bbc24cf0260b7c1dd0f7091fc4044dba4791902414003ee699f0ba031a6d5635

Analysis

max time kernel
150s
max time network
149s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/07/2026, 12:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
application/controllers/index.html
Size 142B
Sample260730-pg1hdaxcjc
SHA256 bbc24cf0260b7c1dd0f7091fc4044dba4791902414003ee699f0ba031a6d5635
MD5 d92311600f6632e0f98c0e5777acf431
SHA1 e799bd5ab234730a641b034fb62d5f7ca0461c50
SHA512 0f6c1d055daf7e1ddc565fd70c9a98f38fc3ee874141494cb2c4f3ed41f43b2d4304167592ae7e41ac95af257b92e2074f5ac82a8f4286624878ed402e1bd09f
TLSH
T1D3C08C66220C2C0C52F233B01AC02260219323C002032B255B8451233A1111DCDC218D
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4876	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134298875775270965"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2115213192-531537726-3295841909-1000\{845FEDCB-1F96-4623-91E1-D04724EDD792}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4116	msedge.exe
4116	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 4864 wrote to memory of 5004	4864	msedge.exe	89
PID 4864 wrote to memory of 3460	4864	msedge.exe	91
PID 4864 wrote to memory of 4876	4864	msedge.exe	92
PID 4864 wrote to memory of 3460	4864	msedge.exe	91
PID 4864 wrote to memory of 3460	4864	msedge.exe	91
PID 4864 wrote to memory of 4392	4864	msedge.exe	93
PID 4864 wrote to memory of 4392	4864	msedge.exe	93
PID 4864 wrote to memory of 244	4864	msedge.exe	94
PID 4864 wrote to memory of 244	4864	msedge.exe	94
PID 4864 wrote to memory of 244	4864	msedge.exe	94
PID 4864 wrote to memory of 256	4864	msedge.exe	95
PID 4864 wrote to memory of 256	4864	msedge.exe	95
PID 4864 wrote to memory of 256	4864	msedge.exe	95
PID 4864 wrote to memory of 2748	4864	msedge.exe	96
PID 4864 wrote to memory of 756	4864	msedge.exe	97
PID 4864 wrote to memory of 2748	4864	msedge.exe	96
PID 4864 wrote to memory of 2748	4864	msedge.exe	96
PID 4864 wrote to memory of 756	4864	msedge.exe	97
PID 4864 wrote to memory of 756	4864	msedge.exe	97
PID 4864 wrote to memory of 2376	4864	msedge.exe	99
PID 4864 wrote to memory of 5492	4864	msedge.exe	100
PID 4864 wrote to memory of 2376	4864	msedge.exe	99
PID 4864 wrote to memory of 5492	4864	msedge.exe	100
PID 4864 wrote to memory of 1528	4864	msedge.exe	102
PID 4864 wrote to memory of 4760	4864	msedge.exe	106
PID 4864 wrote to memory of 3172	4864	msedge.exe	107
PID 4864 wrote to memory of 1284	4864	msedge.exe	108
PID 4864 wrote to memory of 5836	4864	msedge.exe	109
PID 4864 wrote to memory of 5836	4864	msedge.exe	109
PID 4864 wrote to memory of 2408	4864	msedge.exe	111
PID 4864 wrote to memory of 2408	4864	msedge.exe	111
PID 4864 wrote to memory of 4116	4864	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\application\controllers\index.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2c0,0x7ffcfe3cc188,0x7ffcfe3cc194,0x7ffcfe3cc1a0
  2⤵
  PID:5004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1812,i,1719540167269524420,161825886352439946,262144 --field-trial-handle=2344,i,6551945031809861654,17653562648881408114,262144 --variations-seed-version --mojo-platform-channel-handle=2340 /prefetch:2
  2⤵
  PID:3460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1916,i,5968222055954988636,2012342072765956350,524288 --field-trial-handle=2344,i,6551945031809861654,17653562648881408114,262144 --variations-seed-version --mojo-platform-channel-handle=2828 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2376,i,18083885155951589103,15027872115360674624,524288 --field-trial-handle=2344,i,6551945031809861654,17653562648881408114,262144 --variations-seed-version --mojo-platform-channel-handle=2640 /prefetch:13
  2⤵
  PID:4392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3572,i,9220906728261994001,16273862627590470962,2097152 --field-trial-handle=2344,i,6551945031809861654,17653562648881408114,262144 --variations-seed-version --mojo-platform-channel-handle=3644 /prefetch:1
  2⤵
  PID:244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3576,i,17298643741651386451,15762299480934660301,2097152 --field-trial-handle=2344,i,6551945031809861654,17653562648881408114,262144 --variations-seed-version --mojo-platform-channel-handle=3648 /prefetch:1
  2⤵
  PID:256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4204,i,3716009773763808054,13605985650415925944,2097152 --field-trial-handle=2344,i,6551945031809861654,17653562648881408114,262144 --variations-seed-version --mojo-platform-channel-handle=4424 /prefetch:1
  2⤵
  PID:2748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4212,i,576234538289084384,18311335318728150712,2097152 --field-trial-handle=2344,i,6551945031809861654,17653562648881408114,262144 --variations-seed-version --mojo-platform-channel-handle=4476 /prefetch:9
  2⤵
  PID:756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3676,i,7379410865990588834,4038865100990736685,524288 --field-trial-handle=2344,i,6551945031809861654,17653562648881408114,262144 --variations-seed-version --mojo-platform-channel-handle=5312 /prefetch:14
  2⤵
  PID:2376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5260,i,12044451744346699682,3448680330182987263,524288 --field-trial-handle=2344,i,6551945031809861654,17653562648881408114,262144 --variations-seed-version --mojo-platform-channel-handle=5352 /prefetch:14
  2⤵
  PID:5492
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6104,i,16721771093200526552,17707560008348844095,524288 --field-trial-handle=2344,i,6551945031809861654,17653562648881408114,262144 --variations-seed-version --mojo-platform-channel-handle=6116 /prefetch:14
  2⤵
  PID:1928
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6104,i,16721771093200526552,17707560008348844095,524288 --field-trial-handle=2344,i,6551945031809861654,17653562648881408114,262144 --variations-seed-version --mojo-platform-channel-handle=6116 /prefetch:14
  2⤵
  PID:1528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4564,i,7724751867988705830,2693980389148685727,524288 --field-trial-handle=2344,i,6551945031809861654,17653562648881408114,262144 --variations-seed-version --mojo-platform-channel-handle=5040 /prefetch:14
  2⤵
  PID:4760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5068,i,13675799004906558001,14385136940418238309,524288 --field-trial-handle=2344,i,6551945031809861654,17653562648881408114,262144 --variations-seed-version --mojo-platform-channel-handle=5008 /prefetch:14
  2⤵
  PID:3172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5056,i,3040570116807178993,5819349657304086291,524288 --field-trial-handle=2344,i,6551945031809861654,17653562648881408114,262144 --variations-seed-version --mojo-platform-channel-handle=4444 /prefetch:14
  2⤵
  PID:1284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5068,i,2935779440262594756,1248034385739439009,524288 --field-trial-handle=2344,i,6551945031809861654,17653562648881408114,262144 --variations-seed-version --mojo-platform-channel-handle=5268 /prefetch:14
  2⤵
  PID:5836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6036,i,7149626349951207631,12903920176461694989,524288 --field-trial-handle=2344,i,6551945031809861654,17653562648881408114,262144 --variations-seed-version --mojo-platform-channel-handle=5552 /prefetch:14
  2⤵
  PID:2408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5360,i,847777020610594873,6559956932029228338,262144 --field-trial-handle=2344,i,6551945031809861654,17653562648881408114,262144 --variations-seed-version --mojo-platform-channel-handle=6436 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4116

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5172

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4344

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c80f71026fa07cc9b3e69c8779d4b4b40710cf7bc2893b740943db0d0f79591a
MD5 590eca05f11ec72644a09f205b548fbc
SHA1 c6521700bee3b500259ee3a70292b90201f20597
SHA512 fddd457c35c61ceb727f99bd39f55314cdeb7d062798c573a377675121f972ed95109fec329f911c502139a1794b70e5a98a57dd3b21b5a70e6518890a361f66
TLSH
T1E7D02B7A37C40404C0D0747221F24602D530C520AC4C81088801702CCC207C3010B8EF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ee00825bbd5a4f21308ad2e10e5a9d3c4512f07fbd288ec8ac76788de6019e25
MD5 c3584e6bc22b3ad2f168ede48d20a993
SHA1 ffb4ecef8f65638ca17e16a32806195193977c7e
SHA512 5fd777359305e67e9f30fc404af9013a876846b1d6db271fa73dfcf2ee22fb25a8e26d4d0c970cc3a8219df11038dc6b4c2c411db652593bda1c3d7643753c0b
TLSH
T18AD02B7637C40404C0D0747621F34602D530C520584C81088801B03CCC207C3010A8DB
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 e13e19f983c11c787dac93a75838c94ffd205b1ec5fca10a058cdf08e8d40723
MD5 c1d5026cd735353a2c60c2c9d4ab7498
SHA1 22ace0e4e88f492b09378aea3d6b2dfddbfb0688
SHA512 6e3990a6ff636212d6fe4f02fd8e757d9d4f3116664946a2493cb4552ab3b8d11b5cf87825633347aea9d440ea0f9d298f27d9b4a0510e8bff99f683c0906ff9
TLSH
T15D415738C72B28DADB6A3971FAD16199B2F1447855435A203C536E764EA6FC430ECC1B
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59c663.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59c663.TMP
Size 2KB
SHA256 668be15be9c10f988dfa2b97e94bdb0a4676ec5a2fedb7e2f3ed9e8cf952e353
MD5 14971a0a750a4fd7dbde5b8c7d9f8c26
SHA1 b5bbb80df5e9f5c11290c43cef1f0b44a1ae63fe
SHA512 4121972bcdb1c2b4264f45ee177d0da3d5a4acdbc57a29f2bf51fa5f4fb058036aaedaa803aafdffb807475fe23385f4c72992ea68a51442f2b864a562084c08
TLSH
T1F0415738C72B28DACB6A3971FAD16199B2F1447855436A203C526E764EA6FC430ECC1B
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 26a2a28a8bbf3ecb8211f018cbdbd0b1bdc194119317c86e4274d6bd8b162f36
MD5 ad932cef5d47f159be30354bac8c6bd0
SHA1 45da4ad9bab8a7d6b9edcc95ba02230e00d2eaf6
SHA512 86aec3728323e4a677a14be9a894337e07127be2a05d8212a5e30d7fa7d963c06485d237782c03d7ab93fc0cb3bf03abca7c689c2806001c65bbff8f9d88a191
TLSH
T136419CF7C7E8866D890156F4AA147E2BCE1D0915832C3C5AC8E4AF1B97E2471E14199F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 1688e5c9636b7d1f88edff974de51d1d919f95dc6653cabb1f2d404f892fd25a
MD5 b8d1326353dcec23debacb9c8f84e6f3
SHA1 ba1b78962ac73bf740fa793abccb4a2aefbac450
SHA512 62ba0d6fed7d4804bcd20045b8111d753e7159b3422accf236e00b71c1e5f9f8f9af26d503c3ff39ef47e072d3c664ee6c844c081eeb465e3b75e59e2cc549a5
SSDEEP 192:sxRzSRpb3/fkVshat3AtjIzoA8p4c/g6+WNIYZFLKWGwIgIJ:sxRzSX3/fkVshatiN/5IS5s
TLSH
T14F3294166A28AD3B5DC7D21DBA66BF53D7F95032E1905E48B6FC870C04EB6DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 d04809e0d27a768bdd3f874549f1792b5fb65eaf97667f8eff5a3375445eb786
MD5 f38126cdcc1a4b3650c7f5a19c6ac1c6
SHA1 f9f1cd890b4c81abd3f4a405bfd42a6bbe32f955
SHA512 ef4bd3a71b6e274406bdfdb0532252324e85bf31e77b4c6bd4b037cf92466315045d4dfeba50fac74c999bf282066645d96bf3c6efbd1c592b53ea36cee58ace
SSDEEP 192:sxRz9Rpb3/fkVsIat3AtjIzoA8p4c/g6+WNIYZFLKWGwIgDcvJ:sxRz9X3/fkVsIatiN/5IS5Yx
TLSH
T13B3293166A289D3B5CCAD21DBB56BF53D7F95032E1905E48A6FC870C04EB6DD220781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 23f2da0a7fede00c8e3cf2e4f96012ad58ee97b83cd2f2ed8bbf03ede5f8f5b5
MD5 8d441c8921be8323087b782e80a284d9
SHA1 646b6816e0437ba6fe44ce3ba40526aa301cf124
SHA512 6f058a2022ed57fb6d64a928e784967f3ec7e35842ebb6ffc025d78afbc87194a7117a397d87ac9f2c5798341dd5bd5d7b79b9c4ada5c942befa8657f680bbfa
SSDEEP 192:sxRz9Rpb3/fkVsIav3AtjIzoA8p4c/g6+WNIYZFL3WGwIgDcRJ:sxRz9X3/fkVsIaviN/5ISOYb
TLSH
T18B3294166A289D3B5CCAE21DBA55BF53E7F95032E1905E48A6FC870C04E76DD220781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 eb10887bcac34d0d0cc6839c659193f88e706cbedb565cf8cf323ae0aefcbe29
MD5 bdd289c972af6a9c15c55556143114e1
SHA1 2f68c51a687721f8e4338e4d6c1796a38492c6af
SHA512 c6f172f9df964e208ac850a85f53c28675987538309555b99254ee016d41989fdd243bce302d881d9dc33bf71ef02c7107157590b84861ef1244c5aafdcf1293
SSDEEP 384:KAX0EdqfCtgNbFfVNKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVui9LZRGjrocmy:K80EdwWgNhfVN8F1+UoAYDCx9Tuqh0Vt
TLSH
T12AB2CA3B640DCB7E5F800A9DAC196FD77DA802C796988D4047FE994C02C77EA912A4DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

95f1ead3-d147-4344-a9e1-1eac4ca0bdac.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\95f1ead3-d147-4344-a9e1-1eac4ca0bdac.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 2bd777faa6d2cbaa3068936526217180b1b64f365a9efcbfcb4fe96de0ac098e
MD5 4d2cfe1701dad01e39376bdbf1dabe07
SHA1 ee1183532b0fce157a134f17ad40de392f12f344
SHA512 06a6ab96ed4429b3c22d246a10e5af2a8aa01cc6f5f47d828f2fe9456e515cd2b393b33261bc222ad51f57fe048d2443d4a165b00caacae8c7252302efbb053f
SSDEEP 768:Brv+4UNbd03H4+LeSFOUkCrt/X4fouOToPvB2thtA9VAgUeVH1Sl1:Bbsby3tsnnwthtt1EH1i
TLSH
T15F13BE32A9A88D23EDE6D398710B72432FF4512396D40F849EDD2B4D069B9DE430FD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 b3562a682b8413e7038d9e10dd7a21788eeb448d9817edf8e96255ef70093c53
MD5 e027fe64da609004a0c19be42fbaf0d7
SHA1 fbe9a500de4652264096f2ad5d02cf77928ecc16
SHA512 bfa294bddf7cba5645917f01cbd60b06059e2344a9ec286f9cfa6b816d6889c6428d8abe4dd7251afc4a8571ce1160f2c8472396676f3c260c20e8b9a076e5cf
SSDEEP 768:zz38B4+LeSFOUkCrtRX4fouOToPvB2thtA9VAgUb9Mj:zz38xsnnwthtt1b+j
TLSH
T15BF2C072F8A88D23DDE5D3A8720A32526FF08123D6D81F846FED670D0657AAD470BC25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 8ee6c22347b8d93f4392fed0ce622744bfb53e18251169f76c1d202c22850276
MD5 9bb218d56ea18216999552710e860c4d
SHA1 f0c46702e8c960ca4dcb60edebb66f087e3cf187
SHA512 8121d1e2b227602f6037397ec6842fa9e92482375c2c3a675e0e11f3ca574c2f0c20d10d9cb1c4051e9f7f658d4e2a9d82eaeba191ff3ed1d85cc0c51692277f
SSDEEP 768:FFQF3QwgRB4+LeSFOUkCrtBX4fouOToPvB2thtA9VAgUb9Mj:kF3ahsnnwthtt1b+j
TLSH
T15403BF73A998CD37EDAAD798B20E32425FF08163C6E49B84ABDD6B0D02575DD430BC25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 fb4247c79419f4fa0019a1f44e418263a0457952dc499cf9475f4ef8d6c5d324
MD5 8c8ee1560cd317a60c828011f5b50de0
SHA1 1f9dfd7ed3bba13e309cef6e82862d363c51cce5
SHA512 bfcb4008085dd5f7160904dfc48711331624986d48d3fb2d6c7982f6babc7b4edf10ecdc2ed570b006acabd456e3908d1a7f63a1cfec1603e3becf0d3f9f1ca5
SSDEEP 768:1rv+4UNbd03O4+LeSFOUkCrtRX4fouOToPvB2thtA9VAgUeVH1Sl1:1bsby3Gsnnwthtt1EH1i
TLSH
T1CA13BE32A8A88D23DDE6D298720B72432FF4911396D40F849EDD6B4D069B9DE430FD66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 9e184122ddf61919928feb093534fafb993b51263ab7c061023d617820cf5874
MD5 6e0ae5bf99aeb67cdf43a6e37aca9da2
SHA1 3bf1f6626e0d4dd84b0dae3f481a38c9e1a41ef0
SHA512 34bbed131a626a72574ae2bab25989d73f1dca8bf5716157a73c7d6972a4dc4fb777b40938093bbe5726502f9f34d88816fa887d2e7c9c1119a5470ba7c04183
SSDEEP 768:rz3jB4+LeSFOUkCrtRX4fouOToPvB2thtA9VAgUb9Mj:rz3jxsnnwthtt1b+j
TLSH
T189F2C072E8A88D23DDE5D3A8720A32426FF08123D6D81F846FED670D0657AAD470BC25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 6afbb974b8749c646467eb88a94da3c3e658e91b0a021bb6bfaa6097e4dea125
MD5 f450c047fea93da5b03145ad5c275820
SHA1 d39804bcfe3447c9614990c81a6cac57be326142
SHA512 3c95a8339fa2542079fd53ae2b7b495f67ce59c8e33e75798f7c2cbb9a67607ccbe82dc141e83d25fcc6643a8b76f87e08a3e205e5b8defc7ff472f667839938
SSDEEP 768:grv+4UNbdH3/C+LeSFOUk/X4fouOToPvB2thtA9VAwieVH1SlX:gbsbh3ysnnwthttbEH1Y
TLSH
T18D03CF32A8AC8933DDE6D388310B71532FF4516396900FC4DADD2B4D069B9DE470BC66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9c7fc191-a59a-4e34-bc85-5be135ea1a8a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\9c7fc191-a59a-4e34-bc85-5be135ea1a8a.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download