cb090bb43791f56f902edf7798e832134e52668fef57e2d289b150b3e166a4cd

Analysis

max time kernel
148s
max time network
152s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/07/2026, 21:31

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
.html
Size 516B
Sample260730-1c85hazzhs
SHA256 cb090bb43791f56f902edf7798e832134e52668fef57e2d289b150b3e166a4cd
MD5 ad60e0918ad67cc49b228faa8b499267
SHA1 41e315e58fd587edd24364445e45ccfc967c7f1f
SHA512 b7921e26472540e6cd799ae2913b6f78f6e121912abdcbd9b13be45ff5c8829c97b6453d927f5fd9e88dae56852fb6cb558c8ee84b2d12989a590da4c4973394
TLSH
T122F02BE22C581C18477499B90CA45C25C8869313071DD3D3F1FCAA1B1F607B8AAA26CC
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
696	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134299206953724184"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3797332335-34111092-3597280141-1000\{B6E087C5-A812-4838-8CF5-26793218C13E}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3192	msedge.exe
3192	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe

Suspicious use of WriteProcessMemory 36 IoCs

description	pid	Process	procid_target
PID 2552 wrote to memory of 1272	2552	msedge.exe	88
PID 2552 wrote to memory of 5108	2552	msedge.exe	90
PID 2552 wrote to memory of 696	2552	msedge.exe	91
PID 2552 wrote to memory of 5108	2552	msedge.exe	90
PID 2552 wrote to memory of 5108	2552	msedge.exe	90
PID 2552 wrote to memory of 4120	2552	msedge.exe	92
PID 2552 wrote to memory of 4120	2552	msedge.exe	92
PID 2552 wrote to memory of 5000	2552	msedge.exe	94
PID 2552 wrote to memory of 5000	2552	msedge.exe	94
PID 2552 wrote to memory of 5000	2552	msedge.exe	94
PID 2552 wrote to memory of 56	2552	msedge.exe	95
PID 2552 wrote to memory of 56	2552	msedge.exe	95
PID 2552 wrote to memory of 56	2552	msedge.exe	95
PID 2552 wrote to memory of 3444	2552	msedge.exe	96
PID 2552 wrote to memory of 3444	2552	msedge.exe	96
PID 2552 wrote to memory of 3444	2552	msedge.exe	96
PID 2552 wrote to memory of 4808	2552	msedge.exe	97
PID 2552 wrote to memory of 4808	2552	msedge.exe	97
PID 2552 wrote to memory of 4808	2552	msedge.exe	97
PID 2552 wrote to memory of 1768	2552	msedge.exe	98
PID 2552 wrote to memory of 1768	2552	msedge.exe	98
PID 2552 wrote to memory of 1768	2552	msedge.exe	98
PID 2552 wrote to memory of 2632	2552	msedge.exe	100
PID 2552 wrote to memory of 2632	2552	msedge.exe	100
PID 2552 wrote to memory of 2632	2552	msedge.exe	100
PID 2552 wrote to memory of 3208	2552	msedge.exe	101
PID 2552 wrote to memory of 1436	2552	msedge.exe	102
PID 2552 wrote to memory of 3208	2552	msedge.exe	101
PID 2552 wrote to memory of 1436	2552	msedge.exe	102
PID 2552 wrote to memory of 5800	2552	msedge.exe	104
PID 2552 wrote to memory of 1360	2552	msedge.exe	108
PID 2552 wrote to memory of 988	2552	msedge.exe	109
PID 2552 wrote to memory of 1932	2552	msedge.exe	110
PID 2552 wrote to memory of 5624	2552	msedge.exe	111
PID 2552 wrote to memory of 5624	2552	msedge.exe	111
PID 2552 wrote to memory of 3192	2552	msedge.exe	113

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x27c,0x7ffb6b04c188,0x7ffb6b04c194,0x7ffb6b04c1a0
  2⤵
  PID:1272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1528,i,10354228531701426746,1096356760823442266,262144 --field-trial-handle=2524,i,10997009629637625351,2242501053370774264,262144 --variations-seed-version --mojo-platform-channel-handle=2520 /prefetch:2
  2⤵
  PID:5108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1844,i,11397789868402483924,3397610723408958365,524288 --field-trial-handle=2524,i,10997009629637625351,2242501053370774264,262144 --variations-seed-version --mojo-platform-channel-handle=2552 /prefetch:11
  2⤵
  - System Time Discovery
  PID:696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2232,i,3815889798225388377,6249213205864266237,524288 --field-trial-handle=2524,i,10997009629637625351,2242501053370774264,262144 --variations-seed-version --mojo-platform-channel-handle=3080 /prefetch:13
  2⤵
  PID:4120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3624,i,2025940175511838400,5015988927676241389,2097152 --field-trial-handle=2524,i,10997009629637625351,2242501053370774264,262144 --variations-seed-version --mojo-platform-channel-handle=3596 /prefetch:1
  2⤵
  PID:5000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3628,i,95030987014896604,8304944914149141834,2097152 --field-trial-handle=2524,i,10997009629637625351,2242501053370774264,262144 --variations-seed-version --mojo-platform-channel-handle=3728 /prefetch:1
  2⤵
  PID:56
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4312,i,2832497730590579912,1242006913343762051,2097152 --field-trial-handle=2524,i,10997009629637625351,2242501053370774264,262144 --variations-seed-version --mojo-platform-channel-handle=4964 /prefetch:1
  2⤵
  PID:3444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4328,i,5273585162074982496,17108792329088141202,2097152 --field-trial-handle=2524,i,10997009629637625351,2242501053370774264,262144 --variations-seed-version --mojo-platform-channel-handle=4968 /prefetch:9
  2⤵
  PID:4808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5224,i,10897986836560037830,13492200321572394389,2097152 --field-trial-handle=2524,i,10997009629637625351,2242501053370774264,262144 --variations-seed-version --mojo-platform-channel-handle=5348 /prefetch:1
  2⤵
  PID:1768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=5604,i,10804668457857782428,724199578739436011,2097152 --field-trial-handle=2524,i,10997009629637625351,2242501053370774264,262144 --variations-seed-version --mojo-platform-channel-handle=3808 /prefetch:1
  2⤵
  PID:2632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4976,i,2270153861394604464,6439080750548209854,524288 --field-trial-handle=2524,i,10997009629637625351,2242501053370774264,262144 --variations-seed-version --mojo-platform-channel-handle=5508 /prefetch:14
  2⤵
  PID:3208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4892,i,12199179768201782623,16663337510440925797,524288 --field-trial-handle=2524,i,10997009629637625351,2242501053370774264,262144 --variations-seed-version --mojo-platform-channel-handle=5100 /prefetch:14
  2⤵
  PID:1436
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6160,i,8754957071159179664,1878564512215946044,524288 --field-trial-handle=2524,i,10997009629637625351,2242501053370774264,262144 --variations-seed-version --mojo-platform-channel-handle=6140 /prefetch:14
  2⤵
  PID:5184
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6160,i,8754957071159179664,1878564512215946044,524288 --field-trial-handle=2524,i,10997009629637625351,2242501053370774264,262144 --variations-seed-version --mojo-platform-channel-handle=6140 /prefetch:14
  2⤵
  PID:5800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5540,i,13232170550993938810,11741181471685864842,524288 --field-trial-handle=2524,i,10997009629637625351,2242501053370774264,262144 --variations-seed-version --mojo-platform-channel-handle=6236 /prefetch:14
  2⤵
  PID:1360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4988,i,18275340749610422163,17492666444001169836,524288 --field-trial-handle=2524,i,10997009629637625351,2242501053370774264,262144 --variations-seed-version --mojo-platform-channel-handle=5212 /prefetch:14
  2⤵
  PID:988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4324,i,9168717053659853184,8579162205792446470,524288 --field-trial-handle=2524,i,10997009629637625351,2242501053370774264,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:14
  2⤵
  PID:1932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4968,i,9527028839155482806,8212059509809822453,524288 --field-trial-handle=2524,i,10997009629637625351,2242501053370774264,262144 --variations-seed-version --mojo-platform-channel-handle=4964 /prefetch:14
  2⤵
  PID:5624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=812,i,9923599573629163626,1661883201118450405,262144 --field-trial-handle=2524,i,10997009629637625351,2242501053370774264,262144 --variations-seed-version --mojo-platform-channel-handle=5856 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3192

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4352

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5476

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e413e02b9e80ee8d76d52c1043fc32251e2d7634d4b2fbd970df9ace9d91831a
MD5 22959b3a06a842ac30237dd57e8a3801
SHA1 0b7c28071a592034aa2607038000f085c7bb6362
SHA512 644add9ab912ad7fdfc55bc7a1b84482c75cc9bc69a59d169bae63a0400619d999846ebbadb0ef2bd6d35c2bd08a5f07053b600874dd5dfcbda7e8f3076131fe
TLSH
T1A5D02BE476408A0CC980203335F6524092018910D801D1480040B325CC845C1257F0DF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8aaa68aad07ba45abe53bd513aa5f7e7b21bd1b29db6e1d5c1e0a79a5f4eb890
MD5 74012bbce5fada7634c1da1b567562b3
SHA1 09db27f38f27e35986cfd407b57f6f83c8fc59f8
SHA512 c1a6a98f972793c84274c29552107bfe07b775c7c8121e5fdf137ebf9a7cc3f4eb43fe9eadfc842e7b92ca7281bbcea3d660bdd8fc9adc56add068510c41e48d
TLSH
T1FBD02BE07640890CC980203335F75240920189108401D1480040F335CC845C1257E0CF
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 c61a95ff03afd3e554b1504f7ce83286b19864050c4228fbf639dfcd84f9996f
MD5 2c2d7fd47f95fe5605c5e321e00bac50
SHA1 fa3f6f8ae08540a65d7c42039ab4d71ca0d376ee
SHA512 48d5e0ee952cec60b0f4c73e73dd283a6ffb82a3c38358cc720d056308ee1b61e889e2cef4add0b52b9cfcfc747c026f2a81819e814c641662d3fa04aabd203a
TLSH
T16871B81057220DC2E7BE0971ABE1685F3DFA649E0607BE86C0C07E34C4E6F102DD5093
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe596807.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe596807.TMP
Size 2KB
SHA256 65d73d9ec4f100722b5d331f30aef2e68902f3de64c70db0b5b2a78a3608c533
MD5 fc176bb99019e495958004c36445a926
SHA1 fde4328fda5883c81005d0aa816b00168a381b33
SHA512 2ef07d02f89ed5bf5b12d61d0f9598035a23eab02d6a3775d7500fcd61684664782c51e23141eb5899178c8ddea488033206a3f83f23cecac6ea6cba4b195b80
TLSH
T15E517561536209C2E7BE0EB2F7E1544B7EF5A4DA0A4BBE03C0D06E7488E6F051DD90A3
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 3e511bd96c5580c6d39d1c8c046d53d0152011ca283ecbef7c039d6cd33fdffe
MD5 b6652cce6960dd3f0cf627dae89d2e7d
SHA1 2e9b5d76fd5796f30bedc5019ada1facd168427c
SHA512 623c01b3624eb410b6aa0995ba62ae18ccdb9560e4b27019da1cfa67c25a5d565d37c5c639dd98a0d9b5af733e0f865fc62280d7f7c93168b4028d1d18d72742
TLSH
T19561AEF7C3F8956D8A1196F0EB186E1FCE5D0515835C7C2AC5D4AE1B93E2471E101A4F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 72cd0dd905ae9fad396061b08beebc7b03f2a7ca1faa3248fa16681854dbf586
MD5 8c7b8ddbc50446c766de6aeff4dadb08
SHA1 ac62a939967983c8f093d95fdb28bfc56fff3df2
SHA512 edb27be3057a1bd071160e859757eb277b199a0b9450ae4ba2a31b00f4d8990df1187f7a319aece3c530cfa52c3575ca850f5dcb5feff8a8989167c2584b6792
SSDEEP 192:sxRVRvbV/fpsnXprQ5Q7zoA8p4QS/g6+WNIYn8mhMDGlIgD8J:sxRVZV/fpsnXko/5ITMD8
TLSH
T1C842A856A9249D3B9CCBD219BB55BF53D6F95032A1D02E18A6FC8B0C04EB6DD230780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 b050aaada32cdbddcfee77ebcf22f7203e814501a4b1718e51b6707cd21f83a3
MD5 c0c3f79568e026dabbcd5b709d99249f
SHA1 e581a6af78d71f5b796181d3e564e9528b678622
SHA512 1f6f7dd18e85fc370eb5ab11f310f0729ce2c45e7c4462dccb3aa2376d85077ccb7836c21ff71699195b95dce8b49b7f1fb3ee66d2791fd4f50fc681ac14f81e
SSDEEP 192:sxRVRvbV/fpsn+prQ5Q7zoA8p4QS/g6+WNIYn83hMDGlIgDmJ:sxRVZV/fpsn+ko/5ITRD+
TLSH
T16632A8566924AD3B9CCBD219BB55BF53D6F91032A1D02E58A6FC860C04EA6DD230780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 d4661a54edf815abfc42e1e39ad637b34c1580bd17b9db21f134a559a3cf08ea
MD5 a7ecf4831c2b07ec4c24a658e3d6a832
SHA1 8bbe7afa70bdc7a7225e3c49baaab04cade28274
SHA512 ac1619ef2d3764137c2e35dde57c6c197ac7a449dd7389ffaad41080a4d8fb70338a88c72203ad2a433de47450faabf0bc4f282f04d961f05301330640de7c9c
SSDEEP 192:sxRKRvbV/fpsP+prQ5Q7zoA8p4QS/g6+WNIYn83hMDGlIgIJ:sxRKZV/fpsP+ko/5ITRDs
TLSH
T13F32A8566928AC3B9CCBD25DFB55BF53D6F91032A1D06E58A6FC860C04EB6DD230780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 f21ae4cb8b9620ffc7dbab70983d063fe7501df184d6cf05cecfc39e4e48c030
MD5 739e877e279feacf90c7f51eb7a07054
SHA1 1bddb44ef52aa34db2419df15d9324b038c253d2
SHA512 2ef3fc2384d6fa5759d3e0c0e684789372f2858c208dceaea1aa10e8521c9a297bc4d1021d467c85fe1b4c32548d0c5fa76ee2cc3906d36057b62a42c874dff9
SSDEEP 384:wum8dzAfCtgoSFf6MKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVU494oRP2rohMW:wb8dz6Wgouf6M8F1+UoAYDCx9Tuqh0Vm
TLSH
T185B2DB3B604DCB7E5F800A9DEC19AFDB7D5802C79A988D4447FE990C02C77EA511A4DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 4dcf3fd5c423e026a95ef92088c9957831735cc10c75e3edb01e1ae73cbfa7db
MD5 974a490ab2f8088a45b4d39a7b43f266
SHA1 da32f28d362a93a7ecf6337a7d6b010aa3563cee
SHA512 d35593036d73a30118a98c8da75fee6ba5b3e9f41474806a0217e306036648e54bfa0d3d141f6ab8c60b30125efdbe6c3ee371b584ccefc0267ddc9a504b5983
SSDEEP 768:/k3X1YZtDZIO0BaKxNzc4ReyIsP6G+wEV:/k3FaUaotc44bsCG+wQ
TLSH
T1B4F2BF76EC359D63ACFA9686F64735527DF88017D2CC29A4C6DE9B0C064B2EC035B823
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 aec2cc5b703e64330f846f9b19786d7f60a4672069c5eb5887bd69ab58456e80
MD5 d2c6c52685cde1f9120e8755d73128e3
SHA1 7e86bb3e6109021b571b0ceb74d4c667e7417290
SHA512 8c03117fd33c709b8a4a59aeb496cbf621c44824c529c09f226d97988f3fc29140f0cfa92a3aa2ce8bf3a0b2552d8c12350b479a38ff285dab6db65e3f5ed7ec
SSDEEP 768:Jk381IZtDZIO0BaKLNzc4ReyIsP6G+wEV:Jk3IKUa8tc44bsCG+wQ
TLSH
T165F2BF76EC355D63ACF99686F54735527DF88017D2C829A4C6DE5B0C054B2EC135B823
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 f09c04d03d05bbf0ee42ed20cc9ba7ed636bbfb8aee34becc0275a1023529369
MD5 2a407a3ba21974b7aabd693ff6dc40fc
SHA1 653e0aa257ad9b9bca8529a3f48dc9226808b5f6
SHA512 56c5a79b29393cf18aee7d1a7337230e773400e296641c1bb547d9d333ef5a4e0007cc11308ee5abc9e70db17a2720c52eca1572bc5047b3c6792e5b88609c6a
SSDEEP 768:OA381IZtDZIO0BaKPNzc4ReyIsP6G+wEV:OA3IKUastc44bsCG+wQ
TLSH
T101F2BF76EC359D63ACFA9686F64736527DF88017C2CC6994C6DE5B0C0A4B2EC135B823
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 850d1c5ca8fe90bfeeb4528926b487c1199a84d88b58e74aca86011ce371876c
MD5 d6a4946c0cf0bba69fdbc9a8ba0b8706
SHA1 f1b914b59d46b411cac91fbc9020d72b6083f2f6
SHA512 f7200dc28390cda83663a45ca00bf5c0f64969ce357383267ff04ba0f3540147cf8c0e8d82a546ddaa303ebf48012fde813031a907e36a6f027a6ae724f0fda8
SSDEEP 768:6rv+4UNbds3eMTDZIO0BaHNzc4ReyIsX0eVH1S5D:6bsbS31WaHtc44bsEEH1Y
TLSH
T19903CF32E8788977ACF6A686B54B76533EF89127C2D81A94C5DE1F0C464B1ED130B923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cd211de2-ac99-4044-a530-125a72db67d8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\cd211de2-ac99-4044-a530-125a72db67d8.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download