b749a4c92c9b30f05fd177d6e855cfe3b5a5b5e21ccfc86c0397d256acdb261c

Analysis

max time kernel
148s
max time network
154s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
04/08/2026, 06:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
hmbd-mainsite/dist/index.html
Size 944B
Sample260804-gzjnkshj21
SHA256 b749a4c92c9b30f05fd177d6e855cfe3b5a5b5e21ccfc86c0397d256acdb261c
MD5 41e5f83dab11b97cc137f01b2141e688
SHA1 a97faa8c7ef24c1e5793c51ae73e50a6dffb0297
SHA512 fe697e9c8f81af72d378daf705ad0886f34700afeb5119a0a5fd01d48301c09cd557d0202e4e5a5d1ff73661a403dd4eaddabb33a5ee0851ea4e41b140c2be99
TLSH
T18A11008268AACC2113B102585FA2F50CAC92A7078645AC1536FE607C5F91FC3CD9BCA4
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4568	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134302976790518043"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1738198120-2966725515-3980530802-1000\{5989C0A6-E00B-48BB-90EF-0DEE9E7E44D3}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5248	msedge.exe
5248	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 5012 wrote to memory of 2488	5012	msedge.exe	89
PID 5012 wrote to memory of 2528	5012	msedge.exe	90
PID 5012 wrote to memory of 4568	5012	msedge.exe	91
PID 5012 wrote to memory of 2528	5012	msedge.exe	90
PID 5012 wrote to memory of 2528	5012	msedge.exe	90
PID 5012 wrote to memory of 5808	5012	msedge.exe	92
PID 5012 wrote to memory of 5808	5012	msedge.exe	92
PID 5012 wrote to memory of 4972	5012	msedge.exe	94
PID 5012 wrote to memory of 4972	5012	msedge.exe	94
PID 5012 wrote to memory of 4972	5012	msedge.exe	94
PID 5012 wrote to memory of 1516	5012	msedge.exe	95
PID 5012 wrote to memory of 1516	5012	msedge.exe	95
PID 5012 wrote to memory of 1516	5012	msedge.exe	95
PID 5012 wrote to memory of 2680	5012	msedge.exe	96
PID 5012 wrote to memory of 2680	5012	msedge.exe	96
PID 5012 wrote to memory of 2680	5012	msedge.exe	96
PID 5012 wrote to memory of 2408	5012	msedge.exe	97
PID 5012 wrote to memory of 2408	5012	msedge.exe	97
PID 5012 wrote to memory of 2408	5012	msedge.exe	97
PID 5012 wrote to memory of 2076	5012	msedge.exe	99
PID 5012 wrote to memory of 3248	5012	msedge.exe	100
PID 5012 wrote to memory of 2076	5012	msedge.exe	99
PID 5012 wrote to memory of 3248	5012	msedge.exe	100
PID 5012 wrote to memory of 2028	5012	msedge.exe	102
PID 5012 wrote to memory of 4972	5012	msedge.exe	106
PID 5012 wrote to memory of 5688	5012	msedge.exe	107
PID 5012 wrote to memory of 4232	5012	msedge.exe	108
PID 5012 wrote to memory of 4432	5012	msedge.exe	109
PID 5012 wrote to memory of 4432	5012	msedge.exe	109
PID 5012 wrote to memory of 3352	5012	msedge.exe	110
PID 5012 wrote to memory of 3352	5012	msedge.exe	110
PID 5012 wrote to memory of 5248	5012	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\hmbd-mainsite\dist\index.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2a4,0x7ffcfc80c188,0x7ffcfc80c194,0x7ffcfc80c1a0
  2⤵
  PID:2488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1552,i,12953754423178907141,1976799495360764668,262144 --field-trial-handle=2532,i,12455506822023627083,2699660296183106348,262144 --variations-seed-version --mojo-platform-channel-handle=2528 /prefetch:2
  2⤵
  PID:2528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1684,i,4421011689320029220,8234962811442874429,524288 --field-trial-handle=2532,i,12455506822023627083,2699660296183106348,262144 --variations-seed-version --mojo-platform-channel-handle=2840 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2156,i,5529330898953777062,14529227315475507889,524288 --field-trial-handle=2532,i,12455506822023627083,2699660296183106348,262144 --variations-seed-version --mojo-platform-channel-handle=3016 /prefetch:13
  2⤵
  PID:5808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3640,i,13618057917155844692,15302531169330670969,2097152 --field-trial-handle=2532,i,12455506822023627083,2699660296183106348,262144 --variations-seed-version --mojo-platform-channel-handle=3680 /prefetch:1
  2⤵
  PID:4972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3684,i,7302726189832933560,489809172346107274,2097152 --field-trial-handle=2532,i,12455506822023627083,2699660296183106348,262144 --variations-seed-version --mojo-platform-channel-handle=3708 /prefetch:1
  2⤵
  PID:1516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4352,i,15403437478062748184,679670858664636085,2097152 --field-trial-handle=2532,i,12455506822023627083,2699660296183106348,262144 --variations-seed-version --mojo-platform-channel-handle=4384 /prefetch:1
  2⤵
  PID:2680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4376,i,7291564770263369292,15499873297806735831,2097152 --field-trial-handle=2532,i,12455506822023627083,2699660296183106348,262144 --variations-seed-version --mojo-platform-channel-handle=4388 /prefetch:9
  2⤵
  PID:2408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5440,i,9581047782375141614,11841191773426183770,524288 --field-trial-handle=2532,i,12455506822023627083,2699660296183106348,262144 --variations-seed-version --mojo-platform-channel-handle=5460 /prefetch:14
  2⤵
  PID:2076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5452,i,9423677032404926951,6241667605062376693,524288 --field-trial-handle=2532,i,12455506822023627083,2699660296183106348,262144 --variations-seed-version --mojo-platform-channel-handle=5480 /prefetch:14
  2⤵
  PID:3248
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6092,i,3513032309383683065,6865171964415065413,524288 --field-trial-handle=2532,i,12455506822023627083,2699660296183106348,262144 --variations-seed-version --mojo-platform-channel-handle=6112 /prefetch:14
  2⤵
  PID:5812
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6092,i,3513032309383683065,6865171964415065413,524288 --field-trial-handle=2532,i,12455506822023627083,2699660296183106348,262144 --variations-seed-version --mojo-platform-channel-handle=6112 /prefetch:14
  2⤵
  PID:2028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4432,i,7469440356910057752,17462608726488276055,524288 --field-trial-handle=2532,i,12455506822023627083,2699660296183106348,262144 --variations-seed-version --mojo-platform-channel-handle=4524 /prefetch:14
  2⤵
  PID:4972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=600,i,16140492463775048434,7103667783988379744,524288 --field-trial-handle=2532,i,12455506822023627083,2699660296183106348,262144 --variations-seed-version --mojo-platform-channel-handle=5212 /prefetch:14
  2⤵
  PID:5688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5136,i,16014021953425619003,3199458457940815029,524288 --field-trial-handle=2532,i,12455506822023627083,2699660296183106348,262144 --variations-seed-version --mojo-platform-channel-handle=6516 /prefetch:14
  2⤵
  PID:4232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3764,i,8444901960652410226,14973232682158478031,524288 --field-trial-handle=2532,i,12455506822023627083,2699660296183106348,262144 --variations-seed-version --mojo-platform-channel-handle=1720 /prefetch:14
  2⤵
  PID:4432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5464,i,2625607297288385124,8069554456396903644,524288 --field-trial-handle=2532,i,12455506822023627083,2699660296183106348,262144 --variations-seed-version --mojo-platform-channel-handle=5500 /prefetch:14
  2⤵
  PID:3352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=4388,i,11654375414145534065,967207010339225775,262144 --field-trial-handle=2532,i,12455506822023627083,2699660296183106348,262144 --variations-seed-version --mojo-platform-channel-handle=5232 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5248

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1872

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3964

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 e895c713b499f7261f324b5fdd87824521729acef59d0f511383df5da893930e
MD5 855cd69f46ca80eb69346c8a580ca6b8
SHA1 edabd216a3773be95b50c047ece50793ca1b0403
SHA512 3eba5699e57eb3f6a05ab94cd60ae66b60f73621303363a5393ea34f2b8a556e243a128d41829e64f21b76f4c24cd5978cf832f4255309101adc2b7bbcb1babd
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P76:fwUQC5VwBIiElEd2K57P76
TLSH
T18AB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ac1b1f93ff87eb876027f4166d705375c0f5d3d22dcb03f6a66f6100e88dd10f
MD5 b99f03c5cfe71b03836f8b5fcf09425b
SHA1 8a5078499c0b5ea40183efb77f9c1028c196409c
SHA512 6b9feec4ead7bf05f67d0d480907e21a3b770d8d12dedd2b0d785904186eac7448583e61abacb23582948de55c8ea2043bfd6908efd7faecdd82cee91404cfe6
TLSH
T16DD02BE037909D18C440353163D0122091006C30880923090100A02C8D3E2C3054F0BE
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c95a47aec5edba88214fad580cb869417b6620a91d8ee97e2d0b7801d3372be5
MD5 aad5f2ca0dd16bb2ea6c7757ea569c50
SHA1 5228b0b132542be004ea1bb32f3748964d065af5
SHA512 9d59c0291d741bd9d6cf50c22972d4baef00e7c1a48d6a3311a6cc82c04ceeba6e2be9458334cb954878915cc9eb91a8fd8bc4a47c966d57a2a05d6ee8211640
TLSH
T1D4D09BE177A19D18C545353567D1522591416D31451927194241E13D9D7E2C3455F0AA
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 ba5361f0b492122ed0a7e79f5ee6698f0fcb24ad4749182022146cd7f1a57298
MD5 ca36f758dd91495697eb2b78212e9538
SHA1 eb68430f4edfbb172a58f4f17d9002f731044c67
SHA512 e8853617aef82b894cb25cf0eb066690b0f701e1ba0d6d87fc72311e93b026946bb38bdf81eb2918d66f130b309db0f0342967a0d870421db37421c7d996cea3
TLSH
T10F513EB53B2CEBCEF72444B943E6D48B3EF8A4B906072A00C0156DF40ACAF501DD9993
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a0a23.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5a0a23.TMP
Size 2KB
SHA256 a7ae5d814e7e1a5165b00ef18d3068feb8e7f5b503ed1972891779c20bddb7d3
MD5 5ef5cf14119dcf1c3d380e6c419140ed
SHA1 e15ee55b32496b74ee690bb21d24376d458f9f36
SHA512 78be188de9785bb068f5658afda2dd3d332899035b743b3fcac8c0d95468db683d1148c0de46a7ea6b485dea59b75e8fe9747872f855bd7cba9bf28118055465
TLSH
T16B513EB52B2CEBCEF72444B947E6D48B3FF8A4B905071A00C4156DF40ACAF501DD9997
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 dae209c90d2833e2bd5e63c3e0635f92f66ba8189a49db9d6b41b996d6f5c3a0
MD5 debca7eaa930ca97716a0cb5b0e6a726
SHA1 774c5ad280081dcdfcdc1fa4e0338e6f76de19c9
SHA512 c06c8123a694d0a12e73c819a0e9f7de24957c0d3d35b20e65f17c72f21073eacfd1c419d68e58cbcec23162f8d0ac470a85f82188788ba5e2618f96ff8bb639
TLSH
T1A241ADF3C3E4967E890156F0AB186E1BCE1D0915832C3D6AC9E4AE2B93F2471E14195F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 b6d83b4c57cbd0cf0db31b55cae8342c89154dc43ec841eefa9a4f5ca549c9b2
MD5 54b42c818110bef2c763e85c2abaad3a
SHA1 97dca30a4dcf740eda21b894b65bdb840a171a31
SHA512 d1c6d8a51bc3bf4f12fcc8f4ab9c05c65047c9d1a7ae8967bfaf4c715fbb52149bf6b394f9ada341c041b30c3c4c4306df99249ed15352093e6f40aaa8342f7e
SSDEEP 192:sxRhRmyM/jK1Ml8wbk/f4msCXwGezoA8p4n/g6+WNIYoXRY2GMqMIgIJ:sxRhslk/f1sCXpDK/5IhYQs
TLSH
T1EE52D8156A285977CCDBD20DFA557F93D6F91473A1901E44AAFCDA0C00E6BED220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 0d83d1209e534a2c19dbd34080bd02a3f297c169fac50544e1a36d110c33b90e
MD5 98cb54bc5ddf200895b8725668b0f4f4
SHA1 09ebaea5f6b75c5f5799cc66206c40398c3d943c
SHA512 a5ea49c57fd54f7f19f1daa8369189a30d4cf27f849dc9b4074fd35e96f97b711d38633d77fde75cacc31566ec35ab1a7c2a6af7bae9a6829e81553448370dc3
SSDEEP 192:sxR6RmyM/jK1Ml8wbk/f4mstXwGezoA8p4n/g6+WNIYoXRY2GMqMIgDMJ:sxR6slk/f1stXpDK/5IhYQc
TLSH
T14F62E8156A385977CCDBD20DFA51BF93D6F81473A1901E44AAFC9A0C00E6BED620782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 c3c335396413c80c3d4eaaab1ef67408fe18e1ba231cbc7bad1b09cefc3a5a4c
MD5 ce672553d3eaef5443d3912bb2c44c43
SHA1 1d05b392a7d5f7bfd35421188a08f97fc0e664ee
SHA512 2d0225a5b0534c42488a9d990b84a37d3e4c8a7a90b0556c24ae495f71dcda1e4dd15c95759cffcb09a89b311aac442dc743f7ddf3b548c5ff172e4105ad276b
SSDEEP 192:sxR6RmyM/jK1Ml8UQ0bk/f4mstdwGezoA8pen/g6+WNIYoKRY2GMqMIgDuJ:sxR6sqyk/f1stdpDc/5IEYQG
TLSH
T1D062D8156A285977CCDBD20DFA51BFA3D6F81473A1901E44AAFCDA0C00E6BDD620782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 383349fef6135c51874a654f2d98f3043ba5326e1c8faf9c44612df724572592
MD5 55dd049c170675fec292ecbf4d1bf10f
SHA1 89f6512fb19776930099ea4a0c710f048c8f6418
SHA512 d3a17585e680c0ca7899ce1f82e8117565e3bf3f3ab6b033389702deb661b1cbd3388cbd0f20879b51705f396481e55cc91ab1415dd334830e7dd019718c3bb6
SSDEEP 768:jXwHSRWgs2fJ28F1+UoAYDCx9Tuqh0VfUC9xbog/OVbVuGgrockVe0Urs:jXwHSRWgs2fJ2u1jaO4GrdOs
TLSH
T18EC2EC2B640CCBBE4F844A9DEC25AED76DD802CB9B984D5447FA890C03C77EB511B4DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 440eb2bc63c21e7b7c80b4e552991a8affce98748a2a17f933e6e63acb63c0f0
MD5 6878f7bd29c39247cf027ca94b7ca925
SHA1 085d6786d2dff47c9297d4c0ebdcd3f03e07d1a0
SHA512 6a1c84ca0534e8a1c0281345388b5e34788b710109983e1c6f5363ea03c2b3c0bf08ff79ea542e722686af03078f6fc8d0d6bf830352a254cb6a382da9f7e08d
SSDEEP 96:KReTieYgQGWAltgeGK4DgcGcW+9M+XHpm3zBj3TWH0ig7TK4Kg1Tc5xMv2xiKCo7:CeTieYgQxAl+eODgc1W+9M+XHpm3zBjg
TLSH
T150917140717F0241397EA64C85A8896E56C274F33468A82B7BF842DA1F67E135FFD8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 3KB
SHA256 00a961c4fad2c1a292daeb0f45d110fcc05632379408b1c8d2ab59dd2de44117
MD5 48fa7bf9e2e467f3a9bb0f6fcb8da249
SHA1 040eae30a95500a5a3cc10f7be33cb37747e266e
SHA512 b2296284d9b0c87dec8787524bc1624e48777cb8a0b1dfe8b217a637d8bb55e4b911cfc6dd792715977cba20d5865747a21120f115ea047b6f4a194856dfb1fd
TLSH
T107710301713F0241397DA68C85A8886E53C274F33458A92B7BA442DA5F67F535FFD8C9
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

5c3d7301-d0d5-4714-a429-92e061edae11.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\5c3d7301-d0d5-4714-a429-92e061edae11.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 942f81cb23de7a0597252af6c34ee89a5156f4bac0d416b89897c7653423d272
MD5 e4a363331d12954c27d4bb1860d7a065
SHA1 2ec0127de015d72cbec8bdeed64568cd747c0de6
SHA512 98dd7d0c73b189b64bab324f1b5163a317d9ab4f52a8e992b4232c13aad954c3f48d8b14f19d3ce81caa3cc28530964ba31fbd27f263e47f4454f5c60963a408
SSDEEP 768:Frv+4UNbdQ3IXm/TBOWOiLQ6ONXyer1IRCzni9VnojKgqmU0j:FbsbS3nxJSIqnGnfgRU0j
TLSH
T14813AE35E0699E378CE2A2D6B14766537FF81017C6C40BA0EADD2F8D028B59E230F917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 4a39e668c3687e94362fac9fcfcbad6dc4205ac802d171d45a7a0e063dcd0627
MD5 e50b0cc9c65c79d1d0597226f1e532fc
SHA1 57a22a223ff259b2549c80d1dd0567da4bc49f85
SHA512 e0565225a3d6dd76f9980f5e8cf72484d95b93e0a868412b513a1a2b06be2521dfcbb931e1c60dadd8cd46223f07df8f57c8b2bce71b2029b37f425e14523c8a
SSDEEP 768:7D3ILm/TBOWOiLQ6ONXyer1IRCzni9VnojKgqmU0x:7D3XxJSIqnGnfgRU0x
TLSH
T106F2BE34D4A99E378CE2A3D6B1462353AFF85027D6C45BA0EAED6F0E028795E130F516
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 e7660100aad37f37d6e8198578dcc36cb1cd77ceabd42c1b6ddbc87ef3738bbd
MD5 364ded4804da9a78a771c3865c7606c9
SHA1 c114e0b1280817d559fc2dda28d5163aab07c974
SHA512 03876cc7d52dde499c696488e5c2587bf7e735e983e4c891d869982d8ce0171c7b1a3626115c4023cf9ac5e5113f1f1f2c0e8034cfb925012e3ba193a2d09b99
SSDEEP 768:yD3hLm/TBOWOiLQ6ONXyer1IRCzni9VnojKgqmU0x:yD3wxJSIqnGnfgRU0x
TLSH
T169F2BE34D4A99E378CE2B3D6B1462353AFF85027D6C45BA0AAED6F0E028795E130F516
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 96a8ee509fab017fad364f3c61965ed80efab5f52a8cc4eaad4b90efed1c33a9
MD5 03dc3518b240aedd3d162755bb17b6c5
SHA1 1ab3618c5b8730aa642468f20eea4e2d5885dd88
SHA512 e9b7ca9e9c2071c7ab11e6e5cd13ae48398e5c609d0384762f9e5a9458dfe0245a3453b527cba55080a0e1c556c7c9eaad1e3288c61e948ec39bfa09402d48b8
SSDEEP 768:iFQn3vwgRLm/TBOWOiLQKONXyer1IRCzni9VnojKgqmU0x:5n3SxLSIqnGnfgRU0x
TLSH
T1A903AE32D499DE3B9CE6ABD2F54A3313AFF45027C6C09AA0EADD6E0D019759D030F916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 304c1059c504f4b5f63716198d0914d8f8e0a0f904c80248b8931693460c0557
MD5 271724bd12adcc089b23550d32be7cee
SHA1 fb9fa2fd448e42948c8a8c455a615ccdd3559ec1
SHA512 f19a6743a9cd7e016b6a3046323e5f2fb1e9423c12af5a2700ae25e1d93eb61847269485e8ffc0e404ce08774c5127990e9268c869e96af6da9463203b803cba
SSDEEP 768:hrv+4UNbdz3N3/TBOWOiL0ONXyer1IRCzniBheVH1SK7:hbsbV3tx0SIqnOEH1l
TLSH
T16103BE36E5A89E338CE2A3C6B14B72137FF86057C6840790E9DE2F4E069B59D130B957
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e637e9bc-c2e7-40ab-9364-9a2e3a4b7b83.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\e637e9bc-c2e7-40ab-9364-9a2e3a4b7b83.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download