05a084d8963bec85192a3301bd743a19858d0e5fbf70bf867262c1ac50afce92

Analysis

max time kernel
149s
max time network
151s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
08/08/2026, 03:50

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
dist/dependencies/html/mainview.html
Size 23KB
Sample260808-eebq5azcmb
SHA256 05a084d8963bec85192a3301bd743a19858d0e5fbf70bf867262c1ac50afce92
MD5 ff95d56f9b9d77558c0a6ccd7c3c8143
SHA1 89dd9f990c782477f5c41d8b3154acd574c62879
SHA512 bfb00506e2cf720612eaf8be904bb4ddc3f64bef331cae65311b04ac6a6f1e50b379f3d6d5051fedd9dc5bfe26bd233876127bb95488f8abba215a8006e6b035
SSDEEP 384:GHUr3A/YoZi/pdiOJt7zmEkGf2a2a2r2e2tI6X0l:G0r3SYoZAmOJt7zmEkGOTT63tI6Q
TLSH
T1D1B2622291C1151690B7A2C56BF1475EFF798217C70305AC3BED27A29FF7EC58863A88
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1996	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134306347761754705"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3989226554-2204910950-1522900112-1000\{8103A4D7-9629-4C90-A722-FA2B4E325A2C}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3564	msedge.exe
3564	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 884 wrote to memory of 5024	884	msedge.exe	89
PID 884 wrote to memory of 1996	884	msedge.exe	90
PID 884 wrote to memory of 3156	884	msedge.exe	91
PID 884 wrote to memory of 3156	884	msedge.exe	91
PID 884 wrote to memory of 3156	884	msedge.exe	91
PID 884 wrote to memory of 4424	884	msedge.exe	92
PID 884 wrote to memory of 4424	884	msedge.exe	92
PID 884 wrote to memory of 3724	884	msedge.exe	93
PID 884 wrote to memory of 6060	884	msedge.exe	94
PID 884 wrote to memory of 3724	884	msedge.exe	93
PID 884 wrote to memory of 3724	884	msedge.exe	93
PID 884 wrote to memory of 6060	884	msedge.exe	94
PID 884 wrote to memory of 6060	884	msedge.exe	94
PID 884 wrote to memory of 4688	884	msedge.exe	95
PID 884 wrote to memory of 4508	884	msedge.exe	96
PID 884 wrote to memory of 4688	884	msedge.exe	95
PID 884 wrote to memory of 4688	884	msedge.exe	95
PID 884 wrote to memory of 4508	884	msedge.exe	96
PID 884 wrote to memory of 4508	884	msedge.exe	96
PID 884 wrote to memory of 5216	884	msedge.exe	99
PID 884 wrote to memory of 6124	884	msedge.exe	100
PID 884 wrote to memory of 5216	884	msedge.exe	99
PID 884 wrote to memory of 6124	884	msedge.exe	100
PID 884 wrote to memory of 920	884	msedge.exe	102
PID 884 wrote to memory of 4320	884	msedge.exe	106
PID 884 wrote to memory of 1080	884	msedge.exe	107
PID 884 wrote to memory of 1612	884	msedge.exe	108
PID 884 wrote to memory of 2980	884	msedge.exe	109
PID 884 wrote to memory of 2980	884	msedge.exe	109
PID 884 wrote to memory of 3564	884	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\dist\dependencies\html\mainview.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x238,0x284,0x7ffff960c188,0x7ffff960c194,0x7ffff960c1a0
  2⤵
  PID:5024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1856,i,1176693892479285319,16460661662780460719,524288 --field-trial-handle=2576,i,1147644227510826586,10465367191808266793,262144 --variations-seed-version --mojo-platform-channel-handle=2628 /prefetch:11
  2⤵
  - System Time Discovery
  PID:1996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1624,i,7694889156875580501,14337808780869050877,262144 --field-trial-handle=2576,i,1147644227510826586,10465367191808266793,262144 --variations-seed-version --mojo-platform-channel-handle=2572 /prefetch:2
  2⤵
  PID:3156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2268,i,4255264590722715443,1789846797945422422,524288 --field-trial-handle=2576,i,1147644227510826586,10465367191808266793,262144 --variations-seed-version --mojo-platform-channel-handle=2660 /prefetch:13
  2⤵
  PID:4424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3572,i,11499693109886819419,15298875219413237706,2097152 --field-trial-handle=2576,i,1147644227510826586,10465367191808266793,262144 --variations-seed-version --mojo-platform-channel-handle=3604 /prefetch:1
  2⤵
  PID:3724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3576,i,726568264634274425,5933264736326358101,2097152 --field-trial-handle=2576,i,1147644227510826586,10465367191808266793,262144 --variations-seed-version --mojo-platform-channel-handle=3608 /prefetch:1
  2⤵
  PID:6060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4404,i,8303677181531081027,4273173569393609043,2097152 --field-trial-handle=2576,i,1147644227510826586,10465367191808266793,262144 --variations-seed-version --mojo-platform-channel-handle=4384 /prefetch:1
  2⤵
  PID:4688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4456,i,11837892276541075007,5295454967375170001,2097152 --field-trial-handle=2576,i,1147644227510826586,10465367191808266793,262144 --variations-seed-version --mojo-platform-channel-handle=4388 /prefetch:9
  2⤵
  PID:4508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5300,i,14911823529061840401,1968011399119256461,524288 --field-trial-handle=2576,i,1147644227510826586,10465367191808266793,262144 --variations-seed-version --mojo-platform-channel-handle=5332 /prefetch:14
  2⤵
  PID:5216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3416,i,2375466207433532733,14677718896222823682,524288 --field-trial-handle=2576,i,1147644227510826586,10465367191808266793,262144 --variations-seed-version --mojo-platform-channel-handle=5368 /prefetch:14
  2⤵
  PID:6124
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5888,i,6528527005745450500,12681792049372456992,524288 --field-trial-handle=2576,i,1147644227510826586,10465367191808266793,262144 --variations-seed-version --mojo-platform-channel-handle=5900 /prefetch:14
  2⤵
  PID:1904
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5888,i,6528527005745450500,12681792049372456992,524288 --field-trial-handle=2576,i,1147644227510826586,10465367191808266793,262144 --variations-seed-version --mojo-platform-channel-handle=5900 /prefetch:14
  2⤵
  PID:920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4684,i,4855700820844565857,13378669873239228151,524288 --field-trial-handle=2576,i,1147644227510826586,10465367191808266793,262144 --variations-seed-version --mojo-platform-channel-handle=4656 /prefetch:14
  2⤵
  PID:4320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4668,i,7314799637998516103,4109437547299148472,524288 --field-trial-handle=2576,i,1147644227510826586,10465367191808266793,262144 --variations-seed-version --mojo-platform-channel-handle=4676 /prefetch:14
  2⤵
  PID:1080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4672,i,1371772412115354470,220569870532349205,524288 --field-trial-handle=2576,i,1147644227510826586,10465367191808266793,262144 --variations-seed-version --mojo-platform-channel-handle=4388 /prefetch:14
  2⤵
  PID:1612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4656,i,7580438552530973873,12787928411028343705,524288 --field-trial-handle=2576,i,1147644227510826586,10465367191808266793,262144 --variations-seed-version --mojo-platform-channel-handle=4648 /prefetch:14
  2⤵
  PID:2980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6148,i,12791557221858485695,9909155198307227207,262144 --field-trial-handle=2576,i,1147644227510826586,10465367191808266793,262144 --variations-seed-version --mojo-platform-channel-handle=3692 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3564

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4420

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2148

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 5e34bc4625bf22507150f49d8c28444bda8222ea36c2a7d431bbdaae5c134a9d
MD5 e1ae04b3e73ad5ac4854b3b71e22d4d3
SHA1 221461b4f2d9e84e2f881b5a79edfef3705178db
SHA512 58529610d3f5dd7778bff3b81dd8abd9d79702eff78583d0294f3999089de0bbf84f0abad703269c0988835522b1d8d48e9f3c65472a409c5868fc3547c3fb1b
TLSH
T138D02B206A54494CCDC0B03464A3EA18E2004135140013C44001F07988901830B970CB
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7f7f7efafb9f87082470af84df3b906033b9d533fb7a188458a4e181362f2170
MD5 8af1f60999c332d8cf9a392cd968a81c
SHA1 93834a1f070ff24041a0deb17d95d868998c98ba
SHA512 95d5c6b0fed3c3dce459178eafa2e9fa13b06caf50a5b294d66ecf16bf91357eccebec57e01d50e054232862c252fc80f7300e865318ec24078f9288a88c63d4
TLSH
T17BD02B206A444A4CCDC0B03064A2EA18E2104135680013C44001B06988901830B970DF
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 93693a03adc76a31468190fc447bc4c3c8023c0cff7eb4525f6babf4dbd711f1
MD5 0ed9561cfa291bc65169943c93e20ae9
SHA1 58b420e0b0be08c5c431d0e779512d78a97b9605
SHA512 1c48e2723c21e2ddbf99c23bffb54f958c2801097251e7f1d80d046503ac6c1d366870667be44a09ae13f8ff9d9e59b032938e2d4e295ded0748af2879d7e709
TLSH
T10061D86353E30DE1F72492FE55B6589936F7C8A5020F2A73E0D05F70486AED462D1563
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5986ba.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5986ba.TMP
Size 3KB
SHA256 c46f09e6f47865b3213d7d47f264e553879795881824408259eb6136f51cf122
MD5 85a877c3a24aef5ae06b7201e79e0af4
SHA1 01d7ff421a21e52a4a6f05b16c98f0adfa48c383
SHA512 d4b2e3fdca0565323d058c3e8bed7d5b7f06ea5c13e569d91bec12a91d078cde2f17bfa3c784cf2f8f64d492a3c28bfd650f8bf872089603599b1c333777797c
TLSH
T1F061D86353E30DE1F72492FE55B2989936F7C8A5020F2A73E0D05F70486AED472D25A3
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 123975dcc62d09d62eed1062c23eea8fbd12237c3603cb117edd153da6b39ea6
MD5 45ee942d4675ee77bb75ecdfa2e1a337
SHA1 d10e75cd5571a0f304b839bac79a499cbe85d59c
SHA512 a00861a5f06fb0632829020e93b3063ac74ecc09762b5fef45b4acef16822df9dd209341fa6661fdfbe6cdb99aae293ddded8803ac3be0947f2a20640d80bb72
TLSH
T1BC41BDF7C3E48A7E890156F4AB146E2BCE1D0915432C3D5AC9E4EE2B93E3871E14195F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 da70188b46d56cc535aa5cc3490d1bd1a7be3c3ab243d3c3e7dea8ba4bf707fb
MD5 3eee30f6d0341d4fe1c5473e1f762f42
SHA1 70bfdf3d8f926f0f245a4b49c3b011079edf19a6
SHA512 9fb99d22d230bd8604252177e392c8384e4d854739f7fa544bbf5e154d6cb685cbdac8bfb670ce32aee1ad7e45423c74333d6b09a242968ed4d4cba4ce976562
SSDEEP 192:sxR/R5bF/fu+sg4Hm2Sm7amizoD8p4DG/g6+WNIY3QkGkIgDEJ:sxR/3F/fVsg427eG/5Igk
TLSH
T1FA32C8156D68A93B8CC7D21DBB657F53E2F9503260D11E58B7FC860C14EB6DE221780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 5422a74dab87febb05f5cb5f8d24e021389caaa759c51ac6bb36a1bd57b9412b
MD5 0d163a17dc59d2962cfdc9b50c9c8985
SHA1 33158de38aa934595a768d11425563588a0d2cd0
SHA512 7afdc9cd145eb43c76d5e33f1176cd57f69a0264f9ae535913b009dcf0667509984cd306299493b66ecd42da03dfdaf417f707d53cd543c2ad043d9b3ba9ce25
SSDEEP 192:sxR0R5bF/fu+sbnHm2Sm7amizoD8p4DG/g6+WNIY3BLkGkIgIJ:sxR03F/fVsbn27eG/5IAUs
TLSH
T11432B7156D68A93B8CC7D21DBB65BF53D6F9603261D02E58F6FC860C14EB6DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 1352c57e0ffd1868f7b8b53119cfbfd44c9701fcd3a39b9156041eb3a166041d
MD5 299f942791f91a76e266657c56296fa4
SHA1 215b2e9b51af399084484521db7aa988f8cec10a
SHA512 a1a8426ea8534b3d0969359de626b3b4bc412bb935e4b23dcbad45cb3a4ba19dc736efa52f9d283b0ebaf9bb897405e17a9b9eb5c5a7bcf9ac81696e6b84e212
SSDEEP 192:sxR/R5bF/fu+sgnHm2Sm7amizoD8p4DG/g6+WNIY3BLkGkIgD+J:sxR/3F/fVsgn27eG/5IAUW
TLSH
T12832C7156E68A93B8CC7D21DBB65BF53D6FD503260D02E58BAFC860C14EB6DD221780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 bc6e48b3461c5f33be7759f61520c8d5f9dd2cafaf4458e986ce711f84f56ad9
MD5 c6771026e7f2831546ce61e57dacf5d9
SHA1 bcf0dd92ceba9db5fb3b5412cb66c8cef59123d7
SHA512 f14754806b740853c75b9595af94502aa5d845f1eb7c2fa2743ca1502f1e814588e2071cc4835335b73423f9030a91cf5be8f79013d26912b3067e3f649f55c3
SSDEEP 384:GMgEbt2fCtg0+FfKsKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVKO9W+RTMroOLa:GTEbtkWg0CfKs8F1+UoAYDCx9Tuqh0V6
TLSH
T1EBB2DA2B600DCB7E9F804AADAC59AFD76D5802C79B588D4047FE990C02C77FA911A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 425dc3589594f5905c8719c77f5af220647157f36a9547804e29501da814cb0e
MD5 a6253b4bcd8d840c196304b3346d214f
SHA1 af23383cb683a0f7abd127cc6caf79cd7a1a94e0
SHA512 3ffc6709c7618ba4b698dbfd7a2e20294048820bb8beffe3a7cf3840b0ef70c465e9009ba9cd8e85531bf9b1be9cec3375d714835f94abae3311f7a182244976
SSDEEP 96:KR1i7PF/DnWrw+gXnK4mgpnct1o7zsHzc5t7xxNWlqggVNK4sg7NcD7SFR2ay4KN:C1i7PF/DWrwfX9mgpct1o7zsHzc5t7xs
TLSH
T10B914301707E02403C3EAA4C95F9D81A86C274673419A86B7BE906AA4F67E074DFDDD9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 040a58184d059a18c92b95550a52544499c39e8a4e679abe07bcacfa3518775f
MD5 10deb40adfd437c1768c872a141baa30
SHA1 b03f8c107ca95a0510a6e249ad4424045af80bce
SHA512 bd0070aee670060e0e6637ccafafef718d8961dc33944889317e83e11f259a1e85a58e4b4069e737f407b72c4df1fa8415fa262494a4547f37c5d6617e1aba7d
SSDEEP 768:Pj3Ifc+wfZOSfGfk667BfvShCQRe2ewBKZOBW4:Pj3Cwf9fGfH6pvSy2evZiZ
TLSH
T1EAF2C0B0DC746D738DD692487A4A7B07BEE86233D4C85658DADD9B0C008379E271FC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 77db1e0a96aa47c2ee0235b252ea9d1ecd8dba043f57cbd47e3f7b3263ca6c73
MD5 40c08d9627037e52020da7d3d93dce8f
SHA1 6c0f28d3fc547f76406434283adf2de4a144b80a
SHA512 e9ba1a09da10495cb1742325b351b65e3e650b9c7aaee09fe0344bbcbd22468ffd586423ce433fba2fb1ba7c74789513aed6adabdd816533d6e58bf3f193ef69
SSDEEP 768:Aj35fc+wfZOSfGfk667BfvShCQRe2ewBKZOBW4:Aj3Twf9fGfH6pvSy2evZiZ
TLSH
T191F2C0B1DC746D738DD692487A4A6B07BEE86233D4C85658DADD9B0C008379E271FC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 7526ca16a163ef3e98aa14a39434649a193f3f237466f83b3ed59d98b93fc87c
MD5 9f6c5685d84bf5a466a4a57293910a68
SHA1 d71754db02a99f3564d011995090ce51ddd4e141
SHA512 f0398570cc076bae3eb1bc81c9f5990560df227f5b4fac6825a63519982b28d4474a689b3112cd932b393c2e5f0ed43f143130c0fd58c0036a4dc7c57ce442f1
SSDEEP 768:krv+4UNbdQ3Zfc+wfZOSfGfk667BOvShCQReoi:kbsbq3zwf9fGfH6UvSyoi
TLSH
T11203BF71EC7869339DE28248B2467F53BFA86263C4C95658DACD5B0C01836EF271F866
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 cfab9e1322cf754c08e54127b8b67e1d48dbb57548bb34cf6889a75a61e6c281
MD5 044afc83472a0d11d4578b26b666ff85
SHA1 eaf026b68bb6b055e108fc6d71b2f7467a5c2400
SHA512 391c9a10628616af70daa001f2e85d07946278761fe03e2e0cad6f842f417dcc5cc7b0404b03476a66bef10429f8c5748962186b27d4b17eb1b19acb39cf639b
SSDEEP 768:YFQd3vwg4fc+wfZOSfGfk667BsvShCQRe2ewBKZOBW4:7d30wf9fGfH6KvSy2evZiZ
TLSH
T19B03BF72DC6499739DE69748BA4A3707FEE46273D8C4A658DBCD9A0C00832DE170FC65
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 4f2cd1107579aa31b4e38fea35f540c5d19f2e6dde97b0bdf079177b398f690c
MD5 30410995734fad394a1507c9e9264748
SHA1 e52056776daa20e9e1a9a98f01cefbeab568e5a6
SHA512 f6459f60017a2f376e83b4cb080c6d2bc466ff1f747a068aa0b7351b7f2ffae443d47cae714b4c1a3932ffa1a77aeffc5199a113cd46f72aac6216ab5baad819
SSDEEP 768:Rrv+4UNbd43MIkc+wfZOSfhvShCQt12bwWV:RbsbO3MNwf9fhvSJ0wO
TLSH
T1B903D072E86869339DE792487646BB937EB86273C8C54784DACD0B0D019369F370BC67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

149ea11c-792a-4dc4-bf59-8c1e6cec9d55.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\149ea11c-792a-4dc4-bf59-8c1e6cec9d55.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download