30acc785228e9697a99adcc59017e7b3620de682fa9ced17031872c2e7f982a6

Analysis

max time kernel
148s
max time network
131s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
27/08/2026, 12:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
ywss/index.html
Size 5KB
Sample260827-ppv8mahe67
SHA256 30acc785228e9697a99adcc59017e7b3620de682fa9ced17031872c2e7f982a6
MD5 23d188cfa6a2da183e2036f366982b1e
SHA1 4ffd050592f04370d2a24f5cfdad40364aa897ce
SHA512 a33eb2479d8644520ec79c8e8c874a0814d7472d8b0a1423a52a4a89a4e6d173495c93476c1cf0ff53ff54f38b0ca80a033070a10bb8b08c838a7f4424b2fb79
SSDEEP 96:MRzEWi0UrlDetFlvnyirejCqOtn2K4/DoUZ/i8C:7StFlvnPqjCqOt2K40UJ1C
TLSH
T1A7C19313608C9E27030240E5E043392CD9EBC93BE820DDA079FF15A51BE6FD9A26F529
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2776	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134323074572287825"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3797332335-34111092-3597280141-1000\{C29550FE-8EAF-4424-B8A8-8BEC3F0B7DA2}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3152	msedge.exe
3152	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4612 wrote to memory of 2580	4612	msedge.exe	88
PID 4612 wrote to memory of 2968	4612	msedge.exe	90
PID 4612 wrote to memory of 2776	4612	msedge.exe	91
PID 4612 wrote to memory of 2968	4612	msedge.exe	90
PID 4612 wrote to memory of 2968	4612	msedge.exe	90
PID 4612 wrote to memory of 2396	4612	msedge.exe	92
PID 4612 wrote to memory of 2396	4612	msedge.exe	92
PID 4612 wrote to memory of 2612	4612	msedge.exe	93
PID 4612 wrote to memory of 4460	4612	msedge.exe	94
PID 4612 wrote to memory of 2612	4612	msedge.exe	93
PID 4612 wrote to memory of 2612	4612	msedge.exe	93
PID 4612 wrote to memory of 4460	4612	msedge.exe	94
PID 4612 wrote to memory of 4460	4612	msedge.exe	94
PID 4612 wrote to memory of 240	4612	msedge.exe	96
PID 4612 wrote to memory of 240	4612	msedge.exe	96
PID 4612 wrote to memory of 240	4612	msedge.exe	96
PID 4612 wrote to memory of 4724	4612	msedge.exe	97
PID 4612 wrote to memory of 4724	4612	msedge.exe	97
PID 4612 wrote to memory of 4724	4612	msedge.exe	97
PID 4612 wrote to memory of 2528	4612	msedge.exe	100
PID 4612 wrote to memory of 664	4612	msedge.exe	99
PID 4612 wrote to memory of 2528	4612	msedge.exe	100
PID 4612 wrote to memory of 664	4612	msedge.exe	99
PID 4612 wrote to memory of 5248	4612	msedge.exe	102
PID 4612 wrote to memory of 5888	4612	msedge.exe	106
PID 4612 wrote to memory of 4444	4612	msedge.exe	107
PID 4612 wrote to memory of 4716	4612	msedge.exe	108
PID 4612 wrote to memory of 4520	4612	msedge.exe	109
PID 4612 wrote to memory of 4520	4612	msedge.exe	109
PID 4612 wrote to memory of 3152	4612	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\ywss\index.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2c4,0x7ff8eb18c188,0x7ff8eb18c194,0x7ff8eb18c1a0
  2⤵
  PID:2580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1564,i,3203423002384827531,18418317043546122303,262144 --field-trial-handle=2572,i,6041547677958435018,17347140069687242167,262144 --variations-seed-version --mojo-platform-channel-handle=2564 /prefetch:2
  2⤵
  PID:2968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1852,i,6588093485763843272,12988034756443089289,524288 --field-trial-handle=2572,i,6041547677958435018,17347140069687242167,262144 --variations-seed-version --mojo-platform-channel-handle=2732 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2296,i,11848417733683738807,15177370737987546160,524288 --field-trial-handle=2572,i,6041547677958435018,17347140069687242167,262144 --variations-seed-version --mojo-platform-channel-handle=3128 /prefetch:13
  2⤵
  PID:2396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3560,i,18227762288843437214,16524310577329152800,2097152 --field-trial-handle=2572,i,6041547677958435018,17347140069687242167,262144 --variations-seed-version --mojo-platform-channel-handle=3604 /prefetch:1
  2⤵
  PID:2612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3564,i,2988805059463579260,17450999754691042339,2097152 --field-trial-handle=2572,i,6041547677958435018,17347140069687242167,262144 --variations-seed-version --mojo-platform-channel-handle=3628 /prefetch:1
  2⤵
  PID:4460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4276,i,3519569776462292703,14448195553492734834,2097152 --field-trial-handle=2572,i,6041547677958435018,17347140069687242167,262144 --variations-seed-version --mojo-platform-channel-handle=4856 /prefetch:1
  2⤵
  PID:240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4288,i,8584965840514670965,3852387938516422433,2097152 --field-trial-handle=2572,i,6041547677958435018,17347140069687242167,262144 --variations-seed-version --mojo-platform-channel-handle=4876 /prefetch:9
  2⤵
  PID:4724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3912,i,9534588346212347549,12500740136274487396,524288 --field-trial-handle=2572,i,6041547677958435018,17347140069687242167,262144 --variations-seed-version --mojo-platform-channel-handle=5476 /prefetch:14
  2⤵
  PID:664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5400,i,3251434977672525063,15991488726672432381,524288 --field-trial-handle=2572,i,6041547677958435018,17347140069687242167,262144 --variations-seed-version --mojo-platform-channel-handle=5496 /prefetch:14
  2⤵
  PID:2528
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6084,i,17099049175781797037,13492259061782133215,524288 --field-trial-handle=2572,i,6041547677958435018,17347140069687242167,262144 --variations-seed-version --mojo-platform-channel-handle=6108 /prefetch:14
  2⤵
  PID:1692
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6084,i,17099049175781797037,13492259061782133215,524288 --field-trial-handle=2572,i,6041547677958435018,17347140069687242167,262144 --variations-seed-version --mojo-platform-channel-handle=6108 /prefetch:14
  2⤵
  PID:5248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4272,i,14222909953073010505,5207920564749944277,524288 --field-trial-handle=2572,i,6041547677958435018,17347140069687242167,262144 --variations-seed-version --mojo-platform-channel-handle=4956 /prefetch:14
  2⤵
  PID:5888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3756,i,5708816305247978320,11798391027869421173,524288 --field-trial-handle=2572,i,6041547677958435018,17347140069687242167,262144 --variations-seed-version --mojo-platform-channel-handle=3684 /prefetch:14
  2⤵
  PID:4444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4292,i,5063626440947103404,11802083905516107501,524288 --field-trial-handle=2572,i,6041547677958435018,17347140069687242167,262144 --variations-seed-version --mojo-platform-channel-handle=6168 /prefetch:14
  2⤵
  PID:4716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5564,i,6313361083428380328,16082554417902228628,524288 --field-trial-handle=2572,i,6041547677958435018,17347140069687242167,262144 --variations-seed-version --mojo-platform-channel-handle=5600 /prefetch:14
  2⤵
  PID:4520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5592,i,11953457175209424374,2917284182604282032,262144 --field-trial-handle=2572,i,6041547677958435018,17347140069687242167,262144 --variations-seed-version --mojo-platform-channel-handle=5212 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3152

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:6096

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4300

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 7292b7f256241bc401a4edc6877bff931c1ababf0b845c6d3d2bfbd9a5b311c4
MD5 a0e1cf559d0091554785930a9a29b16f
SHA1 707a2ce00e0865734f0b7d0dd4fe20005423a5ab
SHA512 8ca73508f9d4e3acc2d772abcce89b046ee3da7d7a1a200d4133fe646d1b8c052a5c571f8969c142718350dfb7ac7209748a8bf3cf621a894d697573f6d309aa
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7e:fwUQC5VwBIiElEd2K57P7e
TLSH
T18AB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e413e02b9e80ee8d76d52c1043fc32251e2d7634d4b2fbd970df9ace9d91831a
MD5 22959b3a06a842ac30237dd57e8a3801
SHA1 0b7c28071a592034aa2607038000f085c7bb6362
SHA512 644add9ab912ad7fdfc55bc7a1b84482c75cc9bc69a59d169bae63a0400619d999846ebbadb0ef2bd6d35c2bd08a5f07053b600874dd5dfcbda7e8f3076131fe
TLSH
T1A5D02BE476408A0CC980203335F6524092018910D801D1480040B325CC845C1257F0DF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8aaa68aad07ba45abe53bd513aa5f7e7b21bd1b29db6e1d5c1e0a79a5f4eb890
MD5 74012bbce5fada7634c1da1b567562b3
SHA1 09db27f38f27e35986cfd407b57f6f83c8fc59f8
SHA512 c1a6a98f972793c84274c29552107bfe07b775c7c8121e5fdf137ebf9a7cc3f4eb43fe9eadfc842e7b92ca7281bbcea3d660bdd8fc9adc56add068510c41e48d
TLSH
T1FBD02BE07640890CC980203335F75240920189108401D1480040F335CC845C1257E0CF
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 8df0825757390dfb247e5f6c7e779b8e270c1c16c799d74254e0dd5d942dffc3
MD5 c09db9341dcb8b52ed7e3abcbfadd7be
SHA1 5c8732ca3fb6a14d88306073953eee2589f0c5b2
SHA512 2bbfd0dc7b2a5fe48e3e93e0ad2b3991eb360095f869be72d9f262b8ab3e134a829d09681b4f30c32e2fd66e20234455c5c43b96a72c9519a0a66e4fc456ed56
TLSH
T1A3612ED2A3A10AE2E7354EBA84E1F45737F5CC5A81B31E0474835E746462FE0A2D5163
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 7c48cae092becf577ce0b3e8593f2fbd103166fdf1c59e132509f6a46da0cc2f
MD5 6512938258aacd9c0f7755b46bc2ad1c
SHA1 641c171eae0b47c18fa1067168cb508aa88ef456
SHA512 e21d87b61bd7d878a164d3e9a72b22dda747208a72f2c505a6e37b3a2879ca67f05a0d39347915ffaf046ad91e113f93d9a4b1a34a12a3f8359a31fd4d9c8a8e
TLSH
T1AD612DD2A3A10AE2E7358EBF84E1F45737F8CC5A81B32E0474835E746462FE0A2D5163
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 a48dc7d124451ff34707f82c087ebcf18682084fb47baaee8e3f677eb5226b87
MD5 8bfcebbd678e32cc93f4bbadeb983c6a
SHA1 33f27efa6a23a8f84678f597162450e99a19d9fa
SHA512 8f420e4edffb9555e7c0d22f5de95aeee54277dd8b11600c09c1326fa7792e3939c352b0535996d4d863527a361401560d2e8062d9657e26d05f126ef0f14c5e
TLSH
T18D318EF787F4956E8A0196F0AA14AF2FCE2D0515431C7C6AC9E4AE2793F3472E041A5F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 3d8f9c9a1814552c13b6f3a98fdae989c8521e59d647aa0f42eda64b302ca752
MD5 646c08a1f25dd2dac6285dbedbb97e89
SHA1 3497d603cabe890a507351cf694f074a04c8e2d9
SHA512 014c108e2b04a56abc74b9a8c5fb28500a431327d3bb2fab6ada3c76e0054e3e68bf30df1f079c553a5928bc331cb7e18be83b782d484e19655c6fe868382fa4
SSDEEP 192:sxRXRtyM/jK1Ml8wbWV/fRsTTprQ5OqzoA8p4d/g6+WNIYn8UKhPGjIgD2J:sxRX/lWV/fRsTTPnA/5ITli2
TLSH
T1BF52D915A6346977CCDBD21DFA417F93D6F81573A1901E44AAFC9A0C00E6BED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 ad8ff1f6d7b245e028559b1b7714427618a4f302846704b9968eeecdae4dbf9d
MD5 0b7fa0706d5db19d0470fca133217207
SHA1 4c3e28fb10325c075102d3fb595b415fcc723425
SHA512 ecdaed510f38888c6962bf40e8c1b4177ccbb96e8a49b23174c8e65c867e7b229a2a58193f4cb18338fd62e75d8e9e94ea42b3b42717c1ea5c78f87e876eb441
SSDEEP 192:sxRoRtyM/jK1Ml8wbWV/fRsdTprQ5OqzoA8p4d/g6+WNIYn8UKhPGjIgIJ:sxRo/lWV/fRsdTPnA/5ITlis
TLSH
T10D52D915A624A977CCDBD21DFA517F93D6F81573E1901E44AAFC9A0C00E6BED220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 96d3eefc006dcd0b7be3fc4a8d42b0aa62c0161096315a360eb24097b82d529a
MD5 bb78bbd8e598be5f4c586f53916c960d
SHA1 ec4a9c790e5d05bb119ddf73623df979a3579eac
SHA512 cec3974cbb219e19b96c4a2ea6af2efbd89221c08702017badf1db65f291380506e51e7e898055b4667a22eef4ef9b936c247e3371de87880197be8fa3c3f2a4
SSDEEP 192:sxRXRtyM/jK1Ml8UQ0IbWV/fRsT9prQ5OqzoA8ped/g6+WNIYn8Q4hPGjIgDMJ:sxRX/q5WV/fRsT9PnO/5ITFiE
TLSH
T10362D815AA24A977CCDBD21DFA417F93D6F85473A1901E44AAFCDA0C00E6BDD221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 71a0b0c57cdf6faf39a86516903c0d38bf1444984a9be9b6ed72cc2f57708c7c
MD5 7a2a34f5b21e288a870614f043312730
SHA1 e9c2810df1052d6f2a736ea363d74533c4e939c1
SHA512 fe73be934783e27ed0c0cf9486f2abeb624715dbd27022f49bfa71d5f7f9b1d9f07ca92495c37b9b63624052470c020a46cd90eeeefbaf1bfe540c29bb644481
SSDEEP 768:wGedp6WgoufDM8F1+UoAYDCx9Tuqh0VfUC9xbog/OVIu4Y0roSh8a54:wGedp6WgoufDMu1jatVYfIO
TLSH
T137C20C3B640CCB7E4F844EADEC29AED76DD801CB9B984D5447EA890C03C67EB511A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 23f688df60848ab12db7529638cddab14fae56b620ab4fd4aa5bd5b89c8acde4
MD5 3c254ff17782cf428bb3752659bd513b
SHA1 e7a088fe3b7a1e657de22e896c255a586ce20b78
SHA512 7e8c5054d8a3ecd9ff3efb98fc14a4d32ae35cc847e524b582bfababd67179c3000ca42893294a19e42d597d395ebe16dccf4927da160c432845119cb1ac2825
SSDEEP 96:KRdqjXNn7vWj4mgfvK4+gBvcldQzLkHm7KmgIIOW4tVgGOK47g0OcOGlkRgQKhu3:CdqjXNn7Oj4XfV+gBkldQzLkHm7KmgId
TLSH
T15491280170BA12943C7F76288179987ADA8174773259E87B7B6901E60FEBE024DFCDC9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59ab1b.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59ab1b.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 a218a769ecc9dc8149fd000cf1f945a16d7059454aef8a73b6b9fc9404ddf9ae
MD5 b0120bff91af76eb7dac5f3e93d76e59
SHA1 c86e80c5c021049f25004388e2ff103855c30b6d
SHA512 c8462672d5d876c28eeabd847543293932596b0b3429b80bf0bd951b2cde65403b3559d7aefbe3bfa9bae9215a3a6ebd808fae34740f1fbdcf0153e35ee6be5c
SSDEEP 768:Rrv+4UNbdE3qHDZIO00heKNzc4ReyIsPrt:RbsbK3Cvtc44bsjt
TLSH
T13803AE32E8389973ACF69A85F50735537EF8611BC1C81A94C9EE6F4C468B1AD134F923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 ba98ac9bc1230233519830da08fc9d0836f2ad57dd4301106e346985ed6ed6e9
MD5 7d63896c664c38dfd3cd2a936c1fa54c
SHA1 4b5033914697c69492ac7b5babe9b7779b118185
SHA512 b5ce7b12c8260dcca66a60b6a57e4229acd59021e0b90265458a741b5d7ae2a2f7e837e7b00e8138831b2651355f1a68f63c439fc23d5f70e1111155a01451c3
SSDEEP 384:bZcID38NairzKeXVJDZNfNoXOVSUUq3heiaETRzcoXfK86sfxEZxxsIj4lBr9v9X:DD3SHDZIO00he2Nzc4ReyIsPr9BD
TLSH
T15FF2BE71EC749C63ACE69696F90736537EF49127C1D82994C6EDAF1D098B2AD030F823
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 7b2dbe3f8427c5b1b78845974535ad30e9babdab261e6d53094ac59c42c7c4f2
MD5 2cfe1725494ec483593e1136ee4f209a
SHA1 b9fe9a01bb3ad61342cc2cdfe63a25f1f9de4671
SHA512 5ffc67157cac18646d368f445e03cac8e7442acbe5b371ace6cb838a56900f4b99da6973085d03af9d9fffdb02536960136c93be3113e9674d6363e9bef7022b
SSDEEP 384:6ZcID38NaTrzKeXVJDZNfNoXOVSUUq3heiaETRzcoXfK86sfxEZxxsIj4lBr9v9X:4D3FHDZIO00he2Nzc4ReyIsPr9BD
TLSH
T1E3F2BE71EC749C63ACE69696F90736537EF49127C1D82994C6EDAF1D098B2AD030F823
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 57ad8a355fe2626c6454939ec143218109b53e00e6635ac3006eb2dfcd2356dd
MD5 1af99e88f8dc32941cda9d9beda846b5
SHA1 8722eea984d958b9efcd62a2c6e90edc71b7bcd5
SHA512 65780e3071903346376590ad25b3151e35c907c1b63b1762f9dc9ba93eecb5210a4a7145e20d9a946931c639272e6c401795548ae2c697ba127190b5abc861a3
SSDEEP 768:PFQU31wgjHDZIO00heCNzc4ReyIsPr9BD:SU3TBtc44bsj/
TLSH
T187F2AE72EC64C877ECFA9B96FA063253BEF49127C1986994D6DDAE0C054B1AD034F813
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 151f148f022a9be783d983203123c526c9e101796fe8b8915bb7734a582ad70c
MD5 23cdc6e4050654437ce1b374b6d9efc7
SHA1 f16d59a8540a21efc4aee1da070a52e1016dc2a2
SHA512 e27740d940219c5b35f3fa83ca74273c14b1ff02879a0ce3f84a7a01dbca75be3ad7d93fbe5318099cea4b2a71ea2604eb1949c05839446d7f2208e05ddf6383
SSDEEP 768:6rv+4UNbds3owDZIO0tNzc4ReyIsX+eVH1S5D:6bsbS38tc44bsOEH1Y
TLSH
T17F03CF32EC789977ACF69685B50B36533EF8611B82D81E94C5EE2F0C464B1DD130B923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 6a032f30bb0ad50235fc71be10dbddd4a07a7433f84938e529dff7cfda84748d
MD5 cd1c19d9892c8f207d8ecd1fcafd8fda
SHA1 452178bde92885047648bd34cbc665689cd15968
SHA512 95315ff33470b5bdb5a11a6b16ebb47779f228423f7dcd6fc26d4bd8d00391984bf96581b720e45f9e627e129f1d5dafd161b5509439457fc0d373e76531ade5
SSDEEP 768:8rv+4UNbds3bdDZIO00hecNzc4ReyIs2reVH1S5D:8bsbS35Ttc44bsEEH1Y
TLSH
T1C103BF32A8789977ACF69A86F04735533EF8A11BC1981E94C5DE6F4C464B19D130B923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

65880a7c-32b1-4a16-a712-c106a01f1462.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\65880a7c-32b1-4a16-a712-c106a01f1462.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download