ed6f6f2144998175c846a99d2a0faab5bf7b6ace318f0fe2dc4bfeaf4700c1d8

Analysis

max time kernel
148s
max time network
158s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260629-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
01/07/2026, 12:15

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
file_9ed873a1d14ec6de.html
Size 564B
Sample260701-pfejhsfx8s
SHA256 ed6f6f2144998175c846a99d2a0faab5bf7b6ace318f0fe2dc4bfeaf4700c1d8
MD5 54d14e2aba479693f9fd361a56d5f525
SHA1 2e52709ffe46120e45b90fb907bb2d09e083b448
SHA512 460c379c9b4c4b5b89f302cec4edaa5707578fc336ec70c8ad992d8341a9f3e27b1764b8b9f170715723afc7f3e7114faa4c09ed4e3db2a77c90ba5ccaa05498
TLSH
T110F0CD9F1F12387F2E238170F0C35068CF680A56FB9921E28748001F3ACA04549F6FAD
MD5 SHA1 SHA512 TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1752	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134273818412498642"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3865087520-2734723108-1233268525-1000\{39267D0F-F1D0-4B0D-B338-076F2D715F37}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2064	msedge.exe
2064	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5808	msedge.exe
5808	msedge.exe
5808	msedge.exe
5808	msedge.exe
5808	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5808	msedge.exe
5808	msedge.exe
5808	msedge.exe
5808	msedge.exe
5808	msedge.exe
5808	msedge.exe
5808	msedge.exe
5808	msedge.exe
5808	msedge.exe
5808	msedge.exe
5808	msedge.exe
5808	msedge.exe
5808	msedge.exe
5808	msedge.exe
5808	msedge.exe
5808	msedge.exe
5808	msedge.exe
5808	msedge.exe
5808	msedge.exe
5808	msedge.exe
5808	msedge.exe
5808	msedge.exe
5808	msedge.exe
5808	msedge.exe
5808	msedge.exe
5808	msedge.exe
5808	msedge.exe
5808	msedge.exe
5808	msedge.exe
5808	msedge.exe
5808	msedge.exe
5808	msedge.exe
5808	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5808	msedge.exe
5808	msedge.exe
5808	msedge.exe
5808	msedge.exe
5808	msedge.exe
5808	msedge.exe
5808	msedge.exe
5808	msedge.exe
5808	msedge.exe
5808	msedge.exe
5808	msedge.exe
5808	msedge.exe
5808	msedge.exe
5808	msedge.exe
5808	msedge.exe
5808	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 5808 wrote to memory of 848	5808	msedge.exe	88
PID 5808 wrote to memory of 1752	5808	msedge.exe	89
PID 5808 wrote to memory of 4812	5808	msedge.exe	91
PID 5808 wrote to memory of 4812	5808	msedge.exe	91
PID 5808 wrote to memory of 3588	5808	msedge.exe	90
PID 5808 wrote to memory of 3588	5808	msedge.exe	90
PID 5808 wrote to memory of 3588	5808	msedge.exe	90
PID 5808 wrote to memory of 4312	5808	msedge.exe	93
PID 5808 wrote to memory of 4312	5808	msedge.exe	93
PID 5808 wrote to memory of 3124	5808	msedge.exe	94
PID 5808 wrote to memory of 4312	5808	msedge.exe	93
PID 5808 wrote to memory of 3124	5808	msedge.exe	94
PID 5808 wrote to memory of 3124	5808	msedge.exe	94
PID 5808 wrote to memory of 2600	5808	msedge.exe	95
PID 5808 wrote to memory of 944	5808	msedge.exe	96
PID 5808 wrote to memory of 2600	5808	msedge.exe	95
PID 5808 wrote to memory of 2600	5808	msedge.exe	95
PID 5808 wrote to memory of 944	5808	msedge.exe	96
PID 5808 wrote to memory of 944	5808	msedge.exe	96
PID 5808 wrote to memory of 2852	5808	msedge.exe	98
PID 5808 wrote to memory of 4296	5808	msedge.exe	99
PID 5808 wrote to memory of 2852	5808	msedge.exe	98
PID 5808 wrote to memory of 4296	5808	msedge.exe	99
PID 5808 wrote to memory of 3820	5808	msedge.exe	101
PID 5808 wrote to memory of 4620	5808	msedge.exe	105
PID 5808 wrote to memory of 716	5808	msedge.exe	106
PID 5808 wrote to memory of 2996	5808	msedge.exe	107
PID 5808 wrote to memory of 3028	5808	msedge.exe	108
PID 5808 wrote to memory of 3028	5808	msedge.exe	108
PID 5808 wrote to memory of 2064	5808	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\file_9ed873a1d14ec6de.html
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2d8,0x7ffde5d2c188,0x7ffde5d2c194,0x7ffde5d2c1a0
  2⤵
  PID:848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1860,i,16888265641841991763,14865060182099908243,524288 --field-trial-handle=2232,i,4244126456269709859,14799071477331495233,262144 --variations-seed-version --mojo-platform-channel-handle=2268 /prefetch:11
  2⤵
  - System Time Discovery
  PID:1752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1580,i,3633535573248115826,13328025634062472422,262144 --field-trial-handle=2232,i,4244126456269709859,14799071477331495233,262144 --variations-seed-version --mojo-platform-channel-handle=2224 /prefetch:2
  2⤵
  PID:3588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2392,i,8229662348768280826,3430984263955927252,524288 --field-trial-handle=2232,i,4244126456269709859,14799071477331495233,262144 --variations-seed-version --mojo-platform-channel-handle=2276 /prefetch:13
  2⤵
  PID:4812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3608,i,15226463742685160299,14515078422147275103,2097152 --field-trial-handle=2232,i,4244126456269709859,14799071477331495233,262144 --variations-seed-version --mojo-platform-channel-handle=3616 /prefetch:1
  2⤵
  PID:4312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3620,i,6963538067630045037,2480144406713118708,2097152 --field-trial-handle=2232,i,4244126456269709859,14799071477331495233,262144 --variations-seed-version --mojo-platform-channel-handle=3672 /prefetch:1
  2⤵
  PID:3124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4352,i,9192961270875139945,16551700779898907746,2097152 --field-trial-handle=2232,i,4244126456269709859,14799071477331495233,262144 --variations-seed-version --mojo-platform-channel-handle=4940 /prefetch:1
  2⤵
  PID:2600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4400,i,12570719718604464345,7771452736635087091,2097152 --field-trial-handle=2232,i,4244126456269709859,14799071477331495233,262144 --variations-seed-version --mojo-platform-channel-handle=4944 /prefetch:9
  2⤵
  PID:944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3756,i,11831199733094667251,17557895337230231390,524288 --field-trial-handle=2232,i,4244126456269709859,14799071477331495233,262144 --variations-seed-version --mojo-platform-channel-handle=5340 /prefetch:14
  2⤵
  PID:2852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5316,i,7497160520530182897,8281429957793115022,524288 --field-trial-handle=2232,i,4244126456269709859,14799071477331495233,262144 --variations-seed-version --mojo-platform-channel-handle=5372 /prefetch:14
  2⤵
  PID:4296
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5892,i,10577317679428200117,6808586377761006406,524288 --field-trial-handle=2232,i,4244126456269709859,14799071477331495233,262144 --variations-seed-version --mojo-platform-channel-handle=5908 /prefetch:14
  2⤵
  PID:5768
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5892,i,10577317679428200117,6808586377761006406,524288 --field-trial-handle=2232,i,4244126456269709859,14799071477331495233,262144 --variations-seed-version --mojo-platform-channel-handle=5908 /prefetch:14
  2⤵
  PID:3820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4988,i,12936120306150381598,3489270964923782632,524288 --field-trial-handle=2232,i,4244126456269709859,14799071477331495233,262144 --variations-seed-version --mojo-platform-channel-handle=5288 /prefetch:14
  2⤵
  PID:4620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4992,i,13727151760915685100,1826695912397780559,524288 --field-trial-handle=2232,i,4244126456269709859,14799071477331495233,262144 --variations-seed-version --mojo-platform-channel-handle=3696 /prefetch:14
  2⤵
  PID:716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4400,i,3295525961255086073,17551622790871469403,524288 --field-trial-handle=2232,i,4244126456269709859,14799071477331495233,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:14
  2⤵
  PID:2996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5632,i,7884698067915265100,7223027343519439501,524288 --field-trial-handle=2232,i,4244126456269709859,14799071477331495233,262144 --variations-seed-version --mojo-platform-channel-handle=6208 /prefetch:14
  2⤵
  PID:3028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5740,i,17068950346647351705,1453042371150716772,262144 --field-trial-handle=2232,i,4244126456269709859,14799071477331495233,262144 --variations-seed-version --mojo-platform-channel-handle=6304 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2064

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3264

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3920

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 994380ffd288a5f1a9acc9eb76a487a55b12cc1daec839d811240f6cbdc4da3a
MD5 f5ed4946834be586ac6410ed88740a7c
SHA1 6108ce368e8b3bb8012956bb25606c3b16835c7b
SHA512 76bf60b37c50422ab125edd3da70629e685408a106655a9b7e5cb6aa7b6a9000c76d8ac2f5dc85e58e893b61bef9b539b9488ac894f1fc1338a58944dc9f4711
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P77:fwUQC5VwBIiElEd2K57P77
TLSH
T1E5B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 37abd39218624bea608ed1c31cedc29697ad7dcee756e85d36f477bc96d5d79e
MD5 02d5d30f7a50d6501cf8e28620d036a8
SHA1 7b35285f7d86d5c3e0211627a1949eba907bccc2
SHA512 75c5013e8f146add9f0df252bb7669ce045b68d4f02b1aa7609d01a9ab18fda0f9b2e387ce15f36d76b8019dce58f4ed010f4a4528819164adeaf356a9fdc485
TLSH
T1FFD0C02D3D44FC02C1891070760033D0756001F03056C3C59002E01DDC3814083DB0AF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 6b4b91e2c6408056d62e9ab108c4a1bc3372697cc673aea50cc1ab639cb36d31
MD5 31627e295d41c3cf43475c41d5522c43
SHA1 03580db0a47167f6acdfbb28d1db3e5fd631377d
SHA512 b71b6edd012c155ef24382afc691d07b436ca311747e424ecd928e1ae50b54eb9c2cef7113ea3e73a4f92dfa3cafacd84c0410c0f05a6860d79a46a87ba532f3
TLSH
T192D0C0293D44FC02C1891070760133D0755001F03056C3C59002E02DDC3814083DB09B
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 38f21a2d833c7bb8ce70ad544da6f8f6a89d39b1dfee96662c05291e9549c53d
MD5 df2c89f9e11397badb2389aa8b7aeb3b
SHA1 77c5e6fe87225412e08b51957bb4561729df0a86
SHA512 0eb4a3e165837690b43ab447394171d54c7bbb3f3d5f054c2d693fb79728538d90a4771867620cd03cb521114286ad78fee31ef6d9b67c006fb79500a9186d89
TLSH
T1FF617F1C212E4911DBBA1CB501F227B9FF7889554B0BBEE190D8AC79781E7EC3C52A71
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe589749.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe589749.TMP
Size 3KB
SHA256 7570f3e3ed4e276f8baa66474a682f4a326cd79ff43e4e9081dd84045951ab50
MD5 5aae3128d4b8cbbe57db5f051e65b830
SHA1 2dcd53749ac4dcafe819e9af6518c765ba934418
SHA512 61c9b1e21740ab55ae3b4a11498d9bb1975c9a5c89c12f095766b202cafcea8f12315549ccb29a057c241c6ca53bfb5a478bd6c3d1aebabb934971b0a2ee10d5
TLSH
T187616F1C112E4A11D7BA1CB501F227B9FF7889954B0BBEE190D8AC79781E7EC3C51A71
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 9d1efe35fc7e18976bd471e3d5f4857fa3feaf963380d6b0a9606956c152c8f6
MD5 8f1ca5e1924a0f947c32d0dc3dde1d32
SHA1 a0c751ea0ff4193d8d7c5dbd1ff2eeea6b038980
SHA512 d4a158b0b4ed412fd99b35cfa3aec817b338cfd25d71f9aa7cef6621a7a04c7173e46841e26418c6fff6942708e8de50bf12fffdc1e93e2f03103b6274dac693
TLSH
T17941BEF7C3E8866E8A0146F0BA146E2BCE2D0915832C3D5AC9D4AF5B93E3471E14199F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 127c0b3b55933a064640dc1155f588d42fc2e9fb89aa457e79fa4c5e704fb993
MD5 c777a4b66d90f08b31c248fa933ac9ee
SHA1 52ba4a925ced1dd88c9c749b1d2ea1d58b918205
SHA512 6b05540fb3c1cca5999db4693cf9c051e8a4251f342dc9939846c69fe0f1c18f53183d521ba01253ed42c3947642652fe7cc889f80e6976671eb0ff2fe5bf752
SSDEEP 192:sxRVAfRIfyM/jK1Ml8wFYT/fyvsAnqDyl3p6ORcWzoA8p4VV/g6+WNIYHoRaXGtN:sxREIbY/fEsAnQyh036/5Ir2s
TLSH
T14352E8156A28597B8CDBD20DFA517F53D6F81573A2904E04AAFCCA0C01E7BED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 b80f6740afc8fb329d2db7253b14cc019f7a7bcdd1630d5eb4aa31ffd8398f30
MD5 bd2fd1b01856ce02eff5d8bff3d92cc9
SHA1 bb09dfe4fb2fd7d01ac69a357808254d87ac4958
SHA512 f4ceb36a0109614123b52faca6d000adf2939e78549931cbfe7f519dec18fc2efc3bd25c86aba0d99806667d9a53e4a973b48d3f107b13715099201a8b7a4241
SSDEEP 192:sxRVlfRIfyM/jK1Ml8wFYT/fyvsYknqDyl3p6ORcWzoA8p4VV/g6+WNIYHoRaXGT:sxRjIbY/fEsjnQyh036/5Ir2Q/
TLSH
T12F52E8156A28597B8CDBD20DFA517F53D6F81573A2900E44AAFCDA0C01E77ED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 823e7c2f3a5f4b24927519f6ce8ac78157323b7f8102dc1200037fc3944011ed
MD5 953995199a4cfc4687adf499a38b0412
SHA1 10fb0b545eacec290258bae9ea49ee44bc2d022d
SHA512 f90031b72e050cb02dd4a7585b86364059ddf2320bface1b827be34c912d3bf811b6d76ecee0b3842d13e1b9fe8a34e216ce09ea47f60f620ed3acd86746a59b
SSDEEP 192:sxRVlfRIfyM/jK1Ml8UQY8FYT/fyvsYknqCvyl3p6ORcWzoA8peVV/g6+WNIYHV3:sxRjIqlY/fEsjnpyh03s/5I+2Qt
TLSH
T11C62D815662859778CDBD20DFA51BF53D6F81573A2940E04AAFCCA0C01E77ED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 4cac3c0360bcf7333fda5dd4110ea647bac81782fa4933a1d050e54072043c24
MD5 efc66a5e9c5be30a7950573ade61f475
SHA1 3ffdee25d3614d536c56018295f76dadfee3143e
SHA512 7ef80fcde6cb8a803bfad04c215a54533f28d9f88e86920bd43252c35edd0acc51448acc22b905c89aad3ca66c94abb57271766fc992a2a921b3098008f4fb97
SSDEEP 768:6laYAjWgRNf2b8F1+UoAYDCx9Tuqh0VfUC9xbog/OV2Azwkro3J4J:6laYAjWgRNf2bu1jaHUwv54J
TLSH
T153C2FB2B640CC77E4F8449ADEC297E966DDC02CB97984D5447EB890C03CB7EB521B4EA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 ebff3a4b753d881182a00db45b2c0856b749cb768074054c7af66ade90363763
MD5 8a4897f2bb503e88e962eaa0a04bbaac
SHA1 22efa3fd084d3bdc9ddad670761eeab7c8b85308
SHA512 cc537c8164c9b97bbac3b375d5eef1be52f492ef9e6ed08a48e4fdd65b64bb7e2a49b3655980eca0c789a9e66aa66065f7c3619b4ef3ede94f994571d036ea02
SSDEEP 96:KOf2DvFB1Qx5kD3HQKfF3NQDXHUtf94OZAcWsw7xADK307KfC3q7DOmrYQI4GLGu:9f2DvFB1I5kjHbF3NQXHUtf94OZAcWsd
TLSH
T156912410747A1B00387D780E93B8952E664530E631DEA86F3BA971F31B66E054EFDBC9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

f034f00d-cf83-487b-8cee-3f1bc6ea2c1d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\f034f00d-cf83-487b-8cee-3f1bc6ea2c1d.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 c17ebde53fc358a0dc6ce18162a5c3b9b869ebe34e42a039fb19451e8b63d92c
MD5 76fcd678e846b8431993e27319aa6739
SHA1 3e75098f075278e1dc6e2620dc5fd2d33261bcf5
SHA512 ef7bd897a02482299c08212818a891425c64d2b6dabc1d6df1567f77634f46255c713ed5435d043c37d3ec63a71d3d147a13229e7fcbd9602c5b154b7677cadb
SSDEEP 768:8j+9B3UkB1C9x+Tf/O1lfN2fGWyvPIINRzWnhIoQdc8Kz7:b9B3dTfOlfN2fkgyROIoUctz7
TLSH
T115F2AE76E9614E639CEBD6C8BB0B375BAEB4426392C61F90D5CC1B0C05CB7AD630B446
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 1eba5e51ee15fa005d1b79c8e14eca8972e9f52eecd6b16364da80a1e1fc6e63
MD5 07aee034ddb975f152932dab744d39b0
SHA1 6ea838232fbb44711d022ed63e3176c7d53507f8
SHA512 e32855519b66b68f56cbef56a6a8ab3c92dc838c7dce06175fd17738e9049784e93f04afbc87d876f75f4d25312996f07a2ca142cade777103f132af89df05af
SSDEEP 768:kj+9B3dkj1C9x+Tf/O1lfN2fGWyvPIINRzWnhIoQdc8Kz7:z9B3STfOlfN2fkgyROIoUctz7
TLSH
T150F29D76E8614E639CEBD6C8BB0B3B5BAEB4425392C61F90D5CC1B0C05CB7AD630B446
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 c0e0160fa9dd108125cb52aacfac170327c507b76ac1f8b1fe406a8e44bd54e2
MD5 646dbedb982871d56c1f362b2b8396a8
SHA1 95b3d50a42d17fd406be1e5321212348235cc585
SHA512 c344b8777f6510fefc299b65ae02fdda077b9d26a9cca0077aa4a84846804a22d207e9a5d4aa62e8da0f4cb94e16ea35b3be9b8225a168f1124240bd850ac01d
SSDEEP 768:Yj+9B3Ukj1C9x+Tf/O1lfN2fGWyvPIINRzWnhIoQdc8Kz7:H9B3nTfOlfN2fkgyROIoUctz7
TLSH
T1CAF29E76E9614E639CEBC6C8BB0B3B5BAEF4425392C61F90D5CC1A0C05CB7AD630B446
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 e38c550ca820b2338e12de8fb40284b7c72680d2e99660f7c27a613ba16b0b5f
MD5 9fd09ae2cc45888571b2809fcf66c316
SHA1 6818e4a56399e647da103c598db4a71bc2b5c5ac
SHA512 e91fdd5fcb5b57453f030f908eeac7b18c01d7d396a3f6f7eb191c9bb69e8f22d74a6c25860cffe9e4f5651bf9c71cd5e316fc1926ab4945a7f2985b883c20e8
SSDEEP 768:8F1j+9P3ywgMkj1C9x+Tf/O1lfN2fMWyvPIINRzWnhIoQdc8Kz7:x9P3oTfOlfN2fWgyROIoUctz7
TLSH
T113039E76D8508E679DEBCAC8BB0B3757AEF44263D2C65B90D6CC5A0C018B3AD530B845
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 632b72d4876e45e517977bc9b86c46cef535cb3ef0122297a0ee0715c28d75b4
MD5 3f0fb2390e12b18870706b0527eeac0b
SHA1 5ad92a16772ab4100b892e6b71e9452f73d5338f
SHA512 1f5028b90537e95240318b74bdc42a3806803cc7436f06c941a7851da4a32b5fb9c2b5af9bb834e26a63261a6e66ca70f7390884101717909cfc83817d33e3ad
SSDEEP 768:arv+4UNbdB35ZC9x+Tf/O1lfNqWyvPIINRzWnhIoAC+8r7W:absbT3HTfOlfNogyROIovDra
TLSH
T12803CF32E9685A73ECFBC6C87A4B77577EF4426396C60B90C4CD1B4C458B6AE130B852
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2b9a4cce-42d0-41fa-832b-6439a2dec453.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\2b9a4cce-42d0-41fa-832b-6439a2dec453.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download