988ae9393737e5e69c58faec6da994dc7293f3530a21b8667e78b138822db656

Analysis

max time kernel
148s
max time network
153s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
16/08/2026, 12:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
BONU7-GAME.html
Size 5KB
Sample260816-ppvbbsar3z
SHA256 988ae9393737e5e69c58faec6da994dc7293f3530a21b8667e78b138822db656
MD5 3ea7a7714f73f3ac1faae27fe3879944
SHA1 5386aaf6db2ae656fcdc67bc7fc036e3b1f2af89
SHA512 aff4fe177166588f463d42e9b2f11f5e0408a85ce353fe7eb1ee76231d39baad1bacd82c9d56ec0d5500b73c5532668c5fba238dd60b7430f8a027e31ff257c9
SSDEEP 96:PNyetoXZzIEb0EaW87qX2Q6da2sfq0dtp4Ue3HN35TBWjYzueh8Zmw:PNbtkCBzQ6s2kPpCl5M8yaw
TLSH
T1B7B107F7AD3240275FB65FE660B3736CD330FA9EBB499181E990CA9C92DCE9B4414184
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
792	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134313570663824854"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-189034102-168398478-1159367937-1000\{1397036D-D441-4D83-A95D-9FD901D13CBE}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3268	msedge.exe
3268	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3052 wrote to memory of 6112	3052	msedge.exe	89
PID 3052 wrote to memory of 792	3052	msedge.exe	90
PID 3052 wrote to memory of 5740	3052	msedge.exe	91
PID 3052 wrote to memory of 5740	3052	msedge.exe	91
PID 3052 wrote to memory of 5740	3052	msedge.exe	91
PID 3052 wrote to memory of 5844	3052	msedge.exe	92
PID 3052 wrote to memory of 5844	3052	msedge.exe	92
PID 3052 wrote to memory of 5308	3052	msedge.exe	94
PID 3052 wrote to memory of 5308	3052	msedge.exe	94
PID 3052 wrote to memory of 5308	3052	msedge.exe	94
PID 3052 wrote to memory of 5048	3052	msedge.exe	95
PID 3052 wrote to memory of 5048	3052	msedge.exe	95
PID 3052 wrote to memory of 5048	3052	msedge.exe	95
PID 3052 wrote to memory of 120	3052	msedge.exe	96
PID 3052 wrote to memory of 120	3052	msedge.exe	96
PID 3052 wrote to memory of 120	3052	msedge.exe	96
PID 3052 wrote to memory of 6008	3052	msedge.exe	97
PID 3052 wrote to memory of 6008	3052	msedge.exe	97
PID 3052 wrote to memory of 6008	3052	msedge.exe	97
PID 3052 wrote to memory of 996	3052	msedge.exe	99
PID 3052 wrote to memory of 996	3052	msedge.exe	99
PID 3052 wrote to memory of 5336	3052	msedge.exe	100
PID 3052 wrote to memory of 5336	3052	msedge.exe	100
PID 3052 wrote to memory of 5460	3052	msedge.exe	102
PID 3052 wrote to memory of 3684	3052	msedge.exe	106
PID 3052 wrote to memory of 2724	3052	msedge.exe	107
PID 3052 wrote to memory of 1476	3052	msedge.exe	108
PID 3052 wrote to memory of 1984	3052	msedge.exe	109
PID 3052 wrote to memory of 1984	3052	msedge.exe	109
PID 3052 wrote to memory of 3268	3052	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\BONU7-GAME.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2ac,0x7ffb2926c188,0x7ffb2926c194,0x7ffb2926c1a0
  2⤵
  PID:6112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1684,i,15173960397992164907,6518100103489273562,524288 --field-trial-handle=2204,i,2694542302539694284,615376343436298282,262144 --variations-seed-version --mojo-platform-channel-handle=2496 /prefetch:11
  2⤵
  - System Time Discovery
  PID:792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1552,i,16680442693161987073,10458660428517529347,262144 --field-trial-handle=2204,i,2694542302539694284,615376343436298282,262144 --variations-seed-version --mojo-platform-channel-handle=2200 /prefetch:2
  2⤵
  PID:5740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2332,i,3139312606583739100,4050937180269616717,524288 --field-trial-handle=2204,i,2694542302539694284,615376343436298282,262144 --variations-seed-version --mojo-platform-channel-handle=2504 /prefetch:13
  2⤵
  PID:5844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3588,i,7002188447363284087,6428609347540256718,2097152 --field-trial-handle=2204,i,2694542302539694284,615376343436298282,262144 --variations-seed-version --mojo-platform-channel-handle=3668 /prefetch:1
  2⤵
  PID:5308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3592,i,9783895149826315880,2953632180677263105,2097152 --field-trial-handle=2204,i,2694542302539694284,615376343436298282,262144 --variations-seed-version --mojo-platform-channel-handle=3672 /prefetch:1
  2⤵
  PID:5048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4348,i,14543932700650384729,5151516206016573429,2097152 --field-trial-handle=2204,i,2694542302539694284,615376343436298282,262144 --variations-seed-version --mojo-platform-channel-handle=4220 /prefetch:1
  2⤵
  PID:120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4360,i,11897425961242808771,10739156698294111732,2097152 --field-trial-handle=2204,i,2694542302539694284,615376343436298282,262144 --variations-seed-version --mojo-platform-channel-handle=4892 /prefetch:9
  2⤵
  PID:6008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3776,i,14252453661483559497,9509113859464729830,524288 --field-trial-handle=2204,i,2694542302539694284,615376343436298282,262144 --variations-seed-version --mojo-platform-channel-handle=5396 /prefetch:14
  2⤵
  PID:996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3652,i,16378640031624431166,9488091276633084105,524288 --field-trial-handle=2204,i,2694542302539694284,615376343436298282,262144 --variations-seed-version --mojo-platform-channel-handle=5420 /prefetch:14
  2⤵
  PID:5336
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5964,i,6815168910253184564,3545425761665089540,524288 --field-trial-handle=2204,i,2694542302539694284,615376343436298282,262144 --variations-seed-version --mojo-platform-channel-handle=5988 /prefetch:14
  2⤵
  PID:5144
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5964,i,6815168910253184564,3545425761665089540,524288 --field-trial-handle=2204,i,2694542302539694284,615376343436298282,262144 --variations-seed-version --mojo-platform-channel-handle=5988 /prefetch:14
  2⤵
  PID:5460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5380,i,17822713119243743431,11806320274144067874,524288 --field-trial-handle=2204,i,2694542302539694284,615376343436298282,262144 --variations-seed-version --mojo-platform-channel-handle=4936 /prefetch:14
  2⤵
  PID:3684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5328,i,9835161734112655084,9431276730191227663,524288 --field-trial-handle=2204,i,2694542302539694284,615376343436298282,262144 --variations-seed-version --mojo-platform-channel-handle=6616 /prefetch:14
  2⤵
  PID:2724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5348,i,3053091525569535542,10972233299102809067,524288 --field-trial-handle=2204,i,2694542302539694284,615376343436298282,262144 --variations-seed-version --mojo-platform-channel-handle=6644 /prefetch:14
  2⤵
  PID:1476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5168,i,4471534610440978757,17608618125905184973,524288 --field-trial-handle=2204,i,2694542302539694284,615376343436298282,262144 --variations-seed-version --mojo-platform-channel-handle=5464 /prefetch:14
  2⤵
  PID:1984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=816,i,5674139102043474272,9203402251246253500,262144 --field-trial-handle=2204,i,2694542302539694284,615376343436298282,262144 --variations-seed-version --mojo-platform-channel-handle=6424 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3268

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2632

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5376

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 7fea608921203501a32578700c621171014c39e7f04c689721b0273231fb7a5f
MD5 4e09ea0f719ca97c7b586b8e5f4d33a6
SHA1 41cd00b43529d6db5a55ee3d9c51701969b4ae7f
SHA512 959b767f8802a57cc6718b453cfb6eeafdf5379bee04e4db88bc742c90eecbc3233883deaccfe96dc2c0e83d6dbcb393b791c5666948b6c327c2f22803e8fa66
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P74:fwUQC5VwBIiElEd2K57P74
TLSH
T14EB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7add6572365d752d8c3a090b9a256c43e3c5ff716f29ed7aa3c53dc57a08ba60
MD5 0da70f521ac5aee3489abf6e3eb4e375
SHA1 0f3cd9919820116ecc86bab93f4712c08485dc56
SHA512 a9cddd04863b2ac842fe4f91265c19a41d8b7442be8f07a91747705beca52c1e1d563e3c46cf68e1b73606695624f13ca69a8246653c2535d0684ced42c37d33
TLSH
T182D09BD479045D78C4C1353231A673155A616435DA5C46481051F3AACD65141667F5AD
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ffe13798c5910685872d371e84c30baa9eefaaa5db1419603eb30d473d7b2e37
MD5 03c111f9396889c77f6d9883c5df333f
SHA1 be65300843096dba92c5695fd35e2dffcbb7eb0a
SHA512 a77dfe3b48fcb72648f1adfafbf0d0fcd4d88690dcf41609a03e1d6b645d1336b6e322931b2205673283b920d20ed0225c6aa320a83a2d3a410771f18d120c19
TLSH
T1B1D09BD079145D78C4C1353231A773155A516435865C46481151F3BACD65141667E59D
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 c9978e01bd14a592aa19f1afabcc0bb155e58596286e4f35096c01b52b2b070f
MD5 fd8241452847058834edfaf57b4ad5d9
SHA1 3be3891f865bb54cc40b4964440fd27dc4fd92be
SHA512 b74a6ec575f8fcede4781c5af9d453ec0a85dc6b3d61d683719db9f699a18c0ab6380f9df8e741313345f0196e57c59c3ae8dac7a961a638a3a8ecc4eb2563d5
TLSH
T17041212AC33EBDCED7A1577255E1625632B3D4992D0B6F188288BB7C4F45B0670A3322
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe595c10.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe595c10.TMP
Size 2KB
SHA256 b9dc94a602383fcaafce61d1c5c1db97b572efd432d727ae567f4b3d95124e1c
MD5 543d71f6c39d6a2420583275d6d8c971
SHA1 539e9c11014dbe5a20bb288c4afc724528d50157
SHA512 e1501e6694ba7840a0183eed3b158781bcbf10885eedc29373a1574e668b7bb04f4534c579c068b0d5ae53a80cb4f0c7defd855d41532bcfb741aeaeed8ccc37
TLSH
T1C641202AC33EBDCED7A1577255E0625632B3D4892C0B6F188288BB7C4F01B0670A3322
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 fded6174f5a47e1bc7bcb560c0a55a26c0d48586a52f702eeb3cabdbe7340b04
MD5 1cf58a9bd1260ebf44c7adca3ef054fb
SHA1 426206ffa836334a9383b0219e2683e224d7257b
SHA512 40312a293fb87035cc0583c4b665e1b32b6f72a94d1f552502b686769d3c3508ffbf43eb33818e39160b44d95473195d61bf8d41687fbf5042221f15f4c877e4
TLSH
T1FF31C2F787B4957E8A1196F0EA14AE1FCF1D0515432C786685E0AE2793F3472E041A5F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 e6fc90d39c24bfdbf6e87922b7bfbfa7b8891fe30cc19bf336f7eb0e5223eccb
MD5 0e470fce7cc38903600044140f8b1c8f
SHA1 6d27d4364e878fc1db32e912f028a46a3c51b338
SHA512 f08c0d27b6d4beb74f6e8da2f6413c0e15bc91ff606b59d51d25dfdf3c3125a526c5850ca4309a2b9e3ce810b63c7e41e63bbf5ac9792b033c8eae89c86ed12e
SSDEEP 192:sxRPRsyM/jK1Ml8wb9/fQsW16/Ilgw8bNdDzoA8p4m/g6+WNIYlzZ8/oGfIgIJ:sxRPel9/fQsW16Qlgw8dyr/5IhDs
TLSH
T1D952D8156A246D778CDBE209FA517F93D7F81573A1941E04AAFCDA1C00E6AED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 736de2c5b8997852d669579f2738e71272a8d004818f0916e79dfd44c16b7532
MD5 f87f9ba015c61acd88e75b03a678f1d9
SHA1 8014c1e59145ae1416fb31660a61aaf3ff376532
SHA512 7b36ca6e9406dce689930231dc402aafb6fad9669b885308d28976d8fe9a9d1e6f4deeec799c9a3eb29ab20308c44535b037eec18c598c8b7466385821af517b
SSDEEP 192:sxRcRsyM/jK1Ml8UQEb9/fQsu16/IlMw8bNdDzoA8pem/g6+WNIYllZIjoGfIgDY:sxRceqC9/fQsu16QlMw8dyd/5I1D0
TLSH
T18262E715AA245D77CCDBE209FA517F93D7F85473A1941E04AAFCDA1C00E6AED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 f751ef807bc2e1fd46e622ab1e36a2232e76ba63f5315cc51ab151d55699151b
MD5 10bdba4cd18da5eceddf7d6e8669cad1
SHA1 5d8d1ac0a40a8dfd9c94c23bd5a637977c937504
SHA512 c869cc877dfe8d67803042134d910bb52c8219adf9244005bcef416390c7314e7cf63130ce9e15b4b8e03fac642b136655d27da0b05b85418aaf57828d8bf29c
SSDEEP 192:sxRcRsyM/jK1Ml8wb9/fQsu16/Ilgw8bNdDzoA8p4m/g6+WNIYlzZ8/oGfIgDOJ:sxRcel9/fQsu16Qlgw8dyr/5IhDm
TLSH
T1A562E8156A246D77CCDBE209FA517F93D7F81573A1941E04AAFC9A1C00E6AED2213C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 9ee30a318e433d123f90a2910679783b9659953d16429b76ca366907c8359793
MD5 420613e85a8b7158fdad79bd5d51a8bd
SHA1 0850bb2fc5419ff75627d835910a08a12ee77289
SHA512 32fab51881686e902152e0c6a3259051d7fca2c7a99c73558d6cd8960ba0cce42cda795d3012fa2cffbd3a023a488b632bb144f3be627d7d5464f2520d543e9e
SSDEEP 768:dhRACxWgg+fAJ8F1+UoAYDCx9Tuqh0VfUC9xbog/OVL13fxroPc0b:dhRACxWgg+fAJu1jaulfK00b
TLSH
T100C20D3F540CCB7E4F844A9DEC29AED76DD802CB96988D5447EE890C03C67EB521A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 f63f4706320b5c6596d1031dadd4c6aadcd53f26cca00880708e44b82bfcd82c
MD5 ce600206ec01475ec80d523835238778
SHA1 6292502a6f73a2403d1ab20f835b09508ac2ad3d
SHA512 4179787d0ea4378502313f1eeb10ee958be84568cc6651a9f8190a55d8465570376962e3014406401c34ffc535eb0f2c347b5a2b1d14cee2a1b8620adb88c02d
SSDEEP 96:KRN6zn9Xr/WzoWgv/K4ugR/cVtgDbUHZ2HDxTnjWXkSgLjK46gFjcpBc/H5WnjAD:CN6zn9Xr+zoHvFugR0VtgDbUHZ2HDxTL
TLSH
T173C15859717A465138BEB60C917D8C1F86C2B8A37714E82B77A905A20F27F039DFC8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

13cbefd7-f787-4be4-8ced-c00142ba4e3e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\13cbefd7-f787-4be4-8ced-c00142ba4e3e.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 1ac5f8535106f3b85c28773d37031482c1214d69c60ce91d89eb973fe319d2c0
MD5 dfd012b596f98b65f6c6061aea8bc930
SHA1 bb1f44439860339fc167e7aaa6c616271d1a47e0
SHA512 0731cabcd078ad3d292f5ffaae9275c838a2d36ff0b35e2b1f9aeaaa66784f80e963fba9ca311787badea1bcfe9e42e8bf0d6dfc7d746f679c8446e52f91dcae
SSDEEP 768:tB3XzMoiJsMQ8cNHXmTWTbc+HRPi9PNPQ:tB3XH5d8UeWn1xPZ
TLSH
T181F2AFB09CB9DE23ADFADB84A54A2B41BEF411A3D4C81688DDDCA70D118355D171BC3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 483da728c900b98cca1e0f46f08c101ca53d78fd8a9848819159f0e86edb4346
MD5 6c61535e9479035dbb606ede8d3e3094
SHA1 41d5abf670ab4d0821edac03ea7d3c45e250aab5
SHA512 1915176256ac695b8ea4fa6d7ad47751f5301ca003d9552e376f43100b8c911481ea3aae8dcb2ec1dc03cbe0e42a93a19f817164b00f2613d88c5ac3173f8fdf
SSDEEP 768:lrv+4UNbd23fz+oiJsMQ8cNHXmTWTbc+HReVH1SvBy:lbsbM3f55d8UeWn1xEH1+y
TLSH
T1B813CF719CB9DA33ADF69688B04B7A437FF8106385C80A98CDD96B4D068749D131BD3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 5f5eed65f1ce1f8285855552ceb7d2031717888b667417d81b6d4be248a7277c
MD5 6fa0d6d2ffcdad2851dbb49f975ff9e1
SHA1 7297726f9b1eefb559d0b8469cdf81bf998d33e7
SHA512 3a31ec2b850a787fb60e121412a5596dd2b80f91262ead8de74dfad57b7e38a00d1d65887cf01f8e28ae5570a6c93b7e28e630cbac8054eebeae840ab0dabd34
SSDEEP 768:1FQW3RwgVzMoiJsMQ8TNHXmTWTbc+HRPi9PNPQ:UW3FH5d81eWn1xPZ
TLSH
T14703AFB29CA9DA37BDFA9F84A54A2742AEF401B3D4C42594DADCAA0D118355D130BC37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 68da9f8126ca1ce77317407e40de899857acb1468b95094e94acabf8b790bad2
MD5 ce1c61a566259a76fbf77e15685736fe
SHA1 ae6725c740273f0576a92e2ef5654d228003f44c
SHA512 d53fec13d2e914a9d6c9e792e7304c5502f9a551faaed73d25f02767cdd72ee6d2b97b5264d7b45a5b51d059cda68562a31a29b2d03d6d2ca2cbc165911fba56
SSDEEP 768:arv+4UNbdM3298iJsMcNHXmTWTbc+//eVH1SvyZ:absb+3N5feWn13EH1dZ
TLSH
T17003CF329CBA9E37ADF79788744BBA577EB8106385C40684C9D96B4E028B44D170BD3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 fb2f653f9e0093811b2ed14e6e5978c1c1fcab96c5a13acfa83f819717f0da49
MD5 c77c169271e13a8450cebee93d886360
SHA1 4948f05fd94112ea72a3895eca325a82caaa4d9e
SHA512 997e0c3ce847dd2d02990a940150eda854910b028040308a2c12ab2b328aa9431641b27beda53aa5caa0c25ebb1b316d9115dd8638fc693d37c5f3db6916f61d
SSDEEP 768:jrv+4UNbdM31w2iJsMQ8UNHXmTWTbc+eReVH1SvyZ:jbsb+3v5d8seWn12EH1dZ
TLSH
T16C03BF7198B9DA33ADF69688B04B7A477FF811A385C80A94CDD96B4D028749D130BD3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ae2b17b8-fcdc-40d3-8526-1241c87a81cd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\ae2b17b8-fcdc-40d3-8526-1241c87a81cd.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download