ec6c6fbe72d70697c051a7d18156c8b0eda817216ae4dd5c5ad6bdf4134b9d32

Analysis

max time kernel
148s
max time network
133s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
28/08/2026, 06:00

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
ec6c6fbe72d70697c051a7d18156c8b0eda817216ae4dd5c5ad6bdf4134b9d32.html
Size 9KB
Sample260828-gqde7stdlc
SHA256 ec6c6fbe72d70697c051a7d18156c8b0eda817216ae4dd5c5ad6bdf4134b9d32
MD5 bdb1689230515db4302075143b13185d
SHA1 7c3e1e797669747069b9c31b87785823accf8ab7
SHA512 82ee35b0efbeec517b0f8de06d8211246a5d53cfd35557bbd000f991540c641505c2a7187751d28cb9841772ac14a0b52ded7aae012c3bc7ed028f4a0cd45722
SSDEEP 192:e3+KUgJarzG0I8MiFmqvvYZQpJMmPJW2TtfyX:ohJaOOmloMmPJ1TtaX
TLSH
T1AE22A472A964DC324503C969B4E1FF1D30BFD32E83054E8CB6BC2556A7DBC450A309AE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3788	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134323704194438982"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2115213192-531537726-3295841909-1000\{2302F14F-D7C1-402F-8563-C143F9772C6D}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1460	msedge.exe
1460	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 6140 wrote to memory of 1468	6140	msedge.exe	88
PID 6140 wrote to memory of 3788	6140	msedge.exe	89
PID 6140 wrote to memory of 4120	6140	msedge.exe	90
PID 6140 wrote to memory of 4120	6140	msedge.exe	90
PID 6140 wrote to memory of 4120	6140	msedge.exe	90
PID 6140 wrote to memory of 1164	6140	msedge.exe	91
PID 6140 wrote to memory of 1164	6140	msedge.exe	91
PID 6140 wrote to memory of 4376	6140	msedge.exe	93
PID 6140 wrote to memory of 4376	6140	msedge.exe	93
PID 6140 wrote to memory of 4376	6140	msedge.exe	93
PID 6140 wrote to memory of 2628	6140	msedge.exe	94
PID 6140 wrote to memory of 2628	6140	msedge.exe	94
PID 6140 wrote to memory of 2628	6140	msedge.exe	94
PID 6140 wrote to memory of 1376	6140	msedge.exe	95
PID 6140 wrote to memory of 5832	6140	msedge.exe	96
PID 6140 wrote to memory of 1376	6140	msedge.exe	95
PID 6140 wrote to memory of 1376	6140	msedge.exe	95
PID 6140 wrote to memory of 5832	6140	msedge.exe	96
PID 6140 wrote to memory of 5832	6140	msedge.exe	96
PID 6140 wrote to memory of 1200	6140	msedge.exe	99
PID 6140 wrote to memory of 2568	6140	msedge.exe	98
PID 6140 wrote to memory of 1200	6140	msedge.exe	99
PID 6140 wrote to memory of 2568	6140	msedge.exe	98
PID 6140 wrote to memory of 1396	6140	msedge.exe	101
PID 6140 wrote to memory of 2040	6140	msedge.exe	106
PID 6140 wrote to memory of 2024	6140	msedge.exe	107
PID 6140 wrote to memory of 1832	6140	msedge.exe	108
PID 6140 wrote to memory of 6048	6140	msedge.exe	109
PID 6140 wrote to memory of 6048	6140	msedge.exe	109
PID 6140 wrote to memory of 3764	6140	msedge.exe	110
PID 6140 wrote to memory of 3764	6140	msedge.exe	110
PID 6140 wrote to memory of 1460	6140	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\ec6c6fbe72d70697c051a7d18156c8b0eda817216ae4dd5c5ad6bdf4134b9d32.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:6140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2cc,0x7ffe3064c188,0x7ffe3064c194,0x7ffe3064c1a0
  2⤵
  PID:1468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1908,i,17313846448516850248,9749807794521691782,524288 --field-trial-handle=2268,i,10900404047347617340,8877338742459635504,262144 --variations-seed-version --mojo-platform-channel-handle=2296 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1524,i,6730547155596942580,1109183500097954242,262144 --field-trial-handle=2268,i,10900404047347617340,8877338742459635504,262144 --variations-seed-version --mojo-platform-channel-handle=2264 /prefetch:2
  2⤵
  PID:4120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2412,i,2152948104938324007,14052354591676514887,524288 --field-trial-handle=2268,i,10900404047347617340,8877338742459635504,262144 --variations-seed-version --mojo-platform-channel-handle=2696 /prefetch:13
  2⤵
  PID:1164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3532,i,18115251194732241362,5323901099566142445,2097152 --field-trial-handle=2268,i,10900404047347617340,8877338742459635504,262144 --variations-seed-version --mojo-platform-channel-handle=3584 /prefetch:1
  2⤵
  PID:4376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3536,i,11140719690546398835,6325317115734981579,2097152 --field-trial-handle=2268,i,10900404047347617340,8877338742459635504,262144 --variations-seed-version --mojo-platform-channel-handle=3592 /prefetch:1
  2⤵
  PID:2628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4312,i,7660667242804442072,15538468251749987403,2097152 --field-trial-handle=2268,i,10900404047347617340,8877338742459635504,262144 --variations-seed-version --mojo-platform-channel-handle=4324 /prefetch:1
  2⤵
  PID:1376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4344,i,1317930174743858582,7558477503814766598,2097152 --field-trial-handle=2268,i,10900404047347617340,8877338742459635504,262144 --variations-seed-version --mojo-platform-channel-handle=4400 /prefetch:9
  2⤵
  PID:5832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5292,i,9562372546360626292,12966928417122908689,524288 --field-trial-handle=2268,i,10900404047347617340,8877338742459635504,262144 --variations-seed-version --mojo-platform-channel-handle=5336 /prefetch:14
  2⤵
  PID:2568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5288,i,15952474374996670082,5380995610098998129,524288 --field-trial-handle=2268,i,10900404047347617340,8877338742459635504,262144 --variations-seed-version --mojo-platform-channel-handle=4924 /prefetch:14
  2⤵
  PID:1200
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6096,i,3739970590010264379,8661010129017438762,524288 --field-trial-handle=2268,i,10900404047347617340,8877338742459635504,262144 --variations-seed-version --mojo-platform-channel-handle=6132 /prefetch:14
  2⤵
  PID:4352
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6096,i,3739970590010264379,8661010129017438762,524288 --field-trial-handle=2268,i,10900404047347617340,8877338742459635504,262144 --variations-seed-version --mojo-platform-channel-handle=6132 /prefetch:14
  2⤵
  PID:1396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4328,i,6006083674821824185,6355036110669650471,524288 --field-trial-handle=2268,i,10900404047347617340,8877338742459635504,262144 --variations-seed-version --mojo-platform-channel-handle=6160 /prefetch:14
  2⤵
  PID:2040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3516,i,6182399895891188718,3288343622674699783,524288 --field-trial-handle=2268,i,10900404047347617340,8877338742459635504,262144 --variations-seed-version --mojo-platform-channel-handle=4404 /prefetch:14
  2⤵
  PID:2024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4660,i,4067119512906862481,12719033232050009277,524288 --field-trial-handle=2268,i,10900404047347617340,8877338742459635504,262144 --variations-seed-version --mojo-platform-channel-handle=5044 /prefetch:14
  2⤵
  PID:1832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5320,i,628211712671413716,11389978153998748186,524288 --field-trial-handle=2268,i,10900404047347617340,8877338742459635504,262144 --variations-seed-version --mojo-platform-channel-handle=5328 /prefetch:14
  2⤵
  PID:6048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3456,i,4542565646954870866,13524104365007010069,524288 --field-trial-handle=2268,i,10900404047347617340,8877338742459635504,262144 --variations-seed-version --mojo-platform-channel-handle=5076 /prefetch:14
  2⤵
  PID:3764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5072,i,15120224696215609310,6270581134344243888,262144 --field-trial-handle=2268,i,10900404047347617340,8877338742459635504,262144 --variations-seed-version --mojo-platform-channel-handle=6416 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1460

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1832

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3968

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:4600

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c80f71026fa07cc9b3e69c8779d4b4b40710cf7bc2893b740943db0d0f79591a
MD5 590eca05f11ec72644a09f205b548fbc
SHA1 c6521700bee3b500259ee3a70292b90201f20597
SHA512 fddd457c35c61ceb727f99bd39f55314cdeb7d062798c573a377675121f972ed95109fec329f911c502139a1794b70e5a98a57dd3b21b5a70e6518890a361f66
TLSH
T1E7D02B7A37C40404C0D0747221F24602D530C520AC4C81088801702CCC207C3010B8EF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ee00825bbd5a4f21308ad2e10e5a9d3c4512f07fbd288ec8ac76788de6019e25
MD5 c3584e6bc22b3ad2f168ede48d20a993
SHA1 ffb4ecef8f65638ca17e16a32806195193977c7e
SHA512 5fd777359305e67e9f30fc404af9013a876846b1d6db271fa73dfcf2ee22fb25a8e26d4d0c970cc3a8219df11038dc6b4c2c411db652593bda1c3d7643753c0b
TLSH
T18AD02B7637C40404C0D0747621F34602D530C520584C81088801B03CCC207C3010A8DB
MD5 SHA1 SHA512 TLSH

Submit Download

8e57e983-393b-4c60-89b5-e144887de6d8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8e57e983-393b-4c60-89b5-e144887de6d8.tmp
Size 11KB
SHA256 99b82968c0d74dfadbd686ee2102ae251db40801cf3f66cce7a0363c07bfeb37
MD5 3dea69160b31e4b852b08c1620ff24ec
SHA1 27718b05ec13d43d4f9464597c730499aa528199
SHA512 f4e84747439fd9c46f7541153893b7e8c80bb411144637f0f7b2840cec23a0ca565e4e82fc069134b44507207eecef840f96cff60bbf7c12cd3fc4a19a068afd
SSDEEP 192:sxR5Rqbm/frs1Q3j3AtRzoA8p4D/g6+WNIYZFLKREGIIgD0J:sxR5qm/frs1Q3j1q/5ISzc
TLSH
T1C632B8156A28A97B4CCBD31DFB55BF53D6F96032A1912E48A6FC861C04EB7DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 a7f2ef13f74f6d24beee43a6ce0b0466b8bb0b7ff08b27bbd63f4494063f8d6d
MD5 021511eada8e5b9769d6dd81f85a147f
SHA1 8e76cc4853e4bcf63654b11e13943802377eb4cc
SHA512 89cf1821fcf74a8388209cfa894ed92666977e9288184ac5465a8b4a58c5fc4d89258ad67c22a68ec247d3f79a60c1c92b7ac9cf1dc31567a788d2ba856fd291
TLSH
T1EF51E64D43E707F1F32945B595EE536CB2F5845A814B6EF14F266E380AC7F0490E2853
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a229d.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5a229d.TMP
Size 2KB
SHA256 5926208c0afdf58d2fc1580d01797bd01ce620990908b419de6279cfa41afd55
MD5 3f5f4348bb0be43f96376cda583c5b0b
SHA1 3355901952d67dfeeb8a66eb10b80e6211efee4e
SHA512 53837314b884ecce485e6df7963c7501dd799fead3f14d79603475eff0cfdeaf3a14424d029c94d6769127b31b8332f6eb57c89bdc435fa4de3f57caa71dbadd
TLSH
T14951E64D43E707F1F329457595EE576CB2F48499810B6EF14B2A6E380AC7F0090E2853
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 400022e40c7708f56437980a8a58dc148ac52cc4a32c8b0b02ad93cb9ac24678
MD5 500fe153cde3ca354c4fe811ea4f3594
SHA1 89c70b0e1f4e730f9c39dde3f7842c2e870f083d
SHA512 3b103bdeac93f05f010c224f22d6946f0af8a0355a4fd8f425919c470c7711ebd0bcb0aa8bbe4a76e5f00dcf9070316a6e2df215515480aa17aebd8201e3c0e1
TLSH
T1AF31C0F787B4857E8A1186F0EA14AE2FCE2D0511432C7C6985E4AE27D3F3472E045A9F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 07b0d770ebbef9cefb6ab0ee8e7f318c6a00e5494d7e85490bb7ddc812937bd5
MD5 5d00c97ed9efff354fdbc5899161c277
SHA1 cb541a5ebc4f590bc1643c549f77994926fff625
SHA512 bfc2112260282955f3223340b48b9d3cc4bec9818799b355839e99d6b82c2e8e867542d1c1b28571cb25853a50793f190f1228de59b87e4855a56f756315f1cc
SSDEEP 192:sxR5Rqbm/frs1Q35H3AtRzoA8p4D/g6+WNIYZFLYJEGIIgDmJ:sxR5qm/frs1Q35H1q/5ISfG
TLSH
T11942C8156928A97B5CCBE31DFB55BF53E2F96032A1912E48A7FC871C04E76DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 bc5c0a9f392b8152a4b1be5484ac674884dca3a45f7f0031f8413404c0fc5e67
MD5 586d1428e2d696f27beb6c8a4549d269
SHA1 8f8d02ac99098e2ba9321d1d7486595cbc10d2cb
SHA512 aff876e372a86084d6c321ab93f73f44715ac3f36a929c2bd77fbf483e586f8a802ad7b71f0b5d1dc7303a1a30247a758b851cd43feb788732acf3efe2fdb8ec
SSDEEP 192:sxRKRqbm/frswQ3j3AtRzoA8p4D/g6+WNIYZFLKREGIIgIJ:sxRKqm/frswQ3j1q/5ISzs
TLSH
T1D032B7156A28A97B8CC7D31DFB55BF53E6F96032A1912E48A6FC861C04EB6DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 981420e96e288086a78d0aff553ef3eba422f6eac479c097f1bbe24cc4429815
MD5 bce0efbf1fff1ae68c32bf96eec65972
SHA1 f604ad57fc7a9cdf6042b9b0faca7afb538684e6
SHA512 d15d91d3892d1372b6158817ad1f29b3b41e2c863dac0586f4434ecba3516e8eaed4f01d11a6c6376940fb715d0a7137d51f13626883961ae96db8b55fc73c90
SSDEEP 384:KAX0EdqfCtgNbFfVNKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVui9LZRGjrocmq:K80EdwWgNhfVN8F1+UoAYDCx9Tuqh0VJ
TLSH
T1E1B2B93B640DCB7E5F800AADAC196FD77DA802C7A6988D4047FE994C02C77EA91194DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

508678f6-f9d7-406f-9630-ab2f5c1b84ec.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\508678f6-f9d7-406f-9630-ab2f5c1b84ec.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 558f726bb49a65df507e9ecc9297b0d603c5533b807ce8d5bedd2e45c473102b
MD5 e6f0c467878c4f7683b9dbaf944deddd
SHA1 275ec8ed155351a93f663e9f1f02a0eb9e5c8980
SHA512 9fae1b958e80eb996da210d1b410daaa29fb618b8c8cf3efe9b9725b02113f18d54eec2b7db759e82eb727170de3ab5d8776b12f8de024ae18c2bcf83022f249
SSDEEP 768:RJ3JV+LeSFOU3SfwX4fouOToPvB2thtA9VAgbVyLRQfT:RJ3pfmsnnwthttuiqfT
TLSH
T1D4F2BF71ADA88963DCE5D398720E32476FF0812392D45F846ADD571D0587A9F070BC1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 5b9ba18c5ab25c8249e8b70a35940a4cdbd649c48b32c31a7c988a0657424848
MD5 161671aa9745537ba169e320726d1263
SHA1 03668a78ab3ae830f8a8eb16ceceff521ddb7d9d
SHA512 b95db51e6b2156080534200dcdf02c4919579fb3616e907ab0ca9ad213040623f4a354b80608150de5e0dcaa5bd80891dd09bda3f71481558d34d8835fa6bd00
SSDEEP 768:VJ3XV+LeSFOU3SfwX4fouOToPvB2thtA9VAgbVyLRQfT:VJ37fmsnnwthttuiqfT
TLSH
T1FDF2CFB2ADA88967DCE5D398720F32476FF0812392D45F846ADD671D0587A9F070BC1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 4cfa60f967db0e1e59886cc9cc0a1ef6ae9d1557427ff354b50c67770bd8b57f
MD5 a83c5912e33b059a6dcc0764e80ecee6
SHA1 db23ccc872807dfaa202c0da6c96f0680c920f1e
SHA512 00b62f69e381e32ce1b344d3e2f8bbce58cc1438fb929dc7ccdb66750d78b9678769aaa8bc15125401c8fa538a8eeac38b8b09617de67d534d1e0a5cbbcef739
SSDEEP 768:V3FQPk3QwgUV+LeSFOU3Sf7X4fouOToPvB2thtA9VAgbVyLRQfT:VKPk3PfbsnnwthttuiqfT
TLSH
T111F2BEB39DA8C96BEDE5D798B20E32079FF08163C5D4AB80ABCD5A1D01576DE070BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 3b951fca5c330e07a8485fa2dd169dcc084597b7e8e47f5a6823a1828965ea5b
MD5 431096da1eede533c86dc132161fee62
SHA1 84bbd0a521e85702ebe8235ba64b484b87c54043
SHA512 9294a5e496b6e9da5f0cb6460d80b299d20df2b890f64fa23c8aa8a6c4ecf1615eb3677e4cdcaed6a5eec92404c4246bc640ce8897277c16ca2678f4012d5a98
SSDEEP 768:grv+4UNbdH3Qa+LeSFOU3S8X4fouOToPvB2thtA9VAwieVH1SlX:gbsbh3jCsnnwthttPEH1Y
TLSH
T1D803CF32A8A88933DDE6D398720B72533FF4912396D00FC499DD1B4D069B9DE030BD6A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 80c9eaf2c2079001119f285b5acbdcbf97b74424a1d9dad947e99af4a3284671
MD5 c4ccd27d65448c3ba65825be1f726fe0
SHA1 a444554a1196f51d06d8010f6f4d1512b955e748
SHA512 c1f72d826ddb5e4989cb4e71a814963bfcdf9533e4e60c8e13b4843862ecf7f2990321894271103f18aba8830af8517cef9b0aa10b249336d9b857503a575275
SSDEEP 768:urv+4UNbdH3vv+LeSFOU3SfUX4fouOToPvB2thtA9VABbeVH1SlX:ubsbh3pfasnnwthttFEH1Y
TLSH
T14903BE32A8A88A33EDE6D398710B72472FF4915396D00FD499DD1B4D0A9B9DE430FD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

db38bc69-5948-4945-998d-9235f1a4df12.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\db38bc69-5948-4945-998d-9235f1a4df12.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download