cb090bb43791f56f902edf7798e832134e52668fef57e2d289b150b3e166a4cd

Analysis

max time kernel
149s
max time network
154s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/07/2026, 21:31

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
.html
Size 516B
Sample260730-1dfjksxepe
SHA256 cb090bb43791f56f902edf7798e832134e52668fef57e2d289b150b3e166a4cd
MD5 ad60e0918ad67cc49b228faa8b499267
SHA1 41e315e58fd587edd24364445e45ccfc967c7f1f
SHA512 b7921e26472540e6cd799ae2913b6f78f6e121912abdcbd9b13be45ff5c8829c97b6453d927f5fd9e88dae56852fb6cb558c8ee84b2d12989a590da4c4973394
TLSH
T122F02BE22C581C18477499B90CA45C25C8869313071DD3D3F1FCAA1B1F607B8AAA26CC
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4680	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134299207186844209"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3611646547-550105268-947503007-1000\{4D71F026-2961-42AB-BC04-D6A9D3C01C85}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4724	msedge.exe
4724	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe

Suspicious use of WriteProcessMemory 36 IoCs

description	pid	Process	procid_target
PID 4228 wrote to memory of 4256	4228	msedge.exe	89
PID 4228 wrote to memory of 1780	4228	msedge.exe	90
PID 4228 wrote to memory of 1780	4228	msedge.exe	90
PID 4228 wrote to memory of 1780	4228	msedge.exe	90
PID 4228 wrote to memory of 4680	4228	msedge.exe	91
PID 4228 wrote to memory of 424	4228	msedge.exe	92
PID 4228 wrote to memory of 424	4228	msedge.exe	92
PID 4228 wrote to memory of 4728	4228	msedge.exe	94
PID 4228 wrote to memory of 4728	4228	msedge.exe	94
PID 4228 wrote to memory of 4728	4228	msedge.exe	94
PID 4228 wrote to memory of 2664	4228	msedge.exe	95
PID 4228 wrote to memory of 2664	4228	msedge.exe	95
PID 4228 wrote to memory of 2664	4228	msedge.exe	95
PID 4228 wrote to memory of 6024	4228	msedge.exe	96
PID 4228 wrote to memory of 6024	4228	msedge.exe	96
PID 4228 wrote to memory of 6024	4228	msedge.exe	96
PID 4228 wrote to memory of 2912	4228	msedge.exe	97
PID 4228 wrote to memory of 2912	4228	msedge.exe	97
PID 4228 wrote to memory of 2912	4228	msedge.exe	97
PID 4228 wrote to memory of 2680	4228	msedge.exe	98
PID 4228 wrote to memory of 2680	4228	msedge.exe	98
PID 4228 wrote to memory of 2680	4228	msedge.exe	98
PID 4228 wrote to memory of 3252	4228	msedge.exe	100
PID 4228 wrote to memory of 3252	4228	msedge.exe	100
PID 4228 wrote to memory of 3252	4228	msedge.exe	100
PID 4228 wrote to memory of 4528	4228	msedge.exe	101
PID 4228 wrote to memory of 5600	4228	msedge.exe	102
PID 4228 wrote to memory of 4528	4228	msedge.exe	101
PID 4228 wrote to memory of 5600	4228	msedge.exe	102
PID 4228 wrote to memory of 2008	4228	msedge.exe	104
PID 4228 wrote to memory of 4188	4228	msedge.exe	108
PID 4228 wrote to memory of 6024	4228	msedge.exe	109
PID 4228 wrote to memory of 4540	4228	msedge.exe	110
PID 4228 wrote to memory of 5704	4228	msedge.exe	111
PID 4228 wrote to memory of 5704	4228	msedge.exe	111
PID 4228 wrote to memory of 4724	4228	msedge.exe	113

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffacc52c188,0x7ffacc52c194,0x7ffacc52c1a0
  2⤵
  PID:4256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1572,i,3442351354666268528,15776122235666086719,262144 --field-trial-handle=1888,i,12277816836128847224,7118408425649442326,262144 --variations-seed-version --mojo-platform-channel-handle=1884 /prefetch:2
  2⤵
  PID:1780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2088,i,15995244981331529897,3656744610668934809,524288 --field-trial-handle=1888,i,12277816836128847224,7118408425649442326,262144 --variations-seed-version --mojo-platform-channel-handle=2728 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2404,i,17904926913495418002,18071474896047785093,524288 --field-trial-handle=1888,i,12277816836128847224,7118408425649442326,262144 --variations-seed-version --mojo-platform-channel-handle=2732 /prefetch:13
  2⤵
  PID:424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3588,i,6121668992743637549,16187863468975160108,2097152 --field-trial-handle=1888,i,12277816836128847224,7118408425649442326,262144 --variations-seed-version --mojo-platform-channel-handle=3592 /prefetch:1
  2⤵
  PID:4728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3596,i,11486603284515742985,16482558976074237887,2097152 --field-trial-handle=1888,i,12277816836128847224,7118408425649442326,262144 --variations-seed-version --mojo-platform-channel-handle=3600 /prefetch:1
  2⤵
  PID:2664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4340,i,15238937546179280155,5241085793532867102,2097152 --field-trial-handle=1888,i,12277816836128847224,7118408425649442326,262144 --variations-seed-version --mojo-platform-channel-handle=4428 /prefetch:1
  2⤵
  PID:6024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4352,i,17769072839823086307,719489267787855131,2097152 --field-trial-handle=1888,i,12277816836128847224,7118408425649442326,262144 --variations-seed-version --mojo-platform-channel-handle=3572 /prefetch:9
  2⤵
  PID:2912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5280,i,16150652887508773534,3982496527053532149,2097152 --field-trial-handle=1888,i,12277816836128847224,7118408425649442326,262144 --variations-seed-version --mojo-platform-channel-handle=5332 /prefetch:1
  2⤵
  PID:2680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=3796,i,11843719422146907118,12878743379800202174,2097152 --field-trial-handle=1888,i,12277816836128847224,7118408425649442326,262144 --variations-seed-version --mojo-platform-channel-handle=5520 /prefetch:1
  2⤵
  PID:3252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5072,i,3793653989780288953,16340514957500890501,524288 --field-trial-handle=1888,i,12277816836128847224,7118408425649442326,262144 --variations-seed-version --mojo-platform-channel-handle=5232 /prefetch:14
  2⤵
  PID:4528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5084,i,3377610641522497039,1002585829945896858,524288 --field-trial-handle=1888,i,12277816836128847224,7118408425649442326,262144 --variations-seed-version --mojo-platform-channel-handle=5032 /prefetch:14
  2⤵
  PID:5600
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5872,i,6230496208737310968,16902677618360874763,524288 --field-trial-handle=1888,i,12277816836128847224,7118408425649442326,262144 --variations-seed-version --mojo-platform-channel-handle=6068 /prefetch:14
  2⤵
  PID:3100
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5872,i,6230496208737310968,16902677618360874763,524288 --field-trial-handle=1888,i,12277816836128847224,7118408425649442326,262144 --variations-seed-version --mojo-platform-channel-handle=6068 /prefetch:14
  2⤵
  PID:2008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=600,i,9363663475584641437,5306904706532185273,524288 --field-trial-handle=1888,i,12277816836128847224,7118408425649442326,262144 --variations-seed-version --mojo-platform-channel-handle=5168 /prefetch:14
  2⤵
  PID:4188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5220,i,2059422255016979891,1275631849626130365,524288 --field-trial-handle=1888,i,12277816836128847224,7118408425649442326,262144 --variations-seed-version --mojo-platform-channel-handle=4980 /prefetch:14
  2⤵
  PID:6024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3652,i,8260418208506947922,9640679051218638372,524288 --field-trial-handle=1888,i,12277816836128847224,7118408425649442326,262144 --variations-seed-version --mojo-platform-channel-handle=6672 /prefetch:14
  2⤵
  PID:4540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2184,i,5968223435824602756,6132364578914142285,524288 --field-trial-handle=1888,i,12277816836128847224,7118408425649442326,262144 --variations-seed-version --mojo-platform-channel-handle=4852 /prefetch:14
  2⤵
  PID:5704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6184,i,17799426263395346457,5561691169345297075,262144 --field-trial-handle=1888,i,12277816836128847224,7118408425649442326,262144 --variations-seed-version --mojo-platform-channel-handle=812 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4724

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:264

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:932

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ee3af991fa1719733ca1e3ac746d5b605f4205e269bf244bd9ae780ceadb9bd8
MD5 a044f6413820c4c3fbd300ee9b379ebc
SHA1 94fc91536a25274f06d3a6e89322dec7fde7912e
SHA512 ced4374c54d7b4ea2b76afe4ca5d8841dfb55d8cb5db96de4ed49e64bd3850a817db5301787c268756641c94c0bf85eb4ee188f04fc891fa2e45ad48284985a5
TLSH
T13AD02BA433044D0CCE40203215B8A210720484209C49031A8D41B01C8C6FD4387171FB
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 22c1d58ffa7df77a7e0440ce3b2c474b1e03f30b60355bbf5dd6392fefb641fd
MD5 b9f45a900b1f64efbf90731f41c6ad44
SHA1 0c28e85e464e328fbbc07373b05113d39f83bdcc
SHA512 132313545c55ea809da0e811d6d5d324ecf5b6cfaefadb3fa4a29df5e6266dfeca7cffa4daf21754b4b37771504d3692189b5660a468784b5eaf80bf92f59ae0
TLSH
T11ED02BA033044C0CCE40203215B9A210720484204849031A8E41F02C8C6FD4387161F7
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 e0d047e36fb01bae7596d596bd68c02c7c64bf5231bfab0f78ac409488fad67a
MD5 f92dac1537eb7c92118a019f1d968821
SHA1 31c030011fc05e3ef2795d1ea8f6cb7f65b958da
SHA512 c47677ab1367b07a22e99242620dd5d2216655ea2c136ca3f76839b7a2173bbf80af62a20cc77bff77fb857f3c0ae036aff4905d39eb83cb3561b132ccf9596a
TLSH
T10A7150A627260F82D79A447750F24C653EF48777D18B1ED87E835E7A280DF7860E2293
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59f052.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59f052.TMP
Size 3KB
SHA256 aade715e7e239bc3e5a173bbe646fd2e6efc2b3db180b5e6c535d16f2338989e
MD5 246ffeb1f5451c2d6d4caa315f7fd497
SHA1 59a4a6cc2c393ce691adebf9140a43fabd91f737
SHA512 0002ec0161abda0b57172db99026bb5384fb733dc5f85e197ccec455f9f1ae933a7bb7fd9d4560c58977eaee64c4fd10b72809b6061b288f219939470239a8da
TLSH
T13151615623270BC1D7A644BB50F25CA93EF48677D1831E183F835E7A480EF7820D2253
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 17addbd7b47a9be9a325ddf91b3ab17551f1751766a2c0b5e2f4dc54165d2671
MD5 03222e2e2172a781984ffaf1f4d50cd3
SHA1 c860ee6d2d0e5ec418dbbd6bb8068c23c0bb0798
SHA512 8646a141e0d410a844006a3c32115d87771529f767442570b5a15678eca897533fed209029815e1a46adc029a1877278168d31243c44c1f5f2a300d1bafa23df
TLSH
T13951ABF7C3F8952E8A1196F0AB186E1FCE5D0915835C7D2AC5D4AE1B97E3471E100A4F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 1be17fbd8b0cd4ed00da92eba7ad7c25f0ec7dabd584a94e1111ad0491b6d1a2
MD5 cbdaed8746ffd0e1cf5697473f961600
SHA1 5cc2c5b705d78bf644e05029b3cb6e403fa9df77
SHA512 74c2162f73a9654f427b515fc365ebace92544ad41403a45b274e4aa8e64ec7f9e069d6c2ffabade0ab53875130eb5c6870a94b880f07833c3933e980ff4bf62
SSDEEP 192:sxR0R9bu/fEskhwpq1zWfzoD8p4iO/g6+WNIYGlkkI+GQIgDlJ:sxR0bu/fEskhw4Cvi/5ItIOL
TLSH
T1EB42C816A968993B9CCBD21DFB557F53D2FD5032A1952E18A7FC860C04EB6DE220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 7333e1b3c2c3b36cc16a75d04af5e0b2e840558bd1d6d9b78d160ecef331b155
MD5 5211fb0f3f8c724938d3e8e87d3ded01
SHA1 af39f28fe23d0f7aded299f2ba192c8c91155de4
SHA512 dce770986940fd49c3a9ea055b008ff5a4fd28b0446e2a313bedcc9741b5744a504b967cfa7e1ea601baa13d5459e9201a1e24b2285ca9b44b0932caf642d56f
SSDEEP 192:sxR3R9bu/fEsahwpq1zWfzoD8p4iO/g6+WNIYGlkkI+GQIgIJ:sxR3bu/fEsahw4Cvi/5ItIOs
TLSH
T15D32D816A968993B9CCBD20DFB557F53D2FD5032A1952E18B7FC860C04EB6DE220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 072d395229f7b00bb6bd39a56807944821c10d45932d2b1b913308516362f49c
MD5 8e5fd6fe6d23b64eb685f0a4af3cbb18
SHA1 0221286f6450931330494112a8c8abf15c853549
SHA512 2d0ec2c3f8808673c4253b3635be24c960b0149418cc396ad8fc2b9ca59c91006881ebabd3718513bef56664b6c6ebc325f6b433d51de2fba1a1d44a1897de90
SSDEEP 192:sxR0R9bu/fEskqwpq1zWfzoD8p4iO/g6+WNIYG8BkI+GQIgDrJ:sxR0bu/fEskqw4Cvi/5IHIO5
TLSH
T10E42B916A968993B9CCBD21DFB557F53D2F95033A1951E48A7FC860C04EB7DE220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 51a98b9d9ac1b9c1aa295cb80701c46958dc8c153a337f490916851d1929eab7
MD5 390abd6dc027ec151e3a550fd820e5ad
SHA1 195f48b41113c98cd7d2572971983fb9d10f5bee
SHA512 9c7ea383af86f3602f7dd52111f9febb9437eadb481244759796a8900d0e88178bd23bafdaa7fa425d44fbd507376b45beef3941f6f32b06c5944b697fcd74d1
SSDEEP 96:KRm7KmgIIOW4tVgGOK47g0OcOGlkv4dZvtNhW528gBhK4Igvhc3f+BtiigAKVeKS:Cm7KmgIIJ4tWGm7g09OGlkv4dZvtNs5q
TLSH
T150915041717A1291387DAA0C99B5881F93D279A33008E52B7BA851F60F2BF075DFD8D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

a2786b49-aa91-4762-bd4a-1facb4e490a5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a2786b49-aa91-4762-bd4a-1facb4e490a5.tmp
Size 23KB
SHA256 2e10f53fb857a375e4844d5165391ea456d8bf1d31d464de2f0c08fcecac1ae2
MD5 a36dcee25215fa9b63d4a6d06e161bce
SHA1 16d18de2d46d047712b1de4b706b0fe52b75be8c
SHA512 e12499b8ad127eff3457b2beba8f1b2108282b0135ec1cc0c9e256c29c0a9aa1678d6bc4c95b6c8d2d6ee927081696e3110946b19ddb23ef3480c1970ae3b1ec
SSDEEP 384:US5Yi0hfCtgvZFfxJKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVDT9NHRIJrowE:UQYi0NWgv7fxJ8F1+UoAYDCx9Tuqh0Vo
TLSH
T165B2EC3B604DCB7E9F800AAD9C197FDB6D9802C796589D4047FE990C02C77FA921A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5a2145.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5a2145.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 9b29f3525c1c71b31199f51147bb577931fa04ad71af73f8d978d48fbb8d8280
MD5 1ae510454f28ec587190d220491e1588
SHA1 51d23ec4ffad2a2515f4fd51d84570aaadf7aad5
SHA512 b467eba97ce2713747005b3c802142120766a778eaa238733a02dfa3f73b5186176f25b0a1e9e0f6f88f0e628d1bef1bbe48ffc697f6d3bff51f6975677ef1f5
SSDEEP 768:ckrv+4UNbdS3iI9IlYyGSC7Hucys6BRvi82oP4/z6himo6eY:ckbsbs3ZS3imOz6ImoVY
TLSH
T1C803BF35F4188D73EDF78289B44A7A537FF4122395C81994E5E9AB4E06CF5AE031B813
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 c09d7101a306088328f9070800aca083f8e2dcef9e03ec2b1ac73b74233dc388
MD5 88072c920c05dbfc02c0608d7178660c
SHA1 b9478c79536677c99b3fd044481d988322646d13
SHA512 2bd6b3857caf4122d5cbb6046ff3bd89a007bfa9b8b3c4c4e558013426963cdd7bf573786d12380714e4f26e6d0d6eaf4d9497b755567a947c1ab7a5c8045589
SSDEEP 768:uAR3ji9IlYyGSq7Hucys6BRvi82oP4/z6himo6eb9M/x:uAR3eA3imOz6ImoVb+J
TLSH
T1B5F2C035E8548E72ECEBC299744A3A567FE05333D6CC1A84A5EDDB0D06CB96D4316C22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 080c5846bdf57e1959beef0bb18ebb0eb48bf4e6acf302906cbce657ab66bbb3
MD5 67f0d254a77035cffa4d34cce13503e8
SHA1 db3ec539b14deae3e97faa92aaf7652fd08b8b44
SHA512 1c2fc502da29eb7c6ef4235f62739117233d34a00947fef72a515517fcdb33049dd2d6bb27b58c4cf437317d84a563c5f3335f7e35389f398841fde5e69164f0
SSDEEP 768:cAR3ii9IlYyGSq7Hucys6BRvi82oP4/z6himo6eb9M/x:cAR35A3imOz6ImoVb+J
TLSH
T165F2C035E8548E72ECEBC299744A3A567FE45333D6CC1984A5EDDB0D06CB96D0316C22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 5337ac8375bfe63968119c065870bec7404f841fd552e5e0b97ed5bbe48400c0
MD5 a7439e33ff5e5d9e6a71bb9f0a4d176a
SHA1 4073882d4127cdafb85784eedde19b530ff9576f
SHA512 f1c6f35cdae96eddd72f1d95f95c40a3a82f39021a226d3108b3fe3f2d806aaa8f223c0b12c16a87720db7c95a07cea12f00c50e35ce9e68e57f79326c633262
SSDEEP 768:2SFQ7231wghi9IlYyGSg7Hucys6BRvi82oP4/z6himo6eb9M/x:2pS3E23imOz6ImoVb+J
TLSH
T15803BF32D854CE76EDABC789B94A3656AFF15233C6CC6984A2DDDF0D068B59C030BC12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 f77dc3c336460df77abd1086c32f9f872166c2e9a0e74582d3512cc6b06276b9
MD5 93e8cd09e76dd1ddeb6ae1d67e461056
SHA1 6a180d3807915bc4ed65c889da97ec1fbd11ed4a
SHA512 1276ce7cda80810dc9d0dcd1e9bb44325f7637eeacf2fcebde65ffe090d9af16d7b546c86d75690853fe640d7d76778a26108d717d58fa1811be1cc3289a6cbe
SSDEEP 768:xGrv+4UNbdS3dMelYyGSx7Hucys6BRvi82oP4/z6himo+/2bwn+h:xGbsbw3dY33imOz6ImoE0w+
TLSH
T1F403C035E4188D72ECE7C288B44A7A533FF4522395C81AC0E5DE6F4E429B95E130BC63
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f5b19f23-084a-437b-b52a-5ad92e09ae4c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\f5b19f23-084a-437b-b52a-5ad92e09ae4c.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download