53086a85038d77e0696535404343d542d09f6ef5f8d628968608b15d64fbc2f8

Analysis

max time kernel
148s
max time network
123s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260706-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260706-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
07/07/2026, 04:34

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
.html
Size 1KB
Sample260707-e67b4shy7x
SHA256 53086a85038d77e0696535404343d542d09f6ef5f8d628968608b15d64fbc2f8
MD5 398f0a37c0cdd5a5238c8ac3f75aa9f0
SHA1 36c301f6ea51b116dca3040fc4cf87638382a0c7
SHA512 8349834b1d978ed758fbb9920d9473c00e8fc39cc07774424602eb207598cd9dfddb58e175a1a227287cf2f73b8ced62b5791ab0973b87813645c1fdb4cd11ca
TLSH
T1DD11F04ABE829412A110615C8EF5D22DC0737224D2CCCE7CF0A5F3256C457AAD42EA9B
MD5 SHA1 SHA512 TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1644	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3575702013-381963388-2545377694-1000\{B5FC88E9-6F5F-442D-A3D5-CB20E3C042C3}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2032	msedge.exe
2032	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
5672	msedge.exe
5672	msedge.exe
5672	msedge.exe
5672	msedge.exe
5672	msedge.exe
5672	msedge.exe
5672	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5672	msedge.exe
5672	msedge.exe
5672	msedge.exe
5672	msedge.exe
5672	msedge.exe
5672	msedge.exe
5672	msedge.exe
5672	msedge.exe
5672	msedge.exe
5672	msedge.exe
5672	msedge.exe
5672	msedge.exe
5672	msedge.exe
5672	msedge.exe
5672	msedge.exe
5672	msedge.exe
5672	msedge.exe
5672	msedge.exe
5672	msedge.exe
5672	msedge.exe
5672	msedge.exe
5672	msedge.exe
5672	msedge.exe
5672	msedge.exe
5672	msedge.exe
5672	msedge.exe
5672	msedge.exe
5672	msedge.exe
5672	msedge.exe
5672	msedge.exe
5672	msedge.exe
5672	msedge.exe
5672	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5672	msedge.exe
5672	msedge.exe
5672	msedge.exe
5672	msedge.exe
5672	msedge.exe
5672	msedge.exe
5672	msedge.exe
5672	msedge.exe
5672	msedge.exe
5672	msedge.exe
5672	msedge.exe
5672	msedge.exe
5672	msedge.exe
5672	msedge.exe
5672	msedge.exe
5672	msedge.exe

Suspicious use of WriteProcessMemory 36 IoCs

description	pid	Process	procid_target
PID 5672 wrote to memory of 5952	5672	msedge.exe	87
PID 5672 wrote to memory of 4528	5672	msedge.exe	88
PID 5672 wrote to memory of 1644	5672	msedge.exe	89
PID 5672 wrote to memory of 4528	5672	msedge.exe	88
PID 5672 wrote to memory of 4528	5672	msedge.exe	88
PID 5672 wrote to memory of 5808	5672	msedge.exe	91
PID 5672 wrote to memory of 5808	5672	msedge.exe	91
PID 5672 wrote to memory of 1160	5672	msedge.exe	92
PID 5672 wrote to memory of 1160	5672	msedge.exe	92
PID 5672 wrote to memory of 1160	5672	msedge.exe	92
PID 5672 wrote to memory of 1544	5672	msedge.exe	93
PID 5672 wrote to memory of 1544	5672	msedge.exe	93
PID 5672 wrote to memory of 1544	5672	msedge.exe	93
PID 5672 wrote to memory of 4360	5672	msedge.exe	94
PID 5672 wrote to memory of 4360	5672	msedge.exe	94
PID 5672 wrote to memory of 4360	5672	msedge.exe	94
PID 5672 wrote to memory of 3236	5672	msedge.exe	95
PID 5672 wrote to memory of 3236	5672	msedge.exe	95
PID 5672 wrote to memory of 3236	5672	msedge.exe	95
PID 5672 wrote to memory of 2424	5672	msedge.exe	96
PID 5672 wrote to memory of 2424	5672	msedge.exe	96
PID 5672 wrote to memory of 2424	5672	msedge.exe	96
PID 5672 wrote to memory of 1536	5672	msedge.exe	98
PID 5672 wrote to memory of 1536	5672	msedge.exe	98
PID 5672 wrote to memory of 1536	5672	msedge.exe	98
PID 5672 wrote to memory of 3144	5672	msedge.exe	99
PID 5672 wrote to memory of 3244	5672	msedge.exe	100
PID 5672 wrote to memory of 3144	5672	msedge.exe	99
PID 5672 wrote to memory of 3244	5672	msedge.exe	100
PID 5672 wrote to memory of 2736	5672	msedge.exe	102
PID 5672 wrote to memory of 3192	5672	msedge.exe	105
PID 5672 wrote to memory of 2644	5672	msedge.exe	106
PID 5672 wrote to memory of 4176	5672	msedge.exe	107
PID 5672 wrote to memory of 4600	5672	msedge.exe	108
PID 5672 wrote to memory of 4600	5672	msedge.exe	108
PID 5672 wrote to memory of 2032	5672	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\.html
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ff9ab54c188,0x7ff9ab54c194,0x7ff9ab54c1a0
  2⤵
  PID:5952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1620,i,3277479650834443825,14805129440771564398,262144 --field-trial-handle=2308,i,2186113456311928571,5136124678003049060,262144 --variations-seed-version --mojo-platform-channel-handle=2304 /prefetch:2
  2⤵
  PID:4528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1876,i,3911120734658857461,8228007602541099975,524288 --field-trial-handle=2308,i,2186113456311928571,5136124678003049060,262144 --variations-seed-version --mojo-platform-channel-handle=2352 /prefetch:11
  2⤵
  - System Time Discovery
  PID:1644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2420,i,3867895591796181055,8943292154884075214,524288 --field-trial-handle=2308,i,2186113456311928571,5136124678003049060,262144 --variations-seed-version --mojo-platform-channel-handle=3336 /prefetch:13
  2⤵
  PID:5808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3600,i,303762359729947672,279816594720502106,2097152 --field-trial-handle=2308,i,2186113456311928571,5136124678003049060,262144 --variations-seed-version --mojo-platform-channel-handle=3644 /prefetch:1
  2⤵
  PID:1160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3608,i,4342687283484291493,17803240915201088969,2097152 --field-trial-handle=2308,i,2186113456311928571,5136124678003049060,262144 --variations-seed-version --mojo-platform-channel-handle=3668 /prefetch:1
  2⤵
  PID:1544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4240,i,2525534510017923658,574946232644106492,2097152 --field-trial-handle=2308,i,2186113456311928571,5136124678003049060,262144 --variations-seed-version --mojo-platform-channel-handle=4816 /prefetch:1
  2⤵
  PID:4360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4252,i,2731566756855385303,1585693875239833874,2097152 --field-trial-handle=2308,i,2186113456311928571,5136124678003049060,262144 --variations-seed-version --mojo-platform-channel-handle=4876 /prefetch:9
  2⤵
  PID:3236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3692,i,12525318141888289082,17066004232552386920,2097152 --field-trial-handle=2308,i,2186113456311928571,5136124678003049060,262144 --variations-seed-version --mojo-platform-channel-handle=3784 /prefetch:1
  2⤵
  PID:2424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=5524,i,12937735354605915011,1150991065520211886,2097152 --field-trial-handle=2308,i,2186113456311928571,5136124678003049060,262144 --variations-seed-version --mojo-platform-channel-handle=5528 /prefetch:1
  2⤵
  PID:1536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5416,i,6462078576193538695,17381655555978511784,524288 --field-trial-handle=2308,i,2186113456311928571,5136124678003049060,262144 --variations-seed-version --mojo-platform-channel-handle=3892 /prefetch:14
  2⤵
  PID:3144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5624,i,3777042841563187854,8813677818818147742,524288 --field-trial-handle=2308,i,2186113456311928571,5136124678003049060,262144 --variations-seed-version --mojo-platform-channel-handle=3820 /prefetch:14
  2⤵
  PID:3244
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6236,i,7572490942346876693,7333636088739530945,524288 --field-trial-handle=2308,i,2186113456311928571,5136124678003049060,262144 --variations-seed-version --mojo-platform-channel-handle=6276 /prefetch:14
  2⤵
  PID:3500
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6236,i,7572490942346876693,7333636088739530945,524288 --field-trial-handle=2308,i,2186113456311928571,5136124678003049060,262144 --variations-seed-version --mojo-platform-channel-handle=6276 /prefetch:14
  2⤵
  PID:2736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=600,i,5889728805335229460,17889991502743240106,524288 --field-trial-handle=2308,i,2186113456311928571,5136124678003049060,262144 --variations-seed-version --mojo-platform-channel-handle=6272 /prefetch:14
  2⤵
  PID:3192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3588,i,16440733656894444070,14366411876632637828,524288 --field-trial-handle=2308,i,2186113456311928571,5136124678003049060,262144 --variations-seed-version --mojo-platform-channel-handle=5108 /prefetch:14
  2⤵
  PID:2644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6276,i,1923458979639546875,18307926520156426931,524288 --field-trial-handle=2308,i,2186113456311928571,5136124678003049060,262144 --variations-seed-version --mojo-platform-channel-handle=3644 /prefetch:14
  2⤵
  PID:4176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2192,i,15331764566872642079,17556083974435951406,524288 --field-trial-handle=2308,i,2186113456311928571,5136124678003049060,262144 --variations-seed-version --mojo-platform-channel-handle=5656 /prefetch:14
  2⤵
  PID:4600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6660,i,13577288585681325355,5505888385460897500,262144 --field-trial-handle=2308,i,2186113456311928571,5136124678003049060,262144 --variations-seed-version --mojo-platform-channel-handle=5276 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2032

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1180

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4772

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 5373dba236158f8b47a5d7b664d171a8c47fe1fccd7b9ce0e1bd4afa2951d836
MD5 94a2023674c565156f1a36186c104810
SHA1 86e289a50e37125a5f15b949883b1e7188e31934
SHA512 d74a13f710bdf2137189f88217902762a3207a2efa776e19c74d44824ac997d398c4d0995f1b45894fe98d29700bf2a4ab26ab89b59bd32b83e714bdb7d03691
TLSH
T115D09B747661D508DB40267265E55767F2115D35681D010C4041F16948557D106574BF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 fff4f5462f00db2197bad3d5dba44e0ed82332400e95ccd8e5aacbd03ea21ee9
MD5 5de064ddd4c36dfd1714ea6c60646443
SHA1 48976457417008f63c629290b82b7fcabfe4a7d6
SHA512 7cceae45d0afd44ac6288bfcc0bb9265585ec202aeed97194d26f5a717e32b99e16c516c465e3a99e12146fb39abc1e5707717e4ab27a4263928a6eadc9da500
TLSH
T1D6D09B747671D508DB40267265E55767F2015D35541D010C4041F17948557D106574AB
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 6045adf0e0846ea09876c1668f569371e48a0a98c3d59c9a59389572745e8d84
MD5 de383c8e35200c7ee433916ee4b423b4
SHA1 138bcca7a2726d98773c72ee032ebef36532fdb3
SHA512 911de139909f4c07cd5c7797f06314b179b68bea06f64dd0a443c84f0ab4fad5ae92911fc04bafb08781a19f9b62c33cceaeb30689baa3f8a4f868bac7fbaba5
TLSH
T1716141190BBE4BD6FB6B6EB670EDD4D9B9344C75530FDE17A2A398F84C063046421534
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5918fd.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5918fd.TMP
Size 3KB
SHA256 f5a9e9043bf9ea0bb1f372c009fc8b50978d05f779b8d4f977cfada859cc6fb4
MD5 3f22cec9ea65ca12cf6f406e5daa8403
SHA1 80fa697c2f8308b083786e5ec2b0eaa8d6b79fc5
SHA512 0f4af18a3abddd68d72881a456b0ea9586de953edb07f133cdf299986c6ddb9a76856e4c85ebbb9990ac0822391dd3a5ac0cce7b087d695eb20c76e63063f60e
TLSH
T1036162190B7E4BE2FB6B6EB671EDD0D9BA344CB5534FDE17A1A3A8F80C063046461534
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 029f122c554e54f57c72989e379dfe2bf5ee70a64b2abdb684533b3c2ad70083
MD5 037c20a42f5eda345cd10b465c0828aa
SHA1 85d476ffa37efedc25392e3c6f6458dd6921754d
SHA512 58e844758508a3a682e844eb80952010f6f8f032d33c67c00271f7bdd9e50170e97e7b9d883b448660cd3d20e829c399fae07ac29ae2d5758fa9fa1299a86639
SSDEEP 96:DmOwNfBVaQOiHzBe51m6x2BzZmuwc19Gj6Tl:DFwNfBVaQOiH1e51m6xOzZmuD19Gj6Tl
TLSH
T130A1EFF783F4863E880266F57A146E2BCD1D0519432C3C27C9E4DE4B57E3472E18168E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 a8f7c1c31769fac388d9e6893dd241ef6a18ac9a80748389579a909b427ca649
MD5 d1f3b112928c41513d8856cd2a77b147
SHA1 996a45bcd25d671b77b2cef4386f7be0f3492449
SHA512 5404b511b8f77c2b8980d764a9de74ac31ac79256c45563f538ed26fc2d32aff8b76be629ad679b02396c22f42eea9f573d8ad7691484faefd8acadb8d1636cd
SSDEEP 192:sxRURpyM/jK1Ml8wbV/fLsI2cs3YGzoA8p44k/Ige6+WNIYPq7tiLGIgIgDsJ:sxRUzlV/fLsI5hc/tIFJ50
TLSH
T1E262D906A624993BCCDBD309FA567F53D6F91172A2901E44AAFCDB0C01E76ED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 ca7a8f9c4ce71231bd00796c518ba7ca474e8333f5e96f2a2120c45ba1a6ace3
MD5 ffaca53f872900061825021f0b1dab9f
SHA1 88c28038995758c381d3cbe87e793e95f0d286f9
SHA512 2c454f7516c58cd03ddfa8c9561d308ec352cc9f8ddf38e69121c422e2fba12faa12c64a69f53d401ae30456f4109b0fd904fa5ed7bbe026561203bb857b65b5
SSDEEP 192:sxRURpyM/jK1Ml8UQBbV/fLsI2cs3YGzoA8pe4k/Ige6+WNIYPG7tiLGIgIgDsJ:sxRUzqpV/fLsI5ha/tI7J50
TLSH
T17062EA16A6249937CCDBD309FA527F53D6F81572A2940E44AAFCDB0C01E76DD211381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 6321709948ee6d4fded3fea979fade785acb2d31292d8d7d49074ce03125ce7d
MD5 bcd242cd9470dd7b96ab0c86ecad7b98
SHA1 00daaf49abad47b4b10f1b861c696b647b75b870
SHA512 5d9509d3b7618e303c196fca42cb09a7a40347328dc0d08885b2393c2a5a2aa70ddc48f3347f1e79e1fbe50f7296b6d7ce27a5b2903e816163bd8ff94c542958
SSDEEP 768:+Pw4qBWg5tf+T8F1+UoAYDCx9Tuqh0VfUC9xbog/OV2Ux2GroI5wC:+Pw4qBWg5tf+Tu1jarW29I/
TLSH
T193C2EB2B640CC77E4F844E9DAC29AE97ADD801CB9B984D5447FE890C03C77EB512A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

a079cc9e-8747-4cf2-bf8f-db7e37be2e03.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a079cc9e-8747-4cf2-bf8f-db7e37be2e03.tmp
Size 14KB
SHA256 92078425f62fe169d760d2dd976e91effeb905490d45033483a7c8c55ef1b253
MD5 1436cc97469b3de3e7c3817a5b3ded6c
SHA1 ebf3693038920825898b651f956e48a63e0a1c10
SHA512 b691160f33ea3a13cb1219538865a2dc17036ae0f36e852bf8d90e4a31f9991cbc006a99f2b19fbf69cd9edd96870af2bf07911cf3a6caef07ced6ec9859bb31
SSDEEP 192:sxRTRpyM/jK1Ml8wbV/fLsA2cs3YGzoA8p44k/Ige6+WNIYPq7tiLGIgIgIJ:sxRTzlV/fLsA5hc/tIFJ5s
TLSH
T11C62D9066624993BCCDBD309FA567F53D6F91573A2901E44AAFCDA0C01E7AED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2f436771-b899-4b4b-b9fe-8ebb811aa463.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\2f436771-b899-4b4b-b9fe-8ebb811aa463.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 42KB
SHA256 35bc5c57d3e28c50b238c725292599e63fd05c2f1cb66bc201a7be4108ab4d8b
MD5 fb743162f39ef7111c37c67fa25efe48
SHA1 37659c0dfe4b4a2e1ba7c931e017f6997a3401f9
SHA512 9ca97de5d161262e5727db4aacbb3a3b3adb146785739cd2bdb4235bfce13843d343ad2629b6bd4155ffe16697767b776d8f22a4c704dd40f9947eaa3c66af5e
SSDEEP 768:1F1j+9w3mwg+oAyYL5XcuyvKweY5PWu3N+pyW3b9M/:c9w39/2ua4e/Sb+/
TLSH
T178136CF298D38976CC9E8793E33E6E519EBCC153B1845A48B7D86A0CCE534BFD206815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 edc098646ddd954c4db657980e6a736c3de09f68b936565ce1a381867ef4c78f
MD5 034ed4419c9b1f8175bc455ee6a8c088
SHA1 686b5f7bd1776fcc88785f32d1c75b60a0582653
SHA512 74decd75b3f11eaf1ddf7ad623400518e5387de2a25c6381b6f4d0f5c3873c1d576dc56ef0d4ef5dc259e18292c447cb7cb9c6305eb1aa8b527c574de51223e1
SSDEEP 768:Lj+9w3zOAyYL5YcuyvKweY5PWu3N+pyW3b9M/:e9w3zhXua4e/Sb+/
TLSH
T192F2AE32A8A19E738CD7D795F21B7692AFF45267D2880B4CC5EC7F0D07935AC5306816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 d4eb520825b77cdaddd4fc23a3461d32c6519a48e3db92b49a569bf27831fdf6
MD5 e2c9029a8e8a699908f522fa2f562c2c
SHA1 e6df877da75e6c90432682e4d7b6b2257c4c09e1
SHA512 bc7d417bc75a99cc7a9ba6b38553883c121481851d9f1cb0378aac552c7a2566318e016d10c440e5195e56f082b9fcf76acc0c0b72349ba5f7c94d728628aed8
SSDEEP 768:Yrv+4UNbd43ZdAsYL53cuyvKweY5PWu3N+pmgrUigCI:YbsbW3Zoyua4e/UU53
TLSH
T13A03BF33A8A4D9778CF7A291F24BB693BFB81153D6840B58C5E82B0D47A745C230BD67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b4725ece-db79-4cd7-87be-0f04ed830870.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b4725ece-db79-4cd7-87be-0f04ed830870.tmp
Size 41KB
SHA256 3aac9cee19622176246485541757847d8f6dbee4ef84c1a06b088676d685918f
MD5 56bd2cf9a64764f3d8aa6c6a63c98cdc
SHA1 c7f83c98cd7fabc4b553c3c9ad86ed6591af6f52
SHA512 cc7f46f3c8fa78d974e6145c770e180802316acdd28c466ab4dc77ba207b30f7b88f50e81919182eed702b3c571f28f5e4244ad8df9bc0a0df5fac3da8299512
SSDEEP 768:Wrv+4UNbdG3SDAyYL5YcuyvKweY5PWu3N+pyW3UigCS:WbsbU3SoXua4e/SU5l
TLSH
T19013BF32A8A4D9778CE7D291F24BB693BFB8155392840B98C5E87F0D479749C230B927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f23c3ea9-2cd4-4576-8b72-4f36fca3a2bb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\f23c3ea9-2cd4-4576-8b72-4f36fca3a2bb.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download