f21c53dd3034b7c8c95b25447fe972588d9b42840d2385fad369a5c51af83ab8

Analysis

max time kernel
148s
max time network
129s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
14/07/2026, 11:29

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 32KB
Sample260714-nltd7ad12x
SHA256 f21c53dd3034b7c8c95b25447fe972588d9b42840d2385fad369a5c51af83ab8
MD5 1935713dfe20ea6da8b0f07ed1275f5c
SHA1 42a3ae844dd5ffbb760fea07e4921094d5b53cb9
SHA512 6f8919a27da96d576074093e07b84ba5d63b75d68e978286fac043322ed7dd320612db5bd9cf715d574ed030bf180a3e550cd8969c53b7f7923e21f3aa5651e3
SSDEEP 384:nKFIIIVo57lBPn8MBZOHxqkvyuVtuJ2XFZdhJ3/o:KFIIIG7ld8bqkvyuVEJ2XFZPG
TLSH
T1F5E25F7196F5543B606380C2A6A5677B3AE2D607D64F0200B2FC57B84FDBC8AFD2B448
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4060	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134285021808680097"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-552508041-2681165170-3229858294-1000\{6D596E2A-EFF5-4C8D-8827-BD1DEA889737}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1636	msedge.exe
1636	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4496 wrote to memory of 1184	4496	msedge.exe	87
PID 4496 wrote to memory of 5328	4496	msedge.exe	88
PID 4496 wrote to memory of 4060	4496	msedge.exe	89
PID 4496 wrote to memory of 5328	4496	msedge.exe	88
PID 4496 wrote to memory of 5328	4496	msedge.exe	88
PID 4496 wrote to memory of 5948	4496	msedge.exe	90
PID 4496 wrote to memory of 5948	4496	msedge.exe	90
PID 4496 wrote to memory of 5668	4496	msedge.exe	92
PID 4496 wrote to memory of 5668	4496	msedge.exe	92
PID 4496 wrote to memory of 5668	4496	msedge.exe	92
PID 4496 wrote to memory of 4480	4496	msedge.exe	93
PID 4496 wrote to memory of 4480	4496	msedge.exe	93
PID 4496 wrote to memory of 4480	4496	msedge.exe	93
PID 4496 wrote to memory of 5796	4496	msedge.exe	94
PID 4496 wrote to memory of 5796	4496	msedge.exe	94
PID 4496 wrote to memory of 5796	4496	msedge.exe	94
PID 4496 wrote to memory of 2616	4496	msedge.exe	95
PID 4496 wrote to memory of 2616	4496	msedge.exe	95
PID 4496 wrote to memory of 2616	4496	msedge.exe	95
PID 4496 wrote to memory of 1432	4496	msedge.exe	97
PID 4496 wrote to memory of 5488	4496	msedge.exe	98
PID 4496 wrote to memory of 1432	4496	msedge.exe	97
PID 4496 wrote to memory of 5488	4496	msedge.exe	98
PID 4496 wrote to memory of 1964	4496	msedge.exe	100
PID 4496 wrote to memory of 3552	4496	msedge.exe	104
PID 4496 wrote to memory of 4660	4496	msedge.exe	105
PID 4496 wrote to memory of 2780	4496	msedge.exe	106
PID 4496 wrote to memory of 3504	4496	msedge.exe	107
PID 4496 wrote to memory of 3504	4496	msedge.exe	107
PID 4496 wrote to memory of 1636	4496	msedge.exe	109

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffef9e1c188,0x7ffef9e1c194,0x7ffef9e1c1a0
  2⤵
  PID:1184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1552,i,16044405893124857082,6796868365210678805,262144 --field-trial-handle=2296,i,12284339500268787684,12422182483766502806,262144 --variations-seed-version --mojo-platform-channel-handle=2292 /prefetch:2
  2⤵
  PID:5328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1684,i,17135992698440237769,11451858645866055901,524288 --field-trial-handle=2296,i,12284339500268787684,12422182483766502806,262144 --variations-seed-version --mojo-platform-channel-handle=2336 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2424,i,1415314609051531540,10526248656065164406,524288 --field-trial-handle=2296,i,12284339500268787684,12422182483766502806,262144 --variations-seed-version --mojo-platform-channel-handle=2908 /prefetch:13
  2⤵
  PID:5948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3644,i,7988750457986978866,16854795923691833759,2097152 --field-trial-handle=2296,i,12284339500268787684,12422182483766502806,262144 --variations-seed-version --mojo-platform-channel-handle=3672 /prefetch:1
  2⤵
  PID:5668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3728,i,9772760283390291611,17034418252909589426,2097152 --field-trial-handle=2296,i,12284339500268787684,12422182483766502806,262144 --variations-seed-version --mojo-platform-channel-handle=3748 /prefetch:1
  2⤵
  PID:4480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4372,i,3214683641376169128,3495238684147971276,2097152 --field-trial-handle=2296,i,12284339500268787684,12422182483766502806,262144 --variations-seed-version --mojo-platform-channel-handle=4388 /prefetch:1
  2⤵
  PID:5796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4384,i,10910119454604979083,2372671391484613604,2097152 --field-trial-handle=2296,i,12284339500268787684,12422182483766502806,262144 --variations-seed-version --mojo-platform-channel-handle=4392 /prefetch:9
  2⤵
  PID:2616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3780,i,16203711309847023971,12066989784123468845,524288 --field-trial-handle=2296,i,12284339500268787684,12422182483766502806,262144 --variations-seed-version --mojo-platform-channel-handle=3708 /prefetch:14
  2⤵
  PID:1432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3768,i,13883448973620343575,16212538178993680770,524288 --field-trial-handle=2296,i,12284339500268787684,12422182483766502806,262144 --variations-seed-version --mojo-platform-channel-handle=5248 /prefetch:14
  2⤵
  PID:5488
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5956,i,16041325858348140172,10610823078973410792,524288 --field-trial-handle=2296,i,12284339500268787684,12422182483766502806,262144 --variations-seed-version --mojo-platform-channel-handle=5812 /prefetch:14
  2⤵
  PID:3264
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5956,i,16041325858348140172,10610823078973410792,524288 --field-trial-handle=2296,i,12284339500268787684,12422182483766502806,262144 --variations-seed-version --mojo-platform-channel-handle=5812 /prefetch:14
  2⤵
  PID:1964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4484,i,17290082055302632382,11160048419540744283,524288 --field-trial-handle=2296,i,12284339500268787684,12422182483766502806,262144 --variations-seed-version --mojo-platform-channel-handle=4392 /prefetch:14
  2⤵
  PID:3552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4424,i,15157258294840027461,18328877081702112490,524288 --field-trial-handle=2296,i,12284339500268787684,12422182483766502806,262144 --variations-seed-version --mojo-platform-channel-handle=3672 /prefetch:14
  2⤵
  PID:4660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3740,i,7122383320693394812,13335512020658703861,524288 --field-trial-handle=2296,i,12284339500268787684,12422182483766502806,262144 --variations-seed-version --mojo-platform-channel-handle=5428 /prefetch:14
  2⤵
  PID:2780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5556,i,10059134171068968311,3818675549175167230,524288 --field-trial-handle=2296,i,12284339500268787684,12422182483766502806,262144 --variations-seed-version --mojo-platform-channel-handle=2728 /prefetch:14
  2⤵
  PID:3504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6536,i,1167517991449234094,6096304959367338515,262144 --field-trial-handle=2296,i,12284339500268787684,12422182483766502806,262144 --variations-seed-version --mojo-platform-channel-handle=6524 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1636

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2600

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1936

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 bf637ca0b28ebd6e948876848ccfe71d201158d460d4ad944f124f9d17ee5472
MD5 827e00d89fccbbde703c679b5c7ff536
SHA1 6d9e235782beb4e6b38fd4db2946f9bfc725110c
SHA512 1d18100db386f25678d8dabb492ab6e15d08e2c5a7d7e6c76bc253df648e2b5438cbc4fcb5a4033a1e14afbda93b271225eb5f545f12663d6bc35ca51239fcc3
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7X:fwUQC5VwBIiElEd2K57P7X
TLSH
T148B3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f8dff5315a0bd3856381f405c1a16257337fd6ff2d8043dd8bea22404cd35129
MD5 5e53a2cd139f0cce4f8ceab3e015f7da
SHA1 1bd884dbaaa352a724c53bfb8f4bfad2623c93f5
SHA512 27cc4cb62f9aa4af6b521efd824b001f3b689bae2ffe57263da18e2bb22d0b13ba656141d7e6ea1d1c202d5f461a44243a00d604f78bd5b04fe6b8512e260ac1
TLSH
T178D02B1463108D04D441F13214D13311B1110833A80C96440050E1284CB634206738DD
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 1f3bc43c50f7d0fa02f98500baf5d78052a5560603459a9325b17de989d121f4
MD5 46a6445fd2c83830bb8c6e03f85bafc0
SHA1 46b07e35efbd47692fdc81ef0e82e2964da2831b
SHA512 800f82b05756fd6fab3fe29924147f0b86afeec21da661e646b431c6ca03903eb45bb09803f5cdaf3d2d1bb16f95d0f2e53a1f9ddde57505b0f3e1580c384ed1
TLSH
T188D02B1063208C04D441F13214D23311B1010833540C96440150E1384CB634206728CD
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 24532c980e2b7708bc7c9f672016e0711b9f92d2c4c7e13ecf47679a9e7eb8c9
MD5 d4a9710657186f69fe2edb7e7cb12f94
SHA1 c8b3fceec6dfeadff4e95864a0bbed36efdac33c
SHA512 ecacb18a67e88c6ba1abb106c29b2baa9f06b900b4d315faae46a35b4d527e48ffde02363f5843f7500055250c143cf7d9894cc4a3a48a35619e6fcc716f5db4
TLSH
T1D341A96F036769C7CB795DB580D294897F3CC4A941CB6E2D464020B98F8B3D89234B30
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5945e9.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5945e9.TMP
Size 1KB
SHA256 271bad04d8d0df47511af21ae47b0c3108a6d947879d61d73b2a91d76b7e10eb
MD5 878a9992ce637ef22b8fc9170e45bf48
SHA1 3cbaa69f0c63507030779bd8d2c0bc8bc2acc028
SHA512 d03dde17a2dd8e2952f05f20a20a6de982e470199956fd695fbb497a852ddd4330785b23146a21238586d9e70a8a8d8212da3fe1e692d1d65661f30d0bcf2441
TLSH
T1BF41A96F036769C7CB795CB680D294897F3CC4A941CB6E2E464021B98F8B3D89274B30
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 7ecb9460ae0c8a59b2d965b8ea6a6a44905875ec90b617e39adfeb00157c6566
MD5 a0b1d5a099dc0f434b27f9f157be828e
SHA1 102c9d98afe8fb7f02e1b41b6523fcde49bc4dab
SHA512 2058b290bcf7d3d71a461e283d737fae2b7ebf1bf2d7b390f2ef44c3a4cd919f670ce1d31b8cc574af570267a67d9c431b836a0cd677fbda8116c88a772aceec
TLSH
T18151C0F7C7E88A7D890156F4AB146E2FDE1C0915436C3C5689E4AE1BA3F2871D14059F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 da689df870a5cc153540716237bedfbc63eeeca2bfc7718373f1925f2722ef33
MD5 72b05f80388c04b500af74dab4be61f4
SHA1 34b25631e6decb7921d5b679a3adc7f2e530f179
SHA512 e1e7168d08b3a0f52f58aea0b373612ea5dcef52c4237d9a8f02dee9db3324e4b03bc1766ec89809639749b649ccf7afed51228c59376dc520ff8ac5f76a21af
SSDEEP 192:sxRFRXyM/jK1Ml8wbO/fisrIPxDde5lSYzoD8p49/g6+WNIYCyuOzGIYIgIJ:sxRF1lO/fisrGxc5lbE/5IQB0s
TLSH
T1ED52DA156A24997BCCDBD20DFA517F93D6F81573A2901E44AAFCCA0C40E6AED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 b4843cee88434152f7b718407a4da7d334764f25931ed47359bd5f645b33b694
MD5 737848af4f4a98bc47d16887a78bda57
SHA1 acdcfb17eb1a1b055e7d92291e641bffbf4f34d0
SHA512 f0b4e9d3504f3e2b5c5612c4503824b74de8ad6d2699c2e28be3375c4f5da8378f89dac86441e2d7aae5f853d601b0f43f21b91e8b0e8836e70617651548fbb6
SSDEEP 192:sxReRXyM/jK1Ml8UQ5bO/fiskIPVDde5lSYzoD8pe9/g6+WNIYCLuOzGIYIgDHJ:sxRe1qRO/fiskGVc5lbW/5ITB09
TLSH
T16F62D9166A24597BDCDBD60DFA417F93D6F85573A2901E44ABFCCA0C00E6ADD221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 d983f530da167d55b1d132d96841e32775cb946f57410284d94eac77ca8811a0
MD5 1dce611d99f4b2e63005833f61a2058c
SHA1 bb8f90585b28d7812e5152132bc8ef36b0b92e16
SHA512 95ba829bdb0b32722f643655b0dfe08c4942c2dc495a1897c359000e0ce0ec3d8dfdfe3b52932ebc2f4e43dc861a89c6c11126f7b251cc81325dd97a8e39cc20
SSDEEP 192:sxReRXyM/jK1Ml8wbO/fiskIPxDde5lSYzoD8p49/g6+WNIYCyuOzGIYIgDxJ:sxRe1lO/fiskGxc5lbE/5IQB0P
TLSH
T1E062D9166A24597BCCDBD20DFA417F93D6F81573A2901E44AAFC8A0C44E6BED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 dd1f348c5f37f62072174ebc3249c874a546279b70f2a0587f7808e1fb4964c8
MD5 d06717081b2d1fc472c56b1d85d0cbe2
SHA1 2cfb3c7d917f0fb70bc769402b77829f972e19ed
SHA512 52bb0e7a7da4e3ef221a9d98f4323ca4cda1ee0f16153e1a08e2119f888332c051a23c056f3a07ef4d9b3005c8cf701f75f3bc964c38c26c3eda73e30a578843
SSDEEP 768:j/8vrQWgQ+fB+8F1+UoAYDCx9Tuqh0VfUC9xbog/OVCQqqSrov6:j/8vrQWgQ+fB+u1ja3VqJi
TLSH
T1B5C2EB2B640CCB7E4F844EADEC29BED66DD801CF5B588D5447EA890C03C67EB521A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 2d489ede387f60c6b8116c52df6c13819bf8174baf678f04b49219fac17868e9
MD5 d3026daf150d2dec4a6233a975b36376
SHA1 44ed186a1dd2c68c25de3a1ab7d8f9c8ef6b1a3a
SHA512 24c2ebcd584c5f2d31bea14b86266aaa7bd84145accff54e470c44fc050f1442a4a2424367400d1412aa2b967e49d3c6777159aedc4cd7a98fda6a763ccfbc53
SSDEEP 96:KRbEBVj5J1WdSIg91K4EgT1c7j6dJOH0VAE+imkWivPgMkK4BgGkckEP+k5HxOff:CbEBVj5JAdSp9/EgTK7j6dJOH0VAE+id
TLSH
T14391E000323F02C4797DB9588078896FCAC1B1773419E52B7BA846A65F67E439DFE8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

53871cd3-f362-4816-8b14-be8ef949744a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\53871cd3-f362-4816-8b14-be8ef949744a.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 ea25c252254d1dd02fb2b548c70726dceee3a7185276e7f65e491deeb1fe7062
MD5 59936c210674016dec55c7a7dee2106b
SHA1 93299d68c2020933397398d114410de204349ea1
SHA512 3968350b43db74b0088193ddc971b8947e938dad53ac31edf4892112a2d80cb429bcc0e415f0fe8fcb573b421e56b74f837d341a3725d86d15037172e66c4c28
SSDEEP 768:5rv+4UNbdX3ieLv8NRsp8+p3bd66j+4BRv86aLIWYOF:5bsbd3ieCRK8+p3Z6n4yms
TLSH
T13C03AE73F868D9779CF2C644B2863A437FF8515392C01EA4E9DC6B4D459B1AE230B827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 fd040f850c4d7917d7882a02626c5d317a8541a00d9c601fc166318916c62545
MD5 ad53880835643ae211e7b0f05e11d2c8
SHA1 1a8d6391f89544ca95a002446909fa82d5419874
SHA512 78e95142c99ab8e99d38571edfa62d934ddc1ef73716be8feb95a2ee77c675e072fa44bed5786337d10dfbd7ccdcf51a017d0809faedb49a13a4859f7e1253fd
SSDEEP 768:jj+9B33elv8NRsp8+p3bd66j+4BRv86aLIWYb9Mk:m9B33eIRK8+p3Z6n4ymb+k
TLSH
T15FF2AF72E8659E378CE2CB84B2873747AFF4426393C01E9899DC7B0D05D72AC570782A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 0b968df21cfd2090cb1b84f880c48f4de8dc2e80508715a0bb1864d9d3aac65b
MD5 cc0e83ac79e7a8dfa2c1a5c0e8cd9dae
SHA1 0d213d8393cd67e63f9ae2fa274f19352665dc37
SHA512 88c4b8281889880436ec7ba2d80f5ad4cd8d0ace1db53cdc4c3dab419f928d1c9c4b2915fa05dece5cde80458fa264c6bf4194b0fbd3053da489ac0fc2f24017
SSDEEP 768:Cj+9B3Ielv8NRsp8+p3bd66j+4BRv86aLIWYb9Mk:x9B3IeIRK8+p3Z6n4ymb+k
TLSH
T193F2AF72E8659E378CE2CA84B28737476FF4426393C01E98D9DC7B0D45D72AC570782A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 921950a5d6299995bcdb2ce4253d3310211f8e0eb371ca7df3e637d0d7f4523b
MD5 25f250b8d12673d445c36971a0d362d3
SHA1 2afb3eebb70c80bc4ebaeaa27aec57c60fb60f8c
SHA512 03836e221019a7a1b72e6b27d681e52522e727606600cc62ebf9a366dda3970eab3be1761a792381c4d6990de014b7101a6b41fc057ae95a171a44d5b89b7ad4
SSDEEP 768:vF1j+9L3Ywgeelv8N+p8+p3bd66j+4BRv86aLIWYb9Mk:G9L3NeI48+p3Z6n4ymb+k
TLSH
T1AF038E73DC94CA779DE2CB94B65A3747AEF441A3C6C02D94E6CC6B0D41971AC5307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 b27415f9a9d0062c7fdae6713ac25ebbf11364266b052428ca17ba398ff099db
MD5 953ee2879accd02b376e2b920dc098d7
SHA1 f48530ae83ce655e3c8332de2af35cea401d6495
SHA512 6e8e6ad611f12bc0f62078e55c9a6479095db1652d28361793249ba47d2e5d1d417caaed5919a481cb1a9c4a6ddc99aa237625eff5fef05e42a2e9b2c043559a
SSDEEP 768:Irv+4UNbdD3hc8LNp8+p3bd66j+4BRv86aLIi32bwCl1:Ibsbp3jL8+p3Z6n4yZ0ww
TLSH
T11003BE73E9A899739CF6C644B24677437FF851A396C10AC0D4DD2B4E419A19E230BC77
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c413aaaf-8e3c-4afb-9254-cff9018a48d5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\c413aaaf-8e3c-4afb-9254-cff9018a48d5.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download