4946158d14d8a38e61cdd96c708c70607035f59bdb0acb689922eb8c3d08c11d

Analysis

max time kernel
148s
max time network
136s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260618-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
29/06/2026, 06:00

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
4946158d14d8a38e61cdd96c708c70607035f59bdb0acb689922eb8c3d08c11d.html
Size 80KB
Sample260629-gqechaet3x
SHA256 4946158d14d8a38e61cdd96c708c70607035f59bdb0acb689922eb8c3d08c11d
MD5 318f2942a375466a3ea6851a095890b5
SHA1 38c52544e10ca2856f88b6423f7fabfa552700e7
SHA512 afbf070aa2a0048b95d135874e0670513d5d24bb06c6132fe62eb61ed0df78c69bbb7a947c62370aa5a39812eac436f77195ae6bbf8921dcba1903210efc0281
SSDEEP 1536:tMo9XEr+MGUIgxJ/H9tKiDTzJpRXYOl95wQWZhl91E:P0rvl9tKezJUnE
TLSH
T19B83E9B9F1A170324E23F970412F510FB93B686BE44C0DA8F254D8F1AEF69894563F69
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3924	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134271864289691475"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2289519114-2956110270-1748446682-1000\{AF0BBFF0-AC74-47C3-9139-A15F10E21E06}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5796	msedge.exe
5796	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3600 wrote to memory of 1932	3600	msedge.exe	89
PID 3600 wrote to memory of 4212	3600	msedge.exe	91
PID 3600 wrote to memory of 3924	3600	msedge.exe	92
PID 3600 wrote to memory of 4212	3600	msedge.exe	91
PID 3600 wrote to memory of 4212	3600	msedge.exe	91
PID 3600 wrote to memory of 980	3600	msedge.exe	93
PID 3600 wrote to memory of 980	3600	msedge.exe	93
PID 3600 wrote to memory of 2832	3600	msedge.exe	94
PID 3600 wrote to memory of 2832	3600	msedge.exe	94
PID 3600 wrote to memory of 2832	3600	msedge.exe	94
PID 3600 wrote to memory of 5188	3600	msedge.exe	95
PID 3600 wrote to memory of 5188	3600	msedge.exe	95
PID 3600 wrote to memory of 5188	3600	msedge.exe	95
PID 3600 wrote to memory of 1060	3600	msedge.exe	96
PID 3600 wrote to memory of 1060	3600	msedge.exe	96
PID 3600 wrote to memory of 1060	3600	msedge.exe	96
PID 3600 wrote to memory of 3864	3600	msedge.exe	97
PID 3600 wrote to memory of 3864	3600	msedge.exe	97
PID 3600 wrote to memory of 3864	3600	msedge.exe	97
PID 3600 wrote to memory of 1800	3600	msedge.exe	99
PID 3600 wrote to memory of 936	3600	msedge.exe	100
PID 3600 wrote to memory of 1800	3600	msedge.exe	99
PID 3600 wrote to memory of 936	3600	msedge.exe	100
PID 3600 wrote to memory of 3624	3600	msedge.exe	102
PID 3600 wrote to memory of 1284	3600	msedge.exe	106
PID 3600 wrote to memory of 3696	3600	msedge.exe	107
PID 3600 wrote to memory of 896	3600	msedge.exe	108
PID 3600 wrote to memory of 2600	3600	msedge.exe	109
PID 3600 wrote to memory of 2600	3600	msedge.exe	109
PID 3600 wrote to memory of 5796	3600	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\4946158d14d8a38e61cdd96c708c70607035f59bdb0acb689922eb8c3d08c11d.html
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2c8,0x7ff838c3c188,0x7ff838c3c194,0x7ff838c3c1a0
  2⤵
  PID:1932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1844,i,16615701265131207134,17829631725575225860,262144 --field-trial-handle=2856,i,10846854354880028084,10864520914972502929,262144 --variations-seed-version --mojo-platform-channel-handle=2852 /prefetch:2
  2⤵
  PID:4212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2036,i,3497800925732686817,5613862275021388118,524288 --field-trial-handle=2856,i,10846854354880028084,10864520914972502929,262144 --variations-seed-version --mojo-platform-channel-handle=2888 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2440,i,2565282256759476827,10337457469495234951,524288 --field-trial-handle=2856,i,10846854354880028084,10864520914972502929,262144 --variations-seed-version --mojo-platform-channel-handle=2908 /prefetch:13
  2⤵
  PID:980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3588,i,10496111542957541005,977761492024753634,2097152 --field-trial-handle=2856,i,10846854354880028084,10864520914972502929,262144 --variations-seed-version --mojo-platform-channel-handle=3584 /prefetch:1
  2⤵
  PID:2832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3592,i,1879604609001225351,18054492630098638838,2097152 --field-trial-handle=2856,i,10846854354880028084,10864520914972502929,262144 --variations-seed-version --mojo-platform-channel-handle=3680 /prefetch:1
  2⤵
  PID:5188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4296,i,16765925379289649814,15101700336286980731,2097152 --field-trial-handle=2856,i,10846854354880028084,10864520914972502929,262144 --variations-seed-version --mojo-platform-channel-handle=4832 /prefetch:1
  2⤵
  PID:1060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4312,i,8972076925465276569,18399300478448675671,2097152 --field-trial-handle=2856,i,10846854354880028084,10864520914972502929,262144 --variations-seed-version --mojo-platform-channel-handle=4852 /prefetch:9
  2⤵
  PID:3864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3584,i,9050274358207694285,9607165792786569692,524288 --field-trial-handle=2856,i,10846854354880028084,10864520914972502929,262144 --variations-seed-version --mojo-platform-channel-handle=5388 /prefetch:14
  2⤵
  PID:1800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3580,i,5996889425322361509,15659928026427122488,524288 --field-trial-handle=2856,i,10846854354880028084,10864520914972502929,262144 --variations-seed-version --mojo-platform-channel-handle=5424 /prefetch:14
  2⤵
  PID:936
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5924,i,13524488426810319543,6366892076264717942,524288 --field-trial-handle=2856,i,10846854354880028084,10864520914972502929,262144 --variations-seed-version --mojo-platform-channel-handle=5936 /prefetch:14
  2⤵
  PID:2496
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5924,i,13524488426810319543,6366892076264717942,524288 --field-trial-handle=2856,i,10846854354880028084,10864520914972502929,262144 --variations-seed-version --mojo-platform-channel-handle=5936 /prefetch:14
  2⤵
  PID:3624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1224,i,9572626843391767707,3818792488020019277,524288 --field-trial-handle=2856,i,10846854354880028084,10864520914972502929,262144 --variations-seed-version --mojo-platform-channel-handle=1228 /prefetch:14
  2⤵
  PID:1284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5924,i,3891266085706531489,15044703868844235682,524288 --field-trial-handle=2856,i,10846854354880028084,10864520914972502929,262144 --variations-seed-version --mojo-platform-channel-handle=5968 /prefetch:14
  2⤵
  PID:3696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5952,i,8405596638229875212,11368242322514641970,524288 --field-trial-handle=2856,i,10846854354880028084,10864520914972502929,262144 --variations-seed-version --mojo-platform-channel-handle=5092 /prefetch:14
  2⤵
  PID:896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5628,i,14453788230623651194,3920816184278478301,524288 --field-trial-handle=2856,i,10846854354880028084,10864520914972502929,262144 --variations-seed-version --mojo-platform-channel-handle=5612 /prefetch:14
  2⤵
  PID:2600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6480,i,583873324093350705,16806479628633244821,262144 --field-trial-handle=2856,i,10846854354880028084,10864520914972502929,262144 --variations-seed-version --mojo-platform-channel-handle=6512 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5796

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1896

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3956

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

8f60cdd5-f548-4242-83e0-0449229a9fd0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\8f60cdd5-f548-4242-83e0-0449229a9fd0.tmp
Size 41KB
SHA256 ee0f98009577f20b32d33c8ff79254200aa8cd8aa8bf1a37a461c2e35dc69248
MD5 32a98a7366b9e4730d56ae56ab5221c9
SHA1 bb75f047d487bf4f8f339ea34c6f7067630caf60
SHA512 a712154301a9d1fb3d9a29780a401c0bd74594ed6412ec84b3d2bd1c01a8a87f4dbc89d491f648797c84206730b59a66956d954d7d82d79e5591a346b8ed79e3
SSDEEP 768:3jaeqD4MlshiLdMmt3ODTF15G2z4LxVCgZSVCKPFECrBhpjcNvzn12bfJs6Tr:3qcjhIdMK3KG8gs0KPF1HRcVByJsm
TLSH
T11B13CF76ACA81D738C77D545B20772877EB44293C7CA2A9CA8DD6A0D46DB3CD1207C27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2b471d5790d1e8ac94438a5662d0ed854761db5162e9ed715d3f950974387da2
MD5 f3139b9e55fe18feb36cb00db002d273
SHA1 755162342b8e0f46c67a7ca7edf74a3293cdaeb7
SHA512 d229aade54d55576064d540cb4f4250cd3d32106eb04bcac5449501aba91bfbfe3857ca0457eab714fad16945c3e3a00e1b408afe8edd04cdf8574cf34450a48
TLSH
T17CD0C02437457610C40D05704410CE02C133C803B0C3DA003032C50CC5158C0FBCD0EB
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 b842906cea16d7b3aa3205573cacb7d4d1d2364d11253f46244aaa1a7745db30
MD5 aff0d41e14c14a0f33ef71eb300b3517
SHA1 1b323ae2f9d64108caaa43e8fc26a953c57942d4
SHA512 7d91f5d419c8dab3b5c13b763160d5c782dae9d50314591afda7d0f4db293ab075d234d6ab8602002e921be583a3c7b2c7977545c7522af94ab7cfae1e8bd620
TLSH
T1FAD0C02037457510C40D05704410CE02C133C80370C3DA003032C50CC5158C0FBCC0D7
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 01060642bba769b357da160afe0fd087a2bc9cc248271703b96f55c5f2541503
MD5 1dd4e61a4d651d5403eaf6c4655198e1
SHA1 ea8abae6b3d6f27628c0196d13129dc0e6b982f8
SHA512 c011686b3cb17b5a9da7e25d09ca1a1dda2afec377a99d82ad6c521aee14f798de56493efd8dd1772725603d8cae43f7543c909523b777f0a981d438684865a5
TLSH
T1D15139284262102ACB25CDB930D1A7C833745C867E47EFCA874C023BBE12BA8C2F14E5
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58c927.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58c927.TMP
Size 3KB
SHA256 090de5972929c9991b0af9989ca18a22bf1f878c4332a57b6b364f9e9a272153
MD5 348fdff37c0c2c87a42e53dec4f765ca
SHA1 c96559e34797f821363496a5b7e2beedbb4a8cd2
SHA512 6cc312bbaf980de5028c63db03e708050cdd6b69ac0f6fc836537127ef4ef5721847fc7d41fdcb5fe7ca9e3131de0a66d5fe90d46160335746f2ca31c200a5d0
TLSH
T10B514B184261102ACB25CDB970D0A7C833745C4A7E47DFCA874C023BBE12B68C6F14F5
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 2b85ced2bd51b0556bf76b9b5d7674ab264046008c8cea144be34b14f1799952
MD5 e291583f68f0cfd6382123f171c7a1c5
SHA1 9b66544b3f5ab83be5cdf9e222918e3f396de461
SHA512 e06bd218df0a49f4c293e7d6e3e91df373a5f173ce516fd2e15c901ad269b2f6e3ee0e0c3eae9314c1673c477a33812ff174bb7bd15f189ee3c2192332ce521a
TLSH
T1EC519DF7C3E8866D891196F4BB186E2BCE2D0915432C3C5A89E4EF1B93E24B1E14155F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 a1cee95238ef39bf4d85625f5390421e9489dbbf4607561159a37abfc579737b
MD5 383d6d95101d2bb8b7fbf2c38c247102
SHA1 e958d58b143f276797bb9f9795cf1bf6683c2e30
SHA512 a2a3a3edf1c86dc5a2028b72808fcc11cdb35b506174876381df09255a865b9954eedbcfa701df381600201d3e1266d096974dc566f721f989eb88f4c8f15960
SSDEEP 192:sxRBR0yM/jK1Ml8UQtFK/fusOfaDVB9pAJzoA8pe5/g6+WNIYJeuG3IgDqJJ:sxRBeqLK/fusOfaBB9pAUW/5Ils
TLSH
T13A62DA16A6345977DCDBD309F6517F93D6F85433A2944E04AAFC8A0C01E7ADD121382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 d8249e57883ff572591d1b31f1dfb2326a36318e6434154ccd527be003bf92db
MD5 48d309649367e343c8062a7550fbb371
SHA1 8b459cdf067b17bf746e7880c9363ea6ae04c3bd
SHA512 4ccc83a6ec8616c14b3fd96642704c001a041c3a82bb127f89b2b38b835510a3c7bbc9879eb043023d496fcf7ef68833e708371cef384d279d693f3818c2325a
SSDEEP 192:sxRBR0yM/jK1Ml8wFK/fusOVaDVB9pAJzoA8p45/g6+WNIYJOuG3IgDq3J:sxRBebK/fusOVaBB9pAU8/5IHu
TLSH
T18762DA16A6345977CCDBD309FA51BF93D6F81433A2904E44AAFC8A0C05E7ADD221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 9652582494b71728854c5b4821ee921358df1ba19145b01c3de7090eefab240e
MD5 94087943944b65153febcdfb6361055c
SHA1 f343c4ad34bf0406a9bd745a7cca6576a757d5c1
SHA512 1ec0a64d80ed433c5f5d1b9829759f0eea122314844ec89c52832d8f72233de7b7fdc78aa41f243e68e9437825bd92570c8107c5544d7d8ed05b21d23ba0d45e
SSDEEP 192:sxRCR0yM/jK1Ml8wFK/fusuVaDVB9pAJzoA8p45/g6+WNIYJOuG3IgIJ:sxRCebK/fusuVaBB9pAU8/5IHs
TLSH
T17652DB15A6349937CCDBD309FA557F53D6F81533A2904E44AAFC8A0C05E7AED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 55a2b2aa56c15d5161055411568f235b1ceb94eb179a0a4ff9f6bdc166498f98
MD5 bc60f54d168038731cbeefaec133b2f1
SHA1 feca6230a35d22af53c24568823fcffc81562fdc
SHA512 6e54133d6e238763d923280d193dd68bc59defc134cb72ca03b08d2ba7d87bea0ffc10d554b1ca5bf5781d0551e52f9d665ccd40f1e0d00345e2e4453aa6a0fe
SSDEEP 768:v1D847WgeEftq8F1+UoAYDCx9Tuqh0VfUC9xbog/OVpDZhnrol2ZFa:v1D847WgeEftqu1ja0Nh0v
TLSH
T1A7C20C3B640CCB7E4F844A6DAC29AED66DD801CB97988D5447EE880C03C67FB511A5DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 dd3525e674f7b0e3da40fe3e938e76528bfb6f607d15b3ee6a1cbebe5308f57b
MD5 f86d05341ab63d664c5579665d66bdeb
SHA1 29f84a0348147314b99be634d5f18df83a8a6dd6
SHA512 582e84ad870a03645e7c2e63e50e2a8c93d91ac7b4992e97e0c61b33fae1163926293f128f2a1a49ac0429c65379b6668fe6739f60945b3da221c9d1350b450b
SSDEEP 768:Yj+9/3MDTc15G2z4yVCgZSVCKPFECrBhpjcNvzn12bfJsk:H9/3oa8gs0KPF1HRcVByJsk
TLSH
T1BEF2B071A8A41E334DB7C698B5077386BEF483A3D2CA1A5894DC6B0D46D739D1317C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 2535474c3c64227b9953a81b9d9834627711ee17afbfb9105c5bd1f0c92e1454
MD5 de696091b5b62075d5e1a72e66d6e8bf
SHA1 230867ce790359cb2fffe00a26223d625e835abc
SHA512 f6603141121010de2fc269bc95d381515b354d262f110893768af63f610e90a37c2b6333905743997b1c9d6866f9545b8f82c9db42a35c86862a6afdc046f399
SSDEEP 768:ij+9/3ZDTc15G2z4yVCgZSVCKPFECrBhpjcNvzn12bfJsk:R9/39a8gs0KPF1HRcVByJsk
TLSH
T141F2B071A8A41E334DB7C698B5077386BEF483A3D2CA1B5898DC6B0D46D739D1317C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 873356ab76714bee85e4e3ca855e08ceeb887802b8a580ff04114bd99ff903e4
MD5 3427078ac292c2e4c5473c07adc1555e
SHA1 dca037fa785761ee70112be8f6d34ae368d2bde5
SHA512 5b64cf7851fd3105f76ca87ef60b85727d7b6a1032b3006e922ae5b0a5f62911de800233a4f302f65beefc06c02a24e3e31486ee3742bca7c9db739996e85607
SSDEEP 768:Vj+9O3MDTc15G2z49VCgZSVCKPFECrBhpjcNvzn12bfJsk:g9O3o18gs0KPF1HRcVByJsk
TLSH
T19CF2B071A8A81E334DF7C698B1077386BEF483A3D2CA1A4895DC6B0D4ADB39D1317C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 0f4c61aa7b7b1abffa44f09629a90d6367e809afa4707ec07033105c5fbd3e5b
MD5 50501cd8665c64b4ff5e9f75c3deb9ec
SHA1 26c69277dd8b712544dccda163c6531e39f4c0dc
SHA512 c7c2bb4d333a7fa8bc4720e30dd8e5c9121d8b3a859b9ae41a7e5e860f0963d67d20e48d6953288a3121866afef64c7b3652846939963cd84446b50f94359b9b
SSDEEP 768:bjaeqD4MlshiLdMmu3if5G2z/VCgZSVCKPFECrBhpjcxh+ApX32TB:bqcjhIdMB3E8gs0KPF1HRcv+KXk
TLSH
T18803BF79A8A45E738C77D245B207B6467EB80297D7CA2B8CD8ED6A0D41D73DD130382B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d5e06a50-7ed3-413d-a851-0f9112d72ad3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\d5e06a50-7ed3-413d-a851-0f9112d72ad3.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download