633ddc0c6bbebd88ab428d8c68ef6bb30a589733593402b406c6fe9263e52b56

Analysis

max time kernel
148s
max time network
141s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
28/08/2026, 06:12

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
1/about.html
Size 3KB
Sample260828-gymc3stenf
SHA256 633ddc0c6bbebd88ab428d8c68ef6bb30a589733593402b406c6fe9263e52b56
MD5 9d663225f77425b5e98b90a8ae7a3829
SHA1 04ae30072395a65ed307a68fc02abf1f7195b223
SHA512 2ba25142199a4f1eb9d9cc3397f7625f1dfb2eab2c24e820e406808641bd5da10544dea686c333494a523473750c24445f138db001149aa7dfd4c2743c6e9efb
TLSH
T17171BC4A9ED4B02F105218DFA578BA597CFAE20FF2559A1D32FC42A46F52F8D1C13C98
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4648	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134323712179303361"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-552508041-2681165170-3229858294-1000\{D3CB2BBC-98ED-408A-931B-394C0B85BEEE}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4728	msedge.exe
4728	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4248	msedge.exe
4248	msedge.exe
4248	msedge.exe
4248	msedge.exe
4248	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4248	msedge.exe
4248	msedge.exe
4248	msedge.exe
4248	msedge.exe
4248	msedge.exe
4248	msedge.exe
4248	msedge.exe
4248	msedge.exe
4248	msedge.exe
4248	msedge.exe
4248	msedge.exe
4248	msedge.exe
4248	msedge.exe
4248	msedge.exe
4248	msedge.exe
4248	msedge.exe
4248	msedge.exe
4248	msedge.exe
4248	msedge.exe
4248	msedge.exe
4248	msedge.exe
4248	msedge.exe
4248	msedge.exe
4248	msedge.exe
4248	msedge.exe
4248	msedge.exe
4248	msedge.exe
4248	msedge.exe
4248	msedge.exe
4248	msedge.exe
4248	msedge.exe
4248	msedge.exe
4248	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4248	msedge.exe
4248	msedge.exe
4248	msedge.exe
4248	msedge.exe
4248	msedge.exe
4248	msedge.exe
4248	msedge.exe
4248	msedge.exe
4248	msedge.exe
4248	msedge.exe
4248	msedge.exe
4248	msedge.exe
4248	msedge.exe
4248	msedge.exe
4248	msedge.exe
4248	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4248 wrote to memory of 2084	4248	msedge.exe	89
PID 4248 wrote to memory of 1996	4248	msedge.exe	91
PID 4248 wrote to memory of 4648	4248	msedge.exe	92
PID 4248 wrote to memory of 3476	4248	msedge.exe	93
PID 4248 wrote to memory of 1996	4248	msedge.exe	91
PID 4248 wrote to memory of 1996	4248	msedge.exe	91
PID 4248 wrote to memory of 3476	4248	msedge.exe	93
PID 4248 wrote to memory of 5112	4248	msedge.exe	94
PID 4248 wrote to memory of 2352	4248	msedge.exe	95
PID 4248 wrote to memory of 5112	4248	msedge.exe	94
PID 4248 wrote to memory of 5112	4248	msedge.exe	94
PID 4248 wrote to memory of 2352	4248	msedge.exe	95
PID 4248 wrote to memory of 2352	4248	msedge.exe	95
PID 4248 wrote to memory of 5940	4248	msedge.exe	96
PID 4248 wrote to memory of 4824	4248	msedge.exe	97
PID 4248 wrote to memory of 5940	4248	msedge.exe	96
PID 4248 wrote to memory of 5940	4248	msedge.exe	96
PID 4248 wrote to memory of 4824	4248	msedge.exe	97
PID 4248 wrote to memory of 4824	4248	msedge.exe	97
PID 4248 wrote to memory of 3612	4248	msedge.exe	99
PID 4248 wrote to memory of 5900	4248	msedge.exe	100
PID 4248 wrote to memory of 3612	4248	msedge.exe	99
PID 4248 wrote to memory of 5900	4248	msedge.exe	100
PID 4248 wrote to memory of 3156	4248	msedge.exe	102
PID 4248 wrote to memory of 1924	4248	msedge.exe	106
PID 4248 wrote to memory of 1244	4248	msedge.exe	107
PID 4248 wrote to memory of 4948	4248	msedge.exe	108
PID 4248 wrote to memory of 4360	4248	msedge.exe	109
PID 4248 wrote to memory of 4360	4248	msedge.exe	109
PID 4248 wrote to memory of 4728	4248	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\1\about.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x268,0x26c,0x270,0x264,0x290,0x7ffef9e1c188,0x7ffef9e1c194,0x7ffef9e1c1a0
  2⤵
  PID:2084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1608,i,6727033793432435163,13258661420108046586,262144 --field-trial-handle=3152,i,16888017703771914799,6214260745353525220,262144 --variations-seed-version --mojo-platform-channel-handle=3148 /prefetch:2
  2⤵
  PID:1996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1852,i,6226157737122445376,12964620735879802829,524288 --field-trial-handle=3152,i,16888017703771914799,6214260745353525220,262144 --variations-seed-version --mojo-platform-channel-handle=3324 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1920,i,1255087877968461255,1061344541307687942,524288 --field-trial-handle=3152,i,16888017703771914799,6214260745353525220,262144 --variations-seed-version --mojo-platform-channel-handle=3312 /prefetch:13
  2⤵
  PID:3476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3624,i,5610548819745464136,15745470804557020877,2097152 --field-trial-handle=3152,i,16888017703771914799,6214260745353525220,262144 --variations-seed-version --mojo-platform-channel-handle=3688 /prefetch:1
  2⤵
  PID:5112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3632,i,3887229586290452082,5995666432824038769,2097152 --field-trial-handle=3152,i,16888017703771914799,6214260745353525220,262144 --variations-seed-version --mojo-platform-channel-handle=3704 /prefetch:1
  2⤵
  PID:2352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4308,i,875496292070673047,13412261916655669992,2097152 --field-trial-handle=3152,i,16888017703771914799,6214260745353525220,262144 --variations-seed-version --mojo-platform-channel-handle=4804 /prefetch:9
  2⤵
  PID:5940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4292,i,3926683166073655981,17362870514139168651,2097152 --field-trial-handle=3152,i,16888017703771914799,6214260745353525220,262144 --variations-seed-version --mojo-platform-channel-handle=4800 /prefetch:1
  2⤵
  PID:4824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5264,i,12327970533162040558,5443259292413592505,524288 --field-trial-handle=3152,i,16888017703771914799,6214260745353525220,262144 --variations-seed-version --mojo-platform-channel-handle=5404 /prefetch:14
  2⤵
  PID:3612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5324,i,674745526886607018,2431020120320604966,524288 --field-trial-handle=3152,i,16888017703771914799,6214260745353525220,262144 --variations-seed-version --mojo-platform-channel-handle=5424 /prefetch:14
  2⤵
  PID:5900
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6036,i,16949361373991949566,8788843015746525872,524288 --field-trial-handle=3152,i,16888017703771914799,6214260745353525220,262144 --variations-seed-version --mojo-platform-channel-handle=6056 /prefetch:14
  2⤵
  PID:4368
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6036,i,16949361373991949566,8788843015746525872,524288 --field-trial-handle=3152,i,16888017703771914799,6214260745353525220,262144 --variations-seed-version --mojo-platform-channel-handle=6056 /prefetch:14
  2⤵
  PID:3156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4908,i,9946234067355135439,3380342271818244232,524288 --field-trial-handle=3152,i,16888017703771914799,6214260745353525220,262144 --variations-seed-version --mojo-platform-channel-handle=4900 /prefetch:14
  2⤵
  PID:1924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4912,i,15564965407681016559,9603352449747274177,524288 --field-trial-handle=3152,i,16888017703771914799,6214260745353525220,262144 --variations-seed-version --mojo-platform-channel-handle=5268 /prefetch:14
  2⤵
  PID:1244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4896,i,15155488808178761889,13593003083964398628,524288 --field-trial-handle=3152,i,16888017703771914799,6214260745353525220,262144 --variations-seed-version --mojo-platform-channel-handle=4916 /prefetch:14
  2⤵
  PID:4948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2100,i,4627853743475225944,7611472344290084239,524288 --field-trial-handle=3152,i,16888017703771914799,6214260745353525220,262144 --variations-seed-version --mojo-platform-channel-handle=5444 /prefetch:14
  2⤵
  PID:4360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6280,i,1423689712127127938,10612524251563629833,262144 --field-trial-handle=3152,i,16888017703771914799,6214260745353525220,262144 --variations-seed-version --mojo-platform-channel-handle=5660 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4728

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4676

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3276

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 f0ead82c3c8a4cd9959a8cd1cef74705c67e276b4a574243e75c890cb0b0b8fe
MD5 f8a5a8774310485121aa8917052b352c
SHA1 78542cc17bce16f7d0117a4beed6ae29c39c3042
SHA512 94c06ac4086f7321e54c95657a2fc0769092ed3577572d27a9a75f404a57f6b0c02e9bb5c1e8c0c285a577d89a5801c60face4ebf1cee334d6be346c240f09ad
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7C:fwUQC5VwBIiElEd2K57P7C
TLSH
T1D5B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f8dff5315a0bd3856381f405c1a16257337fd6ff2d8043dd8bea22404cd35129
MD5 5e53a2cd139f0cce4f8ceab3e015f7da
SHA1 1bd884dbaaa352a724c53bfb8f4bfad2623c93f5
SHA512 27cc4cb62f9aa4af6b521efd824b001f3b689bae2ffe57263da18e2bb22d0b13ba656141d7e6ea1d1c202d5f461a44243a00d604f78bd5b04fe6b8512e260ac1
TLSH
T178D02B1463108D04D441F13214D13311B1110833A80C96440050E1284CB634206738DD
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 1f3bc43c50f7d0fa02f98500baf5d78052a5560603459a9325b17de989d121f4
MD5 46a6445fd2c83830bb8c6e03f85bafc0
SHA1 46b07e35efbd47692fdc81ef0e82e2964da2831b
SHA512 800f82b05756fd6fab3fe29924147f0b86afeec21da661e646b431c6ca03903eb45bb09803f5cdaf3d2d1bb16f95d0f2e53a1f9ddde57505b0f3e1580c384ed1
TLSH
T188D02B1063208C04D441F13214D23311B1010833540C96440150E1384CB634206728CD
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 ea8e08e8066f600b90f466bcdc241831aecdc5d022a07df242e6ea94ca419bb6
MD5 30c338ee6c0888adc9464241ea48415b
SHA1 6a38f0d95e20a1bcf97a07c019062c9bc180b210
SHA512 22608276cff3357e6b24df2d50c022eeee45ecd32e699a6705f589e971ab430e7d1a4e866bb407659ba28d593ea7e1953e4e15954b86c68852a11825bc4865cf
TLSH
T15E41896F13A769C7CB795DB580D294897F3CC4A945CB6E2D464021B98F8B3D89239B30
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe595634.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe595634.TMP
Size 1KB
SHA256 a4db816718362d76ba0ddc852a26708bb9f175f9d996a71d24bc6a7d219b0d21
MD5 6814bbb826ca174168bdf68b8a212800
SHA1 d526087736185cc69d1883045763fecaa5030afc
SHA512 7fc8a0b70d326e7c66b34055abd855244092bbed531d831508237edd89744db23577e0956d6f71b5eb7328c04e47e6725519ca3dacaa1cbac5b25983864b9149
TLSH
T13D41A96F036759C7CB795CB180D294897F3CC4A941CB6E2E464021B98F8B3D89239B30
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 620c663ceb14ee1a55440071d934476e3f2e3ada0c3f14647eacce0418bcbba6
MD5 46b80b35c26b46d12505222da079e222
SHA1 f3c695b8f70cd34b53090c9ebbfc4c724d3cc952
SHA512 d644cafdb883d735e7392065a5ba7337bfcebc0f86531d24d93c0f227aeafc260a5ee6ce003da962b1a54dc2ea74afd1b9af4cf64ff7f7056f0b9eed53da9d08
TLSH
T18D41C1F783F4866EC90156F0AA147E2FCE2D0515432C7C6589E0AE2B93F3471D041A9F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 1aff9845e5ecf305f4165297d2fe341526a96343459d771552bdf7bb79477925
MD5 7c06ef7bfad295e5ee12910ea1659d0e
SHA1 290602000b7e1bdf99995ed857fc00659bbd15f2
SHA512 56a8a0ace04c6ff4a614d3db6bc3cfd3c1cc9a31e015f457faf7d93b676f6ae89ba8b7a6028ca5bbf0927e61e831c110533c95d3f629bd500fb340bf740825a4
SSDEEP 192:sxR/R/yM/jK1Ml8wb9/f8s3QDde5lS2zoD8p41/g6+WNIYCNxFOEGQIgIJ:sxR/ll9/f8s3Qc5lP8/5Iqss
TLSH
T14962D7156A249D7BCCDBD20DFA517F93D6F81533A2901E44AAFCCA1C04E6AED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 b9c2a31aaf65a9d83b4fcf73265aa02902a613cec192e27a0a3505407d557fb9
MD5 221e279d4b50506584f667a081db650f
SHA1 e7e66b6d5f668e6990fc60da9685cb9c86593fef
SHA512 b7cacdc3ca966ff5970e3f1cbb440e7172eec5e3afd2f5138b20eba11a7c2aebe2b746997f26b8b07dbffcec4c7ebce1418a72449176828b79a1c31da755e9a5
SSDEEP 192:sxRkR/yM/jK1Ml8wb9/f8s9QDde5lS2zoD8p41/g6+WNIYCNxFOEGQIgDHJ:sxRkll9/f8s9Qc5lP8/5Iqs1
TLSH
T11B62D8159A249D7BCCDBD20DFA417F93D6F81572A2901E44AAFCCA1C04E6BED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 3a971c388d0e193680c91cc6425df53f3d9a1623542fc6f9ee179c438292333a
MD5 f275ec6f24b129d2d22685af32e89c64
SHA1 3d91d84c08ce2b67bfc4e49d11ac641524118dd4
SHA512 b4ba666a73597a7cea212158d851e0fc2ea7baaf2f7908028d26fde05e27280ed5b2ff6b03057c3e391348b5f110412985c2726df20753c8eb3d5a44431919fc
SSDEEP 192:sxRkR/yM/jK1Ml8UQMb9/f8s9vDde5lS2zoD8pe1/g6+WNIYCf7JOEGQIgDZJ:sxRklq69/f8s9vc5lPy/5Iusv
TLSH
T13262D7169A289D77CCDBD21DFA417F93D6F81173A1901E44AAFCCA1C00E6AED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 08bcc92e4073e562a67af7ebe556061ec51a5a9326c03b86d00d378883351c98
MD5 62d6380488cae722648d765578c12af3
SHA1 795e61e7c3c48fd9cd72446a8f777b607540e520
SHA512 173a9b026d2c3c1c192475b9a13e3f134f491d60a21904dc53a91090f0a39197b31c0871fdf4d17228faecc9b19630cfe5a6a723e30890fcde21fa7611f4922d
SSDEEP 768:j/8vrQWgQ+fB+8F1+UoAYDCx9Tuqh0VfUC9xbog/OVCQqq+rovu:j/8vrQWgQ+fB+u1ja3VqVW
TLSH
T189C2EC3B640CCB7E4F844EADEC29BED66DD801CF5B588D5447EA890C03C67EB521A4DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 b2f8ad7d19c5913ad1d031e620609aecc5d964b5d0e9684a246da0546123c6c7
MD5 981b60c2d09fef5faea83b823bb7f651
SHA1 138e2d1f6835e090aca1044365bf46bee203dc63
SHA512 c222854efb94e8e2d53071f2fd5d717741b3dbf5b6a1208acaf39db2acc586334dd8281a5b69db60f3f536cd0ae4421ae10f3443db2e6b13526b4aec7031cb79
SSDEEP 96:KRbEBVj5J1WdSIg91K4EgT1c7j6dJOH0VAE+imkWivPgMkK4BgGkckEP+k5HxOfV:CbEBVj5JAdSp9/EgTK7j6dJOH0VAE+ib
TLSH
T1F391F100327F02C5793EB54C80B8896FCAC1B1673415E62B7BA846965B67E439DFE8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 446042e0a4db7423dc43151d4167e9f3686d0ea2d3909352eb219c3c66ffa37a
MD5 d2bfdaeb63d79af23a88d912b48a494d
SHA1 62012ed34c443cbc067a751a82fd2e01e0e95347
SHA512 a2da14e11eebfd776e4b32d3ee93e70a3b29b46cd3f247956c1a433b5c9688a37ec46edb5d504a825c9e0c1bc36dabc7de5e2857929a97ce993224071183dead
SSDEEP 768:rrv+4UNbdb3h2Vr8NLfp8+p3bd66j+4BRv86aLIWMnYR:rbsbN3pLx8+p3Z6n4y2YR
TLSH
T1D803AE72E8A8D9338CF2C648B18B3B437FB8515395C11A94D9DC6B5D459B1AE230FC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 687483ccf7dfd03196ab556b18fb1f680355af0ae55ac9677bf3c6e63e1787c9
MD5 b7f46e6fa7b4056730b5b7c0a425f512
SHA1 05872414421fcea5080aac798364b4de5b522b26
SHA512 05ec6c057ef5fe7629da0f129622561e11fe76025eb863207e0e3159acd6f60a9b0629aadc1d9577abb0c78232e4635eeee8c8482f7f96014a168fdf5f9a2411
SSDEEP 768:BE3fS3r8NLfp8+p3bd66j+4BRv86aLIWMVyLJQu5:BE3LLx8+p3Z6n4y2iiu5
TLSH
T1C7F2AF72E9A89D779CF5C684B24B7703AEF4522396C41A84D8DD7B0D059729E130BC3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 d6a97cc284791bf1218e0379170b8f92a60888a36068e6f81400507592f8741c
MD5 3c4c1beee4474f635bdd4bf61cb2b3d2
SHA1 a3531696b23335a5992714322adf77cceac475d5
SHA512 14a0317dcf55cd166b6f3d52c85f5c228302804f38e31c22b257690d23793946ae3e64a1e13cf993a11f2d37980ba8715d94df6564e9385e3635ff7c6c8c18a3
SSDEEP 768:4x3iS3r8N/p8+p3bd66j+4BRv86aLIWMVyLJQu5:4x3WR8+p3Z6n4y2iiu5
TLSH
T109F2AFB2E9A89D379CF5D684B24B7703AEF4522396C41A84D8DC7B0D059629E130BC3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 97be983cd69a18f4be45ebb33db2c52866bbc773f82c49c55a9a8de76a9d5ce7
MD5 6ddf77929a0af8df160fa8a771c69078
SHA1 f41f4f8c3115b49479ef45d30653c35d6d89b4d0
SHA512 0a26c64d0d64463a5bc998860fd355be2fafa68f4a1c0ce29bb1dbea1a5bd90cfd5e84a489c7de3d586202f2a43a7fe3a1ac554184050eef8bdc262ac37e5546
SSDEEP 768:0E3iS3r8NLfp8+p3bd66j+4BRv86aLIWMVyLJQu5:0E3WLx8+p3Z6n4y2iiu5
TLSH
T136F2AFB2E9A89D779CF5C684B24B7703AEF4522396C41A84D8DC7B0D059729E130BC3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 4c776835faaf57885ffcf3eea88ad9bf5911b593f3f91461a0baef9aa65290fc
MD5 efaa38519c72956794a651a41b5727e0
SHA1 1e68c77e0a6f82d2984ed2c139f3ead7544c02e0
SHA512 d02ecff09f9cf9ebf6c45a681d1b963163e9c879438024547e48b85cacc57a55e91ddf9cd552091e62394c3f1f85609f7515e03dc00f8e4f85a80547d0e55782
SSDEEP 768:1rv+4UNbdD33hF8NLNp8+p3bd66j+4BRv86aLITM2bwCl1:1bsbp3OLL8+p3Z6n4yJ0ww
TLSH
T17F03BE73E9A899339DF6C644B1867A437FF8529396C10AD0D8DD2B4E419B19E230BC37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 566ab3c525a23264dcf29d3401f105f518c2963761f4906a9b4395daed1db3e3
MD5 7b060129256b4ce527ded4acf30d8f29
SHA1 d6336366742b2a977afacaa9d736ca2426446038
SHA512 636ed3ac72e1559ca2d3b7fcec4fa4131ff45ad9b876a7548b8cf0a7a538d90247e2cb429e67d125f00e0f7744179663d09f5c70644651184a918a12cf76a665
SSDEEP 768:Irv+4UNbdD3Tc8LNp8+p3bd66j+4BRv86aLIiO2bwCl1:Ibsbp35L8+p3Z6n4yo0ww
TLSH
T11403BF73E9A899339CF6C648B24677433FF851A396C10AC0D4DD2B4E419A19E230BC77
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d5156a60-f2b6-4216-a7b0-accf6761cc12.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\d5156a60-f2b6-4216-a7b0-accf6761cc12.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download