0f3582c2eaed6ff4aed443ceea99d73cef6de85808477adfc9b7e6df66fd27bd

Analysis

max time kernel
148s
max time network
131s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
04/08/2026, 12:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
collaboration.html
Size 849B
Sample260804-pd7saawtd1
SHA256 0f3582c2eaed6ff4aed443ceea99d73cef6de85808477adfc9b7e6df66fd27bd
MD5 bbce49666f4cb968d51c9656cb299825
SHA1 c2113da3e9f0804a1ada3dfe86480261c02ce50d
SHA512 b0f8b9eb7a330ed7865a35b68b8254efc54e1bf8b8675bc31ed189ba94f7375f62e0f9632dd9bf90dbc4bacb385c33bf3f4e89067fac2e41fd79bd3ef154ddfc
TLSH
T15E01CE965C058A2A21506788EED1B41AC5F9C005FA146CA1C9E8567E0EF4F8CC49BA48
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4808	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134303192496625829"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2301830172-776172150-2531349243-1000\{DE19223F-4337-4936-8288-FE64515E6505}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4752	msedge.exe
4752	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 4864 wrote to memory of 1928	4864	msedge.exe	89
PID 4864 wrote to memory of 4808	4864	msedge.exe	90
PID 4864 wrote to memory of 4772	4864	msedge.exe	91
PID 4864 wrote to memory of 4772	4864	msedge.exe	91
PID 4864 wrote to memory of 4772	4864	msedge.exe	91
PID 4864 wrote to memory of 5640	4864	msedge.exe	93
PID 4864 wrote to memory of 5640	4864	msedge.exe	93
PID 4864 wrote to memory of 5456	4864	msedge.exe	94
PID 4864 wrote to memory of 4436	4864	msedge.exe	95
PID 4864 wrote to memory of 5456	4864	msedge.exe	94
PID 4864 wrote to memory of 5456	4864	msedge.exe	94
PID 4864 wrote to memory of 4436	4864	msedge.exe	95
PID 4864 wrote to memory of 4436	4864	msedge.exe	95
PID 4864 wrote to memory of 2704	4864	msedge.exe	96
PID 4864 wrote to memory of 960	4864	msedge.exe	97
PID 4864 wrote to memory of 2704	4864	msedge.exe	96
PID 4864 wrote to memory of 2704	4864	msedge.exe	96
PID 4864 wrote to memory of 960	4864	msedge.exe	97
PID 4864 wrote to memory of 960	4864	msedge.exe	97
PID 4864 wrote to memory of 708	4864	msedge.exe	99
PID 4864 wrote to memory of 4636	4864	msedge.exe	100
PID 4864 wrote to memory of 708	4864	msedge.exe	99
PID 4864 wrote to memory of 4636	4864	msedge.exe	100
PID 4864 wrote to memory of 1060	4864	msedge.exe	102
PID 4864 wrote to memory of 4776	4864	msedge.exe	106
PID 4864 wrote to memory of 3548	4864	msedge.exe	107
PID 4864 wrote to memory of 4884	4864	msedge.exe	108
PID 4864 wrote to memory of 4928	4864	msedge.exe	109
PID 4864 wrote to memory of 4928	4864	msedge.exe	109
PID 4864 wrote to memory of 420	4864	msedge.exe	110
PID 4864 wrote to memory of 420	4864	msedge.exe	110
PID 4864 wrote to memory of 4752	4864	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\collaboration.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x268,0x26c,0x270,0x264,0x234,0x7ffad452c188,0x7ffad452c194,0x7ffad452c1a0
  2⤵
  PID:1928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1900,i,11360259545070487166,17426980901016178674,524288 --field-trial-handle=2256,i,10788439102180778361,8387284212771960829,262144 --variations-seed-version --mojo-platform-channel-handle=2284 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1592,i,14366497299129717370,13444390659488305139,262144 --field-trial-handle=2256,i,10788439102180778361,8387284212771960829,262144 --variations-seed-version --mojo-platform-channel-handle=2252 /prefetch:2
  2⤵
  PID:4772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2524,i,10687809205056909402,1035293756661535971,524288 --field-trial-handle=2256,i,10788439102180778361,8387284212771960829,262144 --variations-seed-version --mojo-platform-channel-handle=3328 /prefetch:13
  2⤵
  PID:5640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3552,i,4763222861924885750,5177196159411395198,2097152 --field-trial-handle=2256,i,10788439102180778361,8387284212771960829,262144 --variations-seed-version --mojo-platform-channel-handle=3564 /prefetch:1
  2⤵
  PID:5456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3568,i,18369065196924470746,12443457327443804376,2097152 --field-trial-handle=2256,i,10788439102180778361,8387284212771960829,262144 --variations-seed-version --mojo-platform-channel-handle=3576 /prefetch:1
  2⤵
  PID:4436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4292,i,11662223856057078906,13731460813323796456,2097152 --field-trial-handle=2256,i,10788439102180778361,8387284212771960829,262144 --variations-seed-version --mojo-platform-channel-handle=4284 /prefetch:9
  2⤵
  PID:2704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4252,i,18271348922774087247,602813770612268244,2097152 --field-trial-handle=2256,i,10788439102180778361,8387284212771960829,262144 --variations-seed-version --mojo-platform-channel-handle=4264 /prefetch:1
  2⤵
  PID:960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5280,i,3585675829765994246,11243925772054232601,524288 --field-trial-handle=2256,i,10788439102180778361,8387284212771960829,262144 --variations-seed-version --mojo-platform-channel-handle=5336 /prefetch:14
  2⤵
  PID:708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5284,i,5607907359719639374,722357789629777579,524288 --field-trial-handle=2256,i,10788439102180778361,8387284212771960829,262144 --variations-seed-version --mojo-platform-channel-handle=5356 /prefetch:14
  2⤵
  PID:4636
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6076,i,9363074397895308866,2174432218474635081,524288 --field-trial-handle=2256,i,10788439102180778361,8387284212771960829,262144 --variations-seed-version --mojo-platform-channel-handle=6092 /prefetch:14
  2⤵
  PID:3428
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6076,i,9363074397895308866,2174432218474635081,524288 --field-trial-handle=2256,i,10788439102180778361,8387284212771960829,262144 --variations-seed-version --mojo-platform-channel-handle=6092 /prefetch:14
  2⤵
  PID:1060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5068,i,16708125482083116060,1248206650921407228,524288 --field-trial-handle=2256,i,10788439102180778361,8387284212771960829,262144 --variations-seed-version --mojo-platform-channel-handle=1632 /prefetch:14
  2⤵
  PID:4776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4312,i,12843694868528806360,7507599235003729574,524288 --field-trial-handle=2256,i,10788439102180778361,8387284212771960829,262144 --variations-seed-version --mojo-platform-channel-handle=4352 /prefetch:14
  2⤵
  PID:3548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4348,i,6913340430847254550,18358268827987834456,524288 --field-trial-handle=2256,i,10788439102180778361,8387284212771960829,262144 --variations-seed-version --mojo-platform-channel-handle=6180 /prefetch:14
  2⤵
  PID:4884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5396,i,1603972377677078431,16097292769502526474,524288 --field-trial-handle=2256,i,10788439102180778361,8387284212771960829,262144 --variations-seed-version --mojo-platform-channel-handle=5360 /prefetch:14
  2⤵
  PID:4928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5320,i,5541466497397096623,11793377322157496152,524288 --field-trial-handle=2256,i,10788439102180778361,8387284212771960829,262144 --variations-seed-version --mojo-platform-channel-handle=5324 /prefetch:14
  2⤵
  PID:420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=816,i,12345333614734793225,5625277702897933131,262144 --field-trial-handle=2256,i,10788439102180778361,8387284212771960829,262144 --variations-seed-version --mojo-platform-channel-handle=6520 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4752

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4704

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4968

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 484bcb5c661e6c1ab7c1e8eb0c2dc5467b2aad2bbfa7193f8c39808e2bc6a2bc
MD5 0303b5ff4733f8166294ea49530b902f
SHA1 dcaf0862a7b91f354c8fbd6433da224b0d79fe0f
SHA512 3c3ff7263abf5e7941634b2d489f03a0b875cc87021be2b45ea0f9cc3587625ccfb24009d6570292f82c542e63f3bb31ee266157332eb559db4019f9a6131084
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P79:fwUQC5VwBIiElEd2K57P79
TLSH
T1A2B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c36ac766a384a109222b8b647d2f5c1c2e6c4672a4a2c6b8a01f6eac0a5df074
MD5 f9f896b0e6f281d55b1ca3fa3c1ccdcd
SHA1 db44df3874cd86a961c82d25f3ae2004f249b2df
SHA512 6b8c8d305c2d7e4a3b5efb6e1967d7db1b1ffdb7979edd315013037da369c923060dae4ef8a7219176aa7e0bc1fa4cb98e48470ea2f569243a95d3301f5a40bd
TLSH
T160D09BD575046A14C5A1303A21D1935392604835741945874051E55D5C5479743FB5BD
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 b53c58762bff2a5723ae446675e8f65fd50818b95383c8f3c7efef01af06e466
MD5 629a18fe1b7a241215c77a30d7d8d7ee
SHA1 5e7bd5b514f4e46a4b986c8b89d0025cf81a1f36
SHA512 04fd58619789dc107f680a57dba3aec42e4bab7c29c0defd7e1b8ca2d078ca4c91317932ff076171bae60d370b28de32c94039c6ab690d5004ddcb857977f38a
TLSH
T182D09BD575146914C5A1303E21D2935392504835601945874051E56D5C5479743FB5AD
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 7fd06a039b62d38dfb125ac57dbc76e05a37c1d64a66f0119f2d8a285362af1c
MD5 f612d3bd565dd057d0cc7c0377e36f85
SHA1 4fec126b1930961d81ad8c332ea57013e24e07c2
SHA512 b92f846da17b92bd11c63363e798a5bed766cd7d5e36d199d3194fe111342253f5b34a7345315288b069254339fbe3d0a9b7c30c7540b023fc14aff621f18e93
TLSH
T18761A985C72F05E1C7D8B8B17CD9D4D6B73398C94947EED1417D6E74545274A20302EC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe595809.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe595809.TMP
Size 3KB
SHA256 2acd55e9a3fb86de9bcedfb51dc0a725ee3fb657a973c4d2582655625fa87aea
MD5 593e00d3f31b660397a60e51830bad2d
SHA1 0d8a785df7337dff9885a8992c9492beba082a96
SHA512 bc473b31b8f26d17ed8e82a0232d69a9b025d8f4931d3dfe9f7e8e2deaa25f1158dcef636ea155327838dbabe96a8abf6cc511cd382ed540389f61ad98d3ec6c
TLSH
T162619785C72F05E2C7D8B8B17CE9D8D6B73398CA4A47EED241BD6E74585274A20302EC
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 63a653e17fbdd7c8ccbb59b6b36b983bc64c3f0cdcf975c03e3bee47f325732a
MD5 a0b488251462be4b85a41f5249028d92
SHA1 522c4992e731f65f00e33c299e68730ee8525992
SHA512 1b6d016622ee77ef608c71151325be19364a088a82a757e461c2ab6bc3bba5c517b5b1809a474250675afc241814e5f4ac46662ee9fa462478d39b8d3cc62719
TLSH
T15511BAF3C3D5856E890116F06A24AE2BCE2D0602422C3C2989D4FF2B93E3075E10299B
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

b11c8793-79e8-48cc-8f65-fe36c7d34dcb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\b11c8793-79e8-48cc-8f65-fe36c7d34dcb.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 fbf0c8d909f4208f298c3a9ce74eef8ecd1f0bdf4ad39bf6a2cce8737081ed18
MD5 d29f8158ca17f5369801aa003e515151
SHA1 abe826d98d2ac456073c5c6d8d8c2dd059a6b255
SHA512 ce1de22524b2c77369e3fdc4e8e4f4bce27a2b065a11a90cb3d0832dd92da15e5bbc032ecd6ccb7373105b3a7902c0b6efdeb8870d5943db03cb4eaf3367d08d
SSDEEP 192:sxRERnyM/jK1Ml8UQrbB/fIsyzYtsmZ+zoA8peK/g6+WNIYxMJJG8ZIgDwJ:sxREdqPB/fIsywFF/5IjzlY
TLSH
T1B962E915A9289977CCDBD21DFA427F93D6F91573A1900E44AAFCDA1C00E7ADD221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 0a34a65dec3130ee714c894531a6f05a256741ef79d9a7b5ec5832e8f14b0c9e
MD5 09dc24e6f75f9e8de3d463e06d4b5777
SHA1 c089563976b198c7735fdff97b7a9be6dd8efee1
SHA512 95bb4c2edc7b0a0291848385506eb49ce15d518b98138c8179d86a327bf1eadf0e3ff7d50d57cdb4b977f42196626b22f8fb690c365d06c8bc979d69279dd2de
SSDEEP 192:sxRPRnyM/jK1Ml8wbB/fIsm7YtsmZ+zoA8p4K/g6+WNIYxzJJG8ZIgIJ:sxRPdlB/fIsm4F7/5Iuzls
TLSH
T1B052E9056A289977CCDBD21DFA427F53D6F91573A1900E44AAFCDA1C00E7AED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 528ba47dd38cb6e963ea426dc951d2f4963d2d72bff092826972af74bcb996b5
MD5 ba2cbe840b6fc6ca8d7efcef3ffec039
SHA1 ff98959fc45a0bf0babbdf89ff94390da3f1d861
SHA512 8bf81b40bdfe20a325bb485c04e26b016da18c525392c47f130d3ed36a9b2feef14b0c39f34bc2b182e1aaa1ffc894f609a94a171be2e32d5a044f04dfa28146
SSDEEP 192:sxRERnyM/jK1Ml8wbB/fIsy7YtsmZ+zoA8p4K/g6+WNIYxzJJG8ZIgDKJ:sxREdlB/fIsy4F7/5Iuzla
TLSH
T13352E905AA289977CCDBD21DFA427F53D6F91573A1901E44AAFCDA1C00E76ED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 fdacdfee9f08605aa6eb6b9707ac903fd5904db0eb039276fb7d197cd951e1db
MD5 1c01c67a3a124c260546f2633ce6b2e7
SHA1 9dc0138cedc63e2e151439469c1d7fd9e09d64ed
SHA512 f6433cf823261772750ed8256b12a5eaa97d28866b0777fa20902b7c872c72f0cd0c60e52e23b6b1da2fb533cbde619f7b0a6c06353c2324e4cda5a5cc2e48ee
SSDEEP 768:0xCyAjWgbrfM18F1+UoAYDCx9Tuqh0VfUC9xbog/OV9rVAdroJPeh1:0xCyAjWgbrfM1u1jacpAWJPE1
TLSH
T1A0C2EC3B640CC77E4F844AADEC25AFD77DD802CB97988D544BEA880C03C67EB511A5DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 f369845bbed726629e4368d41268135a6ce97ee4162a77b91033117aad82ffaa
MD5 38ee3404cceda89a8a948bb573c1d9e9
SHA1 335f64506ccb077c0aeb950f7611b8ceb5024baa
SHA512 1341b80b892afbe23d0a98eb6cc2d07f7903420bb9d42c063c7d325ab0e1834116065ad1bb7d9860a4bb0f386c7fc40828d15ad980da45eb8db3c95d24a559e5
SSDEEP 48:KQzIJKQIcryoZKZjZGZaZwZkZoZkYZkZBZPIBZSZkKOZBmZIZkiZ6Z0TZhZwZHuW:KQzSKQICGDyKUUDuYK3Kq6
TLSH
T10A910447B07F024229FE680C8564D616D982B1B33658A42F7BE845BA1F7AE510EFD8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 6ff71e3bbd128aa5ffe93c49d1a6b850eae0e3e8545c1d8a246a1802ecd2c628
MD5 dbe89e67a0e4a3e14e2343f8f5f7dc7b
SHA1 953b96f09da9d22d7fe28e83a8bea343a92c7eb4
SHA512 fd688a473016f06ce19511f58c8dd8d61ce6b9ceefb658275d6b0288b0a9c5e0db56e2e7c75d1e6625ee9e9d5da3b35e3d6d4dea76a4901b359a75dd54ef7252
SSDEEP 768:4Y3sFxikKL2xqtMjF669yrqUjWiIwwxMtJojKgqmUag:4Y3sFfHjF66INWZTMTfgRU1
TLSH
T128F2BF7068646AB3C8FAE785B2123787AFF09093D2C44FD8D5DDBA1D051B4D8270792B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 1543bd9150b523943c76d0750ee38889f218a424a5d9fb4fef8e09e339acb7cd
MD5 eeef65763ee73596c1d1794594b4d461
SHA1 52e8c77b8bab6cbb17681ea1fb234baf64c0e1d1
SHA512 277b6bede4652cfcae1d34bc3540f399b1334a21c5476316f834a5aa337a120ae66468a383e9e65735cbf08320ec29ffcbbae0de63c63d9dbe658c2452106ac6
SSDEEP 768:1Y3lFBikKL2xqtEjF669yrqUjWiIwwxMtJojKgqmUag:1Y3lFPRjF66INWZTMTfgRU1
TLSH
T178F2BF7068646AB3C8FAE785B2123787AFF09093D2C44FD8D5DDBA1E455B4D9230782B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 fa0728678f829a02f9e640f087c9dc0ceb2cf944859486e1b3466e6f5b02c6c1
MD5 a4f62ef28fc75e04ee9fb388a92044cc
SHA1 8e767d11c9faf0a20e51e50d880c322c3b486bbc
SHA512 030e20253a7c5e97f5de98969e8f6cdc4d16ad1c381e459060f6b240be7b1f5ab11f421b0b7b743f217ad76448c306747cde751e75d38979567cc04c3ca00ca9
SSDEEP 768:JD3sFxikKL2xqtLnF669yrqUjWiIwwxMtJojKgqmUag:JD3sFfsnF66INWZTMTfgRU1
TLSH
T1CAF2BF7068646AB3C8FAEB86B2123787AFF05093D2C44FD895DDBA1D455B4DC270782B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 5c27c5e37a3a2de17d29fe3fcc7cbba23112af14fcdc4a0f37cd125440885988
MD5 41f625545b5cf6426b199fa65dc6db07
SHA1 0729922d6a8b8c4caac969d13cf942d81ba887f2
SHA512 a40d6e3d4963f698ea9a9ca45878303f711298a259d04cf85869725e98e3133f60b0bac9d405d36766983b3ae0e430a1536d5b620584964df9a09e4b946eda1d
SSDEEP 768:arv+4UNbdl3cPkKL2x5jF669yrqUjWiIwwxMRbUiler:absbX3jzjF66INWZTMVUsQ
TLSH
T14903BE34A8589AB3CDF2D28572437683BFB4109396C50F98CADD670D469B4DD2347A2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

49909753-aace-404b-8a6a-1a8519a1d709.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\49909753-aace-404b-8a6a-1a8519a1d709.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download