9e14246dae4b9945d95e645376bcc2d71cabbe5be3363fb0398f7081fe6b9f92

Analysis

max time kernel
148s
max time network
151s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
19/07/2026, 12:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 56KB
Sample260719-phfvcsdv9t
SHA256 9e14246dae4b9945d95e645376bcc2d71cabbe5be3363fb0398f7081fe6b9f92
MD5 efc6ff9808b990f4d89b45328ca01111
SHA1 798fc1b39cfbbe0e1a740404add5dd13d123f26e
SHA512 0c88f7bdf9f6ca5583d203dc9a7e0399d4d057fe1099fe9eaadaf0136a687ca524c6db5c75cb74b3335f54aff8b7f58eb847fca2322ecb1faf400ee8c1f0cfd2
SSDEEP 1536:0qSAapUJTvPHZ4YepqzSZCvRECRFTsyovX:oWJTvTSYTs3
TLSH
T1BE43A432D189483F076747DEB405762FDC7A52BACE008B97F0B5B2A83B91EB6049615F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1004	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134289371843384978"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2246396966-3025826688-3847171515-1000\{551E8063-BED1-4382-B4F3-B1726B4CD539}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1432	msedge.exe
1432	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe
5056	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 5056 wrote to memory of 3352	5056	msedge.exe	88
PID 5056 wrote to memory of 1004	5056	msedge.exe	91
PID 5056 wrote to memory of 3180	5056	msedge.exe	92
PID 5056 wrote to memory of 4404	5056	msedge.exe	93
PID 5056 wrote to memory of 3180	5056	msedge.exe	92
PID 5056 wrote to memory of 3180	5056	msedge.exe	92
PID 5056 wrote to memory of 4404	5056	msedge.exe	93
PID 5056 wrote to memory of 1088	5056	msedge.exe	95
PID 5056 wrote to memory of 1088	5056	msedge.exe	95
PID 5056 wrote to memory of 1088	5056	msedge.exe	95
PID 5056 wrote to memory of 5884	5056	msedge.exe	94
PID 5056 wrote to memory of 5884	5056	msedge.exe	94
PID 5056 wrote to memory of 5884	5056	msedge.exe	94
PID 5056 wrote to memory of 1496	5056	msedge.exe	96
PID 5056 wrote to memory of 1496	5056	msedge.exe	96
PID 5056 wrote to memory of 1496	5056	msedge.exe	96
PID 5056 wrote to memory of 1800	5056	msedge.exe	97
PID 5056 wrote to memory of 1800	5056	msedge.exe	97
PID 5056 wrote to memory of 1800	5056	msedge.exe	97
PID 5056 wrote to memory of 4652	5056	msedge.exe	99
PID 5056 wrote to memory of 4652	5056	msedge.exe	99
PID 5056 wrote to memory of 5932	5056	msedge.exe	100
PID 5056 wrote to memory of 5932	5056	msedge.exe	100
PID 5056 wrote to memory of 2464	5056	msedge.exe	102
PID 5056 wrote to memory of 4188	5056	msedge.exe	107
PID 5056 wrote to memory of 2496	5056	msedge.exe	108
PID 5056 wrote to memory of 2684	5056	msedge.exe	109
PID 5056 wrote to memory of 3920	5056	msedge.exe	110
PID 5056 wrote to memory of 3920	5056	msedge.exe	110
PID 5056 wrote to memory of 4944	5056	msedge.exe	112
PID 5056 wrote to memory of 4944	5056	msedge.exe	112
PID 5056 wrote to memory of 1432	5056	msedge.exe	113

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2c8,0x7ffb126fc188,0x7ffb126fc194,0x7ffb126fc1a0
  2⤵
  PID:3352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1832,i,13860896898233095977,3445560942056734870,524288 --field-trial-handle=2560,i,9620799005423247420,18228472458248361308,262144 --variations-seed-version --mojo-platform-channel-handle=2608 /prefetch:11
  2⤵
  - System Time Discovery
  PID:1004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1568,i,14261908250341451972,14286995158431782466,262144 --field-trial-handle=2560,i,9620799005423247420,18228472458248361308,262144 --variations-seed-version --mojo-platform-channel-handle=2556 /prefetch:2
  2⤵
  PID:3180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2280,i,3627565796216181650,3190752856925249390,524288 --field-trial-handle=2560,i,9620799005423247420,18228472458248361308,262144 --variations-seed-version --mojo-platform-channel-handle=2612 /prefetch:13
  2⤵
  PID:4404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3556,i,3048621423327933145,8126265939239183446,2097152 --field-trial-handle=2560,i,9620799005423247420,18228472458248361308,262144 --variations-seed-version --mojo-platform-channel-handle=3624 /prefetch:1
  2⤵
  PID:5884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3560,i,16327389760559687235,1289043390368545158,2097152 --field-trial-handle=2560,i,9620799005423247420,18228472458248361308,262144 --variations-seed-version --mojo-platform-channel-handle=3712 /prefetch:1
  2⤵
  PID:1088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4296,i,16959332620576864273,10298226075392095808,2097152 --field-trial-handle=2560,i,9620799005423247420,18228472458248361308,262144 --variations-seed-version --mojo-platform-channel-handle=4840 /prefetch:1
  2⤵
  PID:1496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4316,i,13357255388323431274,8287319552664529549,2097152 --field-trial-handle=2560,i,9620799005423247420,18228472458248361308,262144 --variations-seed-version --mojo-platform-channel-handle=4892 /prefetch:9
  2⤵
  PID:1800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5352,i,5461289370444382725,11515484942832610915,524288 --field-trial-handle=2560,i,9620799005423247420,18228472458248361308,262144 --variations-seed-version --mojo-platform-channel-handle=5296 /prefetch:14
  2⤵
  PID:4652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5356,i,3637072840402889438,11463693972850953046,524288 --field-trial-handle=2560,i,9620799005423247420,18228472458248361308,262144 --variations-seed-version --mojo-platform-channel-handle=5392 /prefetch:14
  2⤵
  PID:5932
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5908,i,2093267278035831095,16972489902680052326,524288 --field-trial-handle=2560,i,9620799005423247420,18228472458248361308,262144 --variations-seed-version --mojo-platform-channel-handle=5920 /prefetch:14
  2⤵
  PID:5124
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5908,i,2093267278035831095,16972489902680052326,524288 --field-trial-handle=2560,i,9620799005423247420,18228472458248361308,262144 --variations-seed-version --mojo-platform-channel-handle=5920 /prefetch:14
  2⤵
  PID:2464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5096,i,17764634755184523538,10753426399679700943,524288 --field-trial-handle=2560,i,9620799005423247420,18228472458248361308,262144 --variations-seed-version --mojo-platform-channel-handle=6020 /prefetch:14
  2⤵
  PID:4188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5908,i,13174623234107422556,5642002543935712067,524288 --field-trial-handle=2560,i,9620799005423247420,18228472458248361308,262144 --variations-seed-version --mojo-platform-channel-handle=4900 /prefetch:14
  2⤵
  PID:2496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4956,i,9509120482464690713,15310366959447208589,524288 --field-trial-handle=2560,i,9620799005423247420,18228472458248361308,262144 --variations-seed-version --mojo-platform-channel-handle=4744 /prefetch:14
  2⤵
  PID:2684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5668,i,16657062214711729625,10750872667526440417,524288 --field-trial-handle=2560,i,9620799005423247420,18228472458248361308,262144 --variations-seed-version --mojo-platform-channel-handle=4824 /prefetch:14
  2⤵
  PID:3920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6172,i,15027824987299811817,5981949927721371449,524288 --field-trial-handle=2560,i,9620799005423247420,18228472458248361308,262144 --variations-seed-version --mojo-platform-channel-handle=5972 /prefetch:14
  2⤵
  PID:4944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5352,i,13593068270940297363,17395524559546754122,262144 --field-trial-handle=2560,i,9620799005423247420,18228472458248361308,262144 --variations-seed-version --mojo-platform-channel-handle=5292 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1432

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2680

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3424

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:2548

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 67b546fed422708faf33930b82ff4826bc323bc64f67af30b02bb9e565fa27ee
MD5 04925ec9b8ab191e010732cba0eeefe1
SHA1 a6847bd1b4e86ab3cf9f2a8e109e78b04f51204d
SHA512 25e65b33281d8c58aaf4bad265d912d01bcadd9284dc1ce818ccc1dcf59200f57de5e8d8f4ce5ef6da06c777b54dd4dbee7a3aad7a16da9542538e92104e9c68
TLSH
T1C7D0C0343948E288C9832172DCA033117320007074B147054031B41CCE2049323DF5CF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 719f844e62c5a3916fba05dc2f32d02dadec54c424efb41ba161d1fca59227ae
MD5 e633a9ff8da83df3b4dca0ad6f30e5d9
SHA1 610df135117504b2857ee3cc03a5ac9797b10333
SHA512 56404607616c88e3d1268893aa0c748db1db04fe698a8f5d214c6a2a533823ff606c3f2a3f007d08bc16bd8838597597f9fdcfe0f631495c1928104ff11d002f
TLSH
T16BD0C0303948E188C9832172DCA033117310007020B147054031F42CCE2049323DF5CF
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 45d3c845cfef323ff14091d09811ca75c3deee4c6ac5935d9094dba32def84fc
MD5 915d10df4a0fa7283515fb3a422d0e9b
SHA1 c3bb2b0b5cf63477bf03b009e207c3f2b2baa54f
SHA512 e49f293ec05cf192b6f497236723e96ca8684310a9a513f005ae23e162fb475d450214816383159f6cbf965926e7fd49323b83883f7067f44d06eb84a269530a
TLSH
T10A51C9C0A3ADFEF9C3A45C703AD208CD7A7C8C5B678B2E1881706170191A73E42EC0D2
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59e9ba.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59e9ba.TMP
Size 2KB
SHA256 f85289e197307af00e131256d1b3731f78cf2618ccdac8e463034662afcf04e7
MD5 53dc954128dc9ca59e86b27657104d1b
SHA1 881ba2fc23d52142c42d7ba4ed3a71d0667867fe
SHA512 091053b36f5ea6c9b5f5c09c1261298166da6721dfcac19685613c012c16b1727e1127074f8ed5c4ffc6b8022bbd1a1ffadb15718bbc0b90bdcd5926a44ade9c
TLSH
T17851ABC097ADFEF9C3A45C703AD208CD7A7C8C5B678B6E1881706570191673E56ED0E6
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 7019319e88dee71946f8c6e297623b49ecb753fcf7816ee6cd6a21027a0f5722
MD5 3b79f35b0077e5f0b30d965ae40f010a
SHA1 6d17361dc60c207704d41f946b8d486e36ec7aa9
SHA512 b41612522d2c0650c8c9f427a4ca5715a26aa726a4e581a7da82aef7bc768bf568a3bad32ff0a8bbe0428361cec1b389b8d27871d786379c04cf57a5996d83ac
TLSH
T1E6718FF7C3E8866E891156F4AB24BE2BCE1D051A83283C5AC8F4EF1B63E2471D14165F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 4c488dc22db23316ceb59743c344518bafaa85aa2e3ee06dba7e5cc84654ea1c
MD5 adff22ea350b7fae6f92b57f703d20cd
SHA1 27f93007cdd10c2d346dcb49f37e976d5b9137f0
SHA512 5bc951389040b9e3084b62837749c66324a81759561718726eec4a89684e0ebdf7dba3d5d6012860663a924682aad60ef8795330a34fdbb2eae54ed0957d15c4
TLSH
T1F521B1F7C3F8597E8A4182F867142E1BCE2D0815431C7E5BC4D46F5BA3E2871D28095E
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 d704f345a95f44994407188263664866d9333446579d3ea62529bcb3cbd1e28b
MD5 918dd2b2378e266f879cdc03fa1f6c74
SHA1 d83ddbb1cc5be841b9bcde713bf5454bac2f9d7e
SHA512 3003adbbcf3a2025757c4f0d58d1215f82974a383ca4c5c2a03cc3c502e2f22da78163f22fa876ff6c1563ff0fbb058ca97ec7ec165baffdd165986070019bcb
SSDEEP 192:sxR1vRGyM/jK1Ml8wbv/fLsfpdzC/B2zoA8p4y/g6+WNIYZ7PKs+GXIgIJ:sxR1vclv/fLsfpd+prn/5I6ps
TLSH
T10E52DA166934993BDCCBD20DFA557F93D6F81563A2901E44AAFC8A0C00E7AED1213C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 4a2ddef133409f4a1449f7e191b3d09bd22f82ab345ee58258261d1fc441d446
MD5 cd83d776c541958adc1b5287ec890c88
SHA1 99c73c44777a1c2a523a6ceec98231fc0fa88747
SHA512 76d7912dc2f952971dad5a96a97a40082111099d63abf0106cbf55a7631851eca62730cbef3723dffc73bcbbd2c5c4da66ce352da7b404d32f7469e815b5cc2d
SSDEEP 192:sxR1cRGyM/jK1Ml8wbv/fLsCpdzC/B2zoA8p4y/g6+WNIYZ7PKs+GXIgDKJ:sxR1cclv/fLsCpd+prn/5I6pK
TLSH
T1F162DA166A34997BDCCBD20DFA557F93D6F81573A2901E449AFC8A0C00E7AED121381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 677262985d9738a8660969b4ffc7062dfb41045c6b790f65be9c1c07d1e267e3
MD5 fd9e3136e36a455ad4df3ddcbaaae666
SHA1 179efb15d2b0b992417eed3bd143346bf42d5796
SHA512 ac88ab61c392b0914922d4588b8e81d0edaac4ac80e3c015a4c1ef1126b48a5d97582518b9531629296946fd0a0cb0fbf4297f9a574c3a0e65953f3d40b1bba0
SSDEEP 192:sxR1cRGyM/jK1Ml8UQobv/fLsCpdzm/B2zoA8pey/g6+WNIYZ7P9s+GXIgDwJ:sxR1ccqmv/fLsCpdKprx/5IppI
TLSH
T1A462D9166924997BDCDBD20DFA51BF93D6F8557392901E44AAFCCA0C00E7AED121382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 501a63ff330745d1f4754d655cd9d1b863f86d35333c72b8b286ddfe49d4a756
MD5 7c40f3cd6e38d727d4c738258722f159
SHA1 b25a378f92118eea7881174067c44d3da0d6398e
SHA512 5398d9123ec66dd38bf99ced5691b826579a0630c657fd6fc70e39ae80563080e3276db1293ba3f3989db8bc719a9665e795b481e95ff8dce34b4430d07ceca7
SSDEEP 96:KwDaKMEemvCKIkzLuKQs6y8IKZemPYzfd3:cJh5VThPYzfd3
TLSH
T197C11347B17A426028BF251990A5C657DAC270B3321CE82BBFE904F64B26F511EFDDC9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

cd159824-f219-4d34-8a07-27e9964f112e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\cd159824-f219-4d34-8a07-27e9964f112e.tmp
Size 27KB
SHA256 d13fe16dfb8748f939c97fc894346c3a33876645d1d139d853ff8d5ecda5e849
MD5 89e26534d3bf2bfa2919d1661122a05c
SHA1 b30e024c8d36b3325b0fe9c7fcdf2e6ba492f553
SHA512 c71825e81a2001cbb923632449b920697f5977010df8b12ded41c98b17fd018ddb31f105464d9b682cc0364c9db94e06f9bb2f929ec3c267787ac7822f658ed4
SSDEEP 768:kfISEvWgd5fWb8F1+UoAYDCx9Tuqh0VfUC9xbog/OVMSV2MroHh0wF+g:kfISEvWgd5fWbu1jaBU2XHh0w4g
TLSH
T199C20B2B640CC77F4F844D9CEC25AED6ADD801CB97988D5447EA890C03C77EB922A5DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 2f758bfc836d44ee30c2d5c78537964cdf69fc8c66d011a41473c0ccb3250a0e
MD5 603efec5d0f17c49f1d1634472e0355b
SHA1 81aa43aeae6d42c638fd33e126ea210435baf1f1
SHA512 a1e2326dc2dbb5cfbf4e863883daa3b586f707503a2e86cbdde265534c5ab2bdbb0740d90ad0f5637dddb8d8c912d7110bd5492ff77e225a010e36dd766a2467
SSDEEP 768:Erv+4UNbdz3B+pqLbAam6aQMGdjWca4Ghf9rzX:Ebsbt3nNmaME6prj
TLSH
T15DF2BF32A868D973ADB79595F21B3683BEB411A385C80E84D5DD6B0D03DB0DE230BD1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 30KB
SHA256 2a4983f7e5de09f35530bcfb543d55f5c7c5fe834e83060f17f6a472ce9952a0
MD5 3ca12ab8f5d977ef20227eeaec35256b
SHA1 bd7495788c02650d5bc54119c1b4cdf171dbd90a
SHA512 d0bd6d93730420bb459d150eceb275e5491414c5294444b304699463a60552157e69346c336c5615e60e0a6ae4014b3a95c7f258b21f156450618df467ddb967
SSDEEP 768:9j+9R3+hpqLxAam6aQMGdjWca4Ghf9rEQ:49R3vzmaME6prB
TLSH
T191D29E31686498779CA796D5F32B3687BEF042A385C81E84D9DD6F0D03DB19D2307D1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 30KB
SHA256 56f9656f37088db84cc3c8dac9a998671c8c393686ce7fd875a6f8987dcf34ac
MD5 4d6f73a55a48c7171364db03f4267bee
SHA1 f3113a6bf4b5c31f0ad0b64efa3b5c83b471e7fc
SHA512 5a8e39030bfd87591496b5de8e5166667104fee24214d47996a643dc3797feb2613040a21ff839dbcdee207222af57e209898bc7d36c27ad47917d640bc78e70
SSDEEP 768:Fj+9R3BhpqLxAam6aQMGdjWca4Ghf9rEQ:w9R3OzmaME6prB
TLSH
T15FD29E3268A498779CA796D5F32B3687BEF042A385C81E84D9DD6F0D03DB19D2307D1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 30KB
SHA256 e549fa6c6f781fc3d6f14f4c849a5b8585295b85dee941fccb365e0c0d88d7a9
MD5 6ff9f73cb82ed42228014f58ba601009
SHA1 0f4bb33dddf8737b3425e8f5ac467da2ab902117
SHA512 8eb04b4b1e9ea419ef19a62c588073f58e57a067a4fbbb0a8b36026cdfc2efe0c3184c7a8285b7e3e4a0dc0b9cec4ffd3f51af558b12490eb166e602f8099b86
SSDEEP 384:HtNn/s3n9SC38Nu+7pfmivO0w7d+dfYbz8ZMWmkA1QiZh6vPqQMQYeJfjWca4G2e:Hj+9l3+hpq+Aam6aQMGdjWca4Ghf9rEQ
TLSH
T120E2AE31686899379CA796D6F32B3687BEF042A385C81E84D9DD6F0D03DB19D2307D1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 99a8b8a544f8ef80da947a93ee56b7846aa3d1bd320636d9be1ff6ac4383e583
MD5 e67a1bdcc1f790fd1b2255cbcac32d2b
SHA1 39ed23ef5a1f5882f824053eaca981b2d7a4e4c1
SHA512 465e61922fcc985cee5b47edf21e28554d1515c1a8a063afc146a6167687f2d53d6e8f09b17f6e94f1cd261fb529a5d3fa6f3ab145361f3eca87a18d7e1652dc
SSDEEP 768:/rv+4UNbdq3leqxAAam6aQMGdjWca4GhfBN6PeU/:/bsbc3DKmaME6p0H
TLSH
T11BF2AE31A8A89573DDB79A99F21B6787BEF421A384D40E80D9D92B0D43974CE3307D17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download