a9786d1170559d938491d7fe574fbb921bd7f8239f8428407691b11cbf229919

Analysis

max time kernel
148s
max time network
145s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/09/2026, 21:35

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
a9786d1170559d938491d7fe574fbb921bd7f8239f8428407691b11cbf229919.html
Size 146KB
Sample260910-1ffmcseg68
SHA256 a9786d1170559d938491d7fe574fbb921bd7f8239f8428407691b11cbf229919
MD5 2ffe209ad95e9a45d9ee5bb58fdc8fd1
SHA1 09084478e699d6bdf0c09b85d57a38366585d524
SHA512 09c44cca8a459b80cf69306b7b9307d4c0692c0e65ad85cc388caaa11541b0d70b865dfd4c097d1c72e3fd536be6a8130c2335b79b11a0db39e558c6b92dc191
SSDEEP 1536:EZtKP/ntUJPj1ooLJ7QUrxt9dHoMZa8jrNBqjRFJKUyUi2OFDYpU9HG2aMCARKJJ:EvKP/+Jh5Ls9RFdk2+Da1NMCAwKWM2
TLSH
T1DFE3FAC8B6A5B09593A3B4F5002F040BB13A6C6AF8589CACF24DE9E16F74559413BF3D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2324	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134335497267020566"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3611646547-550105268-947503007-1000\{01F3CA94-98CD-4CA9-B8BA-17A363882EC0}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
6024	msedge.exe
6024	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4384 wrote to memory of 3480	4384	msedge.exe	89
PID 4384 wrote to memory of 5664	4384	msedge.exe	91
PID 4384 wrote to memory of 2324	4384	msedge.exe	92
PID 4384 wrote to memory of 5664	4384	msedge.exe	91
PID 4384 wrote to memory of 5664	4384	msedge.exe	91
PID 4384 wrote to memory of 2204	4384	msedge.exe	93
PID 4384 wrote to memory of 2204	4384	msedge.exe	93
PID 4384 wrote to memory of 5876	4384	msedge.exe	94
PID 4384 wrote to memory of 5876	4384	msedge.exe	94
PID 4384 wrote to memory of 5876	4384	msedge.exe	94
PID 4384 wrote to memory of 5336	4384	msedge.exe	95
PID 4384 wrote to memory of 5336	4384	msedge.exe	95
PID 4384 wrote to memory of 5336	4384	msedge.exe	95
PID 4384 wrote to memory of 5644	4384	msedge.exe	96
PID 4384 wrote to memory of 1288	4384	msedge.exe	97
PID 4384 wrote to memory of 5644	4384	msedge.exe	96
PID 4384 wrote to memory of 5644	4384	msedge.exe	96
PID 4384 wrote to memory of 1288	4384	msedge.exe	97
PID 4384 wrote to memory of 1288	4384	msedge.exe	97
PID 4384 wrote to memory of 2388	4384	msedge.exe	99
PID 4384 wrote to memory of 2388	4384	msedge.exe	99
PID 4384 wrote to memory of 600	4384	msedge.exe	100
PID 4384 wrote to memory of 600	4384	msedge.exe	100
PID 4384 wrote to memory of 1080	4384	msedge.exe	102
PID 4384 wrote to memory of 2112	4384	msedge.exe	106
PID 4384 wrote to memory of 6008	4384	msedge.exe	107
PID 4384 wrote to memory of 4620	4384	msedge.exe	108
PID 4384 wrote to memory of 3796	4384	msedge.exe	109
PID 4384 wrote to memory of 3796	4384	msedge.exe	109
PID 4384 wrote to memory of 6024	4384	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\a9786d1170559d938491d7fe574fbb921bd7f8239f8428407691b11cbf229919.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x290,0x7ffb48d8c188,0x7ffb48d8c194,0x7ffb48d8c1a0
  2⤵
  PID:3480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1560,i,8986801178548579004,17382225417314588159,262144 --field-trial-handle=2380,i,17634023300086114467,24441911575613092,262144 --variations-seed-version --mojo-platform-channel-handle=2376 /prefetch:2
  2⤵
  PID:5664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1856,i,14662883901827946243,9930199803747398280,524288 --field-trial-handle=2380,i,17634023300086114467,24441911575613092,262144 --variations-seed-version --mojo-platform-channel-handle=3232 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2232,i,5102282075533925735,13517860124741141780,524288 --field-trial-handle=2380,i,17634023300086114467,24441911575613092,262144 --variations-seed-version --mojo-platform-channel-handle=3344 /prefetch:13
  2⤵
  PID:2204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3576,i,4960699691712228182,15960249715825283417,2097152 --field-trial-handle=2380,i,17634023300086114467,24441911575613092,262144 --variations-seed-version --mojo-platform-channel-handle=3624 /prefetch:1
  2⤵
  PID:5876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3584,i,2383988994402085256,567373559338653599,2097152 --field-trial-handle=2380,i,17634023300086114467,24441911575613092,262144 --variations-seed-version --mojo-platform-channel-handle=3632 /prefetch:1
  2⤵
  PID:5336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4256,i,1342274624087499530,4782246599706641216,2097152 --field-trial-handle=2380,i,17634023300086114467,24441911575613092,262144 --variations-seed-version --mojo-platform-channel-handle=4784 /prefetch:1
  2⤵
  PID:5644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4268,i,8985358426761704201,9277496784687781578,2097152 --field-trial-handle=2380,i,17634023300086114467,24441911575613092,262144 --variations-seed-version --mojo-platform-channel-handle=4788 /prefetch:9
  2⤵
  PID:1288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5308,i,5861907264843643519,9609867159136470406,524288 --field-trial-handle=2380,i,17634023300086114467,24441911575613092,262144 --variations-seed-version --mojo-platform-channel-handle=5348 /prefetch:14
  2⤵
  PID:2388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5320,i,11428355455883138199,8204889742994415570,524288 --field-trial-handle=2380,i,17634023300086114467,24441911575613092,262144 --variations-seed-version --mojo-platform-channel-handle=5368 /prefetch:14
  2⤵
  PID:600
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5844,i,15150944342510598955,4272400441285603216,524288 --field-trial-handle=2380,i,17634023300086114467,24441911575613092,262144 --variations-seed-version --mojo-platform-channel-handle=5876 /prefetch:14
  2⤵
  PID:2864
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5844,i,15150944342510598955,4272400441285603216,524288 --field-trial-handle=2380,i,17634023300086114467,24441911575613092,262144 --variations-seed-version --mojo-platform-channel-handle=5876 /prefetch:14
  2⤵
  PID:1080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5008,i,17844841615620745158,14121788821762231245,524288 --field-trial-handle=2380,i,17634023300086114467,24441911575613092,262144 --variations-seed-version --mojo-platform-channel-handle=4772 /prefetch:14
  2⤵
  PID:2112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5012,i,7164870156207502278,12150389432505984208,524288 --field-trial-handle=2380,i,17634023300086114467,24441911575613092,262144 --variations-seed-version --mojo-platform-channel-handle=5016 /prefetch:14
  2⤵
  PID:6008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4996,i,15131355244124751310,3075873778014953439,524288 --field-trial-handle=2380,i,17634023300086114467,24441911575613092,262144 --variations-seed-version --mojo-platform-channel-handle=4984 /prefetch:14
  2⤵
  PID:4620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5604,i,13737523774088605194,4011799710042867939,524288 --field-trial-handle=2380,i,17634023300086114467,24441911575613092,262144 --variations-seed-version --mojo-platform-channel-handle=5636 /prefetch:14
  2⤵
  PID:3796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6540,i,14374013784425397801,14853992475190364592,262144 --field-trial-handle=2380,i,17634023300086114467,24441911575613092,262144 --variations-seed-version --mojo-platform-channel-handle=5996 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:6024

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1860

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3372

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 6fa1b02b96b249c932f11a4c4f1eb52f042c98bf33d02c325fd422f437c15214
MD5 dab629217416704f76a79a88ad8104e7
SHA1 7976f0ba766ba9c277031e8bb5fb53af02fda376
SHA512 08718b5a2794b585eb95d2cba2f1738b354033d24a471097fdf4f83b9cfe6ba984c2b3c4dae177b4e601dc47eb8b72225f8677ed39d32449fb3f874f22b26d8d
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7+:fwUQC5VwBIiElEd2K57P7+
TLSH
T1C1B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ee3af991fa1719733ca1e3ac746d5b605f4205e269bf244bd9ae780ceadb9bd8
MD5 a044f6413820c4c3fbd300ee9b379ebc
SHA1 94fc91536a25274f06d3a6e89322dec7fde7912e
SHA512 ced4374c54d7b4ea2b76afe4ca5d8841dfb55d8cb5db96de4ed49e64bd3850a817db5301787c268756641c94c0bf85eb4ee188f04fc891fa2e45ad48284985a5
TLSH
T13AD02BA433044D0CCE40203215B8A210720484209C49031A8D41B01C8C6FD4387171FB
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 22c1d58ffa7df77a7e0440ce3b2c474b1e03f30b60355bbf5dd6392fefb641fd
MD5 b9f45a900b1f64efbf90731f41c6ad44
SHA1 0c28e85e464e328fbbc07373b05113d39f83bdcc
SHA512 132313545c55ea809da0e811d6d5d324ecf5b6cfaefadb3fa4a29df5e6266dfeca7cffa4daf21754b4b37771504d3692189b5660a468784b5eaf80bf92f59ae0
TLSH
T11ED02BA033044C0CCE40203215B9A210720484204849031A8E41F02C8C6FD4387161F7
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 c8af0828858ad20823f7b5140f94f05208bbfb19cdd53116e2876089e998cda7
MD5 9d8a1f7616d99d358d9185593fde0cd7
SHA1 40ef8ac9b15cd337943ac48ad9dd4d0fc72f0fb0
SHA512 c807e4c8212a6b958912d21e11bd23699752dba2c1f052aa75ca2155f169c0dbe2e09304f5a1b3e2a61bb91382583d0c6ff419e2d83c47606b93c36b109960ad
TLSH
T13D61605243267ED1FF298AB196D96C2A32FC84B0C5833E136050BD77C406F189CF2557
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe597054.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe597054.TMP
Size 3KB
SHA256 8baaa7741931f6f9f10542ee841022ac871a3b6ce5acdf108be02308ea4f322d
MD5 1452d889960368760e1fb53cf64e5bed
SHA1 8a6555f449bb7cb597544220bb17b13877c03740
SHA512 ad5df77024e9ef9ccfe813cf1b5e0db3a8e829d2307b9fee8fa1a7ef831c213a09252e7715b2aebac0d5d75e9a5249d059ebe079b5bb1678d9e03243a82836b9
TLSH
T17761505243263ED1FF298AB196D96C2A32FC84B485873E136050BD77D406F199CF2557
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 bd64c8ee7e5a90c93cab4d84d480e37d7b714cebb7a90b883cf854ddffda0a57
MD5 02c0f4a95da09a73b5df4578705ba7b2
SHA1 a8a8224a0861b710036c3c3bd0ad3cfabf442ce6
SHA512 2c22d840904c6d3912b6e0b2ee95c4587ae44a71839b8ccb1c6cdfb5b8294a22f8062f6fe32abdee3fa9638757c615f7a11c86fe0afdb129b6716497eac6db76
TLSH
T1FD61ACF7C3E4877E891156F0EB156E1ACE1D0516432C3C5AC9E4AE1B63E24B1E10169F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 06e408e708b9498389259b5597ba6630e89cdfa57a0f80a910c165cc342e732c
MD5 faea07740c56f3b437cc9ff4fe913cfe
SHA1 57e2441aa8ad1b9e3d5470380bd337261ef04123
SHA512 02b9544fcb920acd996910d5f495164b22e3ff0e9d8af3cadf549ff1d77e539bb27d240d30f111f412074b9c02953af57ddb6d13dc084ad70693cb062492a2f0
TLSH
T1DF61BDF7C3E4877E891156F0EB256E1BCE2D0516432C3C5AC9E4AE1B63E24B1E10169F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 2c926f77c147159e8205042b793a679a582459560af662c24fd08ac90df31df0
MD5 7444f1ef310d89832bd92ab81dee9d90
SHA1 dab18e6b9b77e332149883fe07d25ca3250f3356
SHA512 5e30cc5dd3711f657731430e30cdede4a0841d08c16aec3808f6c1ac4ec3099c196efe417d8798636fc81034737108de09a5568ac75d84b73aaec99a1eee3605
SSDEEP 192:sxRtRtyM/jK1Ml8wbm/fFsspq1zECzoD8p4Z/g6+WNIYGlbtj6GgIgIJ:sxRtjlm/fFss4I+Y/5IV+s
TLSH
T1A852D7156A286D7BCCDFD20DFA557F53D6F95433A1901E44AAFC8A0C04E6AED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 7ac6345a1c1aee1b1ac5f481063c04ec873a1a3798b115d5ae11b2ca8022fbc2
MD5 2dba909902f35221bb778698eafe8f95
SHA1 47ada76b1e87923c4f4f688be79e99899fc90107
SHA512 37f86fcb8e9ec55994c6f790206527f1677258d929691c8e68203fb40e876c32feacbfe0d66a875ea13ba4ab8b0c8f62bfe7277222e0febb13947f4768f76bf0
SSDEEP 192:sxRSRtyM/jK1Ml8wbm/fFsopq1zECzoD8p4Z/g6+WNIYGlbtj6GgIgDqJ:sxRSjlm/fFso4I+Y/5IV+S
TLSH
T1D362E715AA786D7BCCDFD209FA567F53D6F95433A1901E04AAFC8A0C04E6AED211381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 1ca8b57f51f28d913b0a40ae9ef962299babaa22b9763dbc5e2e218d06357da7
MD5 4a5f0611aaa1f75e9ba0bbd1aa64f4f0
SHA1 7aef5561731a410ee3feefdbaff9de4425baae71
SHA512 5983fac215626e72a35b258633acfd2e2412ab115b6a676342551448bc1c66d84f4b6a3b9e0d7c35812b8561c52ca8978d2ba288ee7a172405546da1d1cea09d
SSDEEP 192:sxRSRtyM/jK1Ml8UQFbm/fFs3pq1zECzoD8peZ/g6+WNIYGJfV6GgIgDQJ:sxRSjq9m/fFs34I+6/5IV+A
TLSH
T1C362D715AA686D77CCDFD20DBA567F53D6F95433A1901E44AAFC8A0C00E7AED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 cabfcf40c251821235b70040a91e76dea38dc0519bbf70690e01bafb71f4c34b
MD5 9b5f629b7f86c77ec91d35c9df254367
SHA1 99ae6a29e52da050186de3c8d11c13ba1cadb91b
SHA512 98da24466983ae4108c4a4fa86e1ad9f1011e886a169894443bf9b367cd3508f718beadd6c954f458b7835f474f5460eff5619bb023826cdba3b916d49b0e559
SSDEEP 768:UtiiWNWgv7fgJ8F1+UoAYDCx9Tuqh0VfUC9xbog/OVPpN0AroYln:UtiiWNWgv7fgJu1jaCf0Lon
TLSH
T12EC20C3B640CCB7E4F844E6DEC29BED76DD801CB5A984D5447EB890C03C77EB521A49A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 545e60b1460643e1ae649961650c28d39f590899a3ea9f353c665754e064e7e6
MD5 7fd1641b112a13c2ba853d2d6cb77779
SHA1 c9e2ac9e7540eca7e4b05072222ad32ab4a1346a
SHA512 ccee07892360934bd6730e388f09868c2e7066e129f3d4faa756ebc6157d2bd934d6ee46f9c7d92870b456f0fc4ca6924e22d526e37cd4d326fb31ba5240cfe5
SSDEEP 96:KRm7KmgIIOW4tVgGOK47g0OcOGlkzc5t7xxNWlqggVNK4sg7NcD7SFR8HtaTHd35:Cm7KmgIIJ4tWGm7g09OGlkzc5t7xxolm
TLSH
T1B5914555713B1250383DA90C81B9885F92C2B463305AE66B7BE811B20F7BE079DFE8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

9fbeea6a-c727-41a4-9db2-678b544b715a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\9fbeea6a-c727-41a4-9db2-678b544b715a.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 831ce32db9872e583f5a9b7aec6b07108dcb29632378b0a0c2a8b0d2fff60f1f
MD5 39ec807067c152763029c96b2bffb330
SHA1 04cf771fbc1b8367a9ad34b601daaa78e7643d9e
SHA512 6fbf966dac84f09d8a696a13e740eaa0160143493e5bb034e6cf11ba5a001ff73961668b9252f9ebdea53e6d771451de3cc521c4e06e406db2a81e20cdaa57b2
SSDEEP 768:Ij3NbHmlYy8Sd7Hucys6BRvi82oP4/z6himo69D184pZfeC:Ij3V+03imOz6ImoiWHC
TLSH
T1F8F2BE70A8559D73DCAFC2C5A5477B436EF4522395CC6D90E6EEAF0E028766E030BC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 eca8a029f9c91659879f42db5e7a1e0ca9ca45daccb88745ef22d1d254a4847f
MD5 b659b9af8bf026c17bc72b2b362bfff3
SHA1 70da594f446d552a93ce4906a5c736e0817f4df9
SHA512 fd136371d8f8a69bb6818e5cb6c2b79c61bb8b84e99ac2e26fdba3276cd301f1020ef950759e5a6a1bfde7bc18bd75dc21670e423ceec4c304dbf3abc802b6ef
SSDEEP 768:Tj3GJHmlYy8Sd7Hucys6BRvi82oP4/z6himo69D184pZfeC:Tj3W+03imOz6ImoiWHC
TLSH
T1B4F2AE70A8559D73DCAFC2C5A54677536EF4922395CC6D90E5EDAF0D028766E030BC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 95d060eee294623ec31306539dc4e1787338d38a1e26b2b705a7416fc1fdf93d
MD5 92526a921f71449d64889126b6d8e275
SHA1 7ca4775214362aa888b2e0f6bc9831c6705206ae
SHA512 94fe2139f9c2b7c39f528c46963d917d84d74a67739f5f57463a89411f831c8ec879017fbc560a544ae022414d58b6a003d4cb2801ee54fa89eafb1a0def5dec
SSDEEP 768:vFQz3xwgkJHmlYy8Sn7Hucys6BRvi82oP4/z6himo69D184pZfeC:yz3E+m3imOz6ImoiWHC
TLSH
T12AF2AE7198849D77DCAFC7C5E64A7743AEF4523385CCA990E6E9AF0D11876AD030BC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 7f7b16d50b79918809478ba9522ea33db22886e900f5ea9ea8d4c1d10c98333e
MD5 9cce320f5767553a2e25eab7e27ca81d
SHA1 816ef3282795af3ba62d351ea013e8efae1d4d96
SHA512 41408242ad3aa300b78e36dd3245d9e82105768c6429ac3fc35dc71202c329f42a4f0616fa0af4b7c71e776973fc37e32f4340bdc6e41df492b57f8c4887ca98
SSDEEP 768:nrv+4UNbdS3+oYlYy8SD7Hucys6BRvi82oP4/z6himof92bwn+h:nbsbw3+zq3imOz6Imol0w+
TLSH
T19403BF31A4149973DDEBC184B1477A977FF4532385C91AD0E6EE6B4E028B9AE130BC63
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 d4f7260260973e21bcc88a6b7b4b052929584c6895f714feba8bf306e2c265b0
MD5 c9c9d0d5171791aaea491b528d0e34f8
SHA1 af8fdf0b0f34c94024320a48829a3162a5388d2a
SHA512 eb3bac8ab2d7fc5154b0a0bbe6e2d0709aa7a4c658e7005c54b3372b68ce102a9ff0f60d6da848809f3d8e0dd69c04277011a37ce80809deff91453d116dee28
SSDEEP 768:xGrv+4UNbdS3NE4lYyp7Hucys6BRvi82oP4/z6himo+A2bwn+h:xGbsbw3N43imOz6Imof0w+
TLSH
T12A03BF36E4548D73DCABC288B0467A977FF4522355C91AD0E6DE5B0E029BA5E130BC63
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6016b4a5-70e7-4ae7-a4df-7e14479678a5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\6016b4a5-70e7-4ae7-a4df-7e14479678a5.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download