c8695479668abd435e727d18f4bec1095cbbc8b594a0e8c19efe083cc7c73663

Analysis

max time kernel
152s
max time network
191s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
21/07/2026, 22:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Lang/ct/Required/FilesUse.htm
Size 3KB
Sample260721-2cnn8sstdx
SHA256 c8695479668abd435e727d18f4bec1095cbbc8b594a0e8c19efe083cc7c73663
MD5 fc4e9f259896d6fa37c01c3515f88c86
SHA1 c55216ec3fd7894f3f4e9c87ffac5922850e3021
SHA512 f425b3093067c85e9a92e04f75799f1fedd668196ddeee1215274ff1672a8cb19d18d65c751abf65fb0ffd66d824331c032d96ac8f0944c84950c2cab0ff6964
TLSH
T18371209482E93D49E5C16348AA2AD6038E30D18720259710B93EFEBE3F7E55714267FD
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4356	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134291472416335139"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2115213192-531537726-3295841909-1000\{BB0FDE7C-1885-4BF2-8A15-186643EDD8B7}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1988	msedge.exe
1988	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 4120 wrote to memory of 2704	4120	msedge.exe	88
PID 4120 wrote to memory of 5840	4120	msedge.exe	89
PID 4120 wrote to memory of 4356	4120	msedge.exe	90
PID 4120 wrote to memory of 5840	4120	msedge.exe	89
PID 4120 wrote to memory of 5840	4120	msedge.exe	89
PID 4120 wrote to memory of 1316	4120	msedge.exe	92
PID 4120 wrote to memory of 1316	4120	msedge.exe	92
PID 4120 wrote to memory of 5868	4120	msedge.exe	93
PID 4120 wrote to memory of 5868	4120	msedge.exe	93
PID 4120 wrote to memory of 5868	4120	msedge.exe	93
PID 4120 wrote to memory of 1420	4120	msedge.exe	94
PID 4120 wrote to memory of 1420	4120	msedge.exe	94
PID 4120 wrote to memory of 1420	4120	msedge.exe	94
PID 4120 wrote to memory of 4236	4120	msedge.exe	95
PID 4120 wrote to memory of 1004	4120	msedge.exe	96
PID 4120 wrote to memory of 4236	4120	msedge.exe	95
PID 4120 wrote to memory of 4236	4120	msedge.exe	95
PID 4120 wrote to memory of 1004	4120	msedge.exe	96
PID 4120 wrote to memory of 1004	4120	msedge.exe	96
PID 4120 wrote to memory of 3276	4120	msedge.exe	98
PID 4120 wrote to memory of 1088	4120	msedge.exe	99
PID 4120 wrote to memory of 3276	4120	msedge.exe	98
PID 4120 wrote to memory of 1088	4120	msedge.exe	99
PID 4120 wrote to memory of 1676	4120	msedge.exe	101
PID 4120 wrote to memory of 5628	4120	msedge.exe	106
PID 4120 wrote to memory of 1220	4120	msedge.exe	107
PID 4120 wrote to memory of 5312	4120	msedge.exe	108
PID 4120 wrote to memory of 6004	4120	msedge.exe	109
PID 4120 wrote to memory of 6004	4120	msedge.exe	109
PID 4120 wrote to memory of 3976	4120	msedge.exe	111
PID 4120 wrote to memory of 3976	4120	msedge.exe	111
PID 4120 wrote to memory of 1988	4120	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\Lang\ct\Required\FilesUse.htm
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffe3064c188,0x7ffe3064c194,0x7ffe3064c1a0
  2⤵
  PID:2704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1644,i,1189415265600124353,9250756726336801531,262144 --field-trial-handle=2300,i,17069773649538364436,15304322309426414601,262144 --variations-seed-version --mojo-platform-channel-handle=2292 /prefetch:2
  2⤵
  PID:5840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1888,i,4165852831919889562,1575155991545421730,524288 --field-trial-handle=2300,i,17069773649538364436,15304322309426414601,262144 --variations-seed-version --mojo-platform-channel-handle=2404 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1812,i,12318578595276463446,11596498055197739058,524288 --field-trial-handle=2300,i,17069773649538364436,15304322309426414601,262144 --variations-seed-version --mojo-platform-channel-handle=2768 /prefetch:13
  2⤵
  PID:1316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3604,i,16370137857526403566,5847590418040986903,2097152 --field-trial-handle=2300,i,17069773649538364436,15304322309426414601,262144 --variations-seed-version --mojo-platform-channel-handle=3664 /prefetch:1
  2⤵
  PID:5868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3608,i,17673592539504427181,10083339495285978439,2097152 --field-trial-handle=2300,i,17069773649538364436,15304322309426414601,262144 --variations-seed-version --mojo-platform-channel-handle=3684 /prefetch:1
  2⤵
  PID:1420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4336,i,18432738178188644111,2734898890001531842,2097152 --field-trial-handle=2300,i,17069773649538364436,15304322309426414601,262144 --variations-seed-version --mojo-platform-channel-handle=4480 /prefetch:1
  2⤵
  PID:4236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4364,i,6470858079824716775,9527488510077795683,2097152 --field-trial-handle=2300,i,17069773649538364436,15304322309426414601,262144 --variations-seed-version --mojo-platform-channel-handle=4456 /prefetch:9
  2⤵
  PID:1004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5320,i,238235373362104028,235408481940360095,524288 --field-trial-handle=2300,i,17069773649538364436,15304322309426414601,262144 --variations-seed-version --mojo-platform-channel-handle=5424 /prefetch:14
  2⤵
  PID:3276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5328,i,3775141206936745868,15805432661856921581,524288 --field-trial-handle=2300,i,17069773649538364436,15304322309426414601,262144 --variations-seed-version --mojo-platform-channel-handle=5444 /prefetch:14
  2⤵
  PID:1088
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5948,i,1754092918693481804,18422429861071377543,524288 --field-trial-handle=2300,i,17069773649538364436,15304322309426414601,262144 --variations-seed-version --mojo-platform-channel-handle=5964 /prefetch:14
  2⤵
  PID:5044
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5948,i,1754092918693481804,18422429861071377543,524288 --field-trial-handle=2300,i,17069773649538364436,15304322309426414601,262144 --variations-seed-version --mojo-platform-channel-handle=5964 /prefetch:14
  2⤵
  PID:1676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5008,i,15423940499296707980,330750535094014473,524288 --field-trial-handle=2300,i,17069773649538364436,15304322309426414601,262144 --variations-seed-version --mojo-platform-channel-handle=4512 /prefetch:14
  2⤵
  PID:5628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5012,i,8608868892871576872,17220562758697083602,524288 --field-trial-handle=2300,i,17069773649538364436,15304322309426414601,262144 --variations-seed-version --mojo-platform-channel-handle=4988 /prefetch:14
  2⤵
  PID:1220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4996,i,13827039747537152239,11820135488206467543,524288 --field-trial-handle=2300,i,17069773649538364436,15304322309426414601,262144 --variations-seed-version --mojo-platform-channel-handle=4660 /prefetch:14
  2⤵
  PID:5312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5616,i,8765512678245075788,382677018129100835,524288 --field-trial-handle=2300,i,17069773649538364436,15304322309426414601,262144 --variations-seed-version --mojo-platform-channel-handle=5012 /prefetch:14
  2⤵
  PID:6004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5924,i,6469666610698558927,8352383359727089904,524288 --field-trial-handle=2300,i,17069773649538364436,15304322309426414601,262144 --variations-seed-version --mojo-platform-channel-handle=4964 /prefetch:14
  2⤵
  PID:3976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5744,i,7052593828859777629,7748248481834698118,262144 --field-trial-handle=2300,i,17069773649538364436,15304322309426414601,262144 --variations-seed-version --mojo-platform-channel-handle=1056 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1988

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2528

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4932

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:1052

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c80f71026fa07cc9b3e69c8779d4b4b40710cf7bc2893b740943db0d0f79591a
MD5 590eca05f11ec72644a09f205b548fbc
SHA1 c6521700bee3b500259ee3a70292b90201f20597
SHA512 fddd457c35c61ceb727f99bd39f55314cdeb7d062798c573a377675121f972ed95109fec329f911c502139a1794b70e5a98a57dd3b21b5a70e6518890a361f66
TLSH
T1E7D02B7A37C40404C0D0747221F24602D530C520AC4C81088801702CCC207C3010B8EF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ee00825bbd5a4f21308ad2e10e5a9d3c4512f07fbd288ec8ac76788de6019e25
MD5 c3584e6bc22b3ad2f168ede48d20a993
SHA1 ffb4ecef8f65638ca17e16a32806195193977c7e
SHA512 5fd777359305e67e9f30fc404af9013a876846b1d6db271fa73dfcf2ee22fb25a8e26d4d0c970cc3a8219df11038dc6b4c2c411db652593bda1c3d7643753c0b
TLSH
T18AD02B7637C40404C0D0747621F34602D530C520584C81088801B03CCC207C3010A8DB
MD5 SHA1 SHA512 TLSH

Submit Download

1d67e0a3-51cc-4dcc-b80a-6503d09d36ad.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\1d67e0a3-51cc-4dcc-b80a-6503d09d36ad.tmp
Size 23KB
SHA256 36fa1e839d4954c8c0a2b47b272cf3dd8cb58a10a5660ec9649b2e7ced260132
MD5 46216ad6e0774bca8ecd516cc3008517
SHA1 d4c7734ea29e089715430e446cacdfd4c4513ec7
SHA512 0da3c531209411bc9c4da115ab94a8b3a5de760c777d4ca0b1a8765745d03cdc9a96a23701fb60dc6866a46294a13d7d2049c69cd7369664c42ff041f21990c4
SSDEEP 384:KAX0EdqfCtgNbFfVNKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVui9LZRGcrocm+:K80EdwWgNhfVN8F1+UoAYDCx9Tuqh0Vc
TLSH
T124B2BA3B640DCB7E5F800A9DAC196FD77DA802C796988D4047FE994C02C77EA912A4DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 9b440dff0fb725cf35e0cde751948bad04ac310e73f273ce9f0949e1e34603fc
MD5 a7482f70eb01ab83c48f79ffd1f23b51
SHA1 da9fdaa903bfe36e8d6aa6f6f1dbf5db4c67efa8
SHA512 6411a12100445a98ef0a0ce080b0368a4e968a21c027bd5c43738ab525e43670c3afdb8f6af02c6be1826c07a3d753fbef282909d0ddfc9f7d607ec17b453489
TLSH
T15951F64D43E70BF1F329457685EE576CB2F08499810B6EF14B2A6E380AC7F0090E3853
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 a6fbdc3009309c583eff361c9c57e101c232922cb3f506a1b8205304b24fb789
MD5 ed64666ab0cc2f12f2497dd5612244e2
SHA1 29bc18e7f99dc448dd5c45e92a0180a5e572eb95
SHA512 a15840d55299b961970c3dbc007e2602ac81d7eb9261bce879b3dc51a637c4f8d2cb18c20e4e7c797763974228565489fef744924c729d326874fc87fd4efb51
TLSH
T17651E64D43E70BF1F329457595EE576CB2F4845A820B6EF14F266E380AC7F0090E2853
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 0a5c4de54ff30bc1b7bd03823ffd52bd55fd11aa28590432a4d9ce8e5b625cd3
MD5 6f889249b92706ddb8dc8ad22c679dc7
SHA1 29ab12ae51f0dfcd1a58276ca689cdfd0efaf643
SHA512 ff5cbcee02fdb9dd172b651efee4f1681880ea3cf700cb17293ffd29665c1cc3e9a6a0c8e1f27a65fcd3420bf6add73904f53e6960a543312ff383465d7afea8
TLSH
T18941CDF7C7E8867D890156F0AB147E2BCE2D0915832C3D5AC8E4AF1B93E2871E14199F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 0e97941f825cfc033e650a5a7b2685cb09cb84c196cc46c05fe0314bbd32af82
MD5 515ac8308e1947ba55fc4dca5049fd57
SHA1 c512da7a51d42ea96c76c7e166b6b288262496b8
SHA512 5d0f17e16ed55ebb35d928b4d920691d677b13eab90b1df207a416d336073ff4d8013156f8596cfe42caefd01b7c7e5d47918cbd2c2b6f0784307e33fc65b367
SSDEEP 192:sxRERlbO/f1sWt53AtuzoA8p4D/g6+WNIYZFLKKGOIgIJ:sxREjO/f1sWjE+/5ISvs
TLSH
T13832B7166928A93B5CC7D21DBB55BF53D7F96032A1902F48B6FC970C14EB6DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 db47f1baaabd6a993f9e21db28590219fcb2a03e2122d1811e3cb0c8c330f94f
MD5 2afe2d463ddc548a4b6eefa3af7dc432
SHA1 ae534fb2e0117430d87d64d95ac64f0cf30ef872
SHA512 b096b5947f299aae51d26840a2f6a954be5afda746fe2f3a53d0fb9a786c4389e081cd87d766f75c61e955775f9d3088c50c9ffe60783e8db6aff5c3c07c99bd
SSDEEP 192:sxRnRlbO/f1sB6t53AtuzoA8p4D/g6+WNIYZFLKKGOIgDUJ:sxRnjO/f1sB6jE+/5ISvE
TLSH
T10932B6166928A93B5CC7D21DBB56BF53D7F96032A1902F48B6FC970C04EB6DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 783e5f1eb18a0c9d2a4e89609bcd5a2b6d0a9f5c023e30612367261653a26985
MD5 1b11a3bdd9163006ac1ea1b74ff36686
SHA1 015bf8dac7c09cc482103014b113d3315600989d
SHA512 f5eaac90ab309102da9b3dcb10187a83b6511473702e973ca04666f13b2442af34ff9129dc423016371f59a95c4ea3e84078436e040f52ec82db942f7e056887
SSDEEP 192:sxRnRlbO/f1sB6C53AtuzoA8p4D/g6+WNIYZFLLKGOIgDGJ:sxRnjO/f1sB6GE+/5ISke
TLSH
T15042B6166928993B5CC7D21DBB56BF53E3F96032A1902F08B6FC9B0C14EB6DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5bbdce.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5bbdce.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 0f39d4d3ee0733a0c8dcc3f22c66051fd59593e15746548ec965c1a1456b052d
MD5 e76295cbd4ea6730942a63010da22c82
SHA1 8e60340fd3d1bc8a8221e067904dd261fc1e76dc
SHA512 d905909b205922b1f0de651eb275625a48a0ccdd20c82c740520439732113e4ad80962cd98bf381c28f3708f84b3337cf3861cd1c422b9ce395b2499abb4aa04
SSDEEP 768:0j+9Z3iFJ2W+LeSFOU3SfbX4fouOToPvB2thtA9VAgoMVcLCO7w/Rj:j9Z3iFJtf7snnwthttdHCt/Rj
TLSH
T1D8F2CF72A8A98D23DDD5D3E8720B324B6FF0816395C41F9499DD2B0D058BBAD470BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 dcea593b9362d505bc5f8cdf9b3df1b9b4be989d8dda51a23261ba58e7547819
MD5 3126458c77da0c6e41216544b536b1ac
SHA1 d5d7e912b08a46b6e8b3f80008a899b19435eb9e
SHA512 04031b6082fcf3319cf711d2d22426e4318f567c54a643b3fb94cefc60900200d0d43cbdcb9a2b5402637f8e2f1346db1bc006ac0a381d37d57117461dafb571
SSDEEP 768:Yrv+4UNbdP3zFJzW+LeSFOU3SfxX4fouOToPvB2thtA9VAgoMVcLCO7w/Re:Ybsb13zFJKfBsnnwthttdHCt/Re
TLSH
T11A13CF32A8AC8A73DDE5D2A8710B72473FF4905396C40F9499DD2B4D068B9EE570BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 35204290273672c3d85ac8782ff419410a3243a63ad30679da7fa02447c736f5
MD5 d1cd5a94b7c9c91dede994f379133949
SHA1 a418446fd011d7d1512a13835f7a2bc644391cfa
SHA512 f9e6856d2f07561e769fec7947afe2070587cf027d878c23d60f8d6aa71638cb6aa32f0381a00c1aaad2d25f8e568068b01e03c065012820707634baa7254449
SSDEEP 768:hj+9Z31FJ2W+LeSFOU3SfbX4fouOToPvB2thtA9VAgoMVcLCO7w/Rj:89Z31FJtf7snnwthttdHCt/Rj
TLSH
T18CF2CF72A8A98D23DDD5D3E8720B324B6FF0816395C41F949DDD2B0D058BBAD470BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 f48e86caba4ed4695e4a46199ce2f72c663a466e3e86c21c8f451534130f748c
MD5 46b34ae929e58f1c34b555b0062ae759
SHA1 b7ecf925e3456e399c2b54b2dd260da6032ff4ce
SHA512 a93b7a068eac45638330b235772fdc66153c4e2fe07c357f9aea13748e27ca5acebfe846b48378b6df9e521f1bc1cd628a5cc456fba3a77a8309b1e53d7b3357
SSDEEP 768:eF1j+9w3owgTFJ2W+LeSFOU3SfTX4fouOToPvB2thtA9VAgoMVcLCO7w/Rj:b9w34FJtfTsnnwthttdHCt/Rj
TLSH
T1D203AE7398A9CA67EDD5DBD8B20A32476FF08163D5D16F94AACD2A0D018B6DC430BC25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 f651c3b466ec93a87776a5bac5bfcb102cd5119ed345e7ea76e08ee6c2e207e3
MD5 b7b9e3b1f431b23bdbf0fca49342873c
SHA1 785ec888ac6f0da6fed48e61891c5eef8981e675
SHA512 6c1f9e383e130891d325b993447c0c4bda89aab9998367b59da2200155f3fab86043ea8a6725339d58dea21db184dc1530196207476708da5154ee3fd1d93e9c
SSDEEP 768:grv+4UNbdH3ba+LeSFOU3S8X4fouOToPvB2thtA9VAwFeVH1SlX:gbsbh3OCsnnwthttMEH1Y
TLSH
T1E603CF32A8A88933DDE6D398320B72573FF4816396D00FC499DD1B4D069B9DD470BD66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

788434bd-36ec-48e5-b15a-89cde3d6804b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\788434bd-36ec-48e5-b15a-89cde3d6804b.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download