78221444166076dc143de1ab2b8ea61ff1852876bb4ebe61e6e30b13b2d37626

Analysis

user interaction
yes
max time kernel
148s
max time network
151s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
21/08/2026, 02:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
ussi.html
Size 5KB
Sample260821-cmfc6seq7x
SHA256 78221444166076dc143de1ab2b8ea61ff1852876bb4ebe61e6e30b13b2d37626
MD5 6f17c29d5858d7d320bfc1d0b633ea06
SHA1 6d210468eb38857232269cdfd9015492024fd070
SHA512 8f358032ed4b95b6aac55a89c84f75a4f7c657810a9e822484307b204f717cddea6959dcf9a697502455bbcf49b5ee8fc25a3c210119a8a9510e4d44b26f6e57
SSDEEP 96:PNy1toXZzIEb0EaW87HBkCJjYTcTqsS2BOyV5gQ2j0wn2dJtxYzueh8GTUmw:PNUtkCBhkCJj4sqsHBXVm0w2dJtmywbw
TLSH
T186C15AF36636A027CBBA3F4168FB33688361B685BB01D05CEAD0E72C92DDE5B81511C4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5348	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134317518997342497"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3989226554-2204910950-1522900112-1000\{A9F943FF-F1A5-4C42-A9C9-2264CF994716}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5356	msedge.exe
5356	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe
5540	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 5540 wrote to memory of 4232	5540	msedge.exe	89
PID 5540 wrote to memory of 4296	5540	msedge.exe	91
PID 5540 wrote to memory of 5348	5540	msedge.exe	90
PID 5540 wrote to memory of 4296	5540	msedge.exe	91
PID 5540 wrote to memory of 4296	5540	msedge.exe	91
PID 5540 wrote to memory of 4912	5540	msedge.exe	92
PID 5540 wrote to memory of 4912	5540	msedge.exe	92
PID 5540 wrote to memory of 3560	5540	msedge.exe	94
PID 5540 wrote to memory of 4788	5540	msedge.exe	95
PID 5540 wrote to memory of 3560	5540	msedge.exe	94
PID 5540 wrote to memory of 3560	5540	msedge.exe	94
PID 5540 wrote to memory of 4788	5540	msedge.exe	95
PID 5540 wrote to memory of 4788	5540	msedge.exe	95
PID 5540 wrote to memory of 860	5540	msedge.exe	96
PID 5540 wrote to memory of 2876	5540	msedge.exe	97
PID 5540 wrote to memory of 860	5540	msedge.exe	96
PID 5540 wrote to memory of 860	5540	msedge.exe	96
PID 5540 wrote to memory of 2876	5540	msedge.exe	97
PID 5540 wrote to memory of 2876	5540	msedge.exe	97
PID 5540 wrote to memory of 5024	5540	msedge.exe	99
PID 5540 wrote to memory of 5024	5540	msedge.exe	99
PID 5540 wrote to memory of 1780	5540	msedge.exe	100
PID 5540 wrote to memory of 1780	5540	msedge.exe	100
PID 5540 wrote to memory of 4164	5540	msedge.exe	102
PID 5540 wrote to memory of 4752	5540	msedge.exe	106
PID 5540 wrote to memory of 5636	5540	msedge.exe	107
PID 5540 wrote to memory of 5528	5540	msedge.exe	108
PID 5540 wrote to memory of 4144	5540	msedge.exe	109
PID 5540 wrote to memory of 4144	5540	msedge.exe	109
PID 5540 wrote to memory of 4240	5540	msedge.exe	111
PID 5540 wrote to memory of 4240	5540	msedge.exe	111
PID 5540 wrote to memory of 5356	5540	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\ussi.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2d8,0x7ff95e8ac188,0x7ff95e8ac194,0x7ff95e8ac1a0
  2⤵
  PID:4232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1836,i,15336008716841381866,9025532216877117586,524288 --field-trial-handle=2404,i,9998818656334432609,16274122323146348463,262144 --variations-seed-version --mojo-platform-channel-handle=2784 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1548,i,17562035523873678749,4751513447602482135,262144 --field-trial-handle=2404,i,9998818656334432609,16274122323146348463,262144 --variations-seed-version --mojo-platform-channel-handle=2400 /prefetch:2
  2⤵
  PID:4296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2248,i,2868092070954407350,2008343624394499256,524288 --field-trial-handle=2404,i,9998818656334432609,16274122323146348463,262144 --variations-seed-version --mojo-platform-channel-handle=3036 /prefetch:13
  2⤵
  PID:4912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3612,i,16223879014829586850,6983735557268423712,2097152 --field-trial-handle=2404,i,9998818656334432609,16274122323146348463,262144 --variations-seed-version --mojo-platform-channel-handle=3644 /prefetch:1
  2⤵
  PID:3560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3616,i,4051345440256159643,7824002102777755698,2097152 --field-trial-handle=2404,i,9998818656334432609,16274122323146348463,262144 --variations-seed-version --mojo-platform-channel-handle=3728 /prefetch:1
  2⤵
  PID:4788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4400,i,5361617902299375132,16813576264638268193,2097152 --field-trial-handle=2404,i,9998818656334432609,16274122323146348463,262144 --variations-seed-version --mojo-platform-channel-handle=4352 /prefetch:9
  2⤵
  PID:860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4284,i,17855402662264294481,3390371963273301449,2097152 --field-trial-handle=2404,i,9998818656334432609,16274122323146348463,262144 --variations-seed-version --mojo-platform-channel-handle=4348 /prefetch:1
  2⤵
  PID:2876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3800,i,971201951717853275,8525315378518696371,524288 --field-trial-handle=2404,i,9998818656334432609,16274122323146348463,262144 --variations-seed-version --mojo-platform-channel-handle=3812 /prefetch:14
  2⤵
  PID:5024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3640,i,6361771918416320967,12885962572526002605,524288 --field-trial-handle=2404,i,9998818656334432609,16274122323146348463,262144 --variations-seed-version --mojo-platform-channel-handle=5472 /prefetch:14
  2⤵
  PID:1780
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6136,i,878399011412908955,10251487136678716868,524288 --field-trial-handle=2404,i,9998818656334432609,16274122323146348463,262144 --variations-seed-version --mojo-platform-channel-handle=6152 /prefetch:14
  2⤵
  PID:988
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6136,i,878399011412908955,10251487136678716868,524288 --field-trial-handle=2404,i,9998818656334432609,16274122323146348463,262144 --variations-seed-version --mojo-platform-channel-handle=6152 /prefetch:14
  2⤵
  PID:4164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4396,i,2154290359727012750,6803853206616957847,524288 --field-trial-handle=2404,i,9998818656334432609,16274122323146348463,262144 --variations-seed-version --mojo-platform-channel-handle=5052 /prefetch:14
  2⤵
  PID:4752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4976,i,5403968456228076348,12099252136251252083,524288 --field-trial-handle=2404,i,9998818656334432609,16274122323146348463,262144 --variations-seed-version --mojo-platform-channel-handle=6152 /prefetch:14
  2⤵
  PID:5636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3696,i,16006444239465293134,8795533908925285453,524288 --field-trial-handle=2404,i,9998818656334432609,16274122323146348463,262144 --variations-seed-version --mojo-platform-channel-handle=3576 /prefetch:14
  2⤵
  PID:5528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5660,i,16768728789894945789,2281881236668493448,524288 --field-trial-handle=2404,i,9998818656334432609,16274122323146348463,262144 --variations-seed-version --mojo-platform-channel-handle=5692 /prefetch:14
  2⤵
  PID:4144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6100,i,17562729640517300671,15493141175290884628,524288 --field-trial-handle=2404,i,9998818656334432609,16274122323146348463,262144 --variations-seed-version --mojo-platform-channel-handle=6108 /prefetch:14
  2⤵
  PID:4240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=3812,i,10665477428682290876,1300194942474943791,262144 --field-trial-handle=2404,i,9998818656334432609,16274122323146348463,262144 --variations-seed-version --mojo-platform-channel-handle=6492 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5356

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3144

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5460

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7f7f7efafb9f87082470af84df3b906033b9d533fb7a188458a4e181362f2170
MD5 8af1f60999c332d8cf9a392cd968a81c
SHA1 93834a1f070ff24041a0deb17d95d868998c98ba
SHA512 95d5c6b0fed3c3dce459178eafa2e9fa13b06caf50a5b294d66ecf16bf91357eccebec57e01d50e054232862c252fc80f7300e865318ec24078f9288a88c63d4
TLSH
T17BD02B206A444A4CCDC0B03064A2EA18E2104135680013C44001B06988901830B970DF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 5e34bc4625bf22507150f49d8c28444bda8222ea36c2a7d431bbdaae5c134a9d
MD5 e1ae04b3e73ad5ac4854b3b71e22d4d3
SHA1 221461b4f2d9e84e2f881b5a79edfef3705178db
SHA512 58529610d3f5dd7778bff3b81dd8abd9d79702eff78583d0294f3999089de0bbf84f0abad703269c0988835522b1d8d48e9f3c65472a409c5868fc3547c3fb1b
TLSH
T138D02B206A54494CCDC0B03464A3EA18E2004135140013C44001F07988901830B970CB
MD5 SHA1 SHA512 TLSH

Submit Download

0345a4c6-08d4-4a8a-8f13-bec1f8f063e5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0345a4c6-08d4-4a8a-8f13-bec1f8f063e5.tmp
Size 11KB
SHA256 e3ef3d5988f524a701b4b06b808e1e05963e65dcf4c37ef9a70f5e51f84c8c3f
MD5 9f2e16d177036f0f183b1fe669c6260a
SHA1 d95064cbef920069eb7fc10f4571f8bd5647608d
SHA512 a5bff4504b3860820853c547481f1d281d803433ff204ff61d095d2ba8ff382e808cc5a5a0bb78f85d40f0ba4bf4f7ce7e829e2a947289381a6f920bf30eb589
SSDEEP 192:sxR5RIba/fnsAufHm2Sm7aCCzoD8p4G/g6+WNIY3B20BiGBcoIgIJ:sxR5Qa/fnsA82DH/5IAJs
TLSH
T10532A7166E28A93B8CC7E21DBA657F53E6F9503261D16E48FBFC960C04E76DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 a370e81000f3a6249208efe47125cdba679b846587bb0de88789cdfe82e35074
MD5 087e76b5e308d42359af9ae0a9efe4ec
SHA1 79465b018bea00a698103c31e2eb93a27c3ab46b
SHA512 d249bd02ecfe1018d48c77118fa9abf3fa345794f6f9421a72d7aa39fdb35b0b44e0f6a141748dc829c78fbc3ef46cd44f8166f0de5d491153fc9177c1e50044
TLSH
T1FF5130B06B231BB2FFE895B573DE80C9B27685554063EE2E405063744DCB77E50DB058
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59a1c4.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59a1c4.TMP
Size 2KB
SHA256 36a6a8409680889debba1c662a74392238357cd5ebdfffa2a6338d1ad6294f83
MD5 b1ebcf82054249e48ec9ad628656a22a
SHA1 c371711b3a7cfbb0ed94a69579f46c6382ccc126
SHA512 666efe3ffefc153ec7fc20a05433e0225e7ffe988b01bf0af498977bde075976214406748645118f7d0cea9eca69f29590b7bcbb03919a441207fe48c515b3c7
TLSH
T1FF512FB06B231BB1FFE894B573DE80C8B27685594063EA2E405063744DCB73E50DB059
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 746fcbf57af6452c0a3a967e95489de0a2f01ec2028b65d3f181f609a22ac77a
MD5 f3c796926ae349134e1c0ea51620bcd5
SHA1 373b950f1bede1f287e655aded7680c5f03cb174
SHA512 f8b45d293fd22c9838f0a1d9b3b194a3b205401fa034c14370f6c36ac34536d4c94cb6cd5814a7667f78f61ddf6bb0668e3a915b8f5d10d1d1dd3697b4990d0b
TLSH
T1AA319CF783F4856E8A0196F0AA14AE2FCE2C0511431C7C6AC9E0AE2793E3462E141A5F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 7b3d44336dab11922a9c36a2bd0a97adfa2eb1140a8660fc6acf144881c6c9e1
MD5 f91e2826cdc9bcc37f75c0cbc9771276
SHA1 2ed3d0627bb183ba9f2f149f02b2f1bfa7b1790d
SHA512 7aa8c63fc551eea08191e5a37d892ac6acee5c3a110268d7666069db31caaebd412778e772ace2766060ed053fd2f6ae1fc3b5d33afdcdaf1fb0c2c964987e72
SSDEEP 192:sxRaRIba/fns1yfHm2Sm7aCCzoD8p4G/g6+WNIY3309iGBcoIgD5J:sxRaQa/fns1Q2DH/5InH
TLSH
T17A42C8156A28A93B8CCBE21DBA557F53E7F9503261D16E48BBFC960C00E77DE120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 f2f2db7e73b86061b785cd89dbe528b5376e496a7eabb810f8cdaaafaed5e7fc
MD5 8f7bc2436270deddd97ae3c5f9c77a12
SHA1 f8cb79082aa260112f19ac05b69737c775bb8ce5
SHA512 f5e1efd5dcabc541aa64725075de0a058ee26c022e5bd8014f8457d7b1cbe77e8607513647500f5da6e89209a0da7ceeb6174c41eff5dad43aa3164828aaa3bb
SSDEEP 192:sxRaRIba/fns1ufHm2Sm7aCCzoD8p4G/g6+WNIY3B20BiGBcoIgDnJ:sxRaQa/fns182DH/5IAJ9
TLSH
T14C32B7156E28A93B8CCBE21DBA657F53E7F9503261D16E48BAFC960C04E76DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 67766c41ad72d53daed2b53aa34083fb4c9c892ad704b82299945370cd288e42
MD5 c5e3c717f8c284f3d560492afd5d9f90
SHA1 cd3de34999ae4356430f78c49fea0b70953eaa6e
SHA512 2297a9685645e83e7b7de3cdac7ce8bc4a5ce8a73875b4f2a368b984e8fa2644c338aadf2703145f2c667c39120ed56368556810f3fa1935fd82643d83836623
SSDEEP 384:GMgEbt2fCtg0+FfKsKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVKO9W+RTOroOLn:GTEbtkWg0CfKs8F1+UoAYDCx9Tuqh0V9
TLSH
T17DB2EA2F600DCB7E9F804AADAC59AFD76D5802C79B588D4047FE990C02C77FA911A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

8c6523e3-d40f-48ca-b616-2529c440170d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\8c6523e3-d40f-48ca-b616-2529c440170d.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 6126f60cb390e8ce274223c93bdd8a1e0863aff18700a1308f578a6eaa745de7
MD5 410f03f86176252de874bdc02d477379
SHA1 b0916ee936b0358656163cc56337dc7ca26a5011
SHA512 cc3490424f85f25b61da776204b4b7f6abffb1be5dc45b2f6e5549e39385d0297218f3ac5e1a92113359228ad8e4b8ec7a012b4e5bad06989e096c5c3abf9759
SSDEEP 768:drv+4UNbd435Yc+wfZOLf/66RfI66nvShCQsh2bwWV:dbsbO38wfkfC6Rfb6nvSi0wO
TLSH
T13803CF71E8689A339EE7824476467B53BEB992B3C9C54784DACD1B0D01C369F370BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 03988b000ce069d14f32e057774068efd8afe24d6fe0428b4a4fa99b5b0b7531
MD5 1f3e5f67662c78b62c03a0030496be09
SHA1 990e0b82894461fee42bff3b20a8cc31f859fe49
SHA512 0cbaf3842c64246576db5e1e754dd2cbd82f1798b9fe1fd7530651e5b9f91634352c4d549b2dec7de199ef644c2777b1b777393c4302bd94f2e4d9705f9d17a4
SSDEEP 768:5W38f2c+wfZOLf/66RfI66evShCQRhf/V:5W38swfkfC6Rfb6evStf/V
TLSH
T11FF2BEB0DC706D335CE69248BB467B53BEA59173C9C89A44D9DD9B0D01C33AF2B1B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 151e3cac8159c4346beedbcffbc83e2e88fbd1657a09c619e065726f5ba04e52
MD5 a2d784355e3d1f98f6d4bbf02731106a
SHA1 0f1ced43ddfb7eb39f4e94389baebb7cf6f31fc5
SHA512 0233c009b80aedc53198b90876239f652abc22d41ed51d1d4c739c15b86a693b86531388234b5e4e6cf7a22a8bb92239794f3703101c8562e2d5ef871d7d38fa
SSDEEP 768:3W3v02c+wfZOLf/66RfI66evShCQRhf/V:3W3vTwfkfC6Rfb6evStf/V
TLSH
T13CF2BEB0DC705D335CE69244BB467B53BEA59173C9C89A44D9DD9B0D01C33AF2B1B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 2eaf86e8866ccffedf88acddadd5fad9782bb61acdf71c8404c81b6e529d7b6e
MD5 5bfafa067bc7dc057c288b945ca3748b
SHA1 bbfe1e82d3635fd03dc167daabd2f53a2b4cf1e4
SHA512 e051ce794e8739d6c7f2367d7d0ba437673cbcf4dba2904196fad0ab2204362fa43402bf12ba407be48d6d0cec812497eae3849b69384146829161c8bc5086f8
SSDEEP 768:cFQW3zwgof2c+wfZOLf/66RfI66WvShCQRhf/V:PW3+swfkfC6Rfb6WvStf/V
TLSH
T170F2AEB2DCA499739DEA9784BB463B13FEA55173C9C8D644DACD9A0C01833DE270BC25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 168b40ae373772bf1a606c6b91666ff216219f3f85cb006f1e501332aae6a14c
MD5 5ec5894a1837c0b155aa49049aac16cb
SHA1 13d7ec9c1f09ce7c0a16ab9ab0138af15e76453d
SHA512 3ab9dc95500b43ff756d39200ebdcbda663b4c721eb3e13a0edc98c0c911fa696a81086b565a9fe39ebaec7876bbe1e843652b43ad48928aa9112123d6f12eac
SSDEEP 768:Rrv+4UNbd43p7kc+wfZOLf/66evShCQtN2bwWV:RbsbO3pCwfkfC6evSR0wO
TLSH
T1D603D072E86899339DE782487646BB537EB85173C9C54784DACD1B0D018369F370BC67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5eefa367-bf93-412b-a321-c112e50589e8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\5eefa367-bf93-412b-a321-c112e50589e8.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download