ba06358e68429145a15d0c1cfb211cb1b82680ef0a0b3efa376c68e9c1e4ea03

Analysis

max time kernel
148s
max time network
141s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260706-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260706-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
08/07/2026, 10:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
.html
Size 552B
Sample260708-mch2esfs8n
SHA256 ba06358e68429145a15d0c1cfb211cb1b82680ef0a0b3efa376c68e9c1e4ea03
MD5 735272b9ddede509dfbb7039bfe4a1f4
SHA1 1fc5550a51e79cad98c01d7ed9b4738afea1509a
SHA512 9137b885dd113828b0fab361e87701800affec6c52a510f47f27b81dd29ff1897356e8eb3cbd378e03b4367ec698d450a10682747ad18647d5a92093824ca510
TLSH
T1ABF0909B6F19283F2F238571F4C75168CF680A22FB9925E28748011F7ACA04549F2FAD
MD5 SHA1 SHA512 TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5200	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134279795614623872"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2049790993-2338060321-149346055-1000\{E3817F8A-BFF1-4E02-89BA-05310A754533}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4592	msedge.exe
4592	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 5680 wrote to memory of 4076	5680	msedge.exe	88
PID 5680 wrote to memory of 5196	5680	msedge.exe	89
PID 5680 wrote to memory of 5200	5680	msedge.exe	90
PID 5680 wrote to memory of 5196	5680	msedge.exe	89
PID 5680 wrote to memory of 5196	5680	msedge.exe	89
PID 5680 wrote to memory of 5620	5680	msedge.exe	91
PID 5680 wrote to memory of 5620	5680	msedge.exe	91
PID 5680 wrote to memory of 472	5680	msedge.exe	94
PID 5680 wrote to memory of 5828	5680	msedge.exe	93
PID 5680 wrote to memory of 472	5680	msedge.exe	94
PID 5680 wrote to memory of 472	5680	msedge.exe	94
PID 5680 wrote to memory of 5828	5680	msedge.exe	93
PID 5680 wrote to memory of 5828	5680	msedge.exe	93
PID 5680 wrote to memory of 5500	5680	msedge.exe	95
PID 5680 wrote to memory of 4104	5680	msedge.exe	96
PID 5680 wrote to memory of 5500	5680	msedge.exe	95
PID 5680 wrote to memory of 5500	5680	msedge.exe	95
PID 5680 wrote to memory of 4104	5680	msedge.exe	96
PID 5680 wrote to memory of 4104	5680	msedge.exe	96
PID 5680 wrote to memory of 3524	5680	msedge.exe	98
PID 5680 wrote to memory of 5616	5680	msedge.exe	99
PID 5680 wrote to memory of 3524	5680	msedge.exe	98
PID 5680 wrote to memory of 5616	5680	msedge.exe	99
PID 5680 wrote to memory of 3444	5680	msedge.exe	101
PID 5680 wrote to memory of 4856	5680	msedge.exe	105
PID 5680 wrote to memory of 4868	5680	msedge.exe	106
PID 5680 wrote to memory of 3448	5680	msedge.exe	107
PID 5680 wrote to memory of 4564	5680	msedge.exe	108
PID 5680 wrote to memory of 4564	5680	msedge.exe	108
PID 5680 wrote to memory of 4592	5680	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\.html
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x27c,0x7ffcf436c188,0x7ffcf436c194,0x7ffcf436c1a0
  2⤵
  PID:4076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1564,i,10839660643703448276,7191458303388257326,262144 --field-trial-handle=3136,i,4385454515955101668,9520189894422961797,262144 --variations-seed-version --mojo-platform-channel-handle=3132 /prefetch:2
  2⤵
  PID:5196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1836,i,10240948110948258116,11276755870844575110,524288 --field-trial-handle=3136,i,4385454515955101668,9520189894422961797,262144 --variations-seed-version --mojo-platform-channel-handle=3248 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2432,i,4337875433306827034,11197537558860560973,524288 --field-trial-handle=3136,i,4385454515955101668,9520189894422961797,262144 --variations-seed-version --mojo-platform-channel-handle=3300 /prefetch:13
  2⤵
  PID:5620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3604,i,17086464994034049400,14327827627565567256,2097152 --field-trial-handle=3136,i,4385454515955101668,9520189894422961797,262144 --variations-seed-version --mojo-platform-channel-handle=3640 /prefetch:1
  2⤵
  PID:5828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3608,i,3276442980703544963,4688033330824661668,2097152 --field-trial-handle=3136,i,4385454515955101668,9520189894422961797,262144 --variations-seed-version --mojo-platform-channel-handle=3668 /prefetch:1
  2⤵
  PID:472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4324,i,6913918892045682411,13648985677912649660,2097152 --field-trial-handle=3136,i,4385454515955101668,9520189894422961797,262144 --variations-seed-version --mojo-platform-channel-handle=4564 /prefetch:1
  2⤵
  PID:5500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4340,i,4417162057653132711,210259099986977336,2097152 --field-trial-handle=3136,i,4385454515955101668,9520189894422961797,262144 --variations-seed-version --mojo-platform-channel-handle=4568 /prefetch:9
  2⤵
  PID:4104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5400,i,1547822597461361556,15147945389016717470,524288 --field-trial-handle=3136,i,4385454515955101668,9520189894422961797,262144 --variations-seed-version --mojo-platform-channel-handle=5424 /prefetch:14
  2⤵
  PID:3524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5404,i,8900139933098920661,13478440079880172969,524288 --field-trial-handle=3136,i,4385454515955101668,9520189894422961797,262144 --variations-seed-version --mojo-platform-channel-handle=5452 /prefetch:14
  2⤵
  PID:5616
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5888,i,15939984332501406281,9046792608855113293,524288 --field-trial-handle=3136,i,4385454515955101668,9520189894422961797,262144 --variations-seed-version --mojo-platform-channel-handle=5956 /prefetch:14
  2⤵
  PID:1104
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5888,i,15939984332501406281,9046792608855113293,524288 --field-trial-handle=3136,i,4385454515955101668,9520189894422961797,262144 --variations-seed-version --mojo-platform-channel-handle=5956 /prefetch:14
  2⤵
  PID:3444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4644,i,6767052783860080910,18065287299328487336,524288 --field-trial-handle=3136,i,4385454515955101668,9520189894422961797,262144 --variations-seed-version --mojo-platform-channel-handle=5304 /prefetch:14
  2⤵
  PID:4856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5088,i,13991570989587276917,880790257437592365,524288 --field-trial-handle=3136,i,4385454515955101668,9520189894422961797,262144 --variations-seed-version --mojo-platform-channel-handle=5068 /prefetch:14
  2⤵
  PID:4868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4600,i,11300215678079624167,3753503554349711469,524288 --field-trial-handle=3136,i,4385454515955101668,9520189894422961797,262144 --variations-seed-version --mojo-platform-channel-handle=5008 /prefetch:14
  2⤵
  PID:3448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5868,i,17273220475902069541,13674160765305706724,524288 --field-trial-handle=3136,i,4385454515955101668,9520189894422961797,262144 --variations-seed-version --mojo-platform-channel-handle=3108 /prefetch:14
  2⤵
  PID:4564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=816,i,16463883179250916315,16848238569946635567,262144 --field-trial-handle=3136,i,4385454515955101668,9520189894422961797,262144 --variations-seed-version --mojo-platform-channel-handle=6288 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4592

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1564

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5512

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2cfb77611c6372588cbb86850301c7d4d2a98bc9870148a0233cb9ff0ba848ae
MD5 30dd1402eab1adcd1b7a879da690d903
SHA1 5ad2617a2f54fb4647f217e450aa852cfab95912
SHA512 396e3e6a4f4d2b6cdab94a4fc9fcd07b5b3b76f067ce5666b89e9fb8d48b00e16fe2a2e9189c9d96e3f8d9d2f1a719132c8694f2859c94a22a5b7ecb4e74a3fc
TLSH
T1A3D02B343300650CC89070321C52B249532158300440420000D0B158CC7168102370AE
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 174576d263d17c1ded542f85fe22b729d39689265635c9c57a2bfd1af11bcb69
MD5 e54a3dd3758ae26f8eb9c7149476114c
SHA1 dd4159ecc029af9dd3da72970ac8bfa500a0651c
SHA512 eabda803f8f816ad2a6d57d3ce37f9c8cf72ef9a0a1ebecd6f39990ef65120d12a76e6ae5a2cb62c423511cbb36f0da6835b1dfa5907c5559c0ead5b0735873c
TLSH
T1E6D092757764A90CC9A5B0322CA7B29AA322A8300495860444E5F2A8CDB6A82567B5AE
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 fe2de1953666e0d7329c508a2fa496a84ff1bdd9c6608c01bbb833d1e4c1d491
MD5 1009b03717f211cec7d0e3e2d84778c7
SHA1 21b67ed4badea920728133eadb4acfb8220ab69f
SHA512 487c5227b8cf61403ca8a405f43d581f6364939dd9c298300b40312e444c31951e4e153481af17721806de668f635bd98884b5306a7df97e9e7a7da9c5923dcc
TLSH
T1DD51DAC343772AE0C36AE9B29FD1ACC53A7C645702C37E80104EB072587F70AB2916D8
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 8bdef15419313bc0f2c5170cb7d9d9b33015ba2a72c2ad6bdfa8be1eb174d99e
MD5 e7ad1f9f1a00ba0a48b9299a0fd6f4c8
SHA1 7cb6341e2cb411e3a1d94fd182cc88f6f0b7a27e
SHA512 85ff585ef69490173604ed32af8aa0e2507f91d60822a5875597388bc0839cc113e8b101b2c8112b1b551e0848c7559604808ab1147f2f13336ddaa4e6f82cf3
TLSH
T1AE51BBF3C3E4967D9A0146F4BB186E2BCE2D0915832C3C5A89E4AE1BA3E2471E14195F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 05bcd846aa6875578edf84f94838bfc58cc422146ad237f982f0779e49ca5336
MD5 2662f23b14ac917d60c46a8418c7dbba
SHA1 bd908b1be4ebedbdae0d11edd3e9a68529833a9f
SHA512 2c423b428a71b99a3728e5759359a09b1c38e479929622a4e31af7ea03bc2df56fe4970f28615ce56aecee41ec3a7f1357a99ba2e34c15399d1d58696d9334a3
SSDEEP 192:sxRiRqyM/jK1Ml8wbo/f7sUzK783zoA8p4//g6+WNIYtZIZl9WqSGgBIgIJ:sxRiglo/f7sUm4eu/5IsiDXws
TLSH
T1AF52D8056A34A93BCCDBD20DFA517F53D6F81573A2941E44AAFC8A0C05E7ADD221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 516f7ff2142ac3984e58510a85a64cdf76ce87eeac88dda655950a8b7cf3624a
MD5 d82bd22d2a20f53f12ab2ccaefefdc97
SHA1 7e0c60c655144aa46b1fadc7dc30174aaa09256a
SHA512 8dafe008c244e100c171f15368398460e55d12e797e1e6b60ffb9108149620065eb2b7d794264b6c608934a5f8bc6ec940eefc46db78e09069e407affacb3deb
SSDEEP 192:sxRJRqyM/jK1Ml8wbo/f7sUzK783zoA8p4//g6+WNIYtZIZl9WqSGgBIgDAJ:sxRJglo/f7sUm4eu/5IsiDXwY
TLSH
T12152E905AA34997B8CDBD20DFA517F53D6FC1573A2941E44AAFC8A0C05E7ADD221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 2387d51042c571bda898e2e435d9de0797d0dcd7e36ae71d3e778591af5994f0
MD5 c0d703e8f3abdb5a818c8662bc4b2bd3
SHA1 3cc56c98e259a1d5cc099bfafe81d92820c0b576
SHA512 83f39e60ea4c8fa55686db2d0bc2e9cdad7a1d8b7aefaf1299198d014f4cbcc03154cee736bdd2c82a436feb6b216ac29162a5d530d5f807151f3876de6b3efb
SSDEEP 192:sxRJRqyM/jK1Ml8UQ8bo/f7sUzz783zoA8pe//g6+WNIYtZIOl9WqSGgBIgDiJ:sxRJgqqo/f7sUX4eY/5Isi2XwS
TLSH
T12162D715AA24997B8CDBD20DFA517F53D6F85472A2941E44AAFCCA0C01E7ADD221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 61efd087a2f9a56735fab127e577061044202aad9f8f7b375640c1a35596c277
MD5 1d7ef3fac7a163ce0ce44bd490dbe287
SHA1 13d37378eb0df8e6cf98990037e2e65ccaf3f1e4
SHA512 ee54344b397b88cbe400c8aaa7b438f566d5746a0b5be91cba2e8f9c5f3434db892d9f5acd62709acd3782b5c958f9721c4e13f377cc5b3b9c3bd686decf3d6a
SSDEEP 768:dOwS1wBzwRc1wiWg1zwsfMZwK8F1+UoAYDCx9Tuqh0VfUC9xbog/OVVlwmPzwx1J:dOwS1wBzwRc1wiWg1zwsfMZwKu1jaQlE
TLSH
T156C2EA3F644CC77F4F844E9DAC29AE976DD801CB5B988D4447FA880C03CA7EB521A5DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 a9c36d8f8d88d6cd10dfc4ca366fb9a8f70e64d9ec158cb6015d4d279dc0d2d5
MD5 8fd5ab829152820ded3feee006d777d8
SHA1 a7e042bed0def2e4667253bf3a6e42be5d0f2c01
SHA512 e2025ac461373c97f882477a6e8d32c66c33ba25a9aaf9d064441cf3bbb48ca76cfe9354ec2cf4ec38e0d81cb1148ca418a306316b493836d7f0f3504e7918d3
SSDEEP 96:KRzc5t7xxNWlqggVNK4sg7NcD7SFR2HeTieYgQGWAltgeGK4DgcGcW+9qwT8ZNbe:Czc5t7xxolqxVHsg7iD7SFR2HeTieYgO
TLSH
T15D919354753B26413C3E385885A8889796C274E2301DA4FB7BA811F25F67F028FFD9E9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5a18b9.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5a18b9.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 2e08147e2060162d651176f40ebed44fee1251014aa6b1dbd6697a0f362ab231
MD5 3ec8548c9c6a04bd865a1ec2abf8d7e5
SHA1 42e283639f26098dc68b7c1b4d208c29c530eb4a
SHA512 19786c939d2c6b7c026264bf1392f6411df289a8cb85eb584f903c99ce2eddde82666a63587de7ddcd49decce4a81746daddbe355c05af2b5d716fae291ff081
SSDEEP 768:j6rv+4UNbdk3+G4h3z7Hu37BtAwjUSzF/cynT:j6bsbG334puoTe7T
TLSH
T13C03BF31A8589A779CF7D785F20A3A43AFF44163C5C91B94C8E92B0D428B1AD234BD77
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 b2010834fa0f00637654634a9befdd68da3f6e8df553ffa2f6986cc64271f59e
MD5 37cb646580a690d1eaede512c5a484ed
SHA1 36cef312130b423f00d59f401d2c2125192b45df
SHA512 51310a21a696347c58d12bfebddeec34a5c614e6c418043af51bd3d461b6087ed12b233083d72f51751adb630abbfac76334eccdc2100315f44d13ce6250ada7
SSDEEP 384:jHtNn/s3n9SB38NI/rKTPYuYz2fppP3uQFYUfurfGbDvuh3n39WoBtAdEF7jgHKX:jHj+9y3AG4h3z7Hu37BtAwjUSzF/Mjz6
TLSH
T193F29E72A89159679CE6C7CAE21A2B52EFB08163C5C92F84C8ED2B0D45C726C5347D3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 a72498289cf73e4597fdfab2d9023aef424e90235d5474881feb4d4247122b16
MD5 377729f792719a93821879d89a67e142
SHA1 6ebae2329cacd7cb060c59418863ca6ffbe89dec
SHA512 ac609bddf89000a37f53851db95eaaf6541330eaafb29bfb9269cd733ad81a51e662510de2ee21bb4fa2b7af4ab48459872444063f28bdd8cea9f04253d76954
SSDEEP 768:b6F1j+9u3fwgBG4h3z7Su37BtAwjUSzF/Mjz6:bf9u3W4ouoTeO6
TLSH
T111039E7298809A6BADE6C7C6E61A2752DFF041A3C5896E94D9EC2A0D01C71AC1347D3A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 36d69bdca2e4a8b24b06ef6b3daecef20b221c67a647a6eb796f10a435e99048
MD5 fdf1d35968237d3c118671284b072633
SHA1 82dcb3f92a8b30b380077cd738aa2616922d8de7
SHA512 1b461013529bd583789469f0b4822402e9033ebaf34a18a65949b28d6fdc57755d76bb333ff78c99fe56479ba9cd53af806a08b12746fd4b4871092eee839be5
SSDEEP 768:CIrv+4UNbdX3UfHB4h3iu37BtAwjUSzZ5UikB+:CIbsbR3U/B4UuoTAUJI
TLSH
T11903BE3298549933DCF7D28AB24B6A53BFF4516399C90B94C8ED2B0D428B15D230BE67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download