35095b505c78fcb8104c623a8949d76d0dd4379ab336c581f0cb0b664d709ab3

Analysis

max time kernel
148s
max time network
146s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260706-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260706-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
08/07/2026, 12:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
file.html
Size 326KB
Sample260708-pj56msgw5j
SHA256 35095b505c78fcb8104c623a8949d76d0dd4379ab336c581f0cb0b664d709ab3
MD5 0c025cd6bc264d5f37242eae5b00053f
SHA1 029945d3ef62ca6497b0e97005a203d026d6b3e3
SHA512 da67bdda933fefd4bb5f7d181409c331036e149feab03af1643fec91b14d13ca74f205f0ea68548320f0863004e35808e2f1f0b15f7e590fe960b9cfb1c50c5c
SSDEEP 3072:DYCgAkHnjzxQ6KSAiTfHd88aW+LN7jxRLlzglK0f2ZBR:9gAkHnjzxQBSAo988CN7DB0f2ZBR
TLSH
T14E642B25E5D2607F682B8033F27F3318B73FA483A101C969BA1CC5D5AFD19862177B99
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3204	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134279869692813485"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2626306573-1585762579-411806764-1000\{4052B41E-6199-478E-8301-8C5D129BF831}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
6140	msedge.exe
6140	msedge.exe

Suspicious behavior: LoadsDriver 10 IoCs

pid
4
4
4
4
4
4
4
4
4
4

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
5244	msedge.exe
5244	msedge.exe
5244	msedge.exe
5244	msedge.exe
5244	msedge.exe
5244	msedge.exe
5244	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5244	msedge.exe
5244	msedge.exe
5244	msedge.exe
5244	msedge.exe
5244	msedge.exe
5244	msedge.exe
5244	msedge.exe
5244	msedge.exe
5244	msedge.exe
5244	msedge.exe
5244	msedge.exe
5244	msedge.exe
5244	msedge.exe
5244	msedge.exe
5244	msedge.exe
5244	msedge.exe
5244	msedge.exe
5244	msedge.exe
5244	msedge.exe
5244	msedge.exe
5244	msedge.exe
5244	msedge.exe
5244	msedge.exe
5244	msedge.exe
5244	msedge.exe
5244	msedge.exe
5244	msedge.exe
5244	msedge.exe
5244	msedge.exe
5244	msedge.exe
5244	msedge.exe
5244	msedge.exe
5244	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5244	msedge.exe
5244	msedge.exe
5244	msedge.exe
5244	msedge.exe
5244	msedge.exe
5244	msedge.exe
5244	msedge.exe
5244	msedge.exe
5244	msedge.exe
5244	msedge.exe
5244	msedge.exe
5244	msedge.exe
5244	msedge.exe
5244	msedge.exe
5244	msedge.exe
5244	msedge.exe

Suspicious use of WriteProcessMemory 36 IoCs

description	pid	Process	procid_target
PID 5244 wrote to memory of 5796	5244	msedge.exe	88
PID 5244 wrote to memory of 3204	5244	msedge.exe	89
PID 5244 wrote to memory of 2352	5244	msedge.exe	90
PID 5244 wrote to memory of 2352	5244	msedge.exe	90
PID 5244 wrote to memory of 2352	5244	msedge.exe	90
PID 5244 wrote to memory of 1984	5244	msedge.exe	91
PID 5244 wrote to memory of 1984	5244	msedge.exe	91
PID 5244 wrote to memory of 616	5244	msedge.exe	93
PID 5244 wrote to memory of 2540	5244	msedge.exe	94
PID 5244 wrote to memory of 616	5244	msedge.exe	93
PID 5244 wrote to memory of 616	5244	msedge.exe	93
PID 5244 wrote to memory of 2540	5244	msedge.exe	94
PID 5244 wrote to memory of 2540	5244	msedge.exe	94
PID 5244 wrote to memory of 5840	5244	msedge.exe	95
PID 5244 wrote to memory of 5840	5244	msedge.exe	95
PID 5244 wrote to memory of 5840	5244	msedge.exe	95
PID 5244 wrote to memory of 4108	5244	msedge.exe	96
PID 5244 wrote to memory of 4108	5244	msedge.exe	96
PID 5244 wrote to memory of 4108	5244	msedge.exe	96
PID 5244 wrote to memory of 5596	5244	msedge.exe	97
PID 5244 wrote to memory of 5596	5244	msedge.exe	97
PID 5244 wrote to memory of 5596	5244	msedge.exe	97
PID 5244 wrote to memory of 716	5244	msedge.exe	98
PID 5244 wrote to memory of 716	5244	msedge.exe	98
PID 5244 wrote to memory of 716	5244	msedge.exe	98
PID 5244 wrote to memory of 2576	5244	msedge.exe	100
PID 5244 wrote to memory of 2576	5244	msedge.exe	100
PID 5244 wrote to memory of 4024	5244	msedge.exe	101
PID 5244 wrote to memory of 4024	5244	msedge.exe	101
PID 5244 wrote to memory of 1808	5244	msedge.exe	103
PID 5244 wrote to memory of 2952	5244	msedge.exe	107
PID 5244 wrote to memory of 5036	5244	msedge.exe	108
PID 5244 wrote to memory of 1576	5244	msedge.exe	109
PID 5244 wrote to memory of 4344	5244	msedge.exe	110
PID 5244 wrote to memory of 4344	5244	msedge.exe	110
PID 5244 wrote to memory of 6140	5244	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\file.html
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2d8,0x7ff86c1bc188,0x7ff86c1bc194,0x7ff86c1bc1a0
  2⤵
  PID:5796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1904,i,14009485642019906480,7701558873318157537,524288 --field-trial-handle=2584,i,2120180595786957837,10913851617964055413,262144 --variations-seed-version --mojo-platform-channel-handle=2716 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1696,i,13370692836351240735,11623003915399174672,262144 --field-trial-handle=2584,i,2120180595786957837,10913851617964055413,262144 --variations-seed-version --mojo-platform-channel-handle=2580 /prefetch:2
  2⤵
  PID:2352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1404,i,13681597931211866266,8332229268198873522,524288 --field-trial-handle=2584,i,2120180595786957837,10913851617964055413,262144 --variations-seed-version --mojo-platform-channel-handle=2740 /prefetch:13
  2⤵
  PID:1984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3516,i,13965258558047965048,2749810615432236616,2097152 --field-trial-handle=2584,i,2120180595786957837,10913851617964055413,262144 --variations-seed-version --mojo-platform-channel-handle=3544 /prefetch:1
  2⤵
  PID:616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3512,i,6540578290921705038,17572851083019653542,2097152 --field-trial-handle=2584,i,2120180595786957837,10913851617964055413,262144 --variations-seed-version --mojo-platform-channel-handle=3552 /prefetch:1
  2⤵
  PID:2540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4184,i,12705940814342276676,1297396786733636497,2097152 --field-trial-handle=2584,i,2120180595786957837,10913851617964055413,262144 --variations-seed-version --mojo-platform-channel-handle=4664 /prefetch:1
  2⤵
  PID:5840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4196,i,15464154261751301920,5844904598608288181,2097152 --field-trial-handle=2584,i,2120180595786957837,10913851617964055413,262144 --variations-seed-version --mojo-platform-channel-handle=4696 /prefetch:9
  2⤵
  PID:4108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3788,i,15334997582695562086,572310006540342977,2097152 --field-trial-handle=2584,i,2120180595786957837,10913851617964055413,262144 --variations-seed-version --mojo-platform-channel-handle=5272 /prefetch:1
  2⤵
  PID:5596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=4764,i,8475631872331397389,1647049772241968192,2097152 --field-trial-handle=2584,i,2120180595786957837,10913851617964055413,262144 --variations-seed-version --mojo-platform-channel-handle=5412 /prefetch:1
  2⤵
  PID:716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5620,i,9540006266882955303,1064691699132060139,524288 --field-trial-handle=2584,i,2120180595786957837,10913851617964055413,262144 --variations-seed-version --mojo-platform-channel-handle=5692 /prefetch:14
  2⤵
  PID:2576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5624,i,10511128826451004091,18320623976561704947,524288 --field-trial-handle=2584,i,2120180595786957837,10913851617964055413,262144 --variations-seed-version --mojo-platform-channel-handle=5708 /prefetch:14
  2⤵
  PID:4024
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6404,i,10560195513806674902,15438335267057394828,524288 --field-trial-handle=2584,i,2120180595786957837,10913851617964055413,262144 --variations-seed-version --mojo-platform-channel-handle=6392 /prefetch:14
  2⤵
  PID:2052
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6404,i,10560195513806674902,15438335267057394828,524288 --field-trial-handle=2584,i,2120180595786957837,10913851617964055413,262144 --variations-seed-version --mojo-platform-channel-handle=6392 /prefetch:14
  2⤵
  PID:1808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4788,i,1359178879501990431,9452608373486554529,524288 --field-trial-handle=2584,i,2120180595786957837,10913851617964055413,262144 --variations-seed-version --mojo-platform-channel-handle=4680 /prefetch:14
  2⤵
  PID:2952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4992,i,10538436711370629025,6096418922304826027,524288 --field-trial-handle=2584,i,2120180595786957837,10913851617964055413,262144 --variations-seed-version --mojo-platform-channel-handle=6940 /prefetch:14
  2⤵
  PID:5036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5068,i,14961708238955586125,15679370488535695816,524288 --field-trial-handle=2584,i,2120180595786957837,10913851617964055413,262144 --variations-seed-version --mojo-platform-channel-handle=6664 /prefetch:14
  2⤵
  PID:1576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6948,i,10196993974591326463,4074124524807495658,524288 --field-trial-handle=2584,i,2120180595786957837,10913851617964055413,262144 --variations-seed-version --mojo-platform-channel-handle=4068 /prefetch:14
  2⤵
  PID:4344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6092,i,10766368674628078889,10201089484526484622,262144 --field-trial-handle=2584,i,2120180595786957837,10913851617964055413,262144 --variations-seed-version --mojo-platform-channel-handle=6716 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:6140

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5032

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5928

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a54d1be6da491be16ecc22dac3ad8cfbe4eabb017451e32c26f2904977fde58e
MD5 9daa45ac0383b3b978ad8da2d5000b62
SHA1 f52083ce5d095366a6fa9406b8b49000fcb53bc0
SHA512 ac55ccfd63460f712cd2ffb1ff656349475683b1ec07abd198254ac469a634f7129cf280de184340d8314fe2b8f7e955f7a112deb1511d52de882ae801a7c1af
TLSH
T17DD09B9D6686AE54DD80343134A1E34B9A18F522642C464880177054CCA464246571FF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3f51b0e24e52d8511f72e348c132f84b6b8edb54027a5c8c4fbe2a976322a690
MD5 e32f775acc5ed08adf9d5f6678c2bc4d
SHA1 bd5f4d60c6c8f97a1fed276a8c02ca345e30bb2a
SHA512 2b2fef021516ee5e90b192840780767fff5c147cfb2dfe5b900a8b298d542111707f16c28e265447d090c61e8e091b3529eb29ff376abe03cd34315206805eba
TLSH
T1DAD09B996686AD54DD80343534A1E34B9A18F522102C46488117B064CCA464246561FF
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 57aa79a6aa8eb7633a32f243c250ae7fc1a07a9d18dfde5428608fcf970d3d2f
MD5 2fb7527a577ab32285810c21129d2e79
SHA1 564af49145a103b3f98759b9ca1f4abc482951b7
SHA512 7684c46943577f9141b0794fee88271ddc8589eb803a126466752e4b36129a28719b5aaffce3ccca85201d96d2fc2651889f6e0c8d7d5d4100c4848ac1ae6151
TLSH
T10C610A9C07A67592EF3139F740D390DD3774645B41C7EE0298B2A274CC3A74636C5A71
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59d23a.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59d23a.TMP
Size 3KB
SHA256 140f1a2b740a678b2e390e89e96fb701230542d1dc3affb3433a44bf020fa5ab
MD5 9e7c96c6263dccb593c9d2e39b489580
SHA1 ab1c234af69f5e08b267222059b613d469860b7b
SHA512 20a7a081d1ce475d77003484af0c446430acae0d9098c98d373f8e9eb83847405a6de943cc8fd2b781647c7f907f9ea964c25d117d18e1a8e42e674e715ead62
TLSH
T19561099C07A67592EF313AF780E390DE3764645B41C7EE0298B2A274C83A70636C5A71
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 7KB
SHA256 bc02d5225755a42f00e17d37a55c94ad18d9c2d117bf932e88ce960624d4d417
MD5 ecbff2fe6b69ddaad8da839b9c33e8e3
SHA1 493a1858527fc240eb2e41233691a502fe4cc53f
SHA512 33156def579c60c6dd449fd307401ac99a33f18eecf2d5cb0db3024125a9aa6b0a2e3f2f2f4049195a947360a0dc352969ff0b9281792a1f424c210924f69a5a
SSDEEP 192:DXZ9/HsOeN7Nch8fikV1ZmZIuZPChQAZId7NcbKCAkj6PGxERl:DXZ9/HsOeN7NchQikV1ZmZIuZPChQAZq
TLSH
T121E199BBC3E4477E981152F0AB256E1ACD2D155B432C3C5689F4AE0F63E24B0E10269F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 83b994c55e6c6944cf734875a087fdfe7c6cd1ab7f7d0f6a5af698d0a69a4e82
MD5 e38cede00393afac1e43611169229310
SHA1 8d961e3b614881f12dd7cf058894d45568e02c6d
SHA512 99d2c5c2e8c389dedebe94a55d7cb67ea36c19c23b675d9b87a872dcee7226fa86f698dbd520683194bad29c32d517d02e9390b33c8f2cdcc7c887541d823bf0
SSDEEP 192:sxR8RgyM/jK1Ml8wbH/fIs0ROe3mY8x6zoA8peo/g6+WNIYDuUGcIgDxJ:sxR8WlH/fIs0so8x3n/5I+3
TLSH
T1CA62C815AA24997BDCCBD209FA517F53D6F81573A2941E48AAFCCA0C01E76ED2213C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 17b2b11dfc12a1d4aa38e48620293a649f633a3928d4fadeb8c0d679255def66
MD5 afacf17b5796472e01aee3c78f547fc9
SHA1 af53e62cfe5c79e4ff350354a20241952ccb10c5
SHA512 e5b4f6a1e3c466a2952c7fee4ee100055b5cdf7fa5f140d4082066c07efa3b4e88724ee3c952e880c5f9084465803c75b5ab4fe1189f33b938d111d463b1f62c
SSDEEP 192:sxRfRgyM/jK1Ml8wbH/fIsZRKe3mY8x6zoA8p4o/g6+WNIYDQUGcIgIJ:sxRfulH/fIsZoo8x3l/5ICs
TLSH
T16E52B7156A24993BCCCBD209FA557F53D6F81573A2905E48AAFCCA0C01E7AED2213C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 89c1ec4f3121c1fda35f10416d0583052f9addcbae1e9b773587ab14c8e4e644
MD5 de2fd434f46172a9302176b66157bacf
SHA1 a9a9c9f63ac2b9c349af051d19ddb674a05bfd8b
SHA512 d6632238bc1598ffb79e03896bbec82a9c8533bd3b4ecb682ddced871d7596edadac1d964f1c83d74fd77b64b4d1ef1f554d7e70bdc46eca934b58f695ac5934
SSDEEP 192:sxR8RgyM/jK1Ml8UQSbH/fIs0ROe3mY8x6zoA8peo/g6+WNIYDuUGcIgDxJ:sxR8WqUH/fIs0so8x3n/5I+3
TLSH
T17962C815AA24997BDCCBD219FA517F53D6F81573A2941E08AAFCCA0C01E76ED2213C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 8b8ceab51bcb3982d89f72d6ddbe8b313f49b994f2d817911256a90df78a58ff
MD5 a87b3aa780452f40ba6db057c890cf55
SHA1 94a56e2d607ac9df4abb4335c8c2cf2c0e533808
SHA512 51d45168a9de3b6e4e1aedeb7291eaa52e884564e3fdc99c92fb431825dff78cd0143ab03caa4766d570dce6d4b8b54d04fd59484cdebd21c3c7919c74d8ef26
SSDEEP 192:sxR8RgyM/jK1Ml8wbH/fIs0RKe3mY8x6zoA8p4o/g6+WNIYDQUGcIgDPJ:sxR8ulH/fIs0oo8x3l/5ICt
TLSH
T11652B715AA34997B8CCBD219FA557F53D6F81573A2901E48AAFCCA0C01E76ED2213C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 a7835da320a23d7b80ddc8379709a86aa514276669a53868924421f2dd3b8688
MD5 9f2469cb5937dc2c1666c6497e932fb0
SHA1 09c74c6dc26ab6d758dea14264b21698ae6fb00a
SHA512 e8982308b6eb9988170ae94b3864aad4e8aa18725d9fba6132184d0a3e18156f93b1e1bf09ddf0fdf18faa3c23da9c459da9e221cfecccc5e7e5dd78dd8b25af
SSDEEP 768:f+4+IDWgb/fPI8F1+UoAYDCx9Tuqh0VfUC9xbog/OVOIn2lro7nU:f+4+IDWgb/fPIu1jaPw2e7nU
TLSH
T1EFC21C2B640CC77E4F844A9DEC29AE966DD801CB9B588D5447FA890C03CB7EB911B4DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

8851fb1c-f846-435e-b274-f4f30dbca43d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\8851fb1c-f846-435e-b274-f4f30dbca43d.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 ff26767945c9511ac8a0cfdb247d38952d01b9eb127e05a0fe6d9c507a833411
MD5 3f21982c0e8d4ee0e81a1cf978a2887b
SHA1 b1e336f86ebc73708441de83792b5eebf4879465
SHA512 af5778a5c7d1257ae76997695d2ecbbbe56ac852b26b7af7ae3dc47a8be3dac919389f62edc963f099dc6384cd8c089d7e7a1032ae8a233a8469556663ddefd8
SSDEEP 768:Vj+9F3C1lwifgcbaHuVboPzkZLNx9OFvMj4:g9F3CwTHOawZLNqRv
TLSH
T1A5F2BF72A8729C27DDA7C289B2463A47AFF01123C6C41B888DDC6F0D45DB5BD070BE26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 a952def44c5d2bcfce7235b0f68c87c36453cd3101543c7cfc3e814b60999efd
MD5 a81f9c06ce4a11fec40145757cbb8312
SHA1 ec5408560ef40698647e73b261c496c6d391eb15
SHA512 74f7fa0ed39a0d91a2481a8b3d502a9cbcefa63f64d316d6e82d8738d95f2aa71168622ba9fd28e609754ac5957a6bcae83da6a47f07e9b92561e0acebc6e601
SSDEEP 768:TF1j+9j3vwgp8lwifgcTaHuVboPzkZLNx9OFvMj4:C9j3LhZHOawZLNqRv
TLSH
T14103AF73A865CD2BDDAB8BC9B24A3646EFF01163C5C41A989ADC6F0D41DB5EC030BD25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 4e4ded493a4ddc68fbdbe00b2551a9256da74568faa4ee7497c8c4c38ee36006
MD5 4e495ca8979c92ffc7c1001bf7baf773
SHA1 a8730b65606a729050e476cedc09c3032215665e
SHA512 1c996c7467ad3d11c362f916d4a762fd2c23b5059759238b8f17338cea3489881982783db14771088ca3c36d7bb59c841ba51d1e22be362c0eaf4d8e8eae67a2
SSDEEP 768:0rv+4UNbdC3kxQwifgJaHuVboPzkZLNx9OZaUik4K:0bsbs3kFgHOawZLNqIUVr
TLSH
T1B403BF35A8749837DDF7C289B28B7A477FF4111385C40B8889EC2B4D46AB4AD170BE27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download