22634249b019d91b529adf737ec317ececeef741ac5157d1704c44965c22f54b

Analysis

max time kernel
150s
max time network
153s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
31/07/2026, 12:28

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 9KB
Sample260731-pntcmsaf57
SHA256 22634249b019d91b529adf737ec317ececeef741ac5157d1704c44965c22f54b
MD5 633276694443fad935faf81dda4dcf48
SHA1 3c024ffed2948d279ef309903a8636c8d8c86c84
SHA512 5a9ad061da1780fccfe5f7e698173e68fd69a9766eb1fea0583861364b7e144a3ad9f530cdebeeed5ebfb4b3656febeae7d0eafaa6ab46af2feece4b6be0a40f
SSDEEP 192:njVuRrBTJVjzI3/BO1p2wRIeOCJKW4Td8DrCCf:njVaVTJVjzKs1MBJgmd8qCf
TLSH
T1F712E631E1B0507602A782B674F5FB1EAA62E553D01BE80173EC42D70FD6FA98CB7585
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4704	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134299749315249244"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2246396966-3025826688-3847171515-1000\{FC1B4147-0902-4234-8BA4-F839D945C19F}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3716	msedge.exe
3716	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4748 wrote to memory of 4768	4748	msedge.exe	88
PID 4748 wrote to memory of 1240	4748	msedge.exe	89
PID 4748 wrote to memory of 4704	4748	msedge.exe	91
PID 4748 wrote to memory of 1240	4748	msedge.exe	89
PID 4748 wrote to memory of 1240	4748	msedge.exe	89
PID 4748 wrote to memory of 4408	4748	msedge.exe	92
PID 4748 wrote to memory of 4408	4748	msedge.exe	92
PID 4748 wrote to memory of 3076	4748	msedge.exe	93
PID 4748 wrote to memory of 3076	4748	msedge.exe	93
PID 4748 wrote to memory of 3076	4748	msedge.exe	93
PID 4748 wrote to memory of 3596	4748	msedge.exe	94
PID 4748 wrote to memory of 3596	4748	msedge.exe	94
PID 4748 wrote to memory of 3596	4748	msedge.exe	94
PID 4748 wrote to memory of 4164	4748	msedge.exe	95
PID 4748 wrote to memory of 2328	4748	msedge.exe	96
PID 4748 wrote to memory of 4164	4748	msedge.exe	95
PID 4748 wrote to memory of 4164	4748	msedge.exe	95
PID 4748 wrote to memory of 2328	4748	msedge.exe	96
PID 4748 wrote to memory of 2328	4748	msedge.exe	96
PID 4748 wrote to memory of 5228	4748	msedge.exe	98
PID 4748 wrote to memory of 1720	4748	msedge.exe	99
PID 4748 wrote to memory of 5228	4748	msedge.exe	98
PID 4748 wrote to memory of 1720	4748	msedge.exe	99
PID 4748 wrote to memory of 2960	4748	msedge.exe	101
PID 4748 wrote to memory of 4872	4748	msedge.exe	105
PID 4748 wrote to memory of 2472	4748	msedge.exe	106
PID 4748 wrote to memory of 1492	4748	msedge.exe	107
PID 4748 wrote to memory of 4196	4748	msedge.exe	108
PID 4748 wrote to memory of 4196	4748	msedge.exe	108
PID 4748 wrote to memory of 3716	4748	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x264,0x268,0x234,0x288,0x7ffd2baac188,0x7ffd2baac194,0x7ffd2baac1a0
  2⤵
  PID:4768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1616,i,4056300176512688212,10560370478431243043,262144 --field-trial-handle=2224,i,14321968045039516510,5138489162916043699,262144 --variations-seed-version --mojo-platform-channel-handle=2044 /prefetch:2
  2⤵
  PID:1240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1892,i,13028488675658880097,747696042752761055,524288 --field-trial-handle=2224,i,14321968045039516510,5138489162916043699,262144 --variations-seed-version --mojo-platform-channel-handle=3244 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2396,i,12443962950788105044,16689198025122834321,524288 --field-trial-handle=2224,i,14321968045039516510,5138489162916043699,262144 --variations-seed-version --mojo-platform-channel-handle=2008 /prefetch:13
  2⤵
  PID:4408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3616,i,4575252253978247652,10059156281971816934,2097152 --field-trial-handle=2224,i,14321968045039516510,5138489162916043699,262144 --variations-seed-version --mojo-platform-channel-handle=3668 /prefetch:1
  2⤵
  PID:3076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3620,i,13269327855758578240,16749174325236298968,2097152 --field-trial-handle=2224,i,14321968045039516510,5138489162916043699,262144 --variations-seed-version --mojo-platform-channel-handle=3696 /prefetch:1
  2⤵
  PID:3596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4248,i,3808008286405674527,9644903390520119298,2097152 --field-trial-handle=2224,i,14321968045039516510,5138489162916043699,262144 --variations-seed-version --mojo-platform-channel-handle=4472 /prefetch:1
  2⤵
  PID:4164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4256,i,8033162138348401983,513224679246829400,2097152 --field-trial-handle=2224,i,14321968045039516510,5138489162916043699,262144 --variations-seed-version --mojo-platform-channel-handle=4476 /prefetch:9
  2⤵
  PID:2328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5360,i,6712589022750824812,8582354542532044073,524288 --field-trial-handle=2224,i,14321968045039516510,5138489162916043699,262144 --variations-seed-version --mojo-platform-channel-handle=5392 /prefetch:14
  2⤵
  PID:5228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5368,i,2778756219060380491,13271304656248082034,524288 --field-trial-handle=2224,i,14321968045039516510,5138489162916043699,262144 --variations-seed-version --mojo-platform-channel-handle=5416 /prefetch:14
  2⤵
  PID:1720
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5904,i,5990653370533919041,14616621731380372946,524288 --field-trial-handle=2224,i,14321968045039516510,5138489162916043699,262144 --variations-seed-version --mojo-platform-channel-handle=5920 /prefetch:14
  2⤵
  PID:4856
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5904,i,5990653370533919041,14616621731380372946,524288 --field-trial-handle=2224,i,14321968045039516510,5138489162916043699,262144 --variations-seed-version --mojo-platform-channel-handle=5920 /prefetch:14
  2⤵
  PID:2960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4680,i,5833941929440408306,17792911937470674415,524288 --field-trial-handle=2224,i,14321968045039516510,5138489162916043699,262144 --variations-seed-version --mojo-platform-channel-handle=4520 /prefetch:14
  2⤵
  PID:4872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4536,i,15013221817001921240,12978758721591061546,524288 --field-trial-handle=2224,i,14321968045039516510,5138489162916043699,262144 --variations-seed-version --mojo-platform-channel-handle=4672 /prefetch:14
  2⤵
  PID:2472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4684,i,13428815672274137650,7777696720722639261,524288 --field-trial-handle=2224,i,14321968045039516510,5138489162916043699,262144 --variations-seed-version --mojo-platform-channel-handle=4492 /prefetch:14
  2⤵
  PID:1492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5452,i,15824186415307475168,16500372880676233533,524288 --field-trial-handle=2224,i,14321968045039516510,5138489162916043699,262144 --variations-seed-version --mojo-platform-channel-handle=6520 /prefetch:14
  2⤵
  PID:4196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6472,i,15048701841848742673,14800306998849354585,262144 --field-trial-handle=2224,i,14321968045039516510,5138489162916043699,262144 --variations-seed-version --mojo-platform-channel-handle=808 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3716

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4556

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4632

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 eb3a2def9f4b6035941af73f13d4e0d6dabd1a81fd366178ace6a15412f5055f
MD5 892727a92ed5bb3d076e7c015f303461
SHA1 c06b37f3dbf604ea389be640479af6199627117c
SHA512 dd21d3eda95d2290b95a2fdb5d449733dc51ea5a65837f18375653e4a597ae34477d17b2c2d4b6dbb5ab366f9996fd2e1597cc7b409afac363ac88a6a4624414
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7Q:fwUQC5VwBIiElEd2K57P7Q
TLSH
T1D6B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 08a3eccff4cd9b05162ffe0d083662ea8cd60457899147f42dbbf95a0a97d97e
MD5 394c25b8b347a39d61b9cf28babb5c77
SHA1 c7334bcf8642ac580d30cf31659724fe1ab323c9
SHA512 8e5c09dada01bf020bbf53884d65940c521dc62e17d9ce99fe6c571edde4b95c7c7716f2eda97b70568b2cbac8823e7afed5a9bac7be39d1acc6fc95c23a4b1c
TLSH
T1F6D0C038762962C2C92725B2CC3063007330007030B587425071440C8E3489667CF3C7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 168dc438fa355b9b84e416f9d4caca14da218ad190d72da09fe489277625815d
MD5 39064a84dfec9bbd8c4b789b6d7a7c62
SHA1 5d817a4df5ed7bd1eac0c4bc0464a76007ad0c46
SHA512 3a4f32a1ad3eb6c391e6d11f4f6ba07c4d21cc935ddd8fd93306857b9e0cfda06c39786a872cae88f394320921a63296ad4df0e61334710db192febec2f48618
TLSH
T1B5D0C034763961C2C92725B2CC3163007320007030B587425171840C8E3489667CF3C3
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 aba922846b647721b735619d9061e3138b256c9bd776a9a51a1103dad7d52320
MD5 e0f5192b3cbd982650e9e0cd4dc0bbee
SHA1 e77cc8dd653ab4e7c81b6af458cc3961a487a1e7
SHA512 4081779ca75dc8e8f4dd6e9b01eccef66ec0f3d45f2d56ee637a70f530c6a747afb721f1df30f8c89a377e20f5d6a7f4b56780d4ff148830f523a18a3adc1b80
TLSH
T17551C85D0B6CDDFDC722A8B664E040C93AFB8CB801835F1202FAEA74090EFA82310211
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59ee0f.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59ee0f.TMP
Size 2KB
SHA256 44bd6f0871938266aedaefcd96cbc0da90d13e5fd029906273c2ebfef74a090b
MD5 e908ac46a51f45e25af2bc7ec6e3c1fe
SHA1 244c29b6ee0e381904e3ca3d8dc15d288febc2a0
SHA512 623082a20465616816a4809431d8b1df9bff16922255a7b7d4a8e3c13df6fe5612890e15327dcf6adba26f3baaf5dfa2afec7b1184e85071481d26bb141a8d9f
TLSH
T13851C95D5B6CDDFDC722A8B664E040D93EFB8CB905875F1202FAEA74490EFA82311211
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 e36c128704fab202c19e7fcb9eb311a2c5d83760024915d2363affe242627fe9
MD5 b7bae18aff8054efbca01fcbbc32dcf2
SHA1 c9b2b3be34ea8c98340935ccf3b48c27243ff666
SHA512 7cd3a31bf5485ce553af31e39dd082b3bf1695732e0ab6a8cc599a84de511f9e95fa13225735c71cd803c2767cc53a74d58c90b43fe6313c80bf9f71afbb1a64
TLSH
T15C51DDF7C3E88A7E890156F4AB146E1BCE2D0916822C3D56C9E4AF1BA3F3471E14155F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 9554db314c2e21bc4affd291730cdde8a093f0d8470082e2c898a11e73271a41
MD5 fc632cd147d71e5bbbf350d541723444
SHA1 9085c96d6362dfc116517d4827bb8935ebd3f4d4
SHA512 ac8e1e01cbd2b9f31060cc9118e112f50abbd7a2fc20136c1d9432c6d968b0e6fec594fc7391bf043b60973f166c0bf15bfc510c7d9a590e07991f9fa1ec1e35
SSDEEP 192:sxRwR5yM/jK1Ml8wbI/fVs2g/RBzoA8p48/g6+WNIYZ7PKMUG0IgIJ:sxRwHlI/fVs2gJ8Z/5IOIs
TLSH
T1FB52C715AA24997BCCDBD20DFA557F53D2F81573A2901E48AAFCDA0C04E7ADD221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 7348bd97337f86885bb42e6f1daa1b63e913e2090ae0dbd1723083043bc6a844
MD5 535194b5400ea348c601f721824a12e7
SHA1 1dd3e716d4b9095e91e52ae6a16aea3d2174c77d
SHA512 a615651e6f51e744c00d98ebd85d4847622e46093da80f6bf1a4e55242414bd9c5081dc932481f18d9e153a242e69c0a02d01c403c5fff28ecaab52a84a605a5
SSDEEP 192:sxR3R5yM/jK1Ml8wbI/fVslg/RBzoA8p48/g6+WNIYZ7PKMUG0IgDKJ:sxR3HlI/fVslgJ8Z/5IOIa
TLSH
T10D62C715AA249977CCDBD20DFA517F53D2F81473A2901E48AAFCDA0C05E6ADD221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 13c1385e0dec7d572d104f5da0b33ae871ac5766bd6967f10482fbba665366ac
MD5 620694a710615f3199adb6e355f7127a
SHA1 78927f22d320f2fdb93eb788a90b7506cec79b51
SHA512 df90eb16a97229d9704142fc62f77b0ed9e14f8f8c3c8141d811601f49bf5e3a6074ae97d10333c42b5593e7a942bdcff6ca44daa196972f22beb037ef3c71d0
SSDEEP 192:sxR3R5yM/jK1Ml8UQsbI/fVslV/RBzoA8pe8/g6+WNIYZ7PCMUG0IgDwJ:sxR3HqaI/fVslVJ8T/5IgIY
TLSH
T17162B815AA249977CCDBD20DFA517F53E2F85573A2901E48AAFCCA0C01E7ADD221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 5a017edde9c827af9ce2f4aea9db3b1f0b633a1d085679f5116ba983322bdd65
MD5 5cc1deda791fb6a97e1fbb72cfa7c019
SHA1 9ef3f199aca70f0979e98288e48f3a027068c4fb
SHA512 72f5ebfcf4544d4ea0f365e395cf46d4df2614bf5e0dee928c3b948ba1240d4da2ee81fbc76a5f8e4c6f73765f8aa034b2abd6006edcd882c2faabef28f4db33
SSDEEP 768:kfISEvWgd5fWb8F1+UoAYDCx9Tuqh0VfUC9xbog/OVMSV27roHh0wp++:kfISEvWgd5fWbu1jaBU2IHh0wk+
TLSH
T190C20C2B640CC77F4F844E9CEC25AED6ADD801CB97988D5447EA890C03C77EB522A5DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 4ec6bfa5dde5ca7fc59936ee8a0408539ba2ce43fa6a63a2561a26ba28f3d625
MD5 974cf74b65913d68a3e979868c67c400
SHA1 f835304cf62c1cad89d6a8ac76710515d248b4a9
SHA512 bd2858b92a6166de4abd76f37bc2c33ea4c05dfe70f0dde9ed42cacdf9dbaae00bb74b99ae70e23634488b0f735321e670ded43af042dafd932360ed86dd8b4e
SSDEEP 48:KcuI/KvK0jyJ8IjKN6cd/ujPpF5gldYzIkHgKP1HxgTXw8k3Fnyy:KcuIKvKSq8AKN6KogKN6+F
TLSH
T1F8911556B03E82D1287E2909D563C51ADBC5F0E2346DE47BBBA904E21F66F010EFD9C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 3KB
SHA256 fd796644b64085c3a618e1c1348299d14fed5282e6afeec75994017d79b4c1a4
MD5 3713d8ec3d9cd1ead2ab46c5d2e2c186
SHA1 183efde0a5e55e86c2900647249ca72c7699e557
SHA512 a4fd4b3b28ded99f75f032cf6061cead4d78a689fc02b89e5e01cd14d3e0701b12db36edee8c8c5c20151af971b9ee5482faf17d3e9e5bd72eb9ea538ebda833
TLSH
T1FB81F496B03E82C1287E2909D563C516DBC5F0F2346DA47BBBA904B20F66F114EFD9C9
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

41693e44-5af4-48a5-a529-2aab962a3a90.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\41693e44-5af4-48a5-a529-2aab962a3a90.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 b6f972a396eb7ce8452c4c7e51925f4c054e353893e2a5ac9cfe83dbf8c40664
MD5 961f80c48f38bdfb0ca2f29f362a64fa
SHA1 ee0d6597e8ebe7d4695063b80a5db5c844d6285f
SHA512 20b8d6ae20411e43fe8f52be72e3f055677e57dd39f88d3613dfa9734275cd86d7e8b4352ce41084be9f2e84c54c8ef331555192e096905b923e13d9ee641e2d
SSDEEP 768:uFQM3twgd37HdRqsLHLKAam6aQMGdjWca4Ghf9GKRZ:FM3B76maME6pGKr
TLSH
T128E29E328CA4C57BECA79B96F71A2743BEF05173C5D85984D6DD6E0D029708D230BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 30KB
SHA256 d90cb1af8183049c5467b6f454dd83e6c5c999c299e7b8885ecbf478255c6dfb
MD5 40a98719a9ff7de608b496bbb479c9a7
SHA1 ce6e310a5794ef4c3f71ea0d0fb4b04187adda4c
SHA512 a1a668c4f526fc4a59ff6dcf618f89edd274ca3ba3fc2f70586fdf80624e45f5b920589d0eeaa3d6ab8f4ec622383f0ac376865ea458529e56daa9a1dd9dc991
SSDEEP 768:wp3637GdRqsLHL+MAam6aQMGdjWca4Ghf9GKRZ:wp3c7N+maME6pGKr
TLSH
T155E29E329CA488779CA7A296B71A2743BEF05173D5CC4E84D9DD6B0E079749E230BC1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 30KB
SHA256 f4b0d6ba32ee96e3782a74783e85dea85d22ffb8b01f675c3ad5bcdcca40f3a8
MD5 c24ca7a9ab1718e3d146874fc9d8a27b
SHA1 9de0935da9f7127075928497ebc5d2ad8c57e9c2
SHA512 e7bfe824bda4a298a4cf951e1277c2c2efe85e9d9e52c7f9db89299d58b876dcbb57544d3c395fb68158b28fd4763381c853599e2e72b4f1183f3defa5aeb11c
SSDEEP 768:9p3L37HdRqsLHL+MAam6aQMGdjWca4Ghf9GKRZ:9p3r7E+maME6pGKr
TLSH
T197E29E329CA488779CA7A296B71A2743BEF05173C5DC4E84D9DD6B0E079749E230BC1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ef4f5462-13c8-4c3f-9f4c-af2e02baa70b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ef4f5462-13c8-4c3f-9f4c-af2e02baa70b.tmp
Size 34KB
SHA256 54b3dd028dae7d4d5e67ec27e7444f9be0ed141ee76e456f142de8e24356d33d
MD5 726b5655100d995876b24627ec2124d3
SHA1 35c26ae84c4805c50782a4c594171b2adddaa35f
SHA512 75d20aa1b1513be39de9b32452ada88b854020378f12797deb5998356fda952651a4a7f890342749b70fcfe345c6ab4e1e548952389683e61dfde1082cdd4ca7
SSDEEP 768:/rv+4UNbdq3XGqsLwAAam6aQMGdjWca4GhfBxPeU/:/bsbc3dKmaME6ppH
TLSH
T1D4F2BE31A86C9973DDB79A99F21B6787BEF021A384D40A84D9D92B0D43974CE3307D27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download