b4bd19da658f36c25ba06ffd61aafdd01845a272c33a96130853405d032a4f87

Analysis

max time kernel
148s
max time network
152s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
27/07/2026, 12:29

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 18KB
Sample260727-pn37vasbqd
SHA256 b4bd19da658f36c25ba06ffd61aafdd01845a272c33a96130853405d032a4f87
MD5 81408bd8c1eae08e510bed66efc8f410
SHA1 b07020fb014b846d7d6eb7879bd2666111e14ac7
SHA512 10598582f318ec3d00f3d1d5432e22185ba96d27640327d6b546e1c12086bb89109a05606107b8a1194cef8428bb26938080bb074298919b5513fb7030a8d1c5
SSDEEP 384:Momc/iZ260t06lHu7yvgWc6DaMNPtbUcIO:MlcqZ2DHu7yv/ciPUW
TLSH
T1BD828531C1D2742F842255E0F7B25F6EA083A365D6832701DBA547FF17DAAC18D2B2E9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4876	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134296290421158140"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1738198120-2966725515-3980530802-1000\{7A318322-A376-4721-B419-A48A48D724C8}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
852	msedge.exe
852	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe

Suspicious use of WriteProcessMemory 36 IoCs

description	pid	Process	procid_target
PID 4936 wrote to memory of 4304	4936	msedge.exe	89
PID 4936 wrote to memory of 4804	4936	msedge.exe	90
PID 4936 wrote to memory of 4876	4936	msedge.exe	91
PID 4936 wrote to memory of 4804	4936	msedge.exe	90
PID 4936 wrote to memory of 4804	4936	msedge.exe	90
PID 4936 wrote to memory of 4108	4936	msedge.exe	92
PID 4936 wrote to memory of 4108	4936	msedge.exe	92
PID 4936 wrote to memory of 5820	4936	msedge.exe	94
PID 4936 wrote to memory of 5820	4936	msedge.exe	94
PID 4936 wrote to memory of 5820	4936	msedge.exe	94
PID 4936 wrote to memory of 5844	4936	msedge.exe	95
PID 4936 wrote to memory of 5844	4936	msedge.exe	95
PID 4936 wrote to memory of 5844	4936	msedge.exe	95
PID 4936 wrote to memory of 3716	4936	msedge.exe	97
PID 4936 wrote to memory of 4072	4936	msedge.exe	96
PID 4936 wrote to memory of 3716	4936	msedge.exe	97
PID 4936 wrote to memory of 3716	4936	msedge.exe	97
PID 4936 wrote to memory of 4072	4936	msedge.exe	96
PID 4936 wrote to memory of 4072	4936	msedge.exe	96
PID 4936 wrote to memory of 4796	4936	msedge.exe	98
PID 4936 wrote to memory of 4796	4936	msedge.exe	98
PID 4936 wrote to memory of 4796	4936	msedge.exe	98
PID 4936 wrote to memory of 4948	4936	msedge.exe	100
PID 4936 wrote to memory of 4948	4936	msedge.exe	100
PID 4936 wrote to memory of 4948	4936	msedge.exe	100
PID 4936 wrote to memory of 2012	4936	msedge.exe	101
PID 4936 wrote to memory of 5836	4936	msedge.exe	102
PID 4936 wrote to memory of 2012	4936	msedge.exe	101
PID 4936 wrote to memory of 5836	4936	msedge.exe	102
PID 4936 wrote to memory of 3708	4936	msedge.exe	104
PID 4936 wrote to memory of 2608	4936	msedge.exe	108
PID 4936 wrote to memory of 1988	4936	msedge.exe	109
PID 4936 wrote to memory of 4160	4936	msedge.exe	110
PID 4936 wrote to memory of 4780	4936	msedge.exe	111
PID 4936 wrote to memory of 4780	4936	msedge.exe	111
PID 4936 wrote to memory of 852	4936	msedge.exe	113

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2cc,0x7ffd019cc188,0x7ffd019cc194,0x7ffd019cc1a0
  2⤵
  PID:4304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1528,i,17675424955649017134,4219614630802963242,262144 --field-trial-handle=2172,i,8569348643992113222,16030326045210318257,262144 --variations-seed-version --mojo-platform-channel-handle=2272 /prefetch:2
  2⤵
  PID:4804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1772,i,4334837729408800126,9540135399373777519,524288 --field-trial-handle=2172,i,8569348643992113222,16030326045210318257,262144 --variations-seed-version --mojo-platform-channel-handle=2304 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2276,i,11623905454248662150,10104075914332472792,524288 --field-trial-handle=2172,i,8569348643992113222,16030326045210318257,262144 --variations-seed-version --mojo-platform-channel-handle=2936 /prefetch:13
  2⤵
  PID:4108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3628,i,4525855229209476995,6807841152022299424,2097152 --field-trial-handle=2172,i,8569348643992113222,16030326045210318257,262144 --variations-seed-version --mojo-platform-channel-handle=3688 /prefetch:1
  2⤵
  PID:5820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3608,i,12091351399104826890,7112562287733325177,2097152 --field-trial-handle=2172,i,8569348643992113222,16030326045210318257,262144 --variations-seed-version --mojo-platform-channel-handle=3700 /prefetch:1
  2⤵
  PID:5844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4292,i,17861230309014313904,8815922664715142115,2097152 --field-trial-handle=2172,i,8569348643992113222,16030326045210318257,262144 --variations-seed-version --mojo-platform-channel-handle=4852 /prefetch:1
  2⤵
  PID:4072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4348,i,4729663611391655857,17640059003230267466,2097152 --field-trial-handle=2172,i,8569348643992113222,16030326045210318257,262144 --variations-seed-version --mojo-platform-channel-handle=4920 /prefetch:9
  2⤵
  PID:3716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5204,i,17511854196547546217,9494446201058497145,2097152 --field-trial-handle=2172,i,8569348643992113222,16030326045210318257,262144 --variations-seed-version --mojo-platform-channel-handle=5216 /prefetch:1
  2⤵
  PID:4796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=5448,i,15231937401306231371,8570875393012319900,2097152 --field-trial-handle=2172,i,8569348643992113222,16030326045210318257,262144 --variations-seed-version --mojo-platform-channel-handle=4292 /prefetch:1
  2⤵
  PID:4948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3784,i,17307471236510905733,17695811329901178908,524288 --field-trial-handle=2172,i,8569348643992113222,16030326045210318257,262144 --variations-seed-version --mojo-platform-channel-handle=3800 /prefetch:14
  2⤵
  PID:2012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3840,i,8859627399485905827,13687284778849023107,524288 --field-trial-handle=2172,i,8569348643992113222,16030326045210318257,262144 --variations-seed-version --mojo-platform-channel-handle=3808 /prefetch:14
  2⤵
  PID:5836
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6256,i,3102346334407231347,2487797851689457702,524288 --field-trial-handle=2172,i,8569348643992113222,16030326045210318257,262144 --variations-seed-version --mojo-platform-channel-handle=6300 /prefetch:14
  2⤵
  PID:3668
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6256,i,3102346334407231347,2487797851689457702,524288 --field-trial-handle=2172,i,8569348643992113222,16030326045210318257,262144 --variations-seed-version --mojo-platform-channel-handle=6300 /prefetch:14
  2⤵
  PID:3708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6300,i,12338776253968730678,12770265520382107310,524288 --field-trial-handle=2172,i,8569348643992113222,16030326045210318257,262144 --variations-seed-version --mojo-platform-channel-handle=6696 /prefetch:14
  2⤵
  PID:2608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3640,i,6207160974836469849,10842048000188907830,524288 --field-trial-handle=2172,i,8569348643992113222,16030326045210318257,262144 --variations-seed-version --mojo-platform-channel-handle=6636 /prefetch:14
  2⤵
  PID:1988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6716,i,4145840596657480159,2880729942266146347,524288 --field-trial-handle=2172,i,8569348643992113222,16030326045210318257,262144 --variations-seed-version --mojo-platform-channel-handle=5096 /prefetch:14
  2⤵
  PID:4160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3712,i,8097048893914929908,10033227023056234416,524288 --field-trial-handle=2172,i,8569348643992113222,16030326045210318257,262144 --variations-seed-version --mojo-platform-channel-handle=2576 /prefetch:14
  2⤵
  PID:4780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6876,i,15565943378789519895,2901809773302219820,262144 --field-trial-handle=2172,i,8569348643992113222,16030326045210318257,262144 --variations-seed-version --mojo-platform-channel-handle=6892 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:852

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4216

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5996

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ac1b1f93ff87eb876027f4166d705375c0f5d3d22dcb03f6a66f6100e88dd10f
MD5 b99f03c5cfe71b03836f8b5fcf09425b
SHA1 8a5078499c0b5ea40183efb77f9c1028c196409c
SHA512 6b9feec4ead7bf05f67d0d480907e21a3b770d8d12dedd2b0d785904186eac7448583e61abacb23582948de55c8ea2043bfd6908efd7faecdd82cee91404cfe6
TLSH
T16DD02BE037909D18C440353163D0122091006C30880923090100A02C8D3E2C3054F0BE
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c95a47aec5edba88214fad580cb869417b6620a91d8ee97e2d0b7801d3372be5
MD5 aad5f2ca0dd16bb2ea6c7757ea569c50
SHA1 5228b0b132542be004ea1bb32f3748964d065af5
SHA512 9d59c0291d741bd9d6cf50c22972d4baef00e7c1a48d6a3311a6cc82c04ceeba6e2be9458334cb954878915cc9eb91a8fd8bc4a47c966d57a2a05d6ee8211640
TLSH
T1D4D09BE177A19D18C545353567D1522591416D31451927194241E13D9D7E2C3455F0AA
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 2906e2c98db49c9d329bd0cc744bc3421be8146bb048bb5a8b56a277961ff762
MD5 479f9eda0a3eefb3d937801ba84744db
SHA1 cd506cb8bb4c30f0e82d932d933b3eadf633b9c7
SHA512 841d3dcc98648f05e6ba8c30638ff6d17e11c57b768b03f6d616391c7c4ef30d89e77c039b0a8ffe90f411b89361a87c7690b20a0fee543401ed5e8f68dca729
TLSH
T10C61B57203360AD3EB6989BBB9F298A4B2FFC849468F1E1A01555DB79C02F0350E1CD7
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59b126.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59b126.TMP
Size 3KB
SHA256 d3beac1a8765712247c188cebabf8457f2e0abb935030521e4eaa3e369982da4
MD5 9e9c27c2ae80452f34b28c8144982ca7
SHA1 5d9d7cf4add6c3ccac414350ff8d1cb10985b550
SHA512 3be712f011d1a64ba4bc021ec7999338f521b7a1360ea5036a1c9597d8cc441d0e0f465c3d87bde2d53d159fc63e7030053fdc2265f7cbb863623de3cd5534cd
TLSH
T1AA61B67203360AD3EB6988BBB9F294A4B2FFC849068F1E1A01555DB79C02F0350D1CD3
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 2b45d9220f721787deb5a3fec5bf1dae7af38dbcdfa8a0734e308f0ff2ea8d02
MD5 54a5ccf9564b6bf3d2094613d00f7866
SHA1 827d086a98c354f8acdad00d9b4f5a54953b54f7
SHA512 2e0dbcd31fef65d1b0d34eb199d5745d7d430d4df4c31b2274e540233753a6ee8ac403697f1bc0ba8ce0211d7a610575e3b62a2865726aa7f2cd1772c1ec76fb
TLSH
T1FA41CBF3C7E886BE890156F0AA186E1BCE1D0915832C3D6AC9E4AF1B93F3471E14195F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 6a898ccbb12ac8a498d808d1f98990700b873c52128f314cff5293134af1d2e1
MD5 52b2d0ff5fb54bc11ea4aa0026f93119
SHA1 34e626cf66fba90b9a291f753a5c3d70220bd5b7
SHA512 2be663e75b155951f73fb7e6dbc4803b770d7460a842bb5c43c50892a455e50a69b73035ae55efaba71007bcedc1c3867d714877436185eacbf02d30e2259b8f
SSDEEP 192:sxRCRwbV/f2s6h3xwGezoA8p4L/g6+WNIYo3CYQtG8gIgDKJ:sxRCoV/f2s6BpDy/5ISWS
TLSH
T1CF42A716A9285D7B5CCAE21DFB55BF53E6F96032A1942E48E6FC870C10EB6DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 77bc7c265e504a77396e502376f070ad915bcdb91682a5e75cf2035f23675f07
MD5 2995983706af6721ffef1075e8f3a950
SHA1 a51f35eae06253ad6b06fe6e3961fabc0a3600e2
SHA512 4c3f53bc8b7f7de59c10ea83547b3ca15a506464af28f528fed82eb878e71cd3a2fd1c62010b3bd6b3a0682c52d70373b11a8746f5d8025f6c219b643bf85854
SSDEEP 192:sxRRRwbV/f2s3hgxwGezoA8p4L/g6+WNIYoXCYQtG8gIgIJ:sxRRoV/f2sRUpDy/5IyWs
TLSH
T13A3296166928AD7B4CC6D21DBB65BF53D6F96432A1D42E48F6FC870C04EA6DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 681345c778a388530c18e75da47ed8433b4e839f0a13d2645551a6e51dbf7d87
MD5 db87bb6163a8bc37ed6adc0d836b45d6
SHA1 1303908bf9ca644733ae03091615a6f86ed46627
SHA512 593648a9f6c376b3a4767a6767acd0770febaf35e8466b2c549fe34fbb6218c18482788bbbb2818a42092f37f637ca1968d9a47b8c9ca81a905c9eebe816af41
SSDEEP 192:sxRCRwbV/f2s6hgxwGezoA8p4L/g6+WNIYoXCYQtG8gIgD4J:sxRCoV/f2s6UpDy/5IyWY
TLSH
T1DC329616A928AD7B4CCAD21DFB55BF53D6F96432A1D42E48E6FC870C04EA6DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 091b015f66fc850f4e72b2b3ce68c85d54f0c48a557efc67daafed55255a26fb
MD5 d807ff7cfddf67624f26a9f32110b14f
SHA1 53f78fa7a5c6fcfeb9d6da8dac28ea34278ed17b
SHA512 b45c6ff3bbfc77dc251824a4db2de1784f3dac87de0cb12fa92c8d7a0f92e20ab1b99fe156d4c87c5a9fb94fbdc0a02d335e5a6eee5181c9b2016a76751ed6fd
SSDEEP 384:jzK6H0dfCtgsqFf02KhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVvf9uaRXVro98A:j26H0RWgs2f028F1+UoAYDCx9Tuqh0Vz
TLSH
T107B2EC2B640DCBBE5F800A9DDC19AFDB6D9802C797588D4047FE994C03C77EA911A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 383f9c808a9ca0ea376dc08f3b49a3f0d40c34aa0cc1fd4a6a6507368e7fb5ae
MD5 64ffd26d389a544c5aa6b31ce29df3df
SHA1 cf6f191fc669c2f928e3fd8ae2c1bb03c9b376e7
SHA512 f01c8d8fd01add115f17a7a3e9c63a440a45068fd565421d99b09e04e270e05400160af9ce5096e62c7208a9272834a1e21a13251d1a2fc4cb7b36c620a2861a
SSDEEP 768:/rv+4UNbdw3pMc/TBOWRZRwONXyer1IRCzni94eVH1SK3:/bsbK31wSIqnLEH1R
TLSH
T1A813CF35E4A89E374DE2A3D5B107B6433FB8605BC6840B90DDDA2F4E069B59E130F91B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 767a0248d06f74b86d446d7e9533c8e14c4b93edf691346257b808db6e407e26
MD5 2993a1d76b395e32dcafc86fe883e353
SHA1 b873ca8005287841b06afe6e07865fbfaa78f377
SHA512 b0d059c02f5f182fa889bce51aa7991c48fe52538cdcc19e2e40d5c6cdc3abc1142931d5cbce0b035a50f1d550893db1273bb0e1a3b4c5bd4b964a0a6f41dc67
SSDEEP 768:8rv+4UNbdw3bEc/TBOWRZRSONXyer1IRCzni94b9Mx:8bsbK3TSSIqnLb+x
TLSH
T14B13CF35E4589E338DE293E6B10776537FF8255BC6880740EED92F4D069B86E130B917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 fa1c821795cf3680c04570a34b11863bf154700de1acd97ae997048be8ce49c2
MD5 ddf5d250891f4363cd507c86addd1ff9
SHA1 191ae0fb08c4e40d6c948d8a28bc4833bd8f9293
SHA512 7af120c980a7a81e4acc78c7f59c20f996146d8f2c389516ef3346de18edb610e39697b74a7a0948df97df068581518b8a4bcd147340f47dc1689ef9b64c2b77
SSDEEP 768:zU3KEc/TBOWRZRNONXyer1IRCzni94b9Mi:zU3ANSIqnLb+i
TLSH
T1F7F2C035E4599E334CE6E3D6B24677537EF96127C2C81B40ADED6F0D069B92E030B81A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 8e45ef976fa59690d04d2183b867de56ce9627161b76fb7dcc846e75851e2834
MD5 f0dd90c9fc6b9c24d96e504d7ac358d4
SHA1 26c9265f43c9a0c37435c9586d961709b0db4be2
SHA512 87b422ac541ab19737056277cb5f93eddfe8e459bb2c672c915283aafac938b4ae15ed7d05b74e94ddc838c802aa470d26de482e7570969e4ff563faca5c3aed
SSDEEP 768:Yn3KEc/TBOWRZRSONXyer1IRCzni94b9Mi:Yn3ASSIqnLb+i
TLSH
T1E5F2CF35E4599E334CE6E3D6B20677537EF96127D2C81B40ADED6F0D059B92E030B81A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 6a9d4bd229689a633d1f311366013756d8c6199c36b1fed763fa517c6771db0d
MD5 cb3b01720f66681330d520fcfd2f6e28
SHA1 4244e4fe793cdb360e0a1d8da47babc2a7e890f8
SHA512 12e307ecf35137fcdedc6d59e23fabc946b24fad7e50a78e1df969103a62cebd6d07e42893596b9a510a4087ad5798837acdd1232d5a6ed6afc3e6ec414a780f
SSDEEP 768:hrv+4UNbdz3P2/TBOWRZYONXyer1IRCzniBHeVH1SK7:hbsbV3emSIqn4EH1l
TLSH
T12603BF36E4A89E338DE2A3C5B14777437FB86057C6800B90EDEA2F4E069B59D130B957
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2686c90c-e168-4751-8298-9d7eba4135fa.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\2686c90c-e168-4751-8298-9d7eba4135fa.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download