bbc24cf0260b7c1dd0f7091fc4044dba4791902414003ee699f0ba031a6d5635

Analysis

max time kernel
148s
max time network
152s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/07/2026, 12:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
application/core/index.html
Size 142B
Sample260730-pdvgys1vbz
SHA256 bbc24cf0260b7c1dd0f7091fc4044dba4791902414003ee699f0ba031a6d5635
MD5 d92311600f6632e0f98c0e5777acf431
SHA1 e799bd5ab234730a641b034fb62d5f7ca0461c50
SHA512 0f6c1d055daf7e1ddc565fd70c9a98f38fc3ee874141494cb2c4f3ed41f43b2d4304167592ae7e41ac95af257b92e2074f5ac82a8f4286624878ed402e1bd09f
TLSH
T1D3C08C66220C2C0C52F233B01AC02260219323C002032B255B8451233A1111DCDC218D
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5648	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134298872343813164"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2115213192-531537726-3295841909-1000\{4E6195E6-1ACD-48B2-9AE0-C54DD2B2908A}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1360	msedge.exe
1360	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3060 wrote to memory of 5448	3060	msedge.exe	89
PID 3060 wrote to memory of 5648	3060	msedge.exe	90
PID 3060 wrote to memory of 6040	3060	msedge.exe	91
PID 3060 wrote to memory of 712	3060	msedge.exe	92
PID 3060 wrote to memory of 6040	3060	msedge.exe	91
PID 3060 wrote to memory of 6040	3060	msedge.exe	91
PID 3060 wrote to memory of 712	3060	msedge.exe	92
PID 3060 wrote to memory of 3156	3060	msedge.exe	94
PID 3060 wrote to memory of 3156	3060	msedge.exe	94
PID 3060 wrote to memory of 3156	3060	msedge.exe	94
PID 3060 wrote to memory of 5992	3060	msedge.exe	95
PID 3060 wrote to memory of 5992	3060	msedge.exe	95
PID 3060 wrote to memory of 5992	3060	msedge.exe	95
PID 3060 wrote to memory of 4400	3060	msedge.exe	96
PID 3060 wrote to memory of 4400	3060	msedge.exe	96
PID 3060 wrote to memory of 4400	3060	msedge.exe	96
PID 3060 wrote to memory of 3304	3060	msedge.exe	97
PID 3060 wrote to memory of 3304	3060	msedge.exe	97
PID 3060 wrote to memory of 3304	3060	msedge.exe	97
PID 3060 wrote to memory of 2240	3060	msedge.exe	100
PID 3060 wrote to memory of 2896	3060	msedge.exe	99
PID 3060 wrote to memory of 2240	3060	msedge.exe	100
PID 3060 wrote to memory of 2896	3060	msedge.exe	99
PID 3060 wrote to memory of 5456	3060	msedge.exe	102
PID 3060 wrote to memory of 2576	3060	msedge.exe	106
PID 3060 wrote to memory of 5812	3060	msedge.exe	107
PID 3060 wrote to memory of 3412	3060	msedge.exe	108
PID 3060 wrote to memory of 3400	3060	msedge.exe	109
PID 3060 wrote to memory of 3400	3060	msedge.exe	109
PID 3060 wrote to memory of 1360	3060	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\application\core\index.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x264,0x268,0x234,0x328,0x7ff9d267c188,0x7ff9d267c194,0x7ff9d267c1a0
  2⤵
  PID:5448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1848,i,11295141710782080345,4348160295943802118,524288 --field-trial-handle=2236,i,1221997841719957940,8797880946719345340,262144 --variations-seed-version --mojo-platform-channel-handle=2484 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1568,i,13765557423944892642,11645696379170296184,262144 --field-trial-handle=2236,i,1221997841719957940,8797880946719345340,262144 --variations-seed-version --mojo-platform-channel-handle=2232 /prefetch:2
  2⤵
  PID:6040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2264,i,2227133449531740542,1038419653574154258,524288 --field-trial-handle=2236,i,1221997841719957940,8797880946719345340,262144 --variations-seed-version --mojo-platform-channel-handle=2496 /prefetch:13
  2⤵
  PID:712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3560,i,3985557150233461612,8969032956031516229,2097152 --field-trial-handle=2236,i,1221997841719957940,8797880946719345340,262144 --variations-seed-version --mojo-platform-channel-handle=3576 /prefetch:1
  2⤵
  PID:3156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3584,i,11762417204189260771,10203538910195095839,2097152 --field-trial-handle=2236,i,1221997841719957940,8797880946719345340,262144 --variations-seed-version --mojo-platform-channel-handle=3652 /prefetch:1
  2⤵
  PID:5992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4396,i,17249929782052494240,4648525452088341826,2097152 --field-trial-handle=2236,i,1221997841719957940,8797880946719345340,262144 --variations-seed-version --mojo-platform-channel-handle=4848 /prefetch:9
  2⤵
  PID:4400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4384,i,12369265811914192800,5831163255679714604,2097152 --field-trial-handle=2236,i,1221997841719957940,8797880946719345340,262144 --variations-seed-version --mojo-platform-channel-handle=4844 /prefetch:1
  2⤵
  PID:3304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5356,i,5301275676190936957,14305116894976244771,524288 --field-trial-handle=2236,i,1221997841719957940,8797880946719345340,262144 --variations-seed-version --mojo-platform-channel-handle=5396 /prefetch:14
  2⤵
  PID:2896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5364,i,3833320418323455360,3315068073983978051,524288 --field-trial-handle=2236,i,1221997841719957940,8797880946719345340,262144 --variations-seed-version --mojo-platform-channel-handle=5412 /prefetch:14
  2⤵
  PID:2240
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5832,i,14821114716991606628,3577265868094433236,524288 --field-trial-handle=2236,i,1221997841719957940,8797880946719345340,262144 --variations-seed-version --mojo-platform-channel-handle=5852 /prefetch:14
  2⤵
  PID:2024
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5832,i,14821114716991606628,3577265868094433236,524288 --field-trial-handle=2236,i,1221997841719957940,8797880946719345340,262144 --variations-seed-version --mojo-platform-channel-handle=5852 /prefetch:14
  2⤵
  PID:5456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4932,i,14657181682467362307,7026880001600006295,524288 --field-trial-handle=2236,i,1221997841719957940,8797880946719345340,262144 --variations-seed-version --mojo-platform-channel-handle=4388 /prefetch:14
  2⤵
  PID:2576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4408,i,3996625763891240619,2914288210657508641,524288 --field-trial-handle=2236,i,1221997841719957940,8797880946719345340,262144 --variations-seed-version --mojo-platform-channel-handle=5052 /prefetch:14
  2⤵
  PID:5812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4412,i,699287835929846535,305448007407887150,524288 --field-trial-handle=2236,i,1221997841719957940,8797880946719345340,262144 --variations-seed-version --mojo-platform-channel-handle=6680 /prefetch:14
  2⤵
  PID:3412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5520,i,9180416321996720132,13232769415589726583,524288 --field-trial-handle=2236,i,1221997841719957940,8797880946719345340,262144 --variations-seed-version --mojo-platform-channel-handle=1948 /prefetch:14
  2⤵
  PID:3400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5468,i,17166465056525629395,3368062884483803193,262144 --field-trial-handle=2236,i,1221997841719957940,8797880946719345340,262144 --variations-seed-version --mojo-platform-channel-handle=800 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1360

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5732

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1008

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

89aa60c6-a2e0-46f2-bdf2-1bd95d846eb3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\89aa60c6-a2e0-46f2-bdf2-1bd95d846eb3.tmp
Size 35KB
SHA256 0ebde160a2c9461cd808fccc1a094146586b4a5c7d0de739900783366c82ef64
MD5 45a2d67eeb45904e5af3f459fce2688e
SHA1 80c9effd624f5258fe25f287732e17d4ee868644
SHA512 2af5c97c7f66a81381f8463eb7ae93b0aaa440269806667d2bed5b6d3119071e41a80ee9ef98667214cde601a85c155fc9cc68d969db0c06930b206ae632a774
SSDEEP 768:f83BdQ+LeSFOUArX4fouOToPvB2thtA9VAgwG+wL:f836snnwthtthG+wL
TLSH
T198F2CFB1ADA98C27DDDAD3D8720A72422FF48013D6D42F845EDDA71D065B7AE430BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c80f71026fa07cc9b3e69c8779d4b4b40710cf7bc2893b740943db0d0f79591a
MD5 590eca05f11ec72644a09f205b548fbc
SHA1 c6521700bee3b500259ee3a70292b90201f20597
SHA512 fddd457c35c61ceb727f99bd39f55314cdeb7d062798c573a377675121f972ed95109fec329f911c502139a1794b70e5a98a57dd3b21b5a70e6518890a361f66
TLSH
T1E7D02B7A37C40404C0D0747221F24602D530C520AC4C81088801702CCC207C3010B8EF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ee00825bbd5a4f21308ad2e10e5a9d3c4512f07fbd288ec8ac76788de6019e25
MD5 c3584e6bc22b3ad2f168ede48d20a993
SHA1 ffb4ecef8f65638ca17e16a32806195193977c7e
SHA512 5fd777359305e67e9f30fc404af9013a876846b1d6db271fa73dfcf2ee22fb25a8e26d4d0c970cc3a8219df11038dc6b4c2c411db652593bda1c3d7643753c0b
TLSH
T18AD02B7637C40404C0D0747621F34602D530C520584C81088801B03CCC207C3010A8DB
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 98b65e2291a8526516858e5baf61b03d57dfe231a91e8dfdaa47954789927dd6
MD5 ca234ed0472159c64025a5f45ec87101
SHA1 b09cf80a9236eceff5ac892c06124c994dbe28c4
SHA512 6a94f1186d5bc1749086834bc1379719d07b8d5246ad222558f400cbf8ab2d5ac55bbb1a84924cc0054f89861644c2d360013a2811a84b33a0c5822a2bae585d
TLSH
T1D23182A04B2B0EE1D3DA45F1A0D9ED8D33F7A4E8054B7F72864862B4AC0E3114BC9E00
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59e69d.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59e69d.TMP
Size 1KB
SHA256 c4f9feb4133525b28fb45c1ad7870d30742cdcf0105d8db192dd45c60cf32337
MD5 d550f2ab68a81a6a0818b17e8d7d7247
SHA1 4791cdeed6b207267e9fa905917ac17deb6af8b1
SHA512 bc0c9437d8df2bdcbca335b814644aa552e02358f1e05f338d10a91b7e127e930554b717a315986d6705c64c028f0ee5d6e9ef9e784f3eb8ee8a0a0e56716f5e
TLSH
T1023152A44B2B0EE1D3DA45F1A0D9ED9D33F7A4E8054B7F72864862B8AC0D3125BD9E10
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 8379bc70af5bd9ac5251b47aa6a05d32a79650404a972235f2652023799e3d76
MD5 a3bb4c058e1e64674c645b6d744dcfc6
SHA1 68ae87237d68220082018e179cea6862d55e0ebc
SHA512 77042cc464ee57aa1a3e702d8897e6d10200ac30c8cb01735611ce4fbdc654fc052d0339305cc5665680d350ac7f76b980d22665927b18cfd6754725c0581db0
TLSH
T17741BEF7C7E8866D890156F4AB147E2BCE1D0915832C3C5AC8E4AF2B93E2471E14195F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 727687f4f56736b428e0490635fa0763ae80a93c1e85aa1110208fdd62af7645
MD5 cdf480c99a0a6fd3dac07f0bff6e9401
SHA1 3f06ca87c31b14823be88343f264cf6646877bb4
SHA512 f913f697e24688c6d98706e75c8cda145b67d62e3268687216184c64d9f7b395624b67ace0df66a82c64e3faa393903f7044b0ab7382a6989c92599e1e3043ac
SSDEEP 192:sxRLRhb4/fOscSb3At1zoA8p4y/g6+WNIYZFLc7PG8IgDRJ:sxRLX4/fOsZbLv/5IScRX
TLSH
T1F042B5166A289D3B4CC7D21DBB55BF53E3FA5032A1905E48A6FC9B0C14EB7DD220781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 7e8b7a13b1d2d6b8086a4fd84014e4b13a673db76d183ed9e9ab556de3c81c8f
MD5 8d15a50deed61d8aab15844558ba7ff4
SHA1 d8380c32207c16bc18dd984428fd09a94f56a88b
SHA512 60536f3ac09555448f570e69ca4f802e8295ca713f97d5349b81682cf7da6231d9e3416873a9d22811311638acb81fcc32b15f255a668ff662fc7029145d72f2
SSDEEP 192:sxRLRhb4/fOscSf3At1zoA8p4y/g6+WNIYZFLKPG8IgDvJ:sxRLX4/fOsZfLv/5ISAN
TLSH
T13432B4166A289D3B4CC7D21DBB59BF53D2F95032A1906E48A6FC9B0C04EB7DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 feb827c8e1de8de9959b9df671b7c02cbcb3965bd2feacad5d75babb7ba5972b
MD5 6d5b1b7183f22e9f35e7f9ae9e296454
SHA1 7c9f07c71baf2e490eb738df506a81db19f5e856
SHA512 b95446a9b6e563a6272bf73965dac93c61cc2a759514b530672b39bfd6962e34c5402d1515b545ec4689a3e373b4bd272ff6da5ecb63080a4f8b80b7a5ad5bef
SSDEEP 384:KAX0EdqfCtgNbFfVNKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVui9LZRGgrocmK:K80EdwWgNhfVN8F1+UoAYDCx9Tuqh0V8
TLSH
T1CEB2CA3B640DCB7E5F800AADAC196FD77D9802C796988D4047FE994C02C77EA921A4DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 e03b06268e1c48120565932a6d1dd3411f0310e4f4e8a9b2d89ab3328751316a
MD5 939521ba26e46027f4907455e4148eea
SHA1 caf0b74b822091f232624d02e4af304e70173c5b
SHA512 a117962d4a3bb0652f77823906501f6cef3b7832a771118cdca0b3007e3b8912dabac327619cd09ce59fcee15145b33de8a1ce7d871741d1cfd9c8ecc38af567
SSDEEP 96:KR3gFB31lpWRekgJpK4ggHpcvHG5F8HtaTHd3LfWTI2gPfK4Ogxfc1NAjpiDWSU5:C3gFB31lERe1JDggH2vHG5F8HtaTHd31
TLSH
T163911501717B02C0383E764D85B5E51FD6D2B4A23018B86B3BA942B64F66E134FFE8D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

e956fdf7-69a2-402a-9b32-d632eb234355.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e956fdf7-69a2-402a-9b32-d632eb234355.tmp
Size 11KB
SHA256 4936f6db8790ab68a18417655422092e86720c9c06197785da8bf867556ae624
MD5 fabae61a7c67225e3dd0d040b1f0b64e
SHA1 669d2b119d82fb77c2fcbd1751e67cd16264f3b3
SHA512 cf2cacf2e6ef755e2299430ad9962f3ee20f0bb877de32ec1436490377f2ee961006be50ff64870452b31ebb161638fe5b5356f798f8160789183d5669e38310
SSDEEP 192:sxRYRhb4/fOsZf3At1zoA8p4y/g6+WNIYZFLKPG8IgIJ:sxRYX4/fOsZfLv/5ISAs
TLSH
T1C332B5166A289D3B4CC7D21DBB59BF53D6F95032A1906E48B6FC9B0C14EB6DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 022d8b07be105f1df3e616a73386cef759bdb5364f2b9b3bd759f5ff727a3da3
MD5 3d5d4b4f5e416dd0b43fd4733e3c5bb8
SHA1 8cdf35a892a5dd84edad3205283fd5d5222d1dde
SHA512 114569342acc0d82897ac9dc633f47b1fa82f2c608abde164e893ecaa5b47535f6591e29bc36acaa0ebe3ce1678fe53a6ca429508ada055770ea073a1f934d0d
SSDEEP 768:583+lQ+LeSFOUArX4fouOToPvB2thtA9VAgwG+wL:583tsnnwthtthG+wL
TLSH
T1D1F2CF71ADA98C27DDDAD3D8720A72422FF09013D6D42F845EEDA71D055B7AE430BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 09bc1d1e3765f37183b5513727782687ea07c6a1f4f4e888742ccab730be0db7
MD5 0b0435e2fac9fcdb8d89c0e36e948a96
SHA1 ae25ae3914d602f30a9d201df03f36ffd30b0c7c
SHA512 2c4b81e3320b7abbebecbc1a6ba970e85aaf274948b6dcb8d0556844284c1f984bd3a8aeba62498d95a92e85529624490a05787bd8d048713be1fee79c7124be
SSDEEP 768:grv+4UNbdH3nL+LeSFOUAReX4fouOToPvB2thtA9VAw9eVH1SlX:gbsbh3esnnwthtt8EH1Y
TLSH
T1F803CF32A8AC8933DDE6D388310B71572FF4915396900FC49DDD2B4D069B9DE570BC66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 2e5021d39bab2904cab8e8b0394b120fa6358f65eea7d3b68734723b00e6ad69
MD5 453d4c6dd4e5af6c436f83ae5e011269
SHA1 decd9099ce3ebcb4f8ae3947f59ffe49b2ba2706
SHA512 f12047472f0a2c0b381678c5354d91fcbb4a33af1d1ed1657e0d2b5aaa74976bed0b4999f1744b19cac8797f77582c22950567e884f92d8541d61cd682d3ad08
SSDEEP 768:663+lQ+LeSFOUA9X4fouOToPvB2thtA9VAgwG+wL:663TsnnwthtthG+wL
TLSH
T135F2CFB1ADA98C27DCEAD3D8720A72422FF08013D6D42F845EDDA71D055B7AD430BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8be5a962-dc97-4d6b-aa3c-e1da7d77473f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\8be5a962-dc97-4d6b-aa3c-e1da7d77473f.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download