810b5d2199b935c83c833a5d32e52be1fba7abb3d677f823bdf5cf8a64a813f6

Analysis

max time kernel
148s
max time network
155s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
16/07/2026, 12:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
App/DefaultData/profile/bookmarks.html
Size 10KB
Sample260716-phpr9sc13r
SHA256 810b5d2199b935c83c833a5d32e52be1fba7abb3d677f823bdf5cf8a64a813f6
MD5 b630972041e5162a7d4e4bc8c89de2b6
SHA1 d90459255078749b55cb9f905e89622307d7497e
SHA512 53c442571081a802a1d6383e38ef0d378cddfd1b71a556fdeeaabe68f630d8f806b7830f5323d34b5c2917e2392a0067cdda5f41c90d5aed5150535bd81fd5d4
SSDEEP 96:fh321nnfJf6NWvblL77bNGkVLx7PLCb77iY4xcAcS2vFa0hzJSn7bNGkp7bNGkWF:fhm1R1lDF/PLCb7uMIO8SeF5FHFTFS
TLSH
T116322BB62335DE0F17E8FE04D410AA304C3E2D9350E9849AF5547F26AAE3A55D0ACEF5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
6100	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134286780460535249"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2301830172-776172150-2531349243-1000\{E3D956E5-568A-4AED-AB0F-22C4923DEC25}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3404	msedge.exe
3404	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 720 wrote to memory of 4700	720	msedge.exe	87
PID 720 wrote to memory of 6100	720	msedge.exe	89
PID 720 wrote to memory of 4736	720	msedge.exe	90
PID 720 wrote to memory of 1444	720	msedge.exe	91
PID 720 wrote to memory of 4736	720	msedge.exe	90
PID 720 wrote to memory of 4736	720	msedge.exe	90
PID 720 wrote to memory of 1444	720	msedge.exe	91
PID 720 wrote to memory of 1512	720	msedge.exe	92
PID 720 wrote to memory of 1512	720	msedge.exe	92
PID 720 wrote to memory of 5988	720	msedge.exe	93
PID 720 wrote to memory of 1512	720	msedge.exe	92
PID 720 wrote to memory of 5988	720	msedge.exe	93
PID 720 wrote to memory of 5988	720	msedge.exe	93
PID 720 wrote to memory of 1960	720	msedge.exe	94
PID 720 wrote to memory of 1968	720	msedge.exe	95
PID 720 wrote to memory of 1960	720	msedge.exe	94
PID 720 wrote to memory of 1960	720	msedge.exe	94
PID 720 wrote to memory of 1968	720	msedge.exe	95
PID 720 wrote to memory of 1968	720	msedge.exe	95
PID 720 wrote to memory of 4220	720	msedge.exe	97
PID 720 wrote to memory of 2736	720	msedge.exe	98
PID 720 wrote to memory of 4220	720	msedge.exe	97
PID 720 wrote to memory of 2736	720	msedge.exe	98
PID 720 wrote to memory of 5668	720	msedge.exe	100
PID 720 wrote to memory of 3688	720	msedge.exe	104
PID 720 wrote to memory of 1200	720	msedge.exe	105
PID 720 wrote to memory of 3376	720	msedge.exe	106
PID 720 wrote to memory of 3840	720	msedge.exe	107
PID 720 wrote to memory of 3840	720	msedge.exe	107
PID 720 wrote to memory of 3404	720	msedge.exe	109

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\App\DefaultData\profile\bookmarks.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffdf0a2c188,0x7ffdf0a2c194,0x7ffdf0a2c1a0
  2⤵
  PID:4700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1856,i,5202841427951038079,13058830818423719947,524288 --field-trial-handle=2724,i,15523485450816903697,16288792085547052626,262144 --variations-seed-version --mojo-platform-channel-handle=2760 /prefetch:11
  2⤵
  - System Time Discovery
  PID:6100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1588,i,7748198510458939990,812116516026805973,262144 --field-trial-handle=2724,i,15523485450816903697,16288792085547052626,262144 --variations-seed-version --mojo-platform-channel-handle=2720 /prefetch:2
  2⤵
  PID:4736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2272,i,928774421825178062,1578281498811620845,524288 --field-trial-handle=2724,i,15523485450816903697,16288792085547052626,262144 --variations-seed-version --mojo-platform-channel-handle=2856 /prefetch:13
  2⤵
  PID:1444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3560,i,11029478058460024708,7478028125133326830,2097152 --field-trial-handle=2724,i,15523485450816903697,16288792085547052626,262144 --variations-seed-version --mojo-platform-channel-handle=3616 /prefetch:1
  2⤵
  PID:1512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3564,i,6726118075008995211,10205549601647775047,2097152 --field-trial-handle=2724,i,15523485450816903697,16288792085547052626,262144 --variations-seed-version --mojo-platform-channel-handle=3608 /prefetch:1
  2⤵
  PID:5988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4260,i,9598907474490332739,2953755011333783983,2097152 --field-trial-handle=2724,i,15523485450816903697,16288792085547052626,262144 --variations-seed-version --mojo-platform-channel-handle=4272 /prefetch:1
  2⤵
  PID:1960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4276,i,18416102169784245873,7376418792812069776,2097152 --field-trial-handle=2724,i,15523485450816903697,16288792085547052626,262144 --variations-seed-version --mojo-platform-channel-handle=4284 /prefetch:9
  2⤵
  PID:1968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3692,i,17493763163267966803,10583614477626182777,524288 --field-trial-handle=2724,i,15523485450816903697,16288792085547052626,262144 --variations-seed-version --mojo-platform-channel-handle=3752 /prefetch:14
  2⤵
  PID:4220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3668,i,5920864051947524186,602092055447848350,524288 --field-trial-handle=2724,i,15523485450816903697,16288792085547052626,262144 --variations-seed-version --mojo-platform-channel-handle=5360 /prefetch:14
  2⤵
  PID:2736
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5876,i,492356903737246106,4045265357203100542,524288 --field-trial-handle=2724,i,15523485450816903697,16288792085547052626,262144 --variations-seed-version --mojo-platform-channel-handle=5908 /prefetch:14
  2⤵
  PID:4972
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5876,i,492356903737246106,4045265357203100542,524288 --field-trial-handle=2724,i,15523485450816903697,16288792085547052626,262144 --variations-seed-version --mojo-platform-channel-handle=5908 /prefetch:14
  2⤵
  PID:5668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4712,i,221025411069263301,5877030594876798780,524288 --field-trial-handle=2724,i,15523485450816903697,16288792085547052626,262144 --variations-seed-version --mojo-platform-channel-handle=4256 /prefetch:14
  2⤵
  PID:3688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4716,i,13765930316783244728,613701629300423307,524288 --field-trial-handle=2724,i,15523485450816903697,16288792085547052626,262144 --variations-seed-version --mojo-platform-channel-handle=4688 /prefetch:14
  2⤵
  PID:1200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4700,i,8533234858797320285,5639816358178334659,524288 --field-trial-handle=2724,i,15523485450816903697,16288792085547052626,262144 --variations-seed-version --mojo-platform-channel-handle=4720 /prefetch:14
  2⤵
  PID:3376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3428,i,15656080620346109703,3729647882114261923,524288 --field-trial-handle=2724,i,15523485450816903697,16288792085547052626,262144 --variations-seed-version --mojo-platform-channel-handle=2076 /prefetch:14
  2⤵
  PID:3840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6564,i,1600240875600156115,7327795035733623952,262144 --field-trial-handle=2724,i,15523485450816903697,16288792085547052626,262144 --variations-seed-version --mojo-platform-channel-handle=832 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3404

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2780

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3208

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 994380ffd288a5f1a9acc9eb76a487a55b12cc1daec839d811240f6cbdc4da3a
MD5 f5ed4946834be586ac6410ed88740a7c
SHA1 6108ce368e8b3bb8012956bb25606c3b16835c7b
SHA512 76bf60b37c50422ab125edd3da70629e685408a106655a9b7e5cb6aa7b6a9000c76d8ac2f5dc85e58e893b61bef9b539b9488ac894f1fc1338a58944dc9f4711
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P77:fwUQC5VwBIiElEd2K57P77
TLSH
T1E5B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c36ac766a384a109222b8b647d2f5c1c2e6c4672a4a2c6b8a01f6eac0a5df074
MD5 f9f896b0e6f281d55b1ca3fa3c1ccdcd
SHA1 db44df3874cd86a961c82d25f3ae2004f249b2df
SHA512 6b8c8d305c2d7e4a3b5efb6e1967d7db1b1ffdb7979edd315013037da369c923060dae4ef8a7219176aa7e0bc1fa4cb98e48470ea2f569243a95d3301f5a40bd
TLSH
T160D09BD575046A14C5A1303A21D1935392604835741945874051E55D5C5479743FB5BD
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 b53c58762bff2a5723ae446675e8f65fd50818b95383c8f3c7efef01af06e466
MD5 629a18fe1b7a241215c77a30d7d8d7ee
SHA1 5e7bd5b514f4e46a4b986c8b89d0025cf81a1f36
SHA512 04fd58619789dc107f680a57dba3aec42e4bab7c29c0defd7e1b8ca2d078ca4c91317932ff076171bae60d370b28de32c94039c6ab690d5004ddcb857977f38a
TLSH
T182D09BD575146914C5A1303E21D2935392504835601945874051E56D5C5479743FB5AD
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 624ef23e21abe2bb079e5e482150613918a8c2d462aed0751f654091c0914573
MD5 8ccc6a055e563497b94a4b857fa57838
SHA1 69adc909c5ee615f07669e8ba431fef67e93ef37
SHA512 f86e3af7cb1b25610c4211865be263147ceb84927dd5aea2fec05f863fe888100c87bda5f3c24660ea27c8e5f52dfd06e9bbe5c49964980c3c2e10c57dd1c532
TLSH
T18A6173A803AD3DE1DF644AB392FE84C831F48869C51F6F334575AEB89B5AF446740312
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe599234.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe599234.TMP
Size 3KB
SHA256 6ceb2013dc60b9fd07632d46ac0e659b2369cf132ca9f4a9db860a5ad1e431a2
MD5 005fc1db1d0be20faccae42638791bc4
SHA1 bf274f176f3c941be573ac10a21c4b41443a0846
SHA512 b24c6fe9e89da6f797ed7205126bf203982887c4aec45ccdcc1f33a109d051125c1f053e4e6f0056ef9f14c4fed7313fac899f8602bb162aec0216ec0daf56dc
TLSH
T1A661826807AD3DE1DF248AB392FE84C831F08869C51F6F334175AE789B1AF446740312
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 14e32ec66ccf6a338c40068ef32ee29c751c37d64f70077121cf96324df013cb
MD5 90d43069f4a089a75a25125e0e93f37f
SHA1 bea7661f80bb6405404a3c23cf8b84d89b55f444
SHA512 682a417c43b38803030bf3e86c3ec7ee2db9795e935d3bd742847aacb1c593e1e453ee99c1f92cdf85d4fb604363b78df53c38843de5c8144b4d445612808d20
TLSH
T15611BDB3C3D5856E891116F06A24AE1BCE1D0916431C7C1A85D4EF1797E3075E00155B
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 e21c6fceeca43263df41c14ad72fab91f0f20cd587a934d0a223f7c538020d14
MD5 f7540fb095386d18ef46580c6c80870d
SHA1 898c170076d9db3cf8948f1137dddd1698efea98
SHA512 03f289f2b5ca0cf51f9851d374bb61c640682902c1671892bb694c61773619eef083a4bdcff0653353dbd89e1f8bbd93af3833b8b7dd1f8af4fa14549e94cf78
SSDEEP 192:sxRUC9RJjyM/jK1Ml8wbZF/fBJszPsmZrg4zoA8p4Ub/g6+WNIYxzJSUGfYNIgIJ:sxRT3ln/fDszPIJ/5Iuhs
TLSH
T14652C8066A289977DCDBD20DFA557F93D6FC5533A2901E44AAFCDA0C00E66ED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 b7aa792127b6387dae6e786588221fc4fceb386d32ab8189a736660ee8e26a1b
MD5 e828c39eb139ac11ce906d747fa77af9
SHA1 0cdc2ae2370231ca8b38d6def6b55c5ea54845c5
SHA512 d094bda96ab7b47e5b6a59f75ba7bba52b387ddca73d49e9cd447dd01537751ac0f2d00ebff548b410f3147055503450625aa7694195362fce47a4d6015441d6
SSDEEP 192:sxRUz9RJjyM/jK1Ml8wbZF/fBJsZzPsmZrg4zoA8p4Ub/g6+WNIYxzJSUGfYNIgA:sxRw3ln/fDs5PIJ/5IuhA
TLSH
T18B52D906A9249977DCDBD20DFA417F93D6FC1533A2901E44AAFCDA0C00E66ED621382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 b22fe96447fbc1a2e3c40253725be5f39c77118064b0c3a6b712ee2846e08c27
MD5 41ff9a0c77962eb5c873338af47a6824
SHA1 dacfa16898868f687770701c7b87db774381a424
SHA512 867d35901c0afb04915e4cef0353a1ffe92582f4f8f201fb7d4b064f571fbd4f7bd936e37f439d69ea31cb84986eab12b75a38abeb1d82465f04049845608693
SSDEEP 192:sxRUz9RJjyM/jK1Ml8UQZTbZF/fBJsZzPvsmZrg4zoA8peUb/g6+WNIYxHJSUGfZ:sxRw3qxn/fDs5XIL/5IkhK
TLSH
T1CD62C716A9289977DCDAD20DFA417F93D6FC5533A1901E44AAFCDA0C00E76ED621382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 49521e03fe0b0636745763898a6a2badfdd0d8b7d7fdf477fa5d22825e52e0d3
MD5 c0ffd51cc3437bb7e730b6921f1f4fa1
SHA1 baf2cd46bf7c418ed67cf7f830716af9f70a3b68
SHA512 c1e31f5ebc033714a28bfc99eb1aa686074f917365cc10438b7d7066d89267643872023c997ca331daaf5441c965a9d2b55ae0f40fe84dffe62c48ff2eedc24c
SSDEEP 768:0xCyAjWgbrfM18F1+UoAYDCx9Tuqh0VfUC9xbog/OV9rVACroJPeHR:0xCyAjWgbrfM1u1jacpAZJPGR
TLSH
T125C2EC3B640CC77E4F844AADEC25AED77DD802CB97984D544BEA880C03C67EB521A5DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 b072f31870d0008fa5731cff4d59bb1d0cf0434e13aa411c96b44d5e234e37c8
MD5 0dbe7bd927ab6d2a28b955853f66c397
SHA1 2a520cfe450fb2bb239e8eb09bf9b4e3bf65104b
SHA512 01583f58e6f6d9e6e7a8ab930bfc45ff9b51b5508100045a91ab119747868d8d58565626cb8c62e6f39f8e50ef198f3d8c203808c55b3589407c6ecd2b1725a1
SSDEEP 24:KSiSEiqiDivPikSi1iRiA1iticDiZEihiEiGPiDSigiMiP1iEijDiGI4ioiPKXi8:KIeOIXKzKI7ytrIpK8AUIsIzKhCsf
TLSH
T1AF916387B13A029028FF291C80A5D917DAD1B0737139E96B3BE854731F6AF420EBD5D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 e1bf804f7a93d55e5c475dc11a8c6ac486931b029494228c8f7e67bb173b7431
MD5 da17ff8e395c044b66f03510db3e0007
SHA1 41361e8247b59f5cccbbca5689404bd88d1f1c88
SHA512 e202ad3b1d2415aa2086910efe6cccf9b81ba75350017d18a9be7bb9c238e2708dbd2b0e752dce328bb236e8eea84504a4752404f8570c6bc852ed68fd23eab8
SSDEEP 768:Krv+4UNbds3IPkKL2MjF669yrqUjWiIwwxMtVUileX:Kbsbi3LUjF66INWZTMzUsQ
TLSH
T1F613BE31AC985A73CDF6D68172137683BF78119382C80F98C6DCA70D4A9B4DD674B92B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 b32725a8edbc0d655bb9d2af052e4bdecf94536c0aaeda6643de7b0326205d42
MD5 ffa8300edabbbd7ea5468a8681616eb2
SHA1 7516279ff6b6da7b012bfac8bf3a79adc462d124
SHA512 105de0d9b809da820513c541c7f7b4049e94adfffa1f66854e747fca2ecaf2de93a0b145e9d3f18c7b35ae8f907de969d29a41b95658f05e805780ff7a00ddb9
SSDEEP 768:iF1j+9M3owgfPkKL2uPF669yrqUjWiIwwxMtVb9MM:X9M3nGPF66INWZTMzb+M
TLSH
T11A03AE31AC848AB7CDE6CB85B2133786EFF441A7C6C45E98E6DCAA0D059B1DC5347829
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 b9ef3dc17020ba2d16f4f98be84fadf3d8f7071f61fa5e2d44c82e4294d083c7
MD5 1ee40c453a9e970888db97e821fbbe2b
SHA1 6369067778dc9455c375b4859ebe5d07a659fa68
SHA512 ca3bfd3c9f6d50c4bb3990c6d1b2e8d08f981cff2b943a3f21c64056197716d3a36fc4ce8d0dc952a6f496513f83c3d80ea349bff12a78226f7c0d09ba1e37dc
SSDEEP 768:8rv+4UNbds3UPkKL2MjF669yrqUjWiIwwxMtVUileX:8bsbi3fUjF66INWZTMzUsQ
TLSH
T1E013BE31AC985A73CDF6D68172137683BF78119382C80F98C6DCA60D4A9B4DD274B92B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 43KB
SHA256 7d183f33b4328dede47f929d08563b60a8a968eaee523866a220f51fa41b00f4
MD5 6674c0f06529aed561b99934fc380e1a
SHA1 7425d4d24d23eb85ade9637597af82d13e94fd44
SHA512 8cea95d0dec7439bb9e8dd924c2174fbae2a72ab4cf354e9de22371d11562051e1e5b26e4916b44c1458e9246a37ef7d9172d4a0f75985b149c0fbd9d9a85b21
SSDEEP 768:iF0rv+4UNbdS3pwgyPkKL2cnF669yrqUjWiIwwxMtVUileX:Dbsbo3pEnF66INWZTMzUsQ
TLSH
T1F213BE329C989A77CDF6DB81B2137383AFB411A3C5C44F98D6DCAA0D459B0DC134B96A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 dc3fb4acb876831e41d9dd4cb78cbbeb29dc09aa66b7f1698ab54b2ea272a9ad
MD5 5f7f27206aa833cc4f26fd9c2221b9fe
SHA1 61aa35a0bce4c89c0a7e5dd2ae3bdab2d3cb7c8f
SHA512 46d3c6f871f10700b2852b93c9ec7d7862209e393e36dc8775a03f00a82b9a682a7523be8c7a570e9ed138e61aa6e2920160f34438ca2fbef355ad09ef2f5f12
SSDEEP 768:arv+4UNbdl3oPkKL22jF669yrqUjWiIwwxMR7Uiler:absbX3vujF66INWZTMhUsQ
TLSH
T11003CE30AC589AB7CCF2D68672537783BFB8109396C50B88C6DC670D469B0DD2747A6B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ac4e9604-ec20-4afc-b74c-4f77afd848fa.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\ac4e9604-ec20-4afc-b74c-4f77afd848fa.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download