dccd8b5c8c0d99629815ead3314c0bc75f081cfaa8dbd7eb033de47ef89a4414

Analysis

max time kernel
149s
max time network
151s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/08/2026, 12:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
text.html
Size 116KB
Sample260810-pm286agb37
SHA256 dccd8b5c8c0d99629815ead3314c0bc75f081cfaa8dbd7eb033de47ef89a4414
MD5 b88eed9ebb653bb700c5838744f42aaa
SHA1 872037e424c0228854d4cf37a378453af363a8fc
SHA512 956ca045d076b4ae401a0587bd30ac9b961d01130db0d09c093598eb07c5b482837ee4718702302786bcc9cd6931d5f14f6bfea1ddf15846ad6476854c6a96fe
SSDEEP 1536:e95fMXM9F0Mvhk1aHZIaIV4g6W2oyqc4SQ:eDf19F0MhTT4SQ
TLSH
T1A8C323D26054952F113B6EC0A6642F0CFF73A347FA9D7EE2715D16A24FB7CA0A90B244
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2912	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134308386914781094"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2246396966-3025826688-3847171515-1000\{6932C8FA-00F2-43EB-B84D-7D22B137774D}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5196	msedge.exe
5196	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 5956 wrote to memory of 5988	5956	msedge.exe	88
PID 5956 wrote to memory of 2912	5956	msedge.exe	90
PID 5956 wrote to memory of 5320	5956	msedge.exe	92
PID 5956 wrote to memory of 5324	5956	msedge.exe	91
PID 5956 wrote to memory of 5320	5956	msedge.exe	92
PID 5956 wrote to memory of 5324	5956	msedge.exe	91
PID 5956 wrote to memory of 5324	5956	msedge.exe	91
PID 5956 wrote to memory of 4868	5956	msedge.exe	93
PID 5956 wrote to memory of 4868	5956	msedge.exe	93
PID 5956 wrote to memory of 4868	5956	msedge.exe	93
PID 5956 wrote to memory of 2844	5956	msedge.exe	94
PID 5956 wrote to memory of 2844	5956	msedge.exe	94
PID 5956 wrote to memory of 2844	5956	msedge.exe	94
PID 5956 wrote to memory of 5360	5956	msedge.exe	95
PID 5956 wrote to memory of 3176	5956	msedge.exe	96
PID 5956 wrote to memory of 5360	5956	msedge.exe	95
PID 5956 wrote to memory of 5360	5956	msedge.exe	95
PID 5956 wrote to memory of 3176	5956	msedge.exe	96
PID 5956 wrote to memory of 3176	5956	msedge.exe	96
PID 5956 wrote to memory of 5784	5956	msedge.exe	98
PID 5956 wrote to memory of 3832	5956	msedge.exe	99
PID 5956 wrote to memory of 5784	5956	msedge.exe	98
PID 5956 wrote to memory of 3832	5956	msedge.exe	99
PID 5956 wrote to memory of 2052	5956	msedge.exe	101
PID 5956 wrote to memory of 4376	5956	msedge.exe	105
PID 5956 wrote to memory of 4380	5956	msedge.exe	106
PID 5956 wrote to memory of 4412	5956	msedge.exe	107
PID 5956 wrote to memory of 4624	5956	msedge.exe	108
PID 5956 wrote to memory of 4624	5956	msedge.exe	108
PID 5956 wrote to memory of 5196	5956	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\text.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffb9e33c188,0x7ffb9e33c194,0x7ffb9e33c1a0
  2⤵
  PID:5988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1856,i,3090002172393599163,15086613469714856859,524288 --field-trial-handle=2556,i,10779517799803380351,6852388843829755213,262144 --variations-seed-version --mojo-platform-channel-handle=2928 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1612,i,2009425184034949840,306514610374377000,262144 --field-trial-handle=2556,i,10779517799803380351,6852388843829755213,262144 --variations-seed-version --mojo-platform-channel-handle=2520 /prefetch:2
  2⤵
  PID:5324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2364,i,916184486832548682,13148874626339466311,524288 --field-trial-handle=2556,i,10779517799803380351,6852388843829755213,262144 --variations-seed-version --mojo-platform-channel-handle=2940 /prefetch:13
  2⤵
  PID:5320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3516,i,14428386919851660897,16724892441985542586,2097152 --field-trial-handle=2556,i,10779517799803380351,6852388843829755213,262144 --variations-seed-version --mojo-platform-channel-handle=3552 /prefetch:1
  2⤵
  PID:4868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3532,i,7643763459941797975,16890781554506070455,2097152 --field-trial-handle=2556,i,10779517799803380351,6852388843829755213,262144 --variations-seed-version --mojo-platform-channel-handle=3640 /prefetch:1
  2⤵
  PID:2844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=1672,i,13747192028682524119,6518063984863146113,2097152 --field-trial-handle=2556,i,10779517799803380351,6852388843829755213,262144 --variations-seed-version --mojo-platform-channel-handle=4272 /prefetch:1
  2⤵
  PID:5360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4268,i,8833008459632407578,11692399774371916301,2097152 --field-trial-handle=2556,i,10779517799803380351,6852388843829755213,262144 --variations-seed-version --mojo-platform-channel-handle=4288 /prefetch:9
  2⤵
  PID:3176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5284,i,1375461927591906682,18273746899903117797,524288 --field-trial-handle=2556,i,10779517799803380351,6852388843829755213,262144 --variations-seed-version --mojo-platform-channel-handle=5368 /prefetch:14
  2⤵
  PID:5784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5308,i,14726248884540584224,11398590974919164022,524288 --field-trial-handle=2556,i,10779517799803380351,6852388843829755213,262144 --variations-seed-version --mojo-platform-channel-handle=5384 /prefetch:14
  2⤵
  PID:3832
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6040,i,15921852843602128937,13072538578599619471,524288 --field-trial-handle=2556,i,10779517799803380351,6852388843829755213,262144 --variations-seed-version --mojo-platform-channel-handle=6060 /prefetch:14
  2⤵
  PID:1744
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6040,i,15921852843602128937,13072538578599619471,524288 --field-trial-handle=2556,i,10779517799803380351,6852388843829755213,262144 --variations-seed-version --mojo-platform-channel-handle=6060 /prefetch:14
  2⤵
  PID:2052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4276,i,11370783813139837516,14927975494767043044,524288 --field-trial-handle=2556,i,10779517799803380351,6852388843829755213,262144 --variations-seed-version --mojo-platform-channel-handle=4216 /prefetch:14
  2⤵
  PID:4376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4280,i,9234495156112254617,3511993353747258841,524288 --field-trial-handle=2556,i,10779517799803380351,6852388843829755213,262144 --variations-seed-version --mojo-platform-channel-handle=3672 /prefetch:14
  2⤵
  PID:4380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4312,i,861328858019230792,5893330373929969134,524288 --field-trial-handle=2556,i,10779517799803380351,6852388843829755213,262144 --variations-seed-version --mojo-platform-channel-handle=6148 /prefetch:14
  2⤵
  PID:4412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6160,i,1059579827636139074,10284662646274872889,524288 --field-trial-handle=2556,i,10779517799803380351,6852388843829755213,262144 --variations-seed-version --mojo-platform-channel-handle=5600 /prefetch:14
  2⤵
  PID:4624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5336,i,1372346603405105686,8509247866194318726,262144 --field-trial-handle=2556,i,10779517799803380351,6852388843829755213,262144 --variations-seed-version --mojo-platform-channel-handle=4312 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5196

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:776

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3716

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 08a3eccff4cd9b05162ffe0d083662ea8cd60457899147f42dbbf95a0a97d97e
MD5 394c25b8b347a39d61b9cf28babb5c77
SHA1 c7334bcf8642ac580d30cf31659724fe1ab323c9
SHA512 8e5c09dada01bf020bbf53884d65940c521dc62e17d9ce99fe6c571edde4b95c7c7716f2eda97b70568b2cbac8823e7afed5a9bac7be39d1acc6fc95c23a4b1c
TLSH
T1F6D0C038762962C2C92725B2CC3063007330007030B587425071440C8E3489667CF3C7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 168dc438fa355b9b84e416f9d4caca14da218ad190d72da09fe489277625815d
MD5 39064a84dfec9bbd8c4b789b6d7a7c62
SHA1 5d817a4df5ed7bd1eac0c4bc0464a76007ad0c46
SHA512 3a4f32a1ad3eb6c391e6d11f4f6ba07c4d21cc935ddd8fd93306857b9e0cfda06c39786a872cae88f394320921a63296ad4df0e61334710db192febec2f48618
TLSH
T1B5D0C034763961C2C92725B2CC3163007320007030B587425171840C8E3489667CF3C3
MD5 SHA1 SHA512 TLSH

Submit Download

880eac1e-307e-4ff8-920b-3dccf9c399ba.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\880eac1e-307e-4ff8-920b-3dccf9c399ba.tmp
Size 14KB
SHA256 4d619ff2a5e8c068f0a1fdcdab95c970cfc957ebb908746818c81b758da5955e
MD5 96e924e24fa463f7a9cf1effedf244bb
SHA1 a766346e31a1015d983089ad0fd7aef849746c50
SHA512 9604afa24def3a7589479cd288c7c03fde33518552378cdf4f04f14adfbca23cf418d06e7d716967157d1a4d3aeef37c724751a73e2efd1717c769d3a1d6805c
SSDEEP 192:sxRDROyM/jK1Ml8wbI/fTsAyd/G9zoA8p43Y/g6+WNIYZ7PqFs/G9IgDDJ:sxRDMlI/fTsAydOwOY/5ImEx
TLSH
T19D62C8056A24997BCCDBD20DFA557F93D2FC1563A1901E48AAFCDA1C04E7ADD221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 bb7f053909722cf0e834d3a20d5e0f870dc6e20afed32ec0007ff7b7f2a8131d
MD5 40707ade96f91e20e68af8f28c6cbbd6
SHA1 dd734e4cbe379e06608cc6f24d59be3099183cdb
SHA512 8da03189faeb07ca7fa973ff7176e562e8b67b092665d54aa98437e5c82dd653316a8157e56a474bee06e0575c59925ac529ee2c2524573f695b4326a707380d
TLSH
T1FF61B794032E8DE3FB658671D0E150DEF2F488C4939B2E2D5DF0E6B8A48EF756447425
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a3625.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5a3625.TMP
Size 3KB
SHA256 a7378aed7853c31cc625e30fe46d9d44001ec7585c2c06b13c33adfcfe64ffdd
MD5 d754d3cab7c29fa15e24e31ae84ae389
SHA1 0addab92094ad900de03861ef88653fff804a148
SHA512 1035777bd1534103463502b663932b7cd6be6fdfc6d27ee6ce4da931e6fd42e29f197609c8847f79b5e554de6345269f4cc96b45aa0db96fc2c22a3b4f09658a
TLSH
T1F061B794032E8DE3FB658671D0E150DEF2F488C4939B2E2D4DF1D678A48EF356447425
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 fecb8ea1d563e0649f517c1b1efcdc4ea75a71e957625513f816a86fbdf0847f
MD5 7c420254579b1c9e05947f10461a2fd7
SHA1 cbf88d6824c25e47fc2c33a24808c3c3737a360d
SHA512 18678cab3be1c892937b7149dcfd7879e3888a2c27984ce79ec7112a0cfd8fd9b0c93f0ae7679a57cf059ea0c83e4762968547ac9fa9b68f353cb4edba97b60f
TLSH
T102319EF783F4857E8A0196F0AA18AE2FCE2D0515431C7C6AC5E4AE2793F3462E041A5F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 ed6080566e26645722ae5e9f765c9470a85acbf4e24f3709dae78112689dae86
MD5 cc725a0da031dc6f605fe1c0137ef4c4
SHA1 ccce4c2a7722c4b170cb6caec15f3a3d19f3a0f4
SHA512 e329c60f21fc24bc92d6274a8c09cde1692d3c91f7d4fb75fc95660444d82914d1e50ab8309a9fca6cb9d24ca1aae2d2e3a3699aaa826e998fd78807da40a460
SSDEEP 192:sxR0ROyM/jK1Ml8wbI/fTs7d/G9zoA8p43Y/g6+WNIYZ7PqFs/G9IgIJ:sxR0MlI/fTs7dOwOY/5ImEs
TLSH
T14852C8056A28997BCCDBD20DFA557F93D2FC1563A1901E48AAFCDA0C04E7ADD221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 d00a57fc3612bf5cf163bdffbbd066add955fe2b09539a256bab67c9442417e3
MD5 07efb970a55f5ed303be3e39a7050f2c
SHA1 c400444569b2209220146e73f094ec4430ec7c5b
SHA512 bc796b28ffdef07ffcd7adf4a05d906f0c13e7147f497f7b26a123dd7427619fc2818257cbf432cdb7019741c6102b3e2b5e575720a4892ca6835193e6655473
SSDEEP 192:sxRDROyM/jK1Ml8UQnbI/fTsAyJG/G9zoA8pe3Y/g6+WNIYZ7PFLs/G9IgDFJ:sxRDMqbI/fTsAyJGOwEY/5I3Eb
TLSH
T1C262D815A924997BCCDBD20DFA567F93D2FC5563A1901E48AAFCDA0C00E7ADD221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 0c9690d25227a3a101e859c35773ad4b0c499fe081b525c3701a33eb17d4b402
MD5 1f52c925b6a50cd4556633a2ff0857c8
SHA1 e422bba1d9d77aa5402d8e2b6839eb522ff1b62c
SHA512 8cbc2ecb4ce4043c3be2ca8b03f2940a21314cd6642771ad861f138fefe54d445a9e3abcfd787c7140ea614b0a4e3843b40c546725dd8737eb04ddd3288b0fe6
SSDEEP 24:KSitLEitHitWitIPitNSitmitGitx1itaitBDitsI4itSitxKXitOhPitoitx1Rq:KsSIfKjCsLyhIIHK1WsFxIxKC08Tylz
TLSH
T11291E2C6B4BB06503CBE251CA1A4C626DB81B477701DED6B37A821B50F66F015EFE8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

b47f2341-0f5f-46fe-88de-c8bb27bcc3aa.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b47f2341-0f5f-46fe-88de-c8bb27bcc3aa.tmp
Size 27KB
SHA256 e22408594dc1994bece518cc0b5577eaba1e215bb52550507cdfed8247574ed4
MD5 5d52900da8548f2a582c96a5a2c923e0
SHA1 bfc54918474cf364d6eccf9dcff71c4535e5b5b9
SHA512 4cd6cb169910be99e6ed50981c135789dcaaf637feb0665fc11b86b63e55a1c07191851d3976534037340fde78daf6015a8da4ab95929a1ebb03375df25e72d9
SSDEEP 768:kfISEvWgd5fWb8F1+UoAYDCx9Tuqh0VfUC9xbog/OVMSV2AroHh0we+0:kfISEvWgd5fWbu1jaBU2LHh0wB0
TLSH
T1C2C20C2B640CC77F4F844D9CEC25BED6ADD802CB97988D5447EA890C03C77EB522A5DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5ad0de.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5ad0de.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 30KB
SHA256 6b809e828550821f265f9bc3acc5a6f2bfecdd365a1409b9efb00596ba45e31a
MD5 35c12fa99a46984a0034a6d261fdebfb
SHA1 06471a72a2049f24a35ea21f81617c4b03619e12
SHA512 508ea1f8052fe68f690fdfd4180b68cb2db3797c8842328b44d964a37d3dd0c2b45b2fc906bc4bb79f5eb84a4a80767ed6f66b2fe3dbc70eb90786c05f6c3774
SSDEEP 768:pnV3cntq3LjLO7Aam6aQMGdjWca4Ghf9zj0:pnV3EtmaME6pzQ
TLSH
T1DDE2AF315C6898779CA7A295F61F2283FEF4526385C85F84C5EDAB1D02E719E230BC1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 9312b94984f21adbf119c73768ab3b35c956fe80ea2c07fcd26a3f2558090c3c
MD5 0116893473e78bca2d491940d84b6172
SHA1 b2ed90a6bda50bf523a50908463d3a12c40e8ebd
SHA512 8079978046446454a4975c8d32f6d591fb9686fc092be499c148eb514bb1f00592c28f22f596597f2d87134319af8253021d403d9125ec4588e2e85743040e8c
SSDEEP 768:3rv+4UNbdq3Drq3LjLO0Aam6aQMGdjWca4GhfwzPeU/:3bsbc35WmaME6p0H
TLSH
T197F2AF32A86CD5739CB79695F25F7687BEB4526389C80E80C9D96B0D43E708E230BD17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 0596905286dc7885d40dcf54703a9d1b268b904e378a747bc5cbc24240447ce7
MD5 3848de01962c74d1af0509d84f329c0b
SHA1 07641f407b3e555a81a5782d5dcc8a86f1cb18dd
SHA512 2619a8725032210dcae632946865818e1047bb021743905c8ae594a61b7ae3d83e37c5b7675bc6eb0c8bc9e028b234c6e6fa9710a4c9e412f89bcad685b53330
SSDEEP 768:Hrv+4UNbd+3WStq3LjLOOAam6aQMGdjWca4Ghf9zOv:HbsbM3XgmaME6pzo
TLSH
T162F2BF31A868D8739CB79595F21F7683BEB4526388C80E84D9D96B0D42EB09E230BD17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 30KB
SHA256 ebc45474623045458bec080e81975116811d1ccc75f160a3080d9850171d8ca1
MD5 16dab83c61bf02f6a526d7c7a9eda416
SHA1 d7c0f99c4886045a7ae4efdd0afd6924f3105eea
SHA512 5da3a3732990f0ff42a0b60d49ab8c4b355534301fee91c763ea15620b7da7a452a9a472e533239725e0dd4399c8531f4c3780f1c2af5c299b27f4f984eec501
SSDEEP 768:dV3Zntq3LjLO7Aam6aQMGdjWca4Ghf9zj0:dV3ltmaME6pzQ
TLSH
T197E2AF315C6498779CA7A295F61F2283FEF4526385C85F84C9EDAB1D02E719E230BC1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 989a59f3e86b49c3724af8ad6d95d3adfa31c80200087237ff1e06ed7a95d8ce
MD5 3afcc6b92ecd927970dda748b09d65c6
SHA1 24e5d9439366df538bd187bea257e42e7bb9a2cd
SHA512 8d00868e50b62c55b5d14969925e225f752c4429528691415dd45d0a8f6a21906d775e9dc78a09e1d2457f219c896fc69841d1003b44bb1f0a05d2a757608a69
SSDEEP 768:xBFQJ3Ewgfntq3LjLFAam6aQMGdjWca4Ghf9zj0:xQJ3HmaME6pzQ
TLSH
T195E29E324C94C97B9CAB9B95F61F2243EEF44273C8D89E94D6DCAA0D02A719D130BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 a13bf4e78866f6b8ed35a96d6a15d348980fef739b48e3c96d0a900d9a487c50
MD5 0e64e607073623874b6918eda405235e
SHA1 8e81f88d653fc9abbe1bd9f9213282982b5a2af8
SHA512 fd77b78cbbbb817f3721d933307fa65af6141fbfe8700beeb085f0a90229afadb9d458f3950d2864335d47e957dc4722fe96116d4afc1b180036d7263456bd94
SSDEEP 768:/rv+4UNbdq3n9q3LoAAam6aQMGdjWca4GhfBpPeU/:/bsbc3NKmaME6pRH
TLSH
T1CDF2AE31A8689973DDB79A99F21F6787BEF421A384C40E84C9D96B0D439718E2307D27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3902e509-a4b0-42be-acdc-f505457fa97f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\3902e509-a4b0-42be-acdc-f505457fa97f.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download