3a00d279cf1a01b9c9ea098b4a038ea2fcb63b648883a07214641db31784781e

Analysis

max time kernel
148s
max time network
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/07/2026, 12:10

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
strucvture - Sep T/TrustWallet1.html
Size 1KB
Sample260710-pcaq6aa14n
SHA256 3a00d279cf1a01b9c9ea098b4a038ea2fcb63b648883a07214641db31784781e
MD5 db87780f819316fbbc67b74e0d512f55
SHA1 ddea877186b9790e544603a65dc288c54a69bf49
SHA512 634e705ece913a8df7d6589e97b366503aedbdecf4922f2ba7a0742484f59f988da78f0dc23a3c585443c135241b800edd9edc92377e9d37574a5b4e5fa610e8
TLSH
T19231021085921D2A013340E42BF09789FAD78607D78A866031FC2BE33FF6C90CE17299
MD5 SHA1 SHA512 TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2012	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1738198120-2966725515-3980530802-1000\{AFF12CC9-0143-4C78-AA80-4AB827CCC549}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4452	msedge.exe
4452	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 1624 wrote to memory of 5660	1624	msedge.exe	88
PID 1624 wrote to memory of 5880	1624	msedge.exe	90
PID 1624 wrote to memory of 2012	1624	msedge.exe	91
PID 1624 wrote to memory of 5880	1624	msedge.exe	90
PID 1624 wrote to memory of 5880	1624	msedge.exe	90
PID 1624 wrote to memory of 916	1624	msedge.exe	92
PID 1624 wrote to memory of 4848	1624	msedge.exe	94
PID 1624 wrote to memory of 916	1624	msedge.exe	92
PID 1624 wrote to memory of 4848	1624	msedge.exe	94
PID 1624 wrote to memory of 4848	1624	msedge.exe	94
PID 1624 wrote to memory of 2388	1624	msedge.exe	93
PID 1624 wrote to memory of 2388	1624	msedge.exe	93
PID 1624 wrote to memory of 2388	1624	msedge.exe	93
PID 1624 wrote to memory of 1808	1624	msedge.exe	96
PID 1624 wrote to memory of 3368	1624	msedge.exe	95
PID 1624 wrote to memory of 1808	1624	msedge.exe	96
PID 1624 wrote to memory of 1808	1624	msedge.exe	96
PID 1624 wrote to memory of 3368	1624	msedge.exe	95
PID 1624 wrote to memory of 3368	1624	msedge.exe	95
PID 1624 wrote to memory of 2972	1624	msedge.exe	98
PID 1624 wrote to memory of 2972	1624	msedge.exe	98
PID 1624 wrote to memory of 3700	1624	msedge.exe	99
PID 1624 wrote to memory of 3700	1624	msedge.exe	99
PID 1624 wrote to memory of 5428	1624	msedge.exe	101
PID 1624 wrote to memory of 764	1624	msedge.exe	105
PID 1624 wrote to memory of 4188	1624	msedge.exe	106
PID 1624 wrote to memory of 2808	1624	msedge.exe	107
PID 1624 wrote to memory of 1568	1624	msedge.exe	108
PID 1624 wrote to memory of 1568	1624	msedge.exe	108
PID 1624 wrote to memory of 4452	1624	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\strucvture - Sep T\TrustWallet1.html
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2a8,0x7ffcfc80c188,0x7ffcfc80c194,0x7ffcfc80c1a0
  2⤵
  PID:5660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1632,i,17087982413493952937,671961038923788206,262144 --field-trial-handle=2632,i,7437436844131061233,15439608437765673876,262144 --variations-seed-version --mojo-platform-channel-handle=2628 /prefetch:2
  2⤵
  PID:5880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1864,i,14905981841330828643,16268741883718751835,524288 --field-trial-handle=2632,i,7437436844131061233,15439608437765673876,262144 --variations-seed-version --mojo-platform-channel-handle=2952 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2336,i,1911906619611620195,8179359935854619702,524288 --field-trial-handle=2632,i,7437436844131061233,15439608437765673876,262144 --variations-seed-version --mojo-platform-channel-handle=3640 /prefetch:13
  2⤵
  PID:916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3328,i,13188523165529468053,5331578372570014815,2097152 --field-trial-handle=2632,i,7437436844131061233,15439608437765673876,262144 --variations-seed-version --mojo-platform-channel-handle=3760 /prefetch:1
  2⤵
  PID:2388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3332,i,14791526123804817403,12183646978924772496,2097152 --field-trial-handle=2632,i,7437436844131061233,15439608437765673876,262144 --variations-seed-version --mojo-platform-channel-handle=2804 /prefetch:1
  2⤵
  PID:4848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4236,i,5757487040146066566,8533425447988693921,2097152 --field-trial-handle=2632,i,7437436844131061233,15439608437765673876,262144 --variations-seed-version --mojo-platform-channel-handle=4508 /prefetch:9
  2⤵
  PID:3368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4224,i,10929995301753471112,15091380603326067163,2097152 --field-trial-handle=2632,i,7437436844131061233,15439608437765673876,262144 --variations-seed-version --mojo-platform-channel-handle=4504 /prefetch:1
  2⤵
  PID:1808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5304,i,1602354650042413515,565188567975198698,524288 --field-trial-handle=2632,i,7437436844131061233,15439608437765673876,262144 --variations-seed-version --mojo-platform-channel-handle=5364 /prefetch:14
  2⤵
  PID:2972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5308,i,13870343649945412309,9389288688840747606,524288 --field-trial-handle=2632,i,7437436844131061233,15439608437765673876,262144 --variations-seed-version --mojo-platform-channel-handle=5388 /prefetch:14
  2⤵
  PID:3700
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5832,i,15895980052258641370,3805485016608737031,524288 --field-trial-handle=2632,i,7437436844131061233,15439608437765673876,262144 --variations-seed-version --mojo-platform-channel-handle=5852 /prefetch:14
  2⤵
  PID:4100
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5832,i,15895980052258641370,3805485016608737031,524288 --field-trial-handle=2632,i,7437436844131061233,15439608437765673876,262144 --variations-seed-version --mojo-platform-channel-handle=5852 /prefetch:14
  2⤵
  PID:5428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4232,i,17077589546476339672,315227238490792552,524288 --field-trial-handle=2632,i,7437436844131061233,15439608437765673876,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:14
  2⤵
  PID:764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4084,i,2743689791875845532,16074474672458599807,524288 --field-trial-handle=2632,i,7437436844131061233,15439608437765673876,262144 --variations-seed-version --mojo-platform-channel-handle=4724 /prefetch:14
  2⤵
  PID:4188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5188,i,16990236096409926292,5442415507234631925,524288 --field-trial-handle=2632,i,7437436844131061233,15439608437765673876,262144 --variations-seed-version --mojo-platform-channel-handle=4720 /prefetch:14
  2⤵
  PID:2808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4732,i,1721768739787564414,14219609489604893870,524288 --field-trial-handle=2632,i,7437436844131061233,15439608437765673876,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:14
  2⤵
  PID:1568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6188,i,13776365289776866131,11909345222143277884,262144 --field-trial-handle=2632,i,7437436844131061233,15439608437765673876,262144 --variations-seed-version --mojo-platform-channel-handle=836 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4452

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:704

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3352

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 9420686d12b2cba6dc69896d607eadac629280a010e5358a4872ab9753f24ed7
MD5 8be6e81804d8b903ae07c11b2e53e3d9
SHA1 817c41cb00b05a8f2040323b93c6416b92dbc01b
SHA512 c2cfff48ebb312975aa2615d841d0badff185589ad3a3f5e8420c2ea0eb5dc0e5354d917cc43d57bec169a63d4fa21d66e91dc3e195592ece23d37fff7c04680
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7R:fwUQC5VwBIiElEd2K57P7R
TLSH
T1CDB3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ac1b1f93ff87eb876027f4166d705375c0f5d3d22dcb03f6a66f6100e88dd10f
MD5 b99f03c5cfe71b03836f8b5fcf09425b
SHA1 8a5078499c0b5ea40183efb77f9c1028c196409c
SHA512 6b9feec4ead7bf05f67d0d480907e21a3b770d8d12dedd2b0d785904186eac7448583e61abacb23582948de55c8ea2043bfd6908efd7faecdd82cee91404cfe6
TLSH
T16DD02BE037909D18C440353163D0122091006C30880923090100A02C8D3E2C3054F0BE
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c95a47aec5edba88214fad580cb869417b6620a91d8ee97e2d0b7801d3372be5
MD5 aad5f2ca0dd16bb2ea6c7757ea569c50
SHA1 5228b0b132542be004ea1bb32f3748964d065af5
SHA512 9d59c0291d741bd9d6cf50c22972d4baef00e7c1a48d6a3311a6cc82c04ceeba6e2be9458334cb954878915cc9eb91a8fd8bc4a47c966d57a2a05d6ee8211640
TLSH
T1D4D09BE177A19D18C545353567D1522591416D31451927194241E13D9D7E2C3455F0AA
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 f30555045d00a4d489f46f56912a1d32f28cf253265906e032619c80079d0af0
MD5 74f36e3a9d46b9049af03684d936a9f5
SHA1 c029071f12b4b2a8649a50e3fd65d5ef406310a7
SHA512 b6792d10c18a8ffbdc8b1cb7192afac57b116bf9accb3ba35152896fd20d8fdef0165df1386854ddedf36ff2e8fb802adee55d9e21a1fac1bcf6c79a364f3919
TLSH
T1F0512EB52B2CEBCEF72445B947E6D49B3EF8A4B90A071A00C0156DF44ACAF501DD9993
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a05ce.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5a05ce.TMP
Size 2KB
SHA256 187890f7e39826f966750a42ea5fc56b47d1a2760617a29135daa603e2be5cca
MD5 e673f8e01a939c3d787b37cc19887a58
SHA1 2461d6735003a3d67211577644c13089a73ea53e
SHA512 0841148fdb25ba6a7972d8766e2a5379b3da2663ea5cb1bda538df2bac2b7e20a14bbbf4ac495a5a4249c8daaee71ca00d9cc85c5abd828c5674dd5004ce21c5
TLSH
T12F513CB52B2CEBCEF72444B947E6D88B3EF8A4B90A071A00C0156DF40ACAF501DD9993
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 96d0c53f07b1491b13c4e86b7743532460edb89e35961520959b214c750d4cc7
MD5 1d8171ac203cfd26e23319c8c8031b0c
SHA1 a04f32fb9b1489cae16472c482bf74c05b10febc
SHA512 44db17efa1422449a82607cd76039e1da564112a2b6ee4e5bf0afb895ae99d10f7ac488948230577fe19cf4ae9c114aa4e208736f7450cb05739fb1d7ae01327
TLSH
T16A419CF3C7E4866E891156F0AB186E1BCE1D0916832C3D6AC9E4EE1B93F2471E141A5F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 12b8721e3b0188b2c4263cfef9af6b2add8da727cc326bbb9e7204f8f923af72
MD5 da9aa1a366921f92e8424b12a043a1a6
SHA1 238634440f91ab4a396a3657886ea47f986ba228
SHA512 602093f6d609e4ee72fdc9d20a09a37d4093fee12ff82cb67a503028d822953414969f9efef0c6a74ffdc02bfe28988bddbb99aa18e18a6b7a7f00e903a8dcf5
SSDEEP 192:sxRyRzyM/jK1Ml8wbU/f1s2bfPn5wGczoA8p4U4/g6+WNIYoXCYHGJIgDrJ:sxRyZlU/f1s2r5pND4/5IyrZ
TLSH
T18952D9166634597BCCDBD20DFA517F93D6F81573A2901E44AAFCCA0C00E6AED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 8556181c2e1e61d438cc6735769a0bad4d02b4a78f2ada26965689a06efeb745
MD5 3078be3d3ea711de986f6d7a0f5d0e07
SHA1 4a63847e1c6637c7178ab2c2f065fea74ec7d597
SHA512 189544f81e07aff883fc4d5e648c80924a21e8993e08d9678aa4f8523e705daf8d3305816411ae248376117014b13771409c16cafaedebf44efef1670c9297d4
SSDEEP 192:sxRlRzyM/jK1Ml8wbU/f1sSfPn5wGczoA8p4U4/g6+WNIYoXCYHGJIgIJ:sxRlZlU/f1su5pND4/5Iyrs
TLSH
T14252D9166634597BCCDBD20DFA557F93D6F91573A2941E44AAFCCA0C00E6AEC221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 72740fed482eed69d9f9ba162308a1dce0e80d4c2b946d811bbfb6fa118f5be3
MD5 31eb56fefe312a82d8ec9688f64c74d2
SHA1 50632278990cd4e255db84a0445b6c736a816878
SHA512 c303652b8f46dab20933e17087f48ea95c64f39b3d265a8ba811d2da16daf182353b7701f82b6fb86a5e071566afc6816ab324a1cb651183a4447b937d3c696c
SSDEEP 192:sxRyRzyM/jK1Ml8UQGbU/f1s2bfPn5wGczoA8peU4/g6+WNIYonCYHGJIgDrJ:sxRyZqYU/f1s2r5pNx4/5ICrZ
TLSH
T15062D816A634597BCCD7D21DFA51BF93D6F81573A2941E44AAFCCA0C00E6AED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 0aa0e816dd764829ee3fd9991ebdd348eb25f381ea53247907fbd062f5e3ee7e
MD5 af6343ea635af86f0f758ea4c0a3dbb7
SHA1 8585b9a42f7a06744b507c9fe3778925500ae281
SHA512 309d898ca2c77fc2bc9f7dce945f4c7722d7b63d9d068779a9157056784378206c131e58560604b1ab08efab3f92e4d9046c3fa2d3c1a6126ae03ffd3406c023
SSDEEP 768:jXwHSRWgs2fJ28F1+UoAYDCx9Tuqh0VfUC9xbog/OVbVuG/rockte0Ur4:jXwHSRWgs2fJ2u1jaO4GsdW4
TLSH
T159C2EB2B640CCBBE4F844A9DEC25AED76DD802CB9B984D5447FA890C03C67EB511B4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 326822c24fd35a105030aed9f0c47b503ff20c6a9a3a39867970a76a19e595c3
MD5 5a08316bc0f3eb65574ece00b3aceb34
SHA1 7132fa7d912834d3ff7940fa807c49a72b617233
SHA512 b4d54d9b49f527233841bfe683307c7e23bc4a4ba48810830bd9f4254bcd404ae249534921086c53c2be478791d849586c9e6b0daa0c8b79c87e51296e7454fb
SSDEEP 96:KReTieYgQGWAltgeGK4DgcGcW+9M+XHpm3zBj3TWH0ig7TK4Kg1Tc5xMvG/OKE8l:CeTieYgQxAl+eODgc1W+9M+XHpm3zBjy
TLSH
T1EA91C413B43A0240797D669C90F8996E86C274F37058A92A7FE445EA4F66F134FFC8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

f74e03bd-b1d5-4367-803e-e3a5b5dad7b9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\f74e03bd-b1d5-4367-803e-e3a5b5dad7b9.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 fac905e3b3d08f40a03b577e25ed5da3f8662fc43dd1cc321f9e826a49947a2c
MD5 9d910e5a6e665b45f8f03c58e15fecf0
SHA1 4ad55871f41e890b7498f01d926ab0c76fcb41dc
SHA512 9a799de28b0245e545155bebafd4b867a55cb2a8f227905b0a8bb67f29f0f511d9f6eb449552f29bdc017223b102a0013b0e6de41ad4612bf29a673bf5bad73d
SSDEEP 768:Vrv+4UNbd33Gxh/TBOWOiLQyONXyer1IRCzni9YRb9M6:Vbsbh3OxxSIqnbRb+6
TLSH
T19413BE36E468DE338DA293D6B04B6653BFF86057C6C40790EADA6B4D069B89D130B817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 3f9c4c18d11827106ed979023823a7c86ac7914900bf0b9feaadf8ac1572df10
MD5 63e4de670bf99c516796054bcb7d5ece
SHA1 b8f6bacc978b7d23012beb8567ae0aedc722c105
SHA512 4dad35ea7513cb04938edabf887161715de715132de9f55b30e6670ea121b527a0fd155b6d238caeca0cf0091df482b4a07972e498a1db85280befec851a9e09
SSDEEP 768:Wj+9V3Ggh/TBOWOiLQyONXyer1IRCzni9YRb9Md:F9V3RxxSIqnbRb+d
TLSH
T179F2BE36E465DE234CD293D6B10B2756AFF8516BC6C41B90EEED6F0E06C79AD430A40B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 550921a2740244f50d7a02a0e924ab2c96fba132c987f2cc6e16f3e7fa1f3463
MD5 209fcf07fef7576a82a0e80fa9b69a4b
SHA1 9af6b8fc33f2240d242c376a9db473e68e00f6ed
SHA512 9e86e7e62bfa1b0c1dcdfbf8b011167e347d6db10237af592f7950557259f8a605bf0278240a9ccf4457480a5a1d59d46a48306246d88792014f1481a91bda7e
SSDEEP 768:9F1j+9V3Ewg0gh/TBOWOiLQkONXyer1IRCzni9YRb9Md:U9V3mxdSIqnbRb+d
TLSH
T13203AD36D894CE379DA29BD6B20B3356EFF451ABC6C46A90EBDD6F0D01C759C030A816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 6d93bcccc6966a487c310ca00026ea95b74d355a74d0bf9a4da72df240066b4a
MD5 b2ce3f699e1b9a14d51bf465310cc3de
SHA1 954b9a3c281bff7e3dfb36d01a9fbe3bdc3c38ef
SHA512 867bb17dfc4573b33e79a9ce944e00c3bc7c31579f6a53ab06490ecf926ace97775b204a89b1c988adb0ba4a06f0252ea0852356eb6bed4181218b7211b625b8
SSDEEP 768:hrv+4UNbdz3G3/TBOWOiL0ONXyer1IRCzniB4eVH1SK7:hbsbV3qx0SIqnvEH1l
TLSH
T12A03BE36E4A89E378CE2A3C6B14773037FB86057C6840790E9DE1F4E069B59D230B957
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e0993c01-ab90-43f5-96d4-365977f44447.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\e0993c01-ab90-43f5-96d4-365977f44447.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download