7e74ced952daa25cf2bf8b5bff1971fd3d31961dccae28960bf21ed1c645e038

Analysis

max time kernel
148s
max time network
135s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
07/08/2026, 12:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 9KB
Sample260807-ph1jrsdp5x
SHA256 7e74ced952daa25cf2bf8b5bff1971fd3d31961dccae28960bf21ed1c645e038
MD5 5e7a9017f69f390b25200f5134ce5d73
SHA1 4fe0e9c62be4f1cfc106a3d18ea20f225df0af55
SHA512 8c04a3d41672438146ac6427f7c98b22527db59c02b88a66e22fbef832df0b1fbb3fecde59f2f831c14a3bc9e103e2dfb284f4c31c1eb90b73fb402301c0fc4e
SSDEEP 96:EBuvy9JM6JDkfvga/1VuW+DjKF+zSv1I4ic5lkQbP4UcAEickGMPx:E5XJDkAa/jQDOF+zinQmPPcuckGK
TLSH
T1AA22611528C41125877359A89EE9460DFF408117C74681493DFCABC32FB7D23E96BFAA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4724	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134305788543898783"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-189034102-168398478-1159367937-1000\{59801E57-14BD-4EB4-A3AF-33CBE2562EFE}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5400	msedge.exe
5400	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 1380 wrote to memory of 4184	1380	msedge.exe	89
PID 1380 wrote to memory of 4724	1380	msedge.exe	91
PID 1380 wrote to memory of 3080	1380	msedge.exe	90
PID 1380 wrote to memory of 3080	1380	msedge.exe	90
PID 1380 wrote to memory of 3080	1380	msedge.exe	90
PID 1380 wrote to memory of 676	1380	msedge.exe	92
PID 1380 wrote to memory of 676	1380	msedge.exe	92
PID 1380 wrote to memory of 256	1380	msedge.exe	94
PID 1380 wrote to memory of 236	1380	msedge.exe	95
PID 1380 wrote to memory of 256	1380	msedge.exe	94
PID 1380 wrote to memory of 256	1380	msedge.exe	94
PID 1380 wrote to memory of 236	1380	msedge.exe	95
PID 1380 wrote to memory of 236	1380	msedge.exe	95
PID 1380 wrote to memory of 5544	1380	msedge.exe	96
PID 1380 wrote to memory of 5544	1380	msedge.exe	96
PID 1380 wrote to memory of 5544	1380	msedge.exe	96
PID 1380 wrote to memory of 1992	1380	msedge.exe	97
PID 1380 wrote to memory of 1992	1380	msedge.exe	97
PID 1380 wrote to memory of 1992	1380	msedge.exe	97
PID 1380 wrote to memory of 4836	1380	msedge.exe	99
PID 1380 wrote to memory of 4836	1380	msedge.exe	99
PID 1380 wrote to memory of 3368	1380	msedge.exe	100
PID 1380 wrote to memory of 3368	1380	msedge.exe	100
PID 1380 wrote to memory of 2064	1380	msedge.exe	102
PID 1380 wrote to memory of 4808	1380	msedge.exe	106
PID 1380 wrote to memory of 2364	1380	msedge.exe	107
PID 1380 wrote to memory of 3704	1380	msedge.exe	108
PID 1380 wrote to memory of 4716	1380	msedge.exe	109
PID 1380 wrote to memory of 4716	1380	msedge.exe	109
PID 1380 wrote to memory of 5400	1380	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x328,0x7ff9c436c188,0x7ff9c436c194,0x7ff9c436c1a0
  2⤵
  PID:4184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1524,i,3022707861525558049,1280378366399524020,262144 --field-trial-handle=2284,i,18163964596148513270,2097944854135979521,262144 --variations-seed-version --mojo-platform-channel-handle=2280 /prefetch:2
  2⤵
  PID:3080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1856,i,15163385007875566417,501953826714471575,524288 --field-trial-handle=2284,i,18163964596148513270,2097944854135979521,262144 --variations-seed-version --mojo-platform-channel-handle=2956 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1832,i,15504553101337821388,9405656483892872834,524288 --field-trial-handle=2284,i,18163964596148513270,2097944854135979521,262144 --variations-seed-version --mojo-platform-channel-handle=3084 /prefetch:13
  2⤵
  PID:676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3584,i,6561339674500268116,8458684961889948135,2097152 --field-trial-handle=2284,i,18163964596148513270,2097944854135979521,262144 --variations-seed-version --mojo-platform-channel-handle=3636 /prefetch:1
  2⤵
  PID:256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3588,i,13364050046817866832,14649305938915570641,2097152 --field-trial-handle=2284,i,18163964596148513270,2097944854135979521,262144 --variations-seed-version --mojo-platform-channel-handle=3672 /prefetch:1
  2⤵
  PID:236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4344,i,10887560739592892574,13778859264564973878,2097152 --field-trial-handle=2284,i,18163964596148513270,2097944854135979521,262144 --variations-seed-version --mojo-platform-channel-handle=4324 /prefetch:1
  2⤵
  PID:5544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4388,i,2649430913032382427,17370806879542704059,2097152 --field-trial-handle=2284,i,18163964596148513270,2097944854135979521,262144 --variations-seed-version --mojo-platform-channel-handle=4564 /prefetch:9
  2⤵
  PID:1992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3696,i,1653592675823359056,11049025195548690835,524288 --field-trial-handle=2284,i,18163964596148513270,2097944854135979521,262144 --variations-seed-version --mojo-platform-channel-handle=3816 /prefetch:14
  2⤵
  PID:4836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3784,i,2986966997386371429,16218785289474472594,524288 --field-trial-handle=2284,i,18163964596148513270,2097944854135979521,262144 --variations-seed-version --mojo-platform-channel-handle=5420 /prefetch:14
  2⤵
  PID:3368
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6012,i,5232307414001258223,7578153986598200522,524288 --field-trial-handle=2284,i,18163964596148513270,2097944854135979521,262144 --variations-seed-version --mojo-platform-channel-handle=6028 /prefetch:14
  2⤵
  PID:2820
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6012,i,5232307414001258223,7578153986598200522,524288 --field-trial-handle=2284,i,18163964596148513270,2097944854135979521,262144 --variations-seed-version --mojo-platform-channel-handle=6028 /prefetch:14
  2⤵
  PID:2064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4420,i,15252089397656832974,13574346810632728073,524288 --field-trial-handle=2284,i,18163964596148513270,2097944854135979521,262144 --variations-seed-version --mojo-platform-channel-handle=5208 /prefetch:14
  2⤵
  PID:4808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4408,i,17457923189211256376,14816218183514593539,524288 --field-trial-handle=2284,i,18163964596148513270,2097944854135979521,262144 --variations-seed-version --mojo-platform-channel-handle=4564 /prefetch:14
  2⤵
  PID:2364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5112,i,2842532134683093659,14908655222819162464,524288 --field-trial-handle=2284,i,18163964596148513270,2097944854135979521,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:14
  2⤵
  PID:3704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5608,i,7385867334097787065,6188160276434376332,524288 --field-trial-handle=2284,i,18163964596148513270,2097944854135979521,262144 --variations-seed-version --mojo-platform-channel-handle=6240 /prefetch:14
  2⤵
  PID:4716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6196,i,18238950874686852602,3179342128441359167,262144 --field-trial-handle=2284,i,18163964596148513270,2097944854135979521,262144 --variations-seed-version --mojo-platform-channel-handle=6600 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5400

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3316

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1216

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 d5e01f572f200ae0d9d64d79018ae3bde45ebb286bc5bf50a62989856dced547
MD5 01f48c1fbe8ccf941841ff8734c129a3
SHA1 577248a196b207fe2e3a1315a5d217cfc6b0f71f
SHA512 baec84017a6e59e94e80c73714d4fec85916d9266f02b870d61660cfe34dc3a7ac847221ae594e9534f37e2b4b9db895127fbc895e83d5a7a319308fab679fa3
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7f:fwUQC5VwBIiElEd2K57P7f
TLSH
T15BB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7add6572365d752d8c3a090b9a256c43e3c5ff716f29ed7aa3c53dc57a08ba60
MD5 0da70f521ac5aee3489abf6e3eb4e375
SHA1 0f3cd9919820116ecc86bab93f4712c08485dc56
SHA512 a9cddd04863b2ac842fe4f91265c19a41d8b7442be8f07a91747705beca52c1e1d563e3c46cf68e1b73606695624f13ca69a8246653c2535d0684ced42c37d33
TLSH
T182D09BD479045D78C4C1353231A673155A616435DA5C46481051F3AACD65141667F5AD
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ffe13798c5910685872d371e84c30baa9eefaaa5db1419603eb30d473d7b2e37
MD5 03c111f9396889c77f6d9883c5df333f
SHA1 be65300843096dba92c5695fd35e2dffcbb7eb0a
SHA512 a77dfe3b48fcb72648f1adfafbf0d0fcd4d88690dcf41609a03e1d6b645d1336b6e322931b2205673283b920d20ed0225c6aa320a83a2d3a410771f18d120c19
TLSH
T1B1D09BD079145D78C4C1353231A773155A516435865C46481151F3BACD65141667E59D
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 9c7169274d5f53d0fbcdbff9b123897fc0c1de43268603801c12f89f136f991c
MD5 650679ff1a9f1c5d0d52ee5ca41af64a
SHA1 3c711d34f17152eb361aac7277ed57e659c47672
SHA512 8b0721e19ff84666eaeccb323a2a768ca8d4a29ca90344bedc8de53cf9adedd4203f3665bd187d8b490b4921545c7b9365cdd8e8fbf1a454124b7eaf9394b88b
TLSH
T18A616261A32914FADB3DC5B161EE165831F788A50E4B2E5156D35DB42F26E3750D0037
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe592716.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe592716.TMP
Size 3KB
SHA256 c99e6d0215678d715582c4c5b40fa80665b9c6c5568f45e9f82afe98841b8a49
MD5 6a7fa2ccdec8ba3af24d3232fac17aab
SHA1 0dfa4347320a9c03f6000fb03abe6bf982b71355
SHA512 d4877509ac702a581f5d9bf79c63219e49d9790784c8e0dd1a6bd5ec8568381fd03618b1c62215bfa4a6a4a8c34c1363c0d7f6f43715d0fa09f453dcbf2ad79c
TLSH
T151616261A32915F9DB3DC5B160EE165831F7C8A90D4B2E5586D35DB42F26E3750D0037
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 d744e5db65dcccf624a368a219aee48bbbe63718a9c62cb419cd10f4f767b1bd
MD5 36ffbac0e0a7382e504995525bcf4de3
SHA1 485da09644ce87059853579769f708e24a9cad51
SHA512 e184bce61e90bbbd4f8f8e2d13d20701ef6a49759a7c6feb938250fab712b878c7c39ad7d1f04197196681878cda94b84f3fd68e907f934b78f5754fc6d126b8
TLSH
T11E41BFF7C7E4867D8A0156F0AB147E1BCE1D0915432C3C5AC8E4AF1BA7E2471E14195F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 451f02f0498bae9bf3cb8f80a63d49bf0fc3e7bee94c48658c515e30b6cfa3d4
MD5 b8cb5fe21f1867586f699a4e8409eb6a
SHA1 cda2f92c8f3631b8703b9f918fd7f0536af8c54e
SHA512 63c59639325ea7525127b15001deab4e2435028682b3732c6499a577c2d1a53a0dd35716f8f1d0d8c16ea4f9246a9ee4330024b285424743b05bf9f2c2c31030
SSDEEP 192:sxRYRsyM/jK1Ml8UQMb2/f7s1C+8bNSSzoA8peG/g6+WNIYlr4jGDIgDnJ:sxRYWq62/f7sc+8SfN/5Ixmt
TLSH
T10462D745AA285D77CCDBD20DFA517F93D2F85473A1941E44AAFCDA0C00E6AED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 005781fe81ea15b3a64798f955777e1ad2a6881cafdfb2047b0cb31b18467509
MD5 02fb029d175b5f02331a89c09d54fb44
SHA1 1ea99196ec6a768aed3349fadd2553f988d2ee5c
SHA512 6f92738493d53b6cbd2bc20d21c1212458537b8706368041526ee06a4066342712e051029a064f9ff3a4bbf44f69f0f66f2867f5a23dd026b202dd0389275402
SSDEEP 192:sxRTRsyM/jK1Ml8wb2/f7sPCp8bNSSzoA8p4G/g6+WNIYlB4jGDIgIJ:sxRTWl2/f7sqp8Sfb/5IXms
TLSH
T19752E9056A24AD77CCDBD20DFA517F53D6F85573A1941E44AAFCDA0C00E6AED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 f9040c5f1d711648d0c2f9c1502c3600854b68c5e97ca60927dc6c9e73260e0b
MD5 a6f71dc18863ad3146c160f985b916d3
SHA1 973935b5d73dd457434ca25d93e97b25f79c8ceb
SHA512 32327e6cde484aee85d68f31fa2430f303e1b6edfdac273140d9e138021992918d36b35a6b55a16c1bc25367df85c9c6ed250f74674430f6c5d49c08abb8deb3
SSDEEP 192:sxRYRsyM/jK1Ml8wb2/f7s1Cp8bNSSzoA8p4G/g6+WNIYlB4jGDIgDRJ:sxRYWl2/f7scp8Sfb/5IXm/
TLSH
T18162E805AA246D77CCDBD20DFA517F93D6F85573A1941E44AAFCDA0C00E6AED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 a2ddda3c1c9c3f0970045b209e8e08c814eb40617eb8f3191de67b13f8471121
MD5 7f271470be53e43c6dce2920050470e3
SHA1 981cdb49437fe21ed32c16ea1de21cb1dc7dca14
SHA512 fc8d08eba5608530a71595a9b79a31874b201c65dafae2158247909a7a733ad12a49a9be20aa8ec013218d4659a603505cbfcc616249eb46e1717d36e58f6784
SSDEEP 768:dhRACxWgg+fAJ8F1+UoAYDCx9Tuqh0VfUC9xbog/OVL13fYroPcua:dhRACxWgg+fAJu1jaulfj0ua
TLSH
T11DC2FD3F540CCB7E4F844E9DEC29AED76DD802CB96988D5447EA890C03C67EB511A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 7d6baabbb43b2ab7917eee4a1420b8f35afedd07847f2cd4e9f24035b9290575
MD5 eb198409a4dd85cde5be3a95485feb1d
SHA1 bf549480c80ffc179f371fb049ff19b8dd61573b
SHA512 b73d826160a6a973b6e437e25e080ce38cb19f1ecd5bd58e3f180d396af93cc369de05e7db062639c1e280bcdae553b6782c3099ed47414a5ef360fec79148a6
SSDEEP 96:KRjsJ9rhhdW1aQgldK4cgLdczLiVhmHSoSZSsS4SqS2S6SgWSeSDSzgSgSgK4S1t:CjsJ9rhhY1ahl3cgLyzLiVhmHSoSZSss
TLSH
T110915502707B4280387F6A1C81799C5A8A93FA65331D68EF7F6801561F6BE224DFDCD9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

2874b6d2-47fa-44ce-a7ed-312109b557ae.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\2874b6d2-47fa-44ce-a7ed-312109b557ae.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 0f19776d06fd5d1028a45e8fe037dd8b6db833cd7f33e9965ee906004cc4a7a1
MD5 4650264f118149a3eb546e4e8c46df6e
SHA1 57fd96f9d82610bc63114cca1cf1f8ad8c1e13d6
SHA512 81f03460f593b0d8026b8ddc1a4b8da611728f17c66d7929ec5af559e7def1aba6afb02deaa18fc912dc802540d6d73797b3b115d96ad6ea4dec787b33047b05
SSDEEP 384:AZcIc38NtP3Kh6OPHT8zRfY9bYFqKU5SGhFQPlLJQXmIkdP9IimIMWEfMbc+HDIp:+c38KI+YiJrKU0NHXmTWTbc+HDtoWw
TLSH
T195F2D0B09CB6DE376DFAD688794A7742AEE45173D5C81688C9DDBB0D018711E070782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 6ebbe95d9e16714ac31e0df81dbadb0fb487308c82e46fcafcaf402c27f0a515
MD5 471e700dc20485b2393a1965b110e246
SHA1 e3dee115d4039415152876a7f950cd6be9224318
SHA512 bac7e911334fc4bd4828ff06e9c79eebb08a0a567a505898fe729f540c8dcbcb2a3e8d8b41d824a7119ad2b03fc7e38b326c2c72e0a506ac8ef1859cf1ee95a7
SSDEEP 384:2ZcIc38Ntd3Kh6OKHT8zRfY9bYFqKU5SGhFQPlLJQXmIkdP9IimIMWEfMbc+HDIp:kc3aKIZYiJrKU0NHXmTWTbc+HDtoWw
TLSH
T11EF2D0B09CB6DE376DFADA88794A7742AEE85173D5C81688C9DDBB0D018711E070782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 ca2a46de2fca366173a10ff2bd0a96e3ac1c929021bb95b0a12da9a4ed1b773a
MD5 68a29c8bb13a0126f7723457dcedc6d6
SHA1 3b0c8e4cb6b6c290661afce3fa6729300ba11008
SHA512 1f53ff00b19ceb69571a4534c5f14fbbc698f89e8e04b30cc13753ae3ee7954acf7bed9385084629a9fc8068c8fcd75a4d15ca450f6cdea58519fb20e18e455e
SSDEEP 768:kFQO3wwgVKI+YiJrKUvNHXmTWTbc+HDtoWw:HO3aK0AKU5eWn1jq5
TLSH
T14903BFB19CE5CA3BAEFADB88B94A7706AEF54173C4C81598DACDBA0D014715D0307C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 147a53425ed1d8691356008844708dac19eb5b3f8b277d8f4287e4f957c33737
MD5 0039a1e976e9e6351a642efd20959546
SHA1 0382f9e3439804669a0646db88330a6bed3486d9
SHA512 832d668d71a0696e7f73d7464ccc5c29886d455d3df7c6baaeac9a9e6ee544f04647e2b39406b7279bb5a6110490060bdd09cea00752ba8ca72931ee656dfe74
SSDEEP 768:arv+4UNbdM3nxGiJrKUONHXmTWTbc+/1eVH1SvyZ:absb+3gAKUieWn1NEH1dZ
TLSH
T15A03C0319CF98E379DF69B88758BBA573EB8106389C40B84C9D96F4D428B44D170BD2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

208ecd83-daab-4c7a-857f-b5031780e90a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\208ecd83-daab-4c7a-857f-b5031780e90a.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download