c36170560e4fac966ae7c4cf90989820ddc101b301d4d78c2353763da0eff8b1

Analysis

max time kernel
148s
max time network
149s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
14/08/2026, 12:31

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 36KB
Sample260814-pp777abl5w
SHA256 c36170560e4fac966ae7c4cf90989820ddc101b301d4d78c2353763da0eff8b1
MD5 9d776d3813dae86d741fb790fc16ad16
SHA1 0c1bff2a1993c197c54d55509cefc6794b76ff9b
SHA512 06dc6d888d3e86ba34f2ba77bfdc4e1300124f937017bb3eaefcd8b507feb5acb63c61e0e20d3cf1e0eaccd570469b641bde16f7364a2da857cf79a26a115daf
SSDEEP 768:Tvh27H5LQFI0klCVuuZF4Ezm4CzNtRS8sdcM9bZH:8JdlsF4Ezm4CJt7ic8bZH
TLSH
T117F219F26102613BB633D585F25CA39DE511A90EC9130F68FDE95196C1CBFFA2221A8D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5756	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134311844553818916"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-189034102-168398478-1159367937-1000\{4AC0905A-12C4-42BC-A610-9B976B60A736}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3260	msedge.exe
3260	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe
3052	msedge.exe

Suspicious use of WriteProcessMemory 33 IoCs

description	pid	Process	procid_target
PID 3052 wrote to memory of 4388	3052	msedge.exe	89
PID 3052 wrote to memory of 4132	3052	msedge.exe	91
PID 3052 wrote to memory of 5756	3052	msedge.exe	90
PID 3052 wrote to memory of 4132	3052	msedge.exe	91
PID 3052 wrote to memory of 4132	3052	msedge.exe	91
PID 3052 wrote to memory of 4976	3052	msedge.exe	92
PID 3052 wrote to memory of 4976	3052	msedge.exe	92
PID 3052 wrote to memory of 1900	3052	msedge.exe	93
PID 3052 wrote to memory of 5648	3052	msedge.exe	94
PID 3052 wrote to memory of 1900	3052	msedge.exe	93
PID 3052 wrote to memory of 1900	3052	msedge.exe	93
PID 3052 wrote to memory of 5648	3052	msedge.exe	94
PID 3052 wrote to memory of 5648	3052	msedge.exe	94
PID 3052 wrote to memory of 344	3052	msedge.exe	97
PID 3052 wrote to memory of 6000	3052	msedge.exe	96
PID 3052 wrote to memory of 344	3052	msedge.exe	97
PID 3052 wrote to memory of 344	3052	msedge.exe	97
PID 3052 wrote to memory of 6000	3052	msedge.exe	96
PID 3052 wrote to memory of 6000	3052	msedge.exe	96
PID 3052 wrote to memory of 1052	3052	msedge.exe	99
PID 3052 wrote to memory of 1052	3052	msedge.exe	99
PID 3052 wrote to memory of 1052	3052	msedge.exe	99
PID 3052 wrote to memory of 4968	3052	msedge.exe	100
PID 3052 wrote to memory of 2188	3052	msedge.exe	101
PID 3052 wrote to memory of 4968	3052	msedge.exe	100
PID 3052 wrote to memory of 2188	3052	msedge.exe	101
PID 3052 wrote to memory of 2576	3052	msedge.exe	103
PID 3052 wrote to memory of 816	3052	msedge.exe	107
PID 3052 wrote to memory of 5408	3052	msedge.exe	108
PID 3052 wrote to memory of 5128	3052	msedge.exe	109
PID 3052 wrote to memory of 2016	3052	msedge.exe	110
PID 3052 wrote to memory of 2016	3052	msedge.exe	110
PID 3052 wrote to memory of 3260	3052	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x328,0x7ffb2926c188,0x7ffb2926c194,0x7ffb2926c1a0
  2⤵
  PID:4388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1880,i,10196887991085779337,18348849358221428426,524288 --field-trial-handle=2592,i,4769364531489035102,5823729650731759689,262144 --variations-seed-version --mojo-platform-channel-handle=2684 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1544,i,13743511021243975275,15173100019169592098,262144 --field-trial-handle=2592,i,4769364531489035102,5823729650731759689,262144 --variations-seed-version --mojo-platform-channel-handle=2584 /prefetch:2
  2⤵
  PID:4132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1912,i,16759694210462082602,6954429779707173820,524288 --field-trial-handle=2592,i,4769364531489035102,5823729650731759689,262144 --variations-seed-version --mojo-platform-channel-handle=3128 /prefetch:13
  2⤵
  PID:4976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3520,i,11951434486529083662,17075446088495479928,2097152 --field-trial-handle=2592,i,4769364531489035102,5823729650731759689,262144 --variations-seed-version --mojo-platform-channel-handle=3592 /prefetch:1
  2⤵
  PID:1900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3524,i,12162977018317369838,13720517743444045653,2097152 --field-trial-handle=2592,i,4769364531489035102,5823729650731759689,262144 --variations-seed-version --mojo-platform-channel-handle=3596 /prefetch:1
  2⤵
  PID:5648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4300,i,10617789201302408306,1882822078188186193,2097152 --field-trial-handle=2592,i,4769364531489035102,5823729650731759689,262144 --variations-seed-version --mojo-platform-channel-handle=1584 /prefetch:1
  2⤵
  PID:6000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4320,i,9687711134649817628,1410085586402196546,2097152 --field-trial-handle=2592,i,4769364531489035102,5823729650731759689,262144 --variations-seed-version --mojo-platform-channel-handle=4336 /prefetch:9
  2⤵
  PID:344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3588,i,11426301326162001262,474279550014956033,2097152 --field-trial-handle=2592,i,4769364531489035102,5823729650731759689,262144 --variations-seed-version --mojo-platform-channel-handle=5348 /prefetch:1
  2⤵
  PID:1052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5500,i,422540592245859663,13747352464269272500,524288 --field-trial-handle=2592,i,4769364531489035102,5823729650731759689,262144 --variations-seed-version --mojo-platform-channel-handle=5552 /prefetch:14
  2⤵
  PID:4968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5508,i,2609765480037707307,2185649852507967040,524288 --field-trial-handle=2592,i,4769364531489035102,5823729650731759689,262144 --variations-seed-version --mojo-platform-channel-handle=5584 /prefetch:14
  2⤵
  PID:2188
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6100,i,12436091971375458898,3807848086397306176,524288 --field-trial-handle=2592,i,4769364531489035102,5823729650731759689,262144 --variations-seed-version --mojo-platform-channel-handle=6120 /prefetch:14
  2⤵
  PID:2920
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6100,i,12436091971375458898,3807848086397306176,524288 --field-trial-handle=2592,i,4769364531489035102,5823729650731759689,262144 --variations-seed-version --mojo-platform-channel-handle=6120 /prefetch:14
  2⤵
  PID:2576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6796,i,478691010405093023,5063109027734954010,524288 --field-trial-handle=2592,i,4769364531489035102,5823729650731759689,262144 --variations-seed-version --mojo-platform-channel-handle=6120 /prefetch:14
  2⤵
  PID:816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6272,i,2036031496006086566,18429850898859917990,524288 --field-trial-handle=2592,i,4769364531489035102,5823729650731759689,262144 --variations-seed-version --mojo-platform-channel-handle=6748 /prefetch:14
  2⤵
  PID:5408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6268,i,7679803872501334359,4844554089270015749,524288 --field-trial-handle=2592,i,4769364531489035102,5823729650731759689,262144 --variations-seed-version --mojo-platform-channel-handle=6520 /prefetch:14
  2⤵
  PID:5128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1868,i,11781735765115760353,12460831044981152116,524288 --field-trial-handle=2592,i,4769364531489035102,5823729650731759689,262144 --variations-seed-version --mojo-platform-channel-handle=3028 /prefetch:14
  2⤵
  PID:2016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6368,i,6729363675730047092,14691013665581072749,262144 --field-trial-handle=2592,i,4769364531489035102,5823729650731759689,262144 --variations-seed-version --mojo-platform-channel-handle=5996 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3260

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2220

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2016

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 e0424f12e2966d4edd61d48eb03e7a78e7aa9d384165acd4a8973fc664dca54a
MD5 7acb47b9e36d0b80e2fc9707e9c8e89d
SHA1 551a4ce1b41fc63afca9012e67ab4229c732feb7
SHA512 9b137ab83de648a2382112e33229e3ec6225fb81e794374fa123d6e7e13e4de7bc9858a11d08d360a0f72c10415e71a0f49f1cffe9e27deeea1ca3cbacdcc9b3
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7K:fwUQC5VwBIiElEd2K57P7K
TLSH
T16BB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7add6572365d752d8c3a090b9a256c43e3c5ff716f29ed7aa3c53dc57a08ba60
MD5 0da70f521ac5aee3489abf6e3eb4e375
SHA1 0f3cd9919820116ecc86bab93f4712c08485dc56
SHA512 a9cddd04863b2ac842fe4f91265c19a41d8b7442be8f07a91747705beca52c1e1d563e3c46cf68e1b73606695624f13ca69a8246653c2535d0684ced42c37d33
TLSH
T182D09BD479045D78C4C1353231A673155A616435DA5C46481051F3AACD65141667F5AD
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ffe13798c5910685872d371e84c30baa9eefaaa5db1419603eb30d473d7b2e37
MD5 03c111f9396889c77f6d9883c5df333f
SHA1 be65300843096dba92c5695fd35e2dffcbb7eb0a
SHA512 a77dfe3b48fcb72648f1adfafbf0d0fcd4d88690dcf41609a03e1d6b645d1336b6e322931b2205673283b920d20ed0225c6aa320a83a2d3a410771f18d120c19
TLSH
T1B1D09BD079145D78C4C1353231A773155A516435865C46481151F3BACD65141667E59D
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 0cf942422f84e8ab6a0b771e906a12d98eccef513e0c3bfb2150d41cf125770c
MD5 56ec158012c16045b9d866f8c417d1dd
SHA1 1aa5bf08281950ebb0e3162a3594dc51120aff38
SHA512 f318586bedabc28c556a9efbb3336aceb90c1d4a2de3820b607d911ad22d19bd81bd99c84506e137f4394c1d54e4033a7fb080b571a21a571d262978012498f6
TLSH
T1CC41112AC33EBDCED7A1577255D1629632B3D4992D0B6F184288BB7C8F45B077093322
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 72b0f53a008d7f5249f1f9693385a27d2ecf4e9fd76fdfdd4d96e91ed43437fd
MD5 0f017336c9f04048c523cd3ba2b58639
SHA1 b29ac2cf888e14241236b2060a63d1d748115f7d
SHA512 af13c9831e5c6e4db2d4b56f1b40431c1dd5bd83b06363dcb9063215a78139fba17385e90f9b69ce52c838d810ce8763bb8a541244d96eaa02083c8f184f9747
TLSH
T12F41332AC33EBDCED7A1577255E0625632B3D0896C0B6F188288BB7C4F05B067093312
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 8cecb08127cac06b9ddc88933654625d57e5338cc168079eedee231227d3d5d6
MD5 ffea81e96123987cc69750c7b63c5b21
SHA1 fe583be1f5ce8d64a4d13f6a669c7713bd67553c
SHA512 42b0dbc91e6c84496d388bb1a64f3351107796a7a63d84d653297da94f21eeaad408443f3f8ee44df87fc9d7724c35442f9ee12d65afdb334ef46d8af9aaa238
SSDEEP 96:DrXOSTVCTtFE2VaaiZjhGrhZFz/m4wr3GNLqXERwVup:Dr+S5CTw2VaaiZjhGrhZF7m4wr3GNLqk
TLSH
T10DB1BDF7C3E8837E891196F05A256E2BCD1D151B422C3C5689F4AE4B63F24B1D10269F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 8e1d5e0962e8f10e94fd81fc2ab642c3b3c13d101052c70082a8fd4fd66b94c9
MD5 73652f92c1315fb86b81f1c6b266074e
SHA1 7e2a9a0aa6a22b4c7e71a9d1ffedc1ca7af5a2cd
SHA512 f7d58b6f35192e3382b168dfe482a0f4671401c8f3834295b71c2817feb29ea3f10d7d0aeab834a45b26efc5dd24cd360c70fd0c057d0261a3a52bc7a02f1b12
SSDEEP 192:sxRORWyM/jK1Ml8wbj/fcsY48bNWvzoA8p42/g6+WNIYlzZItnGnIgIJ:sxROIlj/fcsY48WGr/5IHms
TLSH
T16862D8156A346D7BCCDBD20DFA557F93D6F81573A2941E44AAFC8A0C00E6ADD221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 d3098ca04d6db85eb96a511ac6970a3be9e8f1b706bb2e244908e0d8f26b97e2
MD5 af3eb80d4e7f56905480bc35fef63e19
SHA1 0b0ea7f37bec83011fb3d1e5696dba2d8e598747
SHA512 c2c9e8ea771e5d866b014136c579df275083da654df8ce8ae0fdf1e410c96ddb070f818c529aab56df1282893f215d46dd573f7818c20c213f990f53b5879084
SSDEEP 192:sxRZRWyM/jK1Ml8UQ/bj/fcsfQ8bNWvzoA8pe2/g6+WNIYl4Z8VnGnIgD1J:sxRZIqjj/fcsfQ8WGJ/5ImmL
TLSH
T16C62C715AA345D77CCDBE20DFA457F93D6F85473A1941E44AAFC8A0C00E6ADD221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 3d6fc684fb34021dab53f61f6bdd8046f7a7706b4ffb7e3e85edbcc1cf337ac3
MD5 79056c5bb583633182f823da41abf9fb
SHA1 43cb9681fa5dab28fbb0e384574253cc30acdb7a
SHA512 2f047aaac1abe6fbecc05a6a2c10febba875d672d4e04bc55dea365d728cb9cc27d295d643b59ec2a4852aea6aca1c63c30d6e16d96043e5c05cb5208320e91b
SSDEEP 192:sxRZRWyM/jK1Ml8wbj/fcsf48bNWvzoA8p42/g6+WNIYlzZItnGnIgDzJ:sxRZIlj/fcsf48WGr/5IHmh
TLSH
T10A62C815AA346D778CDBD20DFA457F93D6F81473A2941E44AAFC8A0C00E6BDD221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 ade17e5cfc41a8c638e728c6e1814be0dafcaaf32463a469df44180757365e2a
MD5 37b8f6c70b95719f53316a00911f687f
SHA1 5dee39fc201e590277f25c8c1e594e52c167b614
SHA512 5d0149f3ba14fd2b0cca8bd5645b57863762a06d4bbe6e40074cad0d8b06e6163482e9f7b9222f90a1b5a478e671beaebc046084c11a405fd889f3af412e34d8
SSDEEP 768:dhRACxWgg+fAJ8F1+UoAYDCx9Tuqh0VfUC9xbog/OVL13f6CroPcdRA:dhRACxWgg+fAJu1jaulf6Z0dRA
TLSH
T1CEC2FD3F540CCB7E4F844E9DEC29AED76DD802CB96988D5447EA890C03C67EB511A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 be57f43e32e2893142afdc3dc3e432ccf4cfbd6828f92a10123db8c728796a8e
MD5 3324026956fdb81a3dc78d2aef21c37e
SHA1 03e113875c8c919ce34e02d0b6212f42340e6ad1
SHA512 e2116b7aeec3360ff1f4817ccc02cc947dbbbcd9cf4839fda32094dd276b3a564628cddf914b68fab40d267f10ca34f37e0226443a0edff1ccb6eda39ac6048d
SSDEEP 96:KRN6zn9Xr/WzoWgv/K4ugR/cVtgDbUHZ2HDxTnjWXkSgLjK46gFjcpBc/H5WnjA3:CN6zn9Xr+zoHvFugR0VtgDbUHZ2HDxTf
TLSH
T1CAC15649717A465139BEB60C917D8D1E82C1F8A37754E82B77A846A20F27E039DFC8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt
Size 65B
SHA256 26e78cb8e189406e12ca36d7fe0eee3d0757dcb21dd8c84917e09c50bff3b708
MD5 f012cdf7eed009b6531e662c6b34787d
SHA1 b0cf0127db406b6184aa1230ceaef87f6d0f7c01
SHA512 89ab98a58175d02e277f293cd9cd021d3dffd012d12bd15f4163b6a90216d6bc3fabeaf18fbefb17b9d007eb734624065a9ce52fa418ee5216d4250c588573f0
TLSH
T1ADA002B70911818B6F30A9D82135A21EF80FC3CC8CC0CEF4D049C0432128A334052491
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe591812.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt~RFe591812.TMP
Size 149B
SHA256 b34fccc6bf3887ad90749fe4ecf76104ec12d8881be4b67cc6c4d5765213891f
MD5 6ecfca01fc6d4e3b39c2606f5ac1416f
SHA1 d80fbf7802d25006be8520801f79d4d2a683ad9a
SHA512 fe1bab74edf6b9d387ec5f01745123e7d673c4a7156ae7eb9edf544fe26e8b28b3af60aac6a71313d30945a0c7806d5144b68aba12a5d47ec12ca256af38a325
TLSH
T1F6C02BD7863241222B20ACD49035518C901BEECC8DC1D8F89403F152347C323F3F2020
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 501bb2bd04ff6e0e687b2f053b7234fd1266c30577cbeff7d2ffda75200b23c8
MD5 7c27fe33c4fc255fb7f0508d956acceb
SHA1 c4fffa9a25a7705bbc83b0b640d8da3202559f3e
SHA512 08d8bb8cb559791d430d13ab3fa86be5e7cf222c978065524b6395c4122493a4e90b09a13fc856cfd232211c2d99aa8df40ffa0b02d84e6fa21c2b77c7e5fd60
SSDEEP 768:vO3gT9cpiJsMQ8FNHXmTWTbc+HBPi9Pm6:vO3gTg5d8TeWn1hPo
TLSH
T196F2BFB09CB9DE23ADEAA788A54A3B45AEF401B3D5C81A48DDDCA70D01C751D071BC3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 cf2963079e71334e378a260db2e01dfc54d9c743320ec799e130f4de03e4eafd
MD5 e19d499ba60730480531b972eb36ddc6
SHA1 cac6e0f085d8b762fb626bc48241fce21b14d68e
SHA512 fbaee7f690dc2c18bd66d82181c99fb32cc242c15c0a84cb8382e899ed0f80b9c88144b98933db22e6c7fef2ff0f7788528780e753c6f136e5ed8e216763e378
SSDEEP 768:Trv+4UNbdF3xT9WpiJsMQ8FNHXmTWTbc+HBhs:Tbsbj3xTe5d8TeWn1hhs
TLSH
T11C03BF71ECB9DE339DF65688B40B7A42BFF810A385C81A98DDD96B4D018B05E171BC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 7b21aa5f849280fd39b00774c392fcf5c51488a9ab9fd19f19554763ea8c514c
MD5 aece2fd35d585837836609e343c30a0a
SHA1 d56bfb7e01f2271c1b9becfafd8f114ca0b2beae
SHA512 7cdb45cc38016ce18b9f4775d69be8a2894792bfa8e4f2cce0628df62a3ebaf6fda28bd1e56c7cae579240ef9b33ab8d6a450862cf72e14077281e31759ef718
SSDEEP 768:Hp3gT9cpiJsMQ8TNHXmTWTbc+HBPi9Pm6:Hp3gTg5d81eWn1hPo
TLSH
T1A9F2BFB09CB9DE23ADEAA788654A3B45AEF401B3D5C81A48DDDCA70D01CB51D071BC37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 2d54a4ccc584d4f1970bf38f148f65fd120b54b85e2fce1a76369e64d8a40134
MD5 41c777ecf944de18b4821eb4112071ba
SHA1 cded645e1b280ba31388e209b061f7e96156da48
SHA512 744b8bb52dfc440f3965e662eff3b0565a2f23b8d5aacc4a99151d6ba4e1df9efb2a3c99946270547e6b7331f4f8ae2e51426fe7fc39c2c7da5ce14cc5e3fb63
SSDEEP 768:JO3dT9cpiJsMQ8FNHXmTWTbc+HBPi9Pm6:JO3dTg5d8TeWn1hPo
TLSH
T1D1F2BFB09CB9DE23ADEA9788A54A3B45AEF401B3D5D81A48DDDCA70D01C751E071BC3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 fed9ae0bec027e19d7d8a9fc960abce9665e32f4a692b593add70197feae72b6
MD5 ad6ab4f51b15f189e43bd459bd07a137
SHA1 75fc239f1c438aeb1aa24cb05b6b57fe0df3d45b
SHA512 c5b0239b55a23fdc3eac64213021f53be50f327d4c69c1a1dd376c801652fbb28dc64a8d3d8970a945dca0c4a692c84efe6f7b966a2e53d089b5ff36dc7d9b8e
SSDEEP 768:arv+4UNbdM32h8iJsMcNHXmTWTbc+/1eVH1SvyZ:absb+3B5feWn1NEH1dZ
TLSH
T15203CF329CBA9E37ADF79788744BBA577EB800A385C40684C9D96B4D028B44D170BD3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 af632eb66896f2d6e6b136c13892ad14b07d556ef22ce5dee1e14f4708348b4d
MD5 9f55adc39fe4d008827f69f1346b9c47
SHA1 1f3c7ec8452612cc7f4e057e43876ae1b3c16f3e
SHA512 1543628d22e2d32c96793791c0cb68cbefcedace6ea1165498c97f0fc70054bb48240fffb23ac7392c58a27ba2e1ccde1ea506b845d5d78aad8b2b834f3ed7fa
SSDEEP 768:rrv+4UNbdM3QTbiJsMQ8xNHXmTWTbc+eBeVH1SvyZ:rbsb+325d8neWn12EH1dZ
TLSH
T1A003C07198B9DA33AEE79788B04B7A477FF811A385C80A94CDD96B4D018B44D130BD3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4f8002c9-2348-4d29-91fa-9c04d7676135.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\4f8002c9-2348-4d29-91fa-9c04d7676135.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download