b76041d899fb8535c62a27e3853ec8b2e212d8c712b0bada48f75b98d6a87984

Analysis

user interaction
yes
max time kernel
148s
max time network
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260706-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260706-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
09/07/2026, 10:39

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 593B
Sample260709-mp2djagy3j
SHA256 b76041d899fb8535c62a27e3853ec8b2e212d8c712b0bada48f75b98d6a87984
MD5 20ccc519ff967cde90317e3ce93044ea
SHA1 8f2d12bd9e211ca03b3f615ae431825e22735cac
SHA512 0f2a30f6fa90639cb5b52ab595ab389dc187c46ef40bf1fabfbd3b67d3a8909f3e2fa0005123bade390e94440ce1f411fd1dc4e82526d479861263e63e109e32
TLSH
T175F0AC139DC9CC0882718861CD21B80DC82E110B53C18C85F1DC082BABA5FE11EE35A8
MD5 SHA1 SHA512 TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4904	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134280672053232754"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2626306573-1585762579-411806764-1000\{995687BF-2405-4183-8A14-6DFD748A3ADC}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
6060	msedge.exe
6060	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
1736	msedge.exe
1736	msedge.exe
1736	msedge.exe
1736	msedge.exe
1736	msedge.exe
1736	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
1736	msedge.exe
1736	msedge.exe
1736	msedge.exe
1736	msedge.exe
1736	msedge.exe
1736	msedge.exe
1736	msedge.exe
1736	msedge.exe
1736	msedge.exe
1736	msedge.exe
1736	msedge.exe
1736	msedge.exe
1736	msedge.exe
1736	msedge.exe
1736	msedge.exe
1736	msedge.exe
1736	msedge.exe
1736	msedge.exe
1736	msedge.exe
1736	msedge.exe
1736	msedge.exe
1736	msedge.exe
1736	msedge.exe
1736	msedge.exe
1736	msedge.exe
1736	msedge.exe
1736	msedge.exe
1736	msedge.exe
1736	msedge.exe
1736	msedge.exe
1736	msedge.exe
1736	msedge.exe
1736	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
1736	msedge.exe
1736	msedge.exe
1736	msedge.exe
1736	msedge.exe
1736	msedge.exe
1736	msedge.exe
1736	msedge.exe
1736	msedge.exe
1736	msedge.exe
1736	msedge.exe
1736	msedge.exe
1736	msedge.exe
1736	msedge.exe
1736	msedge.exe
1736	msedge.exe
1736	msedge.exe

Suspicious use of WriteProcessMemory 33 IoCs

description	pid	Process	procid_target
PID 1736 wrote to memory of 2352	1736	msedge.exe	88
PID 1736 wrote to memory of 3432	1736	msedge.exe	89
PID 1736 wrote to memory of 4904	1736	msedge.exe	91
PID 1736 wrote to memory of 3432	1736	msedge.exe	89
PID 1736 wrote to memory of 3432	1736	msedge.exe	89
PID 1736 wrote to memory of 2312	1736	msedge.exe	92
PID 1736 wrote to memory of 2312	1736	msedge.exe	92
PID 1736 wrote to memory of 2300	1736	msedge.exe	93
PID 1736 wrote to memory of 2300	1736	msedge.exe	93
PID 1736 wrote to memory of 2300	1736	msedge.exe	93
PID 1736 wrote to memory of 1248	1736	msedge.exe	94
PID 1736 wrote to memory of 1248	1736	msedge.exe	94
PID 1736 wrote to memory of 1248	1736	msedge.exe	94
PID 1736 wrote to memory of 4364	1736	msedge.exe	95
PID 1736 wrote to memory of 4364	1736	msedge.exe	95
PID 1736 wrote to memory of 4364	1736	msedge.exe	95
PID 1736 wrote to memory of 1536	1736	msedge.exe	96
PID 1736 wrote to memory of 1536	1736	msedge.exe	96
PID 1736 wrote to memory of 1536	1736	msedge.exe	96
PID 1736 wrote to memory of 5888	1736	msedge.exe	98
PID 1736 wrote to memory of 5888	1736	msedge.exe	98
PID 1736 wrote to memory of 5888	1736	msedge.exe	98
PID 1736 wrote to memory of 1904	1736	msedge.exe	99
PID 1736 wrote to memory of 1904	1736	msedge.exe	99
PID 1736 wrote to memory of 2412	1736	msedge.exe	100
PID 1736 wrote to memory of 2412	1736	msedge.exe	100
PID 1736 wrote to memory of 1028	1736	msedge.exe	102
PID 1736 wrote to memory of 5588	1736	msedge.exe	106
PID 1736 wrote to memory of 6028	1736	msedge.exe	107
PID 1736 wrote to memory of 2348	1736	msedge.exe	108
PID 1736 wrote to memory of 1116	1736	msedge.exe	109
PID 1736 wrote to memory of 1116	1736	msedge.exe	109
PID 1736 wrote to memory of 6060	1736	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x328,0x7ff83ac0c188,0x7ff83ac0c194,0x7ff83ac0c1a0
  2⤵
  PID:2352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1648,i,69837043954628753,8669066153586381669,262144 --field-trial-handle=2232,i,3331031866212863094,14456935043668783760,262144 --variations-seed-version --mojo-platform-channel-handle=2212 /prefetch:2
  2⤵
  PID:3432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1916,i,8359573503127465861,14022937335405341666,524288 --field-trial-handle=2232,i,3331031866212863094,14456935043668783760,262144 --variations-seed-version --mojo-platform-channel-handle=1788 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2104,i,84011285311597249,2257353933603211007,524288 --field-trial-handle=2232,i,3331031866212863094,14456935043668783760,262144 --variations-seed-version --mojo-platform-channel-handle=3416 /prefetch:13
  2⤵
  PID:2312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3580,i,13446713834300660062,12335107077027379467,2097152 --field-trial-handle=2232,i,3331031866212863094,14456935043668783760,262144 --variations-seed-version --mojo-platform-channel-handle=3636 /prefetch:1
  2⤵
  PID:2300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3584,i,8898623105890552508,5134523797532366900,2097152 --field-trial-handle=2232,i,3331031866212863094,14456935043668783760,262144 --variations-seed-version --mojo-platform-channel-handle=3652 /prefetch:1
  2⤵
  PID:1248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4236,i,13847769003874415222,6109859084340436467,2097152 --field-trial-handle=2232,i,3331031866212863094,14456935043668783760,262144 --variations-seed-version --mojo-platform-channel-handle=4752 /prefetch:1
  2⤵
  PID:4364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4248,i,8066469620921810680,13391995704097695423,2097152 --field-trial-handle=2232,i,3331031866212863094,14456935043668783760,262144 --variations-seed-version --mojo-platform-channel-handle=4768 /prefetch:9
  2⤵
  PID:1536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5328,i,10218084882042040390,543537857575186635,2097152 --field-trial-handle=2232,i,3331031866212863094,14456935043668783760,262144 --variations-seed-version --mojo-platform-channel-handle=5264 /prefetch:1
  2⤵
  PID:5888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5472,i,11616928034912930941,3580609462780206195,524288 --field-trial-handle=2232,i,3331031866212863094,14456935043668783760,262144 --variations-seed-version --mojo-platform-channel-handle=5564 /prefetch:14
  2⤵
  PID:1904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5476,i,13807346984127584975,7113879739575732062,524288 --field-trial-handle=2232,i,3331031866212863094,14456935043668783760,262144 --variations-seed-version --mojo-platform-channel-handle=5524 /prefetch:14
  2⤵
  PID:2412
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6272,i,10247138534348621642,16255181739241763946,524288 --field-trial-handle=2232,i,3331031866212863094,14456935043668783760,262144 --variations-seed-version --mojo-platform-channel-handle=6288 /prefetch:14
  2⤵
  PID:2632
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6272,i,10247138534348621642,16255181739241763946,524288 --field-trial-handle=2232,i,3331031866212863094,14456935043668783760,262144 --variations-seed-version --mojo-platform-channel-handle=6288 /prefetch:14
  2⤵
  PID:1028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3748,i,14068025589490015737,18250974777269362119,524288 --field-trial-handle=2232,i,3331031866212863094,14456935043668783760,262144 --variations-seed-version --mojo-platform-channel-handle=4828 /prefetch:14
  2⤵
  PID:5588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4240,i,3656495788417920889,9888286918712940945,524288 --field-trial-handle=2232,i,3331031866212863094,14456935043668783760,262144 --variations-seed-version --mojo-platform-channel-handle=6272 /prefetch:14
  2⤵
  PID:6028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4908,i,17582396642904265168,5140227584500543954,524288 --field-trial-handle=2232,i,3331031866212863094,14456935043668783760,262144 --variations-seed-version --mojo-platform-channel-handle=6376 /prefetch:14
  2⤵
  PID:2348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5464,i,10603058195232192855,6543053219743022642,524288 --field-trial-handle=2232,i,3331031866212863094,14456935043668783760,262144 --variations-seed-version --mojo-platform-channel-handle=6520 /prefetch:14
  2⤵
  PID:1116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=3196,i,1999919608176136114,10779190143197332879,262144 --field-trial-handle=2232,i,3331031866212863094,14456935043668783760,262144 --variations-seed-version --mojo-platform-channel-handle=6664 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:6060

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5776

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:896

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a54d1be6da491be16ecc22dac3ad8cfbe4eabb017451e32c26f2904977fde58e
MD5 9daa45ac0383b3b978ad8da2d5000b62
SHA1 f52083ce5d095366a6fa9406b8b49000fcb53bc0
SHA512 ac55ccfd63460f712cd2ffb1ff656349475683b1ec07abd198254ac469a634f7129cf280de184340d8314fe2b8f7e955f7a112deb1511d52de882ae801a7c1af
TLSH
T17DD09B9D6686AE54DD80343134A1E34B9A18F522642C464880177054CCA464246571FF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3f51b0e24e52d8511f72e348c132f84b6b8edb54027a5c8c4fbe2a976322a690
MD5 e32f775acc5ed08adf9d5f6678c2bc4d
SHA1 bd5f4d60c6c8f97a1fed276a8c02ca345e30bb2a
SHA512 2b2fef021516ee5e90b192840780767fff5c147cfb2dfe5b900a8b298d542111707f16c28e265447d090c61e8e091b3529eb29ff376abe03cd34315206805eba
TLSH
T1DAD09B996686AD54DD80343534A1E34B9A18F522102C46488117B064CCA464246561FF
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 e6ff0d31838215ffb9c1e9312db1a11f39a5b60a20b19b469bcb24d44852cebb
MD5 16a62780ca123f1ea16849f976e3beba
SHA1 9f712d9bae3d642bd9bdc1fbb80486f34109f323
SHA512 f592e46bbb438635956e28a600c130680572889cc576ef8dfa527e30b35cc2bf3a02b1f0dcf12507ad0d33f39afbe48a66d560294dafd0a5a16503fea1ce8a5b
TLSH
T1F66163A60F3617D3CFE00DB332F210DD3E308B1665C75AF24C4AAAB45642F82674089C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe597edb.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe597edb.TMP
Size 3KB
SHA256 8182f8cf97fa68b7b117c51de6859cb9586611995bc5fb722c8156c47d3b5e4e
MD5 ce16523c7044421cc0b88692dfeaed4f
SHA1 74f921867e800ce7a1dc2eb25bdfed62a6649aea
SHA512 b077c8921e59747bfb6459a32136b74965a0b84ac31999ad5012444167e0be18c5218887775ac9e3eeb3f0f21ad0dcd439b77575c4a2e5ef8196c524affec3dd
TLSH
T12D6131A60F3617D3CFE10DB372F210ED3E708B5665C75AF24C4AAAB45646F82634099D
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 4198d6bd2f5006836ef89d3cc362588357b74298399dd526f3dd72761b75dbc8
MD5 d3319c4619fca75804d3b7c791561191
SHA1 e45dfb784acda11310241db170717ec3f0f4afe8
SHA512 61ad1e9fd79838ee739060e92496e1f9793626038a5f681a8c887d8a3ef2b211e2d979a6e97b5185d5e24a3c089b5652bdad7de27382a8f68829c3070d543ef3
TLSH
T18061BEF783E48B7D990155F49B256E2BCD1C0517432C3C5689F4AE1BA3F24B1E1426AF
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 7365632868c8141490b5b2fcc14b8b1eefcdeb59af696e9f3a60fbc42be2a36d
MD5 6ba39903c4a7496593a63bc515cb0430
SHA1 8a877beb309cdcfa0baf1e133e629b3c52b458d1
SHA512 b892ff223e2fc63eaa194cf0f4db2a1b7dcbf2f786f8f5ef3b2ba0736c65ba9a4e5723535275b77a84582dfd32eb6ac16dc47799b3f9ac6b516b1f821237b1db
SSDEEP 192:sxR4RlyM/jK1Ml8wbE/fgs1g25e3mb8xRjzoA8p4l/g6+WNIYDQkGryIgIJ:sxR4JlE/fgs1PL8x0g/5I1Ss
TLSH
T10752B8056A34997BCCDBD219FA517F53D6F81573A2905E44AAFCCA0C01E76ED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 a2924d0616c7a273ef4e1c0789eabd8f2fe22087f548c6a4a09d30894a5b4a11
MD5 a962f0a5bf77722bc41725da51a27133
SHA1 3dc5051d7a95fb46788a2e1cea35e48a399bb34f
SHA512 b803bfe9530bb772b3d594ac27f1d4da40e8b9d04fa112af0d50f58f93e46ab51e03b875d605b902ef1f800dd52b4ebd4ebd98005dac1e030bc353170ac2b6bb
SSDEEP 192:sxRzRlyM/jK1Ml8wbE/fgspg25e3mb8xRjzoA8p4l/g6+WNIYDQkGryIgDKJ:sxRzJlE/fgspPL8x0g/5I1SC
TLSH
T1DF52B8056A34997B8CDBD219FA517F53D6F81573A2905E44AAFCCB0C01E76ED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 af67cb4c442eb75483ad78c177da6096113a61b644e0ad65deb9de8ac3fffa56
MD5 488cfd962bc434193c64064a33adb09f
SHA1 70c278f9f5adc5bb239e7baf07104c855ad43c1e
SHA512 3f7900491bfae8ed43542a695e8807a52f904f30ad6549eaab59dad05dd613dc72c67b24693b45a893a990d295a667e4f61653bab1f9b058d1d6bd8c372d03fd
SSDEEP 192:sxRzRlyM/jK1Ml8UQiIbE/fgspgK5e3mb8xRjzoA8pel/g6+WNIYDOkGryIgDwJ:sxRzJq3E/fgspjL8x0O/5IxSw
TLSH
T1ED62B806AA349A779CDBD619F6517F93D6F81573A2901E04AAFCCB0C01E76DD221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 eeb0114f50a795aa2c3b21f15d3b4352639e97acd4407d444a0081d0b970f5ca
MD5 b16a2d8d3cc4e2cd6883a9d354453482
SHA1 5fe8817d197c7f6a5e3527b840aec29f5056073f
SHA512 1e37474556de307e6d0cae813a59c84a78b45c3a1373b61d4db9ac5e44901752dc1e78d449b78f4a6bf0a9ffb60f3255e77cf24d0db0239fc6405f25eff46df9
SSDEEP 768:f+4+IDWgb/fPI8F1+UoAYDCx9Tuqh0VfUC9xbog/OVOIn20ro7f/:f+4+IDWgb/fPIu1jaPw2f7f/
TLSH
T1D6C21C2B640CC77E4F844A9DEC29AE976DD801CB9B988D5447EA890C03CB7EB511B4DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 063934708d76472e3110da7a5779750045f271a0083a2a450b4f16ea892d2253
MD5 ca4110959af18690d5b6e3370181a3d4
SHA1 4c600bb1a162027e3ab14a39270a0de4d0ec2d04
SHA512 ce5f7e18a7b8c61e5e78360f348cb502cb375dc728819b4e5482c8ecf5590b24cf19d9ee25ccd458599ae6c38a69d4ab33369cc88e4cbc3cb3a7edd5899aa25f
SSDEEP 96:KRlyLf1vz3W7gugn3K4Wg53cdF4LDcHEFw0Oy2UWS/fg8UK4Rg2Uc00/uUqP2qcj:ClyLf1vzG7gPntWg5sdF4LDcHEFw0Oyu
TLSH
T102914505313B02C43C7E684981AC895BD6C2B091755A782B3FD847E75BA7F028DFE8D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 f33cb5d285a0308729c14ace8f99242c18be8f1779c09c1af228346a264179f8
MD5 2b58c2bf896b24a666661cdf9ff1b382
SHA1 db2ba59ddbc2d50b64f0674f6465133dffa90f09
SHA512 44f3380036fe81815ecec3a44034e0fb34ba7e7c27c7a1b0e0efd21ba3d3ee8ab457b072758b9c3e40a4e27cb5756259bd1196cf27ade8c5624bb192673e37a8
SSDEEP 768:Ij+9n3qeK5wifJBHaHuVboPzkZLNx9OFWb9Mn:X9n3qeLNHOawZLNqsb+n
TLSH
T128F2CF31B8219E379DA7C7A9B2473A87BFF45123C6C42B8889DC6F0D05E75AD0707926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 07739e8fca8fae0ad6535ad4b7913e4d15d72ecb91c60c32dfc3865fde40a071
MD5 559cbda3277317479e7ccdce2f301d23
SHA1 0aa96c23bcfdfd6ca5a245c7f615e4a690b54757
SHA512 07e0c9cbc5c619c01bc983dbb15cef561a3e0afbfdd5ec757e418ba53146a67dc9867d201112f56c5b11848168547fcaa1e530d2a140290155d8119a2a82b82b
SSDEEP 768:Jj+913qeK5wifJBJaHuVboPzkZLNx9OFWb9Mn:U913qeLTHOawZLNqsb+n
TLSH
T131F2C031B8219E379DA7C7A9B2473A87BFF41127C6C42B8889DC6F0D05E75AD0707926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 8e3486db002d99f424e705f35f1992a3127676aaee7567b4844ac5cba2e41013
MD5 aacac2ca5158800a636ed442482b70ab
SHA1 226b7d7164fb0607acd47675b206cfeb28fd57e1
SHA512 f97f861f2fbdf012bfe762f7725f67efb7d2a35697635780224acaf7213a9e5e44df5866ff612ba770a019dbccf4fd26d48436109d82c4e59eae87d965404038
SSDEEP 768:1rv+4UNbdB3jeD5wifJBjaHuVboPzkZLNx9OFWA:1bsbj3jeSbHOawZLNqsA
TLSH
T1BA03BE32A8349D379DB7C698F14B7A477FF41113CAC40B9899D82B4C45AB4AE170BE22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 a18a12cbc0d7e7568cd11c7542195d567265710f116ccfe5dbec9e70182af933
MD5 445cac5e4988547a755c33a232db2f74
SHA1 7deb2b17a86605e20db67cb21a4d8eb9eb2e6cc9
SHA512 bf2c29cd8fcffef2bf688adffbd997335ea524bb53347d0f2f7ca6bc390cf0f0803d4afe4f0ca45b5d4589761b57313e62957b9df2d0849ee715b406396cbe6a
SSDEEP 768:2j+9n3jeK5wifJBHaHuVboPzkZLNx9OFWb9Mn:l9n3jeLNHOawZLNqsb+n
TLSH
T16AF2CF31A8219E379DA7C799B2473A87BFF45123C6C41B8889DC6F0D05E75AD0707926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 b3c9c50710cfca9ddea8bf6e287451fa8bd2b4ea63807ef8c3b159e7383090c8
MD5 7a4d1c7363043eb933806e185903a5b6
SHA1 1d6f771c55bfd8fc52cf094a029b57542f28da73
SHA512 e8dd55adedf803d4058e50383077dce8a95702dc9f127f47a59838bd96276923448657f2cb4bd4d7b2d1b51e84b5c7b107572eb667112e181c178c1988deb815
SSDEEP 768:0rv+4UNbdC31XSwifJGaHuVboPzkZLNx9OZAUik4K:0bsbs31F6HOawZLNqeUVr
TLSH
T1FF03BF36A8649937DDF78289B28B7A477FF4111385C40B88C9EC2B4D45AB4AD170BE27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download