cb090bb43791f56f902edf7798e832134e52668fef57e2d289b150b3e166a4cd

Analysis

max time kernel
148s
max time network
151s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/07/2026, 21:29

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
.html
Size 516B
Sample260730-1b446azzes
SHA256 cb090bb43791f56f902edf7798e832134e52668fef57e2d289b150b3e166a4cd
MD5 ad60e0918ad67cc49b228faa8b499267
SHA1 41e315e58fd587edd24364445e45ccfc967c7f1f
SHA512 b7921e26472540e6cd799ae2913b6f78f6e121912abdcbd9b13be45ff5c8829c97b6453d927f5fd9e88dae56852fb6cb558c8ee84b2d12989a590da4c4973394
TLSH
T122F02BE22C581C18477499B90CA45C25C8869313071DD3D3F1FCAA1B1F607B8AAA26CC
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5852	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134299205765385906"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1738198120-2966725515-3980530802-1000\{EA8B60C0-F11B-4022-93B6-6C941BE09354}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3464	msedge.exe
3464	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe

Suspicious use of WriteProcessMemory 36 IoCs

description	pid	Process	procid_target
PID 2128 wrote to memory of 1004	2128	msedge.exe	88
PID 2128 wrote to memory of 4340	2128	msedge.exe	89
PID 2128 wrote to memory of 5852	2128	msedge.exe	90
PID 2128 wrote to memory of 4340	2128	msedge.exe	89
PID 2128 wrote to memory of 4340	2128	msedge.exe	89
PID 2128 wrote to memory of 1808	2128	msedge.exe	91
PID 2128 wrote to memory of 1808	2128	msedge.exe	91
PID 2128 wrote to memory of 996	2128	msedge.exe	93
PID 2128 wrote to memory of 3240	2128	msedge.exe	92
PID 2128 wrote to memory of 996	2128	msedge.exe	93
PID 2128 wrote to memory of 996	2128	msedge.exe	93
PID 2128 wrote to memory of 3240	2128	msedge.exe	92
PID 2128 wrote to memory of 3240	2128	msedge.exe	92
PID 2128 wrote to memory of 3624	2128	msedge.exe	95
PID 2128 wrote to memory of 3624	2128	msedge.exe	95
PID 2128 wrote to memory of 3624	2128	msedge.exe	95
PID 2128 wrote to memory of 1412	2128	msedge.exe	96
PID 2128 wrote to memory of 1412	2128	msedge.exe	96
PID 2128 wrote to memory of 1412	2128	msedge.exe	96
PID 2128 wrote to memory of 2772	2128	msedge.exe	97
PID 2128 wrote to memory of 2772	2128	msedge.exe	97
PID 2128 wrote to memory of 2772	2128	msedge.exe	97
PID 2128 wrote to memory of 5256	2128	msedge.exe	100
PID 2128 wrote to memory of 5256	2128	msedge.exe	100
PID 2128 wrote to memory of 5256	2128	msedge.exe	100
PID 2128 wrote to memory of 3284	2128	msedge.exe	101
PID 2128 wrote to memory of 5100	2128	msedge.exe	102
PID 2128 wrote to memory of 3284	2128	msedge.exe	101
PID 2128 wrote to memory of 5100	2128	msedge.exe	102
PID 2128 wrote to memory of 4840	2128	msedge.exe	104
PID 2128 wrote to memory of 4196	2128	msedge.exe	108
PID 2128 wrote to memory of 1460	2128	msedge.exe	109
PID 2128 wrote to memory of 3052	2128	msedge.exe	110
PID 2128 wrote to memory of 5496	2128	msedge.exe	111
PID 2128 wrote to memory of 5496	2128	msedge.exe	111
PID 2128 wrote to memory of 3464	2128	msedge.exe	113

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x22c,0x2c4,0x7ff9cfa8c188,0x7ff9cfa8c194,0x7ff9cfa8c1a0
  2⤵
  PID:1004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1524,i,8202748382973493905,14528027935720159515,262144 --field-trial-handle=2252,i,13081560092742986494,16954649637084233514,262144 --variations-seed-version --mojo-platform-channel-handle=1924 /prefetch:2
  2⤵
  PID:4340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1972,i,3178970583717699621,12484658899703252765,524288 --field-trial-handle=2252,i,13081560092742986494,16954649637084233514,262144 --variations-seed-version --mojo-platform-channel-handle=2284 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2416,i,13489124503871364365,3682323329594608067,524288 --field-trial-handle=2252,i,13081560092742986494,16954649637084233514,262144 --variations-seed-version --mojo-platform-channel-handle=2988 /prefetch:13
  2⤵
  PID:1808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3588,i,11420110595171380316,414396075108825202,2097152 --field-trial-handle=2252,i,13081560092742986494,16954649637084233514,262144 --variations-seed-version --mojo-platform-channel-handle=3632 /prefetch:1
  2⤵
  PID:3240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3600,i,1378960180651861238,15317282476030506217,2097152 --field-trial-handle=2252,i,13081560092742986494,16954649637084233514,262144 --variations-seed-version --mojo-platform-channel-handle=3652 /prefetch:1
  2⤵
  PID:996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4340,i,15496442744756513578,14162617496218979986,2097152 --field-trial-handle=2252,i,13081560092742986494,16954649637084233514,262144 --variations-seed-version --mojo-platform-channel-handle=4644 /prefetch:9
  2⤵
  PID:3624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4328,i,13214621204055275055,17546355252797951477,2097152 --field-trial-handle=2252,i,13081560092742986494,16954649637084233514,262144 --variations-seed-version --mojo-platform-channel-handle=4504 /prefetch:1
  2⤵
  PID:1412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5316,i,10949014910566221392,9802203306286055434,2097152 --field-trial-handle=2252,i,13081560092742986494,16954649637084233514,262144 --variations-seed-version --mojo-platform-channel-handle=3672 /prefetch:1
  2⤵
  PID:2772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=5024,i,743112609955525686,11261121731714995895,2097152 --field-trial-handle=2252,i,13081560092742986494,16954649637084233514,262144 --variations-seed-version --mojo-platform-channel-handle=5548 /prefetch:1
  2⤵
  PID:5256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4520,i,3936054971291122647,13682849352212819935,524288 --field-trial-handle=2252,i,13081560092742986494,16954649637084233514,262144 --variations-seed-version --mojo-platform-channel-handle=3780 /prefetch:14
  2⤵
  PID:3284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4516,i,11676536625721011813,13940516838291147111,524288 --field-trial-handle=2252,i,13081560092742986494,16954649637084233514,262144 --variations-seed-version --mojo-platform-channel-handle=4692 /prefetch:14
  2⤵
  PID:5100
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6148,i,11506793586560366596,4855244649608031141,524288 --field-trial-handle=2252,i,13081560092742986494,16954649637084233514,262144 --variations-seed-version --mojo-platform-channel-handle=6168 /prefetch:14
  2⤵
  PID:4704
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6148,i,11506793586560366596,4855244649608031141,524288 --field-trial-handle=2252,i,13081560092742986494,16954649637084233514,262144 --variations-seed-version --mojo-platform-channel-handle=6168 /prefetch:14
  2⤵
  PID:4840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5104,i,8335289656170556067,10336367895648309670,524288 --field-trial-handle=2252,i,13081560092742986494,16954649637084233514,262144 --variations-seed-version --mojo-platform-channel-handle=5036 /prefetch:14
  2⤵
  PID:4196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5100,i,12185472065689460791,10536378669097901784,524288 --field-trial-handle=2252,i,13081560092742986494,16954649637084233514,262144 --variations-seed-version --mojo-platform-channel-handle=6552 /prefetch:14
  2⤵
  PID:1460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4984,i,17797587569807934594,12630905236180212586,524288 --field-trial-handle=2252,i,13081560092742986494,16954649637084233514,262144 --variations-seed-version --mojo-platform-channel-handle=6612 /prefetch:14
  2⤵
  PID:3052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5164,i,5589282324245349173,8566784907002415181,524288 --field-trial-handle=2252,i,13081560092742986494,16954649637084233514,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:14
  2⤵
  PID:5496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6556,i,5042274171921263128,9073518982903910805,262144 --field-trial-handle=2252,i,13081560092742986494,16954649637084233514,262144 --variations-seed-version --mojo-platform-channel-handle=816 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3464

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1648

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4332

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ac1b1f93ff87eb876027f4166d705375c0f5d3d22dcb03f6a66f6100e88dd10f
MD5 b99f03c5cfe71b03836f8b5fcf09425b
SHA1 8a5078499c0b5ea40183efb77f9c1028c196409c
SHA512 6b9feec4ead7bf05f67d0d480907e21a3b770d8d12dedd2b0d785904186eac7448583e61abacb23582948de55c8ea2043bfd6908efd7faecdd82cee91404cfe6
TLSH
T16DD02BE037909D18C440353163D0122091006C30880923090100A02C8D3E2C3054F0BE
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c95a47aec5edba88214fad580cb869417b6620a91d8ee97e2d0b7801d3372be5
MD5 aad5f2ca0dd16bb2ea6c7757ea569c50
SHA1 5228b0b132542be004ea1bb32f3748964d065af5
SHA512 9d59c0291d741bd9d6cf50c22972d4baef00e7c1a48d6a3311a6cc82c04ceeba6e2be9458334cb954878915cc9eb91a8fd8bc4a47c966d57a2a05d6ee8211640
TLSH
T1D4D09BE177A19D18C545353567D1522591416D31451927194241E13D9D7E2C3455F0AA
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 69abc8b144a6bacb1642a1aedaa5bb87f95318bda29711b6837b586a2ef23100
MD5 0de8a2864f1f9a829ad1c739988f8dfe
SHA1 c87089283b56af3dc782a321183d3814ac515cae
SHA512 7b1daee439151aade9d800e6562a399c6e18a953338f8148cca9066cfcf8e7d78d7be2ac92c3c52db631848bca9212a609fc597a65b0734ae64c60f5262893f6
TLSH
T17A716350C32219D1FF67F5B0B6D088A536FA515601FB2E426C681DF04049F66F9CC79B
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 6012d552c20b2e0b2fafa473942c25d96f8b1e2ebfd99d5a26e8d138c4912e5b
MD5 20e20922682a5df3d55c8362790fe2c4
SHA1 d086cd1ddd4fda52cd419a10d59038f95f6a815f
SHA512 5200c6209244b5170237305a1e95227817b7f46fc8e105f3d764882d0870d1ae59bbb55fc0248f79d80a6d02fa76b566cabb5453304506404a000f24b322b288
TLSH
T130816210D3251D81FF67F570B6D088A575FA565605FB2E816CA82EB00049FA2FACC39B
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5959bf.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5959bf.TMP
Size 3KB
SHA256 6d558a13a371236ca406dc8f13abc4cc933e4dd1d50435c98267181511c80425
MD5 7e6ac526c17e2946d7edb43b5663f864
SHA1 d6c3584f6dd4c3c8ebec20d623adc5177e10c210
SHA512 2e793f66a6ace13ccdd774962c3e54491eeb6588836601ddbd1d62f3fc647f6244dd263c246e04892f88dc680bc09a00951cf74d3e4261352f87f861b22efb1d
TLSH
T1F3613E10C32119D1FF67F570B6D1489931FA924A01F72E012CA82DF1400AF22FACC39B
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0076dba3-0717-4811-a3a9-0aee9b602459.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\0076dba3-0717-4811-a3a9-0aee9b602459.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 b16f6d4d22f24841236baf29c02922a6723ce628ea03000a84cca7e2795ff362
MD5 0cc9c91215f742967d36d85ee950fe82
SHA1 4451e31692daddf07fccb76d6d1e12fb4df99e78
SHA512 01531f2231f44004f6a46a8ce632f14fa59d9d8d1f4bd1bfad954d5c2e2362d69e408a511b51e1cbfadd0f813458f8162bcdf783882b41ebd159a8ceaa9f47f3
TLSH
T19B51CDF783F8952E8A1196F0EB186E1FCE5D0911836C7D2AC5D4AE2B93E3471E101A4F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 4a9cbc2756b3cad5275028fcf3853761992be4f881c44a121b9c48fc887a92d8
MD5 5f63980b114a20882e00fb5dafe79404
SHA1 5e616962b00287e8f8cb84785a8aa60ee013c73a
SHA512 cc24bd9571d676141b131d013ae2a94d956f8d33a6de172beec4d807e0a3b1b26197aa7a39c6b7ab4f30da4f8fcd2a2aa35624d6e4d4a1f2df24ee84e4325efe
SSDEEP 192:sxReRoba/fCsj5wGNzoA8p45t/g6+WNIYowTCYC+GCIgDzJ:sxRewa/fCsj5pAQ/5Iw2HIx
TLSH
T1AA42B716A928597B5CCBE61EBB55BF53D2F95032A1942E48B7FC870C04EB6DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 220772c8d701ace214f48f402f68abf899dee8c4ebf7f54ef0a37b0e2bda7436
MD5 533a38616ca82ae51aff3cee16634c5b
SHA1 1d5a0cd88e26311d4d1ecbb5ea5b4b1f040b2da7
SHA512 13fe2cf12cd575c95292488043d2e50b78cdd38f3e087aac6b18c944c609cc3d7f2b7d4f86cda199a2050397d1f43c289d0a63532f095e68362d5850c325525e
SSDEEP 192:sxRVRoba/fCsNjwGNzoA8p45t/g6+WNIYoXCYC+GCIgIJ:sxRVwa/fCsNjpAQ/5IyHIs
TLSH
T16232A7166928993B5CCBD61EBA65BF53D6F95032A1D42E48B7FC860C04EB6DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 82c80420a319fb495024e1aa92344b094b3dca0a516b11a84a460ba5453a9d62
MD5 83041ca71f7f0f504a33301c46bdddb9
SHA1 f80f57ad539505e2dd9bca85d59edd3180307f57
SHA512 1f9d30916322df0610ee7c2c2f9b8346fbbba51a91b028f173ce70ff2ebc25f87e61c2d1f5cc1e5ee963dcc79c3abce807cf1945f7f3bd1013bac1a9c96ee25e
SSDEEP 192:sxReRoba/fCsjjwGNzoA8p45t/g6+WNIYoXCYC+GCIgDdJ:sxRewa/fCsjjpAQ/5IyHIz
TLSH
T1D932A816A928997B4CCBD61EBB55BF53D6F95032A1D42E48B7FC860C04EB7DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 c6923787a0901f9b3e6c5b4885b577d8f9a3335bfe576d8aee9efb7cecd58175
MD5 d9d307054f840987aeb4fe5c9cfc253b
SHA1 e66da0217c3d864e8869259da0f8a7e1d51a1cd9
SHA512 bbd9376e8d86a88aba5edba302ed7d8ab907652df2e7a3e84a285233471488db91eda936e3334fb4352995d89079a83f51a004b6825b727ce582daf7097260af
SSDEEP 384:jzK6H0dfCtgsqFf02KhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVvf9uaRXYro98E:j26H0RWgs2f028F1+UoAYDCx9Tuqh0VQ
TLSH
T18EB2EB2B640DCBBE9F800A9DDC196FDB6D9802C797588D4047FE994C03C77FA911A4DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 42d1c6c7de2ba109e0aa16ae999badd900e3492e544178da8ec0db9c7ecf638d
MD5 0ef6abd00c88f9b551eef0c6a22666d1
SHA1 d163ffe7897ecb7331225e84a5a1bb6fbc8d2a14
SHA512 1f421f378c16ca021bbdd653e86dad1ed9cb3d4babad1d2411487d48c6f98eb2a31c99eb03e70ff75320bdfb219561ab44ebff0bdc87aaaf5d3e2049f0b50a38
SSDEEP 768:Nrv+4UNbdJ3eidP/TBOW+vsONXyer1IRCzni9OeVH1SK3:Nbsb33nR/SIqnBEH1R
TLSH
T11813BF36E4A89E334DE2A3D6B047B2437FB85017D6840B90DDDA2F4E0A9B59E130F917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 cf7bc1d4c791e779a20f7407502ad60850b22e639a99dd43d6912a18dd263732
MD5 45907587a4892cc38c829175df221cca
SHA1 e3f20279c0f1299f3efd0fe28dbd6d4b43786674
SHA512 6598e15721475d33a0431399bdc946c9f8eb29f0838c9ea1670ea6639f5f9629569cc39d75e3104aa0d91e43274cf618e433a4694c4b2cbbfb3ae5deb5f93bb4
SSDEEP 768:Arv+4UNbdJ3hiYP/TBOW+vRONXyer1IRCzni9OeVH1SK3:Absb33kwoSIqnBEH1R
TLSH
T16413BF36E4A89E334DE2A3D6B047B6437FB85017D6840B90DDDA1F4E0A9B59E130F917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 cfbd276d8a5f92f526baaf8e887134bb8d0361167c5586559ceaf4b97d71c66c
MD5 3ba1a94797b2efa5d050b12d00686707
SHA1 60acbae197b4ec93710c52582251f67f0b5ad06f
SHA512 e7db52071fa2099fbfaa66a318192c4c273b480d5b6a16d09e56ca5c4c9c13b4174a543b72b0783019deaa6b1eaef5e201da2d47071686aa03893c7a112ee93a
SSDEEP 768:Mrv+4UNbdK3hiYP/TBOW+vSONXyer1IRCzni9OeVH1SK3:MbsbY3kwrSIqnBEH1R
TLSH
T11713BF36E4A89E334CE2A3D6B046B2437FB85017D6840B90DDEA1F4E0ADB59E130F917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 60bb2d0e6ff99beca40b214411cb8e602adaf216c5b7188caea66b66f05a865b
MD5 838e68a5f3d21192e26cd01ba350a0df
SHA1 957510aaa3e0379a00ae5f4bfcf7f6ab714e28d5
SHA512 73d20552d87e26c6cb6a2801866de17e875ba48befcc67e2d73c3d493e6c455a5a1f6fc9da357f0a81e471b0e2ff02294d7aaf8d84aa6cd724afe574f7aef240
SSDEEP 768:Brv+4UNbdJ3eiYP/TBOW+vRONXyer1IRCzni9OeVH1SK3:Bbsb33nwoSIqnBEH1R
TLSH
T18213BF36E4A89E334DE2A396B047B6437FB85017D6840B90D9DA2F4E0A9B59E130F917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 32KB
SHA256 48dd710b7e48e58e808344306c8e1c8f53a4e801f425461b3fe1a7b8a539e0fd
MD5 eee78897ac366495d8cbeb546d74a6f5
SHA1 ae2e26a9d0ed489f465fc72fbc9017ff327f6fe4
SHA512 2048e13ca957eea0a86e85f98b786112a35ff0d6bb334b9466f290c1b9ef47b900975cf971fd24d7f8344b99c6b7e47ef95d6b302dd099ceec023e45db19603d
SSDEEP 384:KZcIR38N51D3bi6rFvquhf3RTpXOVc3uXp5X2Fj6GrYGgAN8SyrCZr1IR0VhMxAK:oR3UiYP/TBOW+vZONXyer1IRCzni9O4
TLSH
T16CE2BF35E8A49E374CE6A3C7B14673436FF89017E6C41B50A9ED6F0E0597A6E030F816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 80ffa287ae7be94e75f018676c3bf11d9687a26402c27c9f7b88629dd3a4fe43
MD5 9567c4967d2c51565e6987dc17ed31b3
SHA1 7a5712adaeba19e982beb2136c927dcc70596f47
SHA512 22c2f3d5a5de36003c32b2f60a35f55f023b0d8e995f3326525510b95431affc1703f48bd7d2091600dc323534b620917e6e68a1383179de95549d1a6d69c2de
SSDEEP 768:hrv+4UNbdz3WV/TBOW+pONXyer1IRCzniBTeVH1SK7:hbsbV3csSIqnIEH1l
TLSH
T16503CF36E4A89E334CE2A3D6B147B6037FB86057D6800790EDDE1F4E069B59E130B957
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download