e9e6a6a564cf56c00a63b49feba06b479fa7538672afb503c6c3041677c4ba39

Analysis

max time kernel
148s
max time network
123s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260618-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
20/06/2026, 12:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
utility.html
Size 295KB
Sample260620-pf69jaey4m
SHA256 e9e6a6a564cf56c00a63b49feba06b479fa7538672afb503c6c3041677c4ba39
MD5 a4fad45bae1a2d71b2b81847cd09f90e
SHA1 c8907b421c7cb2666c1b1830b8375d8efa0b269c
SHA512 cedfe21719372d4bb330035029aa0fdfe776650ddd33a7e10c32e7fc2b89f4069043147f915de9a3e9e6c3ad321a4e641ce278523ce91b3019aaae45d6cec56d
SSDEEP 6144:1Edo2Cp6Edo2Cp9lNuO+L6qFnxw7A+27rpZiow:1Edo2Cp6Edo2Cp9lNuODqFnqk+27rpZI
TLSH
T19654123157813DBB583CCA8C72D13E842E98DECFC6B8924535F5A0E382EE751ADB1259
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5184	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134264314480637323"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-537605601-1362463912-856654178-1000\{3F2EDC8E-BC07-4416-A5E1-DA75E33F5D38}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1184	msedge.exe
1184	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
5588	msedge.exe
5588	msedge.exe
5588	msedge.exe
5588	msedge.exe
5588	msedge.exe
5588	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5588	msedge.exe
5588	msedge.exe
5588	msedge.exe
5588	msedge.exe
5588	msedge.exe
5588	msedge.exe
5588	msedge.exe
5588	msedge.exe
5588	msedge.exe
5588	msedge.exe
5588	msedge.exe
5588	msedge.exe
5588	msedge.exe
5588	msedge.exe
5588	msedge.exe
5588	msedge.exe
5588	msedge.exe
5588	msedge.exe
5588	msedge.exe
5588	msedge.exe
5588	msedge.exe
5588	msedge.exe
5588	msedge.exe
5588	msedge.exe
5588	msedge.exe
5588	msedge.exe
5588	msedge.exe
5588	msedge.exe
5588	msedge.exe
5588	msedge.exe
5588	msedge.exe
5588	msedge.exe
5588	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5588	msedge.exe
5588	msedge.exe
5588	msedge.exe
5588	msedge.exe
5588	msedge.exe
5588	msedge.exe
5588	msedge.exe
5588	msedge.exe
5588	msedge.exe
5588	msedge.exe
5588	msedge.exe
5588	msedge.exe
5588	msedge.exe
5588	msedge.exe
5588	msedge.exe
5588	msedge.exe

Suspicious use of WriteProcessMemory 33 IoCs

description	pid	Process	procid_target
PID 5588 wrote to memory of 5720	5588	msedge.exe	88
PID 5588 wrote to memory of 1012	5588	msedge.exe	89
PID 5588 wrote to memory of 5184	5588	msedge.exe	90
PID 5588 wrote to memory of 1012	5588	msedge.exe	89
PID 5588 wrote to memory of 1012	5588	msedge.exe	89
PID 5588 wrote to memory of 5768	5588	msedge.exe	91
PID 5588 wrote to memory of 5768	5588	msedge.exe	91
PID 5588 wrote to memory of 5976	5588	msedge.exe	93
PID 5588 wrote to memory of 5976	5588	msedge.exe	93
PID 5588 wrote to memory of 2960	5588	msedge.exe	94
PID 5588 wrote to memory of 5976	5588	msedge.exe	93
PID 5588 wrote to memory of 2960	5588	msedge.exe	94
PID 5588 wrote to memory of 2960	5588	msedge.exe	94
PID 5588 wrote to memory of 628	5588	msedge.exe	95
PID 5588 wrote to memory of 628	5588	msedge.exe	95
PID 5588 wrote to memory of 628	5588	msedge.exe	95
PID 5588 wrote to memory of 1412	5588	msedge.exe	96
PID 5588 wrote to memory of 1412	5588	msedge.exe	96
PID 5588 wrote to memory of 1412	5588	msedge.exe	96
PID 5588 wrote to memory of 3452	5588	msedge.exe	98
PID 5588 wrote to memory of 3512	5588	msedge.exe	99
PID 5588 wrote to memory of 3452	5588	msedge.exe	98
PID 5588 wrote to memory of 3512	5588	msedge.exe	99
PID 5588 wrote to memory of 4728	5588	msedge.exe	101
PID 5588 wrote to memory of 5316	5588	msedge.exe	103
PID 5588 wrote to memory of 5316	5588	msedge.exe	103
PID 5588 wrote to memory of 5316	5588	msedge.exe	103
PID 5588 wrote to memory of 5396	5588	msedge.exe	106
PID 5588 wrote to memory of 5404	5588	msedge.exe	107
PID 5588 wrote to memory of 4980	5588	msedge.exe	108
PID 5588 wrote to memory of 2020	5588	msedge.exe	109
PID 5588 wrote to memory of 2020	5588	msedge.exe	109
PID 5588 wrote to memory of 1184	5588	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\utility.html
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x274,0x7ffa70bfc188,0x7ffa70bfc194,0x7ffa70bfc1a0
  2⤵
  PID:5720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1568,i,931706717980941445,12685419204587301126,262144 --field-trial-handle=2620,i,2801225873951345885,15746476854068992358,262144 --variations-seed-version --mojo-platform-channel-handle=2604 /prefetch:2
  2⤵
  PID:1012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1892,i,10272310729632152382,9699431156666708760,524288 --field-trial-handle=2620,i,2801225873951345885,15746476854068992358,262144 --variations-seed-version --mojo-platform-channel-handle=2656 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2236,i,11150032901593477519,1302903962826526136,524288 --field-trial-handle=2620,i,2801225873951345885,15746476854068992358,262144 --variations-seed-version --mojo-platform-channel-handle=3244 /prefetch:13
  2⤵
  PID:5768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3668,i,17396347213017783683,10488479191908860510,2097152 --field-trial-handle=2620,i,2801225873951345885,15746476854068992358,262144 --variations-seed-version --mojo-platform-channel-handle=3676 /prefetch:1
  2⤵
  PID:5976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3672,i,12847994032625527151,12590733016631335259,2097152 --field-trial-handle=2620,i,2801225873951345885,15746476854068992358,262144 --variations-seed-version --mojo-platform-channel-handle=3692 /prefetch:1
  2⤵
  PID:2960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4304,i,15668264365778591343,1743063664444238353,2097152 --field-trial-handle=2620,i,2801225873951345885,15746476854068992358,262144 --variations-seed-version --mojo-platform-channel-handle=4532 /prefetch:1
  2⤵
  PID:628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4316,i,14877581069290834562,17866174234266874726,2097152 --field-trial-handle=2620,i,2801225873951345885,15746476854068992358,262144 --variations-seed-version --mojo-platform-channel-handle=4584 /prefetch:9
  2⤵
  PID:1412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3824,i,5400626402884107943,9608123074921764490,524288 --field-trial-handle=2620,i,2801225873951345885,15746476854068992358,262144 --variations-seed-version --mojo-platform-channel-handle=5456 /prefetch:14
  2⤵
  PID:3452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3888,i,3659293537835744958,9369348094381946614,524288 --field-trial-handle=2620,i,2801225873951345885,15746476854068992358,262144 --variations-seed-version --mojo-platform-channel-handle=3852 /prefetch:14
  2⤵
  PID:3512
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6036,i,7648725652790150136,165503891677830028,524288 --field-trial-handle=2620,i,2801225873951345885,15746476854068992358,262144 --variations-seed-version --mojo-platform-channel-handle=6060 /prefetch:14
  2⤵
  PID:3056
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6036,i,7648725652790150136,165503891677830028,524288 --field-trial-handle=2620,i,2801225873951345885,15746476854068992358,262144 --variations-seed-version --mojo-platform-channel-handle=6060 /prefetch:14
  2⤵
  PID:4728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=6308,i,2509645338308861695,8206223353737730357,2097152 --field-trial-handle=2620,i,2801225873951345885,15746476854068992358,262144 --variations-seed-version --mojo-platform-channel-handle=6336 /prefetch:1
  2⤵
  PID:5316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4992,i,10005737830539589100,17956854247856921617,524288 --field-trial-handle=2620,i,2801225873951345885,15746476854068992358,262144 --variations-seed-version --mojo-platform-channel-handle=4524 /prefetch:14
  2⤵
  PID:5396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4608,i,9457424156869839318,9053735209484908190,524288 --field-trial-handle=2620,i,2801225873951345885,15746476854068992358,262144 --variations-seed-version --mojo-platform-channel-handle=5072 /prefetch:14
  2⤵
  PID:5404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4556,i,7853140573690285804,12815262279245169275,524288 --field-trial-handle=2620,i,2801225873951345885,15746476854068992358,262144 --variations-seed-version --mojo-platform-channel-handle=6036 /prefetch:14
  2⤵
  PID:4980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5552,i,12347487876448630413,5166890353764140762,524288 --field-trial-handle=2620,i,2801225873951345885,15746476854068992358,262144 --variations-seed-version --mojo-platform-channel-handle=5524 /prefetch:14
  2⤵
  PID:2020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=3576,i,15971740535881516177,14661906381138365136,262144 --field-trial-handle=2620,i,2801225873951345885,15746476854068992358,262144 --variations-seed-version --mojo-platform-channel-handle=5832 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1184

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3184

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5592

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

62c77911-b066-45d5-bc79-b0ec0ab00ed4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\62c77911-b066-45d5-bc79-b0ec0ab00ed4.tmp
Size 36KB
SHA256 93ae8dfe1ffef2edcfd58bb39d11e44adda64671cf4848ce7d7e592ffd556668
MD5 4bea2800a35182777c4c5a32cf85f3f0
SHA1 1a7abdac0b7cd7aa50572164884480ac88f6bbda
SHA512 e9fc0014d32fe7b855053df74fd71ba809e5b255f08475f0d49d475fa9d989f494a36d708f91d47975f3aa0c5b841e44d4c7d87ff54ed16ba2532cd0d28a5dcb
SSDEEP 768:8j+9e3HTefywfIJqfFTA7NpespIRM0UmkTziwjgzSw8+0ov3:b9e3Kf7fsqfkQsZ0UmYQ8Uv3
TLSH
T1A8F2BF3298209EA78DF6D6896A07374B6EF0035385C52A848CED9F0D45CB6BC574BD1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ff19e848916f9346514f95113e3d80cd569935b36d785719b19d90f9f740fbd6
MD5 5ab41182d14eb22e7143c63d2e18b77b
SHA1 ca8c747e1a5e38b0f0a08b492fcea6d3a75865c2
SHA512 bbecb67f89826ee2bd219f14bbc8ca87fb260f8a22bd2d52b6ccdb72d47a4b58eeb897a42a6e591bd4e75fe870419162172353d5d3ec7f1fb0fbc7b5dc6adcf1
TLSH
T1AED080757B467B11D58F0472D424E271A737455135D296057170C10E55602D1FFCA0B7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 5f46172781024fe58b7a7d87a406b81679d17de445e9e90110d33f5747ecc226
MD5 08a5ef0e8eb4590a7f0e6f821698071e
SHA1 1b756aceae48cf2649d310d7ab4883595c2e5bde
SHA512 95c72989df00c3caf1230ca41b6dcbc24f8a592c45202f7b16044b8d574fe569d4db8614652b0d1695d3fe1d795b07ea334de5b4fa9dcbb9d27de40a55592586
TLSH
T155D080757B467A11D58F0476D424E271A737455125D296057170C10E55602D1FFC90A7
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 0383912dad3fede55b254ed5790d777504b28ccbd9e248feb07edc13c4549838
MD5 8ded2c836275b4270ec3d49089b6035e
SHA1 4a63a2ba704c842aa73e218e36d495205aa9ce8d
SHA512 fbaecfa2671dd203f89914bcf965bf51045bbb9607c683bec8636a250b42d8eb0ac22aec52abd91f4b10094ec6e58724866fb154ad63ef30a910fbe90c1b5f2f
TLSH
T194616F38B1098914EBF8453498C1B896BFF41A6C753B6F213C8DB3747B0770876DA258
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59329f.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59329f.TMP
Size 3KB
SHA256 af0f8c6ac6aec783b7852464e7fd5296969c438e0a1cc6789b81fceb3c990a5d
MD5 6cf222ab8c46f5620c71657f204848a9
SHA1 2f13b24db67e30d6ab3873d87ac44f0d31141042
SHA512 dd574c5e9753cc20a3914192f01fc63dfd359a69aa5e60c157a64d882cd31c2238daefa478a220a7aebcebbec6e0109e17349c7353e8dbcb1763b285eb2041e0
TLSH
T13A616E38B50A8914EBF4453498C1B89ABFF41A6C753B6F213C8DB3747B0730876EA258
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 755cafbef360f5849b6e9efdf69d148d4d4b484cc08286e3f882d9487dc55654
MD5 2100c963d10e408cf7d850ab57090eef
SHA1 6468170b47ad7e8a8b49801763a2e4920d9a580f
SHA512 c5e220710a8d703d94fde56011c9b117ef40374dbd11ee6c7c83dea808d2b08f5bf0040517f4e4f2ba968c1eea04c5ae6491fd30e82348fe10b57e61a4d33901
TLSH
T1CB41A8F3C2E486AE890146F4BA147E2BCE2D0914832C3D5AC9E4AF1B93F2861E14194F
MD5 SHA1 SHA512 TLSH

Submit Download

a468959c-8029-4c7d-b998-7a4954f816be.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\a468959c-8029-4c7d-b998-7a4954f816be.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

ba4ae827-c773-4122-9b9e-111901572345.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\ba4ae827-c773-4122-9b9e-111901572345.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 0f13b14700841af6b108a427224199e25832c58c4f8beeda48d705f80194e6f4
MD5 fd86deedf8da54c5e87e5c8a02d70902
SHA1 01c0f37cc9f4aa63df801ea659c58714a3e1f409
SHA512 1b9ca427ed924e250c85325a191471360d9a638ace9ac99c68792e39d781f7f4fff53b8adb4a9ce8bcb75fdc5704e87ad7d913d679ba367d55b31bd408235362
SSDEEP 192:sxR9RMyM/jK1Ml8wFJ/fdstpzMdybWzoA8p4lz/g6+WNIY4pjZGaIgIJ:sxR92bJ/fdstpIqcz/5Ijs
TLSH
T14852D81666389977CCDBD20DFA517F53D6F91533B2911E44AAFC9A0C00E6AED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 d44dd69737657486e6e4f78da474945336be987c90a5e9b473a54e7a89987ed9
MD5 e6ad9a256cb038f3440545b258b6fe2b
SHA1 bf974c8a86e42fd02064c934540c0d805e42ec9d
SHA512 793b70e196066af829981b320d01345bb49936f6a804cc96b0f85ce00e24f832dddc5ae341c554eb065cc17436c0a07e2f801359dc9bed40c8c0e127a76e1220
SSDEEP 192:sxRKRMyM/jK1Ml8wFJ/fds+apzMdybWzoA8p4lz/g6+WNIY4pjZGaIgDjJ:sxRK2bJ/fdsDpIqcz/5IjJ
TLSH
T1E952D816A6349977CCDBD30DFA517F53D6F81533A2911E44AAFC9A0C00E6AED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 4f0def0306893013ba0590863b14513c48290a7a468a1f1f9a5abd3297adc9c9
MD5 a6d6967ac0c47cdf558fbb75e86cb29e
SHA1 57ec3e1a48479c7447929e95557e688fb83f1011
SHA512 0d25e4c329cb8e7b8172712ccde17922b031c8776aeffd79ab2d0049296355d0f7b711147fb1fe713bb82bb65b63255a70f1d86d8e6330489e6ff2c77595f152
SSDEEP 192:sxRKRMyM/jK1Ml8UQPGFJ/fds+ahzMdybWzoA8pelz/g6+WNIY4pYZGaIgDlJ:sxRK2qPUJ/fdsDhIquz/5ICj
TLSH
T1BE62C716A6349977CCDBE20DFA517F53D6F81533A2911E04AAFC9B0C00E6ADD221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 1068d1eed7cca6e2b1aa4672e07ad5790ca6db36d862968ef6a8c3cd414fffd2
MD5 8100b25f4cfb8052003e547f15fb0600
SHA1 1ccf30ef43f99e9b89683230e4a0bc4c816921e7
SHA512 85e94a30ad961a8a099652f44499d9553aafcd738e0cb01fac20046df043e770eee2c4745866c66070efd8d359df11dc3fae5e2527b1a8d96fb65b510f642cd8
SSDEEP 768:NmymipWgvHfSv8F1+UoAYDCx9Tuqh0VfUC9xbog/OV1LxguroRLPF2Dn:NmymipWgvHfSvu1ja8NglRLPoz
TLSH
T168C2FB3B640CC77E4F845EADEC29AE976DD801CB9B588D5447EA880C03C67FB911A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 b8302bdf804e75c9df3958d6ccd61a6e59ba500aecfb4f22ef1a565c0463e423
MD5 121281d14202b0b07a55513bf6468fc5
SHA1 4d5860a335574a67030ec53b156d0d08c9ccba68
SHA512 7f172cbb094f3781842bd5fb3489edff18931758416a5cd2839c6c9faca66d90e27b464cf57848338cd4eb1434250d4485bd229a4439970bce14f42c30fc6e48
SSDEEP 48:KMiIfKrqofycmVKWUwBeIvK7S8PyLdKpNrPTM7/gXIoFMKZZRTM99cCgz:KMiEKrqyce4K7SOCyMK/aG
TLSH
T12B91F185777A330079BE69059260991F9A4630B27056E42B3FBD64F22E27E014FFDAC9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59cc30.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59cc30.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 ec09d0487cbe948671e94e072e5c8892b2a62d1857c30187745b5c20072e85da
MD5 9d051689fc59e74f97521159102453bd
SHA1 6f91533f4c2add560fc0e2298d4296287938cb70
SHA512 b2722ea800f79587d23deacf16933e671dacfc2b2f7e61b593a87cbcfa7874bc4daec85d24acaf16118c6b43a9740017018a3505562d4747ce0ddc5b5992c5aa
SSDEEP 768:ljaeqD4MlshiLdMmg3SHefywfIJqfFTA7NpespIRM0UmkTziwjgzSwfOTB:lqcjhIdMz3df7fsqfMQsZ0UmYQU
TLSH
T18503BF3298645EB78DB6EA896A4336476EF0025386C53B888CDD6E0D45D76EC130BC2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 581f5ab6947a4e530c562883c30f591c373282ceb747b1bcd71de5f563e50360
MD5 90ae3349b0b7904d2524e6e1008c6587
SHA1 6b01ef4d365364a40021ed338c26b017738204a7
SHA512 75b9e06be6cc7d8551d3c3100939b6781a7ab85d2f820bb7c18efc49f802103cdb8bed9241bf27a37dcbbdd929335e86a81a5a271b1aa8d12af5113cd0dad65e
SSDEEP 768:0j+9e3STefywfIJqfFTA7NpespIRM0UmkTziwjgzSw8+0ov3:j9e3/f7fsqfkQsZ0UmYQ8Uv3
TLSH
T1E7F2BF3298209EA74DF6D6896A07374B6EF0035385C52A848CED5F0D45CB6BC574BD1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 a57d1cda2d850a899e5422cdbb73a985a3672069c40ae258975851fb7d9be188
MD5 5269b26e69301313cb6fe897dab54efb
SHA1 2f3b4ad3546d0c4ccb249a92b9fda99562f71dc5
SHA512 b3092ecb98b7eafa974e4afda6928b5422b51fe9b417b3ddf53b6b414c73537a2d65ec4f44a22844db24b90025cfd0d54c991da1da1f79b33fb5a1493f053ee5
SSDEEP 768:CF1j+9V3BwgtTefywfIJqfFyA7NpespIRM0UmkTziwjgzSw8+0ov3:39V3Af7fsqfdQsZ0UmYQ8Uv3
TLSH
T17503AF339810DEA79DFADB89BA06374B6EF00253C5C56A849ADD9E0C41C75EC134BD1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 4032994ea37286b8cb0bf04eb847aa51433d50ba6f905f8dfae7e8a09ba79a55
MD5 f89f99d93dd641e645dde690a3bffd55
SHA1 24b78aa214de09c5fb39311f2d28491a11a9cafc
SHA512 94cfab404119b81525b8b634b50f6b71493c921b03ad2c457248133a4d8b55d5b0cb27e19212bfa3ba4b5b4db982be37fb6dd7e4f6cc9c20a22685bca44c5006
SSDEEP 768:3jaeqD4MlshiLdMmf3MMfywfIJGA7NpespIRM0UmkTziwjgzGxnApXLPQTU:3qcjhIdMo3vf7fsPQsZ0UmY5nKXD
TLSH
T1C703BF3698605EB78CB7E68A264376576FB00253C2C43BC8CCEE6E0D42975DD630796B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e1ba803a-7ba0-45ed-a349-3a57f7da1be6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\e1ba803a-7ba0-45ed-a349-3a57f7da1be6.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download