3A585F14637079EF4916BEAC52F80AAECAF0D01DA2AC0307916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 9KB
SHA256 fc3c1b3121204133d5fa6e215496b6503e57d535b6f6b10533e1443a1e000fc4
MD5 e39f17c78af4c854cf8341a8e2518a8b
SHA1 d98e7aebc13795b9d35145b48b04fdacb8770c76
SHA512 4a80d81e36b7bebe36cb18a3931337f479981e3111b90f3ba48b08153237d6ae54bd8e56529dc9f436346f15742fad7d135d6f62596ebff78e6882e7eef35311
SSDEEP 192:3ON46vMGPQmiUyG53hTZS+FdLK7Fd3Et80ICqhU/u:3ON46UGR53FdwdUShU/u
TLSH
T159121B72AC74AC2BADE3B545F48636035EB4912BEEC56B50E6DC6F1C01DB69C1307C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 d23dfc56a63c336d3b378188ec23b1709c1e551bf37fc6eb2a55a25b6dbaaa48
MD5 ba0b5b9c8c3b547dd8453cf8f649ab83
SHA1 c4d7aa267c1328f20b907192825462cb1b2abfa5
SHA512 06619f6fe3076229c229fecfca3d142cddae24bdfe055949d8e64991028549bb6256dc561684f83d7311b34ed4124c547ec973de8ec9a832c96b9f92e70ffe1b
TLSH
T17441255CA6FA1158B3B76E5AAFF7A86D487BB8772E06D89D10010D4F0662E40DC72733
MD5 SHA1 SHA512 TLSH

Submit Download