d7036ae5ffd4434dc727d5fa4ceec1b99ed3e89c6ca970a4ec1d1685379063b1

Analysis

max time kernel
148s
max time network
133s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/08/2026, 18:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
download.html
Size 66KB
Sample260802-wtq8ssvtft
SHA256 d7036ae5ffd4434dc727d5fa4ceec1b99ed3e89c6ca970a4ec1d1685379063b1
MD5 6b60debc3c5233682e636ba0b4bb6bd2
SHA1 94da7b3d29570f8ddc2a549411d3ddb550b890d4
SHA512 2be56d8afd440cb8fe04f124b432ccb96486dd8b0c1ba871f769ccd0e57a56b04e4cd6be219f79b5dcab2a218a05af0539a72aa85a540bad34f9113af62c1953
SSDEEP 768:5e5dw6qWeH8b0ncVZZdype+7wWvgEmws2bHU3taYSf6m5A6Xruo0sCA:5ePwFL63ypVwWvDPbHU3tM6m5A6XrV
TLSH
T11B633B32A3B808B7362F437AE650B318666DEE11CE0657E5F0FAD25412C5DDA04B7B1E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3196	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134301679969674414"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1875162379-3804078649-638427191-1000\{DB0787AD-B281-4C31-93C5-97923E43B62E}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2532	msedge.exe
2532	msedge.exe

Suspicious behavior: LoadsDriver 1 IoCs

pid
4

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 964 wrote to memory of 4620	964	msedge.exe	89
PID 964 wrote to memory of 3464	964	msedge.exe	90
PID 964 wrote to memory of 3196	964	msedge.exe	91
PID 964 wrote to memory of 3464	964	msedge.exe	90
PID 964 wrote to memory of 3464	964	msedge.exe	90
PID 964 wrote to memory of 2784	964	msedge.exe	92
PID 964 wrote to memory of 2784	964	msedge.exe	92
PID 964 wrote to memory of 5268	964	msedge.exe	94
PID 964 wrote to memory of 3720	964	msedge.exe	95
PID 964 wrote to memory of 5268	964	msedge.exe	94
PID 964 wrote to memory of 5268	964	msedge.exe	94
PID 964 wrote to memory of 3720	964	msedge.exe	95
PID 964 wrote to memory of 3720	964	msedge.exe	95
PID 964 wrote to memory of 1688	964	msedge.exe	96
PID 964 wrote to memory of 1368	964	msedge.exe	97
PID 964 wrote to memory of 1688	964	msedge.exe	96
PID 964 wrote to memory of 1688	964	msedge.exe	96
PID 964 wrote to memory of 1368	964	msedge.exe	97
PID 964 wrote to memory of 1368	964	msedge.exe	97
PID 964 wrote to memory of 2412	964	msedge.exe	99
PID 964 wrote to memory of 2412	964	msedge.exe	99
PID 964 wrote to memory of 1696	964	msedge.exe	100
PID 964 wrote to memory of 1696	964	msedge.exe	100
PID 964 wrote to memory of 2308	964	msedge.exe	102
PID 964 wrote to memory of 4156	964	msedge.exe	106
PID 964 wrote to memory of 1180	964	msedge.exe	107
PID 964 wrote to memory of 5988	964	msedge.exe	108
PID 964 wrote to memory of 1840	964	msedge.exe	109
PID 964 wrote to memory of 1840	964	msedge.exe	109
PID 964 wrote to memory of 2532	964	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\download.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2cc,0x7ff99fddc188,0x7ff99fddc194,0x7ff99fddc1a0
  2⤵
  PID:4620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1604,i,12048295516683089456,7280811574933571321,262144 --field-trial-handle=2140,i,9262701208344371749,16137755621660749508,262144 --variations-seed-version --mojo-platform-channel-handle=2144 /prefetch:2
  2⤵
  PID:3464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1904,i,1245484110801928197,5781027120980761407,524288 --field-trial-handle=2140,i,9262701208344371749,16137755621660749508,262144 --variations-seed-version --mojo-platform-channel-handle=2264 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2428,i,17652154076186150385,10199893727134605842,524288 --field-trial-handle=2140,i,9262701208344371749,16137755621660749508,262144 --variations-seed-version --mojo-platform-channel-handle=2868 /prefetch:13
  2⤵
  PID:2784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3580,i,10241191022671905059,3658590454551580925,2097152 --field-trial-handle=2140,i,9262701208344371749,16137755621660749508,262144 --variations-seed-version --mojo-platform-channel-handle=3592 /prefetch:1
  2⤵
  PID:5268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3584,i,8205417426315979022,4935603052924051829,2097152 --field-trial-handle=2140,i,9262701208344371749,16137755621660749508,262144 --variations-seed-version --mojo-platform-channel-handle=3604 /prefetch:1
  2⤵
  PID:3720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4420,i,14199289409739326983,2354681884834869148,2097152 --field-trial-handle=2140,i,9262701208344371749,16137755621660749508,262144 --variations-seed-version --mojo-platform-channel-handle=4952 /prefetch:1
  2⤵
  PID:1688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4436,i,6716705414333363026,12673239512120846064,2097152 --field-trial-handle=2140,i,9262701208344371749,16137755621660749508,262144 --variations-seed-version --mojo-platform-channel-handle=4968 /prefetch:9
  2⤵
  PID:1368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5204,i,12050416104079053074,17484920673512965636,524288 --field-trial-handle=2140,i,9262701208344371749,16137755621660749508,262144 --variations-seed-version --mojo-platform-channel-handle=5424 /prefetch:14
  2⤵
  PID:2412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3748,i,1696757465261598589,10418433398958541695,524288 --field-trial-handle=2140,i,9262701208344371749,16137755621660749508,262144 --variations-seed-version --mojo-platform-channel-handle=5400 /prefetch:14
  2⤵
  PID:1696
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5932,i,18409403049968137939,15119828219693723846,524288 --field-trial-handle=2140,i,9262701208344371749,16137755621660749508,262144 --variations-seed-version --mojo-platform-channel-handle=5956 /prefetch:14
  2⤵
  PID:4976
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5932,i,18409403049968137939,15119828219693723846,524288 --field-trial-handle=2140,i,9262701208344371749,16137755621660749508,262144 --variations-seed-version --mojo-platform-channel-handle=5956 /prefetch:14
  2⤵
  PID:2308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6044,i,3625566200713113589,3222660638627498519,524288 --field-trial-handle=2140,i,9262701208344371749,16137755621660749508,262144 --variations-seed-version --mojo-platform-channel-handle=4972 /prefetch:14
  2⤵
  PID:4156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4988,i,16518209912792698976,8819559519948791297,524288 --field-trial-handle=2140,i,9262701208344371749,16137755621660749508,262144 --variations-seed-version --mojo-platform-channel-handle=5000 /prefetch:14
  2⤵
  PID:1180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6052,i,8246425995023812382,7726819358624731726,524288 --field-trial-handle=2140,i,9262701208344371749,16137755621660749508,262144 --variations-seed-version --mojo-platform-channel-handle=3556 /prefetch:14
  2⤵
  PID:5988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5544,i,16050485854728003923,10887726096154711297,524288 --field-trial-handle=2140,i,9262701208344371749,16137755621660749508,262144 --variations-seed-version --mojo-platform-channel-handle=5504 /prefetch:14
  2⤵
  PID:1840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5408,i,5398047225270039607,17852494321472465109,262144 --field-trial-handle=2140,i,9262701208344371749,16137755621660749508,262144 --variations-seed-version --mojo-platform-channel-handle=5380 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2532

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4500

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2396

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

5a882ba2-ffaa-46a1-b7f7-fb61f57c0ade.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\5a882ba2-ffaa-46a1-b7f7-fb61f57c0ade.tmp
Size 35KB
SHA256 edbbe05ef4d284357aea474687e725f5bc47979a5ed962c18af4395c41f3463a
MD5 9a0dfb373ac681d5aadf02fd37b978ea
SHA1 d98f6dbd88ddf08936823e976aae0deac7662e42
SHA512 9647d9d340c620091a4cab61405ec352c5b8642952e9e106b76cdfa03f67d4cda64306cb7046d47f99a696ef88c0e39d5832517be43fe9cf25b4a19d63bf8115
SSDEEP 768:8mu3HUAi0PQrEnjN3Gac1F62ewBKZOFWh+:8mu3H5IQnjMaV2evZCd
TLSH
T175F2CF716D749DB38DEAE385B9473603AEE08353E5D40AA886DDB70C05976BC530BC36
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ecdd5c8034c45eff453cbaf31d8886e2bd9609a73853367a6d096a69cc81f1be
MD5 a774534a956a5c8affebe08e87c80683
SHA1 b3e4e20a91e4087d3b9247b5ef6815f51858a041
SHA512 27769aee2cac148a0154fe42b51da2a9a1088e9e990873915b4c7ab9bd5442a3facf82b2bd1cbaef75328bd5937813698b96ac06aa76d934d07ab5ebb194a824
TLSH
T103D09B6673449A1CC9C439712461565161115820E41443581C96715CCDE56C707571DE
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 dfacefa73d018d54e3feba3eef28ec722a8422fee8768a2c3d8d6253f863b375
MD5 cb5000b6fab1115bfff50bedcc3eb9fd
SHA1 afbfe0ec03df59e7a1eba1da4227111508419c03
SHA512 aab9a1afd5de2f983466724b6ecf0dbc2e176c5a1eb2f059b9507511cc53643fcf9ed990bd565f22f8d53fb82db71cba238962a75c68db02d5f10b526661bd08
TLSH
T15AD09B667354991CC9C439712462565161015820941443581D96B16CCDE56C707561DA
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 5d5094bcce57333bac7ba31c701dc039542df64fe32912d0a98eb9ca98e940e3
MD5 e19bbb1d03eb9fe388cf707f0b982bb3
SHA1 982374972f19ddbe0266304f27b6c21fc640505f
SHA512 3dfb77b40144bcad904bd632d857fd5a1841d13dd770eacfb7d5ad001254ac939709b62c0af68214599bb528e12e2b192b921a2fc6ca0feea597c6770603499f
TLSH
T12D51741F67AD99D2D71874B150DB27943AF6B229EBC7AE10D0509EB88882F74D0D3C63
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe596c7c.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe596c7c.TMP
Size 2KB
SHA256 498f50ff8fa55097474668f0f7503297cbb931cc47e2ff8688e71ae6033d0461
MD5 31a5df5ab06fae34308805808a2e59c3
SHA1 9531ccd254408a76d5230d9ece95f1dbf7b3fef4
SHA512 d7418c4b976cc624f3f32648ec2391255c9e81bf12df67f4e9c212520f81af8053c696e32fd85e5574d77353d388fa2f2faa31723ed39e22d01feb6f4775e8d7
TLSH
T19F51841F676D99D2D71874B140DB27943AF6B229EBC7AE10D0505EB88982F34D0D3C63
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 e43400da683f8161b252c7c7fae98395637fde9a551b5c93cc7e58e75389c5f0
MD5 052721da50a4f25ea8b0b466371d629b
SHA1 981557fa08f3455cc17587eef2221230839d6448
SHA512 89fdd3634057805d864d39b221b5fd709b4278b6c9cdda41c55ed503e98846987a172c0a73cabe2afdb8b94e09aad1d5f86cb40140e1527937965ed276c51961
TLSH
T17F318DF7C3E4967D8A0191F4AB146E1BCE5C0915432C3D66C9E4AE2BA3E28B1E14099F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 b76cbcf4f35a3ace38e32c5f78d4c0dcb2566e2b4f225e3f69b84e1359494d53
MD5 ef74180094dfa90ad4d8008fd792eb5f
SHA1 87ad49e01556b1d31ed1ffac263ae8298906071f
SHA512 3f93b7818c409426aefc0950cc1c1225d6568e8495184a29591c17211c0f04b35c6af03574f8a2c3e3c6102b94fe79b7fe9cc1a3cc3b519f258eb0529aa66b55
SSDEEP 192:sxRzrbG/f6s5qVKCA94/xzoA8p4fh/g6+WNIYD9o6SzGu/IgDoJ:sxRzPG/f6s5oZ89k/5IQSXY
TLSH
T15732C7166A28AD3B9CCBE21DBB657F53E6F9503361D11E18A7FC960C04E76DE220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 548b9b590b62327878bcb4332a8c20d46932c54f6151b1460b2204f797acf543
MD5 6246f89445554bb23f8a2dc1b658f017
SHA1 acc41aa03db21c3b9cc18b8a6b0e2fd4e9d73853
SHA512 e51127433e20bf1222c613e4591e03618a0bdf7fc1001ddee172a14478582c45e7732a3b5931e2825f65b811f27602e10491075bf0cb4b413f15e8cd8f6c8451
SSDEEP 192:sxRzrbG/f6s5qsKCA94/xzoA8p4fh/g6+WNIYD986SzGu/IgDyJ:sxRzPG/f6s5lZ89k/5ISSXa
TLSH
T1F132C7166A28AD3B9CCBE21DFB657F53D6F9503361D01E18A7FC960C04E66DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 b38ce616152ca2422240e4119101c80b3208ab8a525ba696798943f5190a39f1
MD5 38f9d35dba2e8ac1ab802a8ee1eaa410
SHA1 72a626ee51e628c332c332ffcd245a74015667cd
SHA512 178547212a408a37916ae668d85b7181015f61f26a4f0b7bc14364f28418aba12471e259f391ccef2192b9da4b6bb573b1cb40b0034034be3605c826f4184ce5
SSDEEP 192:sxRwrbG/f6s0qsKCA94/xzoA8p4fh/g6+WNIYD986SzGu/IgIJ:sxRwPG/f6s0lZ89k/5ISSXs
TLSH
T1DA32B7166A28AD3B9CCBE21DFB657F53D6F95033A1D11E18A7FC960C04E66DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 d9a493317012cee2f0b423cef6f88e414db59e15482a6d84c9b6ac69571c8b11
MD5 a20e38363eab175b42f6b876ad1d01d1
SHA1 67272ed3501eac55b1781cf91b7560ecd10bb199
SHA512 5549be096c96f9b031ab1acc15596a73e2ccb04e271e3bc95925b8032a2852030a71378fd563afdeeaea4a9189713adf478bb2a777ff6a606e70074d966bd7d7
SSDEEP 192:sxRzrbG/f6s5qVKCA94/rzoA8pefh/g6+WNIYD9o6SzGu/IgDoJ:sxRzPG/f6s5oZ81e/5IQSXY
TLSH
T13C32D7166928AD3B9CCBE21DBB55BF53E6F9503361D11E18A7FC960C00E76DE220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 e10b829f35bd8cf8a721fc90803afa5082967a699dba3c14bbd61ef6b076da3e
MD5 adf4d2fca912bf495c8727c5e5260f52
SHA1 b21b1872e7eb99078af73cca9758a94d1324e4be
SHA512 b75aa0b65a77552f157ed980c2427f1b5eb0325932f852fd0b2108bda9f5bbb8c1235e2712c9d1c37b61384883e0c832bb7e9738f2a254f1ccd7fbb8e759bc02
SSDEEP 384:a8YfWRmfCtg/NFfHfKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVOe91bRc6ropDo:azfWR0Wg/XfHf8F1+UoAYDCx9Tuqh0VE
TLSH
T105B2EA2F600CCB7E5F800AADAD196FD77D9802C79B588D5047FE994C02C77EA921A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 041ceea0f0c0163a7ff5010916852bc13096e33b6751f538f2653789c2582662
MD5 8694b06085db5fd210bfdbffb7d79ba8
SHA1 5b3eee6ca30063c1a727b542932bc59cb68b2815
SHA512 e3512a6f8b4514820d42d898570f8bbc419ceb22ee2b5dad47a49819b03c4b7b7eb3a3cae9a72acfdace69e5b3076cfb67ae3eab7ba45ad331f837edaee823f7
SSDEEP 96:KREBE+EPErEZE7E/ELWEPEME6gETE5K4EQgEXE5cEfEXEWEJEqEzHE/nuE/nDE/H:CEBE+EPErEZE7E/EKEPEMErETEzEQgEb
TLSH
T11B912541707A02803C7F664C85BC986F82C274A6312CA47B7BA915A24F6FE534DFDCD9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 71b2503e60ab65bcec3d8ac667f2935fe901fdbb58bbf3128b08c143fec6e998
MD5 40278c65cafc0d0be5e5ea4ac29b80ca
SHA1 0f677dcc80902a8b4aa422d374b09714b4c87e3a
SHA512 cee6eccf47a450a45b3e08f21599d59da84921513ca85e474a54e1e8734a1bce7ae1583618c49283588aec2bb7ea8722a6b4730c0a422aa888408745cd1b790c
SSDEEP 768:FCrv+4UNbdd3FnAi0POrEnjN3Gac1F6eVH1SCx:FCbsbz3F+WQnjMaVEH1X
TLSH
T1DC13BE3269B89EB39DE7D385B4477A137FF4421386D40BA4C9C96A0D069B5EC230F927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 63c37e19e6bd342db6fe6eafa7ed8564ec1015c0703eb55d3baa7c2c240a07fd
MD5 a799576c4920b842a7c211aa1f4dfc4b
SHA1 6120554bbbc0708be9c4ae54412c45d7fbab1a1f
SHA512 131d0de2f9cdf7f2144024b6b5692170a8aac5cb981e51157b5d6e84901c6f8a5d046f5db924d3873b0b63158bba5bb557ca36e0ebdbc04cdd19af173115593d
SSDEEP 768:k7x3HUAi0PRrEnjN3Gac1F62ewBKZOFWh+:k7x3H5ZQnjMaV2evZCd
TLSH
T1BFF2CF7169749DB38DEAE385B9473603AEE08313E5D40AA896DDBB0C05976AC530BC36
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 6c71076661b2e80a31d7cf0e98541d75a827a4382c90cdd3d1253778f4f3f68d
MD5 b76894293417e58ccc2816efa08e68bb
SHA1 9fbf70b5e26d14cd4a2693193c174050e53abcb9
SHA512 0757debfe391d6caf18e76b40746fc5a05e498b81e610c530ea386d89c82a17e95a01903b980875c0429e0b5416565c869d7f49e4db787eda4140c0c9d5c153f
SSDEEP 768:8Crv+4UNbdd3CUAi0PQrEnjN3Gac1F6eVH1SCx:8Cbsbz3C5IQnjMaVEH1X
TLSH
T1F013BE3269B89E739DE7D385B4477A137FF4425386C40BA4C9C96A0D0A9B5EC230F927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 4791c9adece1e9c26faec467bbb082f6f5958ba3c7be53d151acf1e2b9a25e81
MD5 1d8d04ddb8eb09684be2bd1da9186c78
SHA1 483fe4c38658f335a7a4f6174ffedc55398a3186
SHA512 4f97e08d03f715bebb5ef4720e0e2ff510f4f7066f3de17f4ab011f5138cba5c3b3ad606bc8f9fae61308ab6fd1fccd2d2a79ed3a5cbdddd56d3aebe8a176ee8
SSDEEP 768:rrv+4UNbdS3+mi0PqrEnjN3Gac1ZYeVH1SCz:rbsbg3dyQnjMaTEH1V
TLSH
T1E403CF3269B88EB38CE7938571877A037EF4525386D40BE4CACD2B0D06975EC230B967
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d23c3c0b-497f-4deb-ab27-e29f7f1d35f7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\d23c3c0b-497f-4deb-ab27-e29f7f1d35f7.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download