bbc24cf0260b7c1dd0f7091fc4044dba4791902414003ee699f0ba031a6d5635

Analysis

max time kernel
148s
max time network
153s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/07/2026, 12:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
application/controllers/admin/index.html
Size 142B
Sample260730-pg1hdaxcjc
SHA256 bbc24cf0260b7c1dd0f7091fc4044dba4791902414003ee699f0ba031a6d5635
MD5 d92311600f6632e0f98c0e5777acf431
SHA1 e799bd5ab234730a641b034fb62d5f7ca0461c50
SHA512 0f6c1d055daf7e1ddc565fd70c9a98f38fc3ee874141494cb2c4f3ed41f43b2d4304167592ae7e41ac95af257b92e2074f5ac82a8f4286624878ed402e1bd09f
TLSH
T1D3C08C66220C2C0C52F233B01AC02260219323C002032B255B8451233A1111DCDC218D
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5184	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134298875760819109"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3797332335-34111092-3597280141-1000\{B8FAB590-80BC-481E-9215-FCC5FA5B0D94}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2896	msedge.exe
2896	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4768 wrote to memory of 3648	4768	msedge.exe	88
PID 4768 wrote to memory of 4084	4768	msedge.exe	89
PID 4768 wrote to memory of 5184	4768	msedge.exe	90
PID 4768 wrote to memory of 4084	4768	msedge.exe	89
PID 4768 wrote to memory of 4084	4768	msedge.exe	89
PID 4768 wrote to memory of 1380	4768	msedge.exe	91
PID 4768 wrote to memory of 1380	4768	msedge.exe	91
PID 4768 wrote to memory of 6120	4768	msedge.exe	93
PID 4768 wrote to memory of 6120	4768	msedge.exe	93
PID 4768 wrote to memory of 1828	4768	msedge.exe	94
PID 4768 wrote to memory of 6120	4768	msedge.exe	93
PID 4768 wrote to memory of 1828	4768	msedge.exe	94
PID 4768 wrote to memory of 1828	4768	msedge.exe	94
PID 4768 wrote to memory of 5068	4768	msedge.exe	95
PID 4768 wrote to memory of 5068	4768	msedge.exe	95
PID 4768 wrote to memory of 5068	4768	msedge.exe	95
PID 4768 wrote to memory of 5764	4768	msedge.exe	96
PID 4768 wrote to memory of 5764	4768	msedge.exe	96
PID 4768 wrote to memory of 5764	4768	msedge.exe	96
PID 4768 wrote to memory of 4816	4768	msedge.exe	98
PID 4768 wrote to memory of 4644	4768	msedge.exe	99
PID 4768 wrote to memory of 4816	4768	msedge.exe	98
PID 4768 wrote to memory of 4644	4768	msedge.exe	99
PID 4768 wrote to memory of 1960	4768	msedge.exe	101
PID 4768 wrote to memory of 5832	4768	msedge.exe	105
PID 4768 wrote to memory of 5532	4768	msedge.exe	106
PID 4768 wrote to memory of 1912	4768	msedge.exe	107
PID 4768 wrote to memory of 6132	4768	msedge.exe	108
PID 4768 wrote to memory of 6132	4768	msedge.exe	108
PID 4768 wrote to memory of 2896	4768	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\application\controllers\admin\index.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2d4,0x7ffa5ae5c188,0x7ffa5ae5c194,0x7ffa5ae5c1a0
  2⤵
  PID:3648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1540,i,11280574396481495886,12781773263946277936,262144 --field-trial-handle=2380,i,13941230424385763617,14688333895522202058,262144 --variations-seed-version --mojo-platform-channel-handle=2376 /prefetch:2
  2⤵
  PID:4084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1672,i,4508854013615875567,17728405792873083020,524288 --field-trial-handle=2380,i,13941230424385763617,14688333895522202058,262144 --variations-seed-version --mojo-platform-channel-handle=2780 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2224,i,9889084722004869669,7284334674186957197,524288 --field-trial-handle=2380,i,13941230424385763617,14688333895522202058,262144 --variations-seed-version --mojo-platform-channel-handle=3108 /prefetch:13
  2⤵
  PID:1380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3656,i,14381402423721203610,12391044622811242918,2097152 --field-trial-handle=2380,i,13941230424385763617,14688333895522202058,262144 --variations-seed-version --mojo-platform-channel-handle=3692 /prefetch:1
  2⤵
  PID:6120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3644,i,4830475114077139094,17320983740696629057,2097152 --field-trial-handle=2380,i,13941230424385763617,14688333895522202058,262144 --variations-seed-version --mojo-platform-channel-handle=3684 /prefetch:1
  2⤵
  PID:1828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4308,i,974945425348315050,16682164162687778170,2097152 --field-trial-handle=2380,i,13941230424385763617,14688333895522202058,262144 --variations-seed-version --mojo-platform-channel-handle=4644 /prefetch:1
  2⤵
  PID:5068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4320,i,3645967100200890058,11275826268376544022,2097152 --field-trial-handle=2380,i,13941230424385763617,14688333895522202058,262144 --variations-seed-version --mojo-platform-channel-handle=4672 /prefetch:9
  2⤵
  PID:5764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3764,i,1880589052921874172,8899104219465136866,524288 --field-trial-handle=2380,i,13941230424385763617,14688333895522202058,262144 --variations-seed-version --mojo-platform-channel-handle=5316 /prefetch:14
  2⤵
  PID:4816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3896,i,11195356363687361163,14786026956902227799,524288 --field-trial-handle=2380,i,13941230424385763617,14688333895522202058,262144 --variations-seed-version --mojo-platform-channel-handle=5344 /prefetch:14
  2⤵
  PID:4644
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,5191057861898740584,12222156720496333623,524288 --field-trial-handle=2380,i,13941230424385763617,14688333895522202058,262144 --variations-seed-version --mojo-platform-channel-handle=5928 /prefetch:14
  2⤵
  PID:3144
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,5191057861898740584,12222156720496333623,524288 --field-trial-handle=2380,i,13941230424385763617,14688333895522202058,262144 --variations-seed-version --mojo-platform-channel-handle=5928 /prefetch:14
  2⤵
  PID:1960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5424,i,4457553328583538303,6674488115247086181,524288 --field-trial-handle=2380,i,13941230424385763617,14688333895522202058,262144 --variations-seed-version --mojo-platform-channel-handle=5220 /prefetch:14
  2⤵
  PID:5832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5324,i,2696206137094072924,15710997007876391746,524288 --field-trial-handle=2380,i,13941230424385763617,14688333895522202058,262144 --variations-seed-version --mojo-platform-channel-handle=6536 /prefetch:14
  2⤵
  PID:5532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6092,i,8830541716384896040,6862275824688103786,524288 --field-trial-handle=2380,i,13941230424385763617,14688333895522202058,262144 --variations-seed-version --mojo-platform-channel-handle=6584 /prefetch:14
  2⤵
  PID:1912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5468,i,4991703126244069972,12930189902929881897,524288 --field-trial-handle=2380,i,13941230424385763617,14688333895522202058,262144 --variations-seed-version --mojo-platform-channel-handle=5552 /prefetch:14
  2⤵
  PID:6132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6544,i,15232403057779108694,2398522185292732972,262144 --field-trial-handle=2380,i,13941230424385763617,14688333895522202058,262144 --variations-seed-version --mojo-platform-channel-handle=4704 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2896

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:992

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:940

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e413e02b9e80ee8d76d52c1043fc32251e2d7634d4b2fbd970df9ace9d91831a
MD5 22959b3a06a842ac30237dd57e8a3801
SHA1 0b7c28071a592034aa2607038000f085c7bb6362
SHA512 644add9ab912ad7fdfc55bc7a1b84482c75cc9bc69a59d169bae63a0400619d999846ebbadb0ef2bd6d35c2bd08a5f07053b600874dd5dfcbda7e8f3076131fe
TLSH
T1A5D02BE476408A0CC980203335F6524092018910D801D1480040B325CC845C1257F0DF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8aaa68aad07ba45abe53bd513aa5f7e7b21bd1b29db6e1d5c1e0a79a5f4eb890
MD5 74012bbce5fada7634c1da1b567562b3
SHA1 09db27f38f27e35986cfd407b57f6f83c8fc59f8
SHA512 c1a6a98f972793c84274c29552107bfe07b775c7c8121e5fdf137ebf9a7cc3f4eb43fe9eadfc842e7b92ca7281bbcea3d660bdd8fc9adc56add068510c41e48d
TLSH
T1FBD02BE07640890CC980203335F75240920189108401D1480040F335CC845C1257E0CF
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 3af4084bf377e95582831fa89001f727d6958f637ea522c5f42911ee50ad29e0
MD5 f40d4a9248fef4bf8e26ca50d2b3a7c6
SHA1 d1fe47b42ac1f409cec36a378bc6f0bd41128d97
SHA512 d0036697ac0d1a38b6a1cfc4cbf6d33e019d7f8e595847c386dfd15e22666ca1bd8aa4560cfcf5ef21f7a30b180effeb8d35825a79927fbb8571100e9e53a35e
TLSH
T15B51501D133A3DDDE3A44AF12EE1D6643BFD889E02072E1062442DFCDA42F3841D21A7
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59e19c.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59e19c.TMP
Size 2KB
SHA256 d01b5bb7ff4e4e8c35140393ffbe2f6aef0b0fb14c52041f6e478c5cbf8115ac
MD5 6a9cd22acae62cab8318dafac9547b84
SHA1 cca278a6b2df5bf85fb59acfcbf46a6ed68780da
SHA512 46bcfe4ceebf07291e10bff84333b2ecae76ab5a0781f716cb0f784fbb7f0febc9d68be529ff91e949487fc5b434726d65c168f5d8147398548ffcf21495ea78
TLSH
T1B251615D133A3DDCE3A406F16EE1D6643BFD889E02072E1062442DFCDA42F3851D21A7
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 d62a31ba8d09c9b4b60f1af9a8e7b50a4af00cefbd93429582a073c34ed127eb
MD5 abbd541143091ac429172041bb21b294
SHA1 091ad736f31d02c43179fd8f6d2160a80fff1694
SHA512 403fc461295f1f745d41a26ece46ec414c8ded87d2d923b651dcad52d0327e397fccc7ff3fccb7e8fb02c1cf9e46860d5889fca1ffb44b6aa9ad96688f4476b3
TLSH
T1D941D0F7C3E4966E890186F0AA146F1BCE1D0915832C3C5AC8D4AF1B93E3471E141A5F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 2877e3bbadb9fff5b434a4d554adda678ff83f88b1f31335df62112742568904
MD5 f619d9e3381e94d98d8a4e7e4fec94cd
SHA1 5b1819cf1e9995e9aa3d070ad61e9352f7560c59
SHA512 29f644ce8b128a91972bbde9196f6b6c740ba37f19b166a4745a11ff7067a9f632ace5e107cb0d291cb50582a73c8972c2cafca80fdde8831a411d543114646a
SSDEEP 192:sxRLRJbe/fdsLZEprQ5nzoA8p4k/g6+WNIYn8RxrGkIgDYJ:sxRLre/fdsLCjZ/5ITfZQ
TLSH
T1D942A6166A28AD3B5CC7E219BB55BF53E3F95032A1D45E48B6FC8B0C04E76DD120741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 33dccfa4618a17500129d8e09018e82ccb05d1f7e593be1012dc561705cdde58
MD5 04fc8fa57885df49623c4d531cd00224
SHA1 65d640e0eec91e6b59fdec9bf031cd4a186014a7
SHA512 9264c9c764097aaca05aa3a1bf510ac7020418a54b32c932ac8ecdbe2be2d440d57d1cd1a443ee61b06765c842c93fda7a8f65517fd24262e8d96c6cdc92fcd9
SSDEEP 192:sxRLRJbe/fdsLZCprQ5nzoA8p4k/g6+WNIYn83xrGkIgDiJ:sxRLre/fdsLQjZ/5ITBZi
TLSH
T15132A5166A28AD3B4CCBD21DBB55BF53D7F95032A1D46E48B6FC8B0C04EA6DD120781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 14a20b9ffb9b8b3d8e27b065ef7556edc54d9684ce09ba9eb758d5748c99f747
MD5 2da667ccad6e4c6775cb3f76fc1a5bc4
SHA1 d7da48c80e307708887e67883f3fc0a4c0178d17
SHA512 364c29df1508602bd09a638beaa20bad3c55a5f2bf86fece53d13285817a8f5e4dce1a1ad853a84065bcf6a8a653e20e970ade2bb27e1fa590faaa466bebae0b
SSDEEP 192:sxRARJbe/fdsQZCprQ5nzoA8p4k/g6+WNIYn83xrGkIgIJ:sxRAre/fdsQQjZ/5ITBZs
TLSH
T1673296166A68AD3B4CC7D21DBB55BF53D6F96032A1D46E48B6FC8B0C04EA6DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 4cb3571e2363b1feb4088d0f630cd2120b83dfb04fb369e07fbd97bb6749c08d
MD5 10ed0914ac74a5926faeee6cfedf0f5c
SHA1 6acfa9731bb930e54ec4a8c5eeb7d8d404fd146d
SHA512 66cd3161185412e3742e3f816ff9023d8dd44bc7a1a3262d5ddd7d717a9c828263856ad481f7a5aaf26e71f42e4b9a09084dfc4777e32650e99fd00b54c0800b
SSDEEP 384:wum8dzAfCtgoSFf6MKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVU494oRPjrohMw:wb8dz6Wgouf6M8F1+UoAYDCx9Tuqh0Vn
TLSH
T183B2EC3B604DCB7E5F800AADEC19AFDB6D5C02C79A988D4447FE990C02C77EA511A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 bd5597127d28a5641d17be282c7b84765bf98ac937b66074938f970ee14de842
MD5 5cdf4f88a249f9731fc8b26aebb83cc6
SHA1 d0c93b3995d34c25eacbe9fdef6917148648564c
SHA512 0264813250bb5a31b6e757a6c85039721fa270be56dc303dbb1650551d822b671d0953d577daacc73b04a61f23ecd73dc6eb34543f2993175fbc8ae35396b000
SSDEEP 96:KRv4dZvtNhW528gBhK4Igvhc3f+BtiHKoKZKsK4KqK2K6KgWKeKDKzgKgKgK4K1g:Cv4dZvtNs529BLIgvO3f+BtiHN6zn9Xp
TLSH
T1B9C1E210723B0644387DB60585789D6AC6D2B4B2B459A42F37E843B64F67E438EFD8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

ee5b47bf-e107-496b-97b5-5ab30d88806c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\ee5b47bf-e107-496b-97b5-5ab30d88806c.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 13a1325432b8944313b8cc6d9b12df10d85fcdde45a92c6dcf79a32cf8809323
MD5 67f9875fae3d6b0f96d8c9bffc55a007
SHA1 f52bca68e639d4af73857a89f98a89f063dfa730
SHA512 0ef7170b34dfd3161c84c2b9fa3deb1dff061fec0d82c764a73b001482f8989a6e92d7bb1b2da4356e3ef0025a35330e300e890f5fba1eede9f336eda76ca526
SSDEEP 384:OZcIv38N0iemQi1uuAJDZNfNoXOVSUU0XtdXqFkETRzcoXfK86sfxEZxxsIj4lBp:sv3wyDZIO0crWNzc4ReyIsPdb9MM
TLSH
T198F2C036FC34CD67ACE6A346F54631527EF5912BC2D86E8485EDAF0C0A075AD031B827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 afd4a2a3df059fc70ce8701efbbf5aa6a2c135b2a95fa5210450034cefa2debc
MD5 a254f03069c6252d1f92e1eeb21a21e7
SHA1 9f5b21b265051d1a75224a8ac584d4bfddd0597f
SHA512 0fc7e654f73ac975c0c3d5a2b86dc5f0de18ab06a511bfc572a1d0fd4104ca79ec69fe5ff62c76ae2eb94af41070c0a895bff07c38e8b8db1dec9cbaa3622248
SSDEEP 768:Hrv+4UNbdU3YyDZIO0crWNzc4ReyIsPdeVH1S5F:HbsbO38tc44bsVEH1W
TLSH
T1B713BE32E978D967ACE66786B10771437EF9511BC2C81A94C9DE6F0C4A4B1DE031F923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 a8223d117d66b6f0b4b770f5570e8ae9cf5c2f14416b896800afe60203fe69f9
MD5 dff68242d38aba0be1cda44e5fcf2e81
SHA1 960062c9cd77799acf0f6e659e5233afff560d7a
SHA512 17886e617a090bcc0b1ce24e56afbe8cb94e2fefec7f4945cd407c30ff5b8ec342025e80d566422763dbc90d1cfc775a6e5b2957583e4b16feb02ac801a50510
SSDEEP 768:TFQH3XwgYyDZIO0crQNzc4ReyIsPdb9MM:2H30tc44bsVb+M
TLSH
T19903AE33ED64CA7BACFA9B45F54A3212AEF15127C2D9AA9496DDAF0C05071DD031BC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 d64abb20172cefd3ceace4e3b5f87f1b075ce1098f6dbe72483298db0aedffa8
MD5 033af5176fc22518709840a0a3df7e88
SHA1 4fd20489caae8963a6dc654ed179194e0d2678cf
SHA512 4cdc1be1e193418c723d08f4081f743bf37aaacb969c453cc013d28d785754c7ef183347f6eaec5838d57b8d2b3eeb606867d99e9f25fd0eab8c46b43fe3702f
SSDEEP 768:6rv+4UNbds3FVDZIO0cdNzc4ReyIsXdeVH1S5D:6bsbS3/tc44bstEH1Y
TLSH
T10903CF36E8688977ACF6A686B50772537EF8512BC2C81ED4C5DE6F0C464B1DD130B923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d5b6c77f-aecb-4c7b-ae5a-dd06c80a6536.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\d5b6c77f-aecb-4c7b-ae5a-dd06c80a6536.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download