481a8b7749d2748ccb31f3407c9203f13288161b07fb432392e8b57b6b2113f1

Analysis

max time kernel
148s
max time network
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
20/08/2026, 12:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 334B
Sample260820-phjagsdb99
SHA256 481a8b7749d2748ccb31f3407c9203f13288161b07fb432392e8b57b6b2113f1
MD5 b9bf8aa5e62bb9d107a6c6230d1125b9
SHA1 fb9638a41ee2edbc4ad3f974c757f9a830231323
SHA512 4ef9f4abccd4795437c03d2e59ad3cd5aaafd06b7545b93c348498a6432183e9e1064da936b24df9dba122467a8afe333ccacf6b094b850e55321250899b6c4a
TLSH
T105E07DB2D400142AC1718B305CD1F1544183D97197494870D8C9A09F0CD9F42C5D79DC
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3416	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134317020892209300"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3797332335-34111092-3597280141-1000\{32497E46-6281-4383-9156-0A71F8159319}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2372	msedge.exe
2372	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe
1524	msedge.exe

Suspicious use of WriteProcessMemory 33 IoCs

description	pid	Process	procid_target
PID 1524 wrote to memory of 5264	1524	msedge.exe	88
PID 1524 wrote to memory of 3416	1524	msedge.exe	90
PID 1524 wrote to memory of 1580	1524	msedge.exe	91
PID 1524 wrote to memory of 1580	1524	msedge.exe	91
PID 1524 wrote to memory of 1580	1524	msedge.exe	91
PID 1524 wrote to memory of 2352	1524	msedge.exe	92
PID 1524 wrote to memory of 2352	1524	msedge.exe	92
PID 1524 wrote to memory of 2804	1524	msedge.exe	93
PID 1524 wrote to memory of 2804	1524	msedge.exe	93
PID 1524 wrote to memory of 2804	1524	msedge.exe	93
PID 1524 wrote to memory of 4908	1524	msedge.exe	94
PID 1524 wrote to memory of 4908	1524	msedge.exe	94
PID 1524 wrote to memory of 4908	1524	msedge.exe	94
PID 1524 wrote to memory of 260	1524	msedge.exe	95
PID 1524 wrote to memory of 1296	1524	msedge.exe	96
PID 1524 wrote to memory of 260	1524	msedge.exe	95
PID 1524 wrote to memory of 260	1524	msedge.exe	95
PID 1524 wrote to memory of 1296	1524	msedge.exe	96
PID 1524 wrote to memory of 1296	1524	msedge.exe	96
PID 1524 wrote to memory of 3732	1524	msedge.exe	98
PID 1524 wrote to memory of 3732	1524	msedge.exe	98
PID 1524 wrote to memory of 3732	1524	msedge.exe	98
PID 1524 wrote to memory of 3472	1524	msedge.exe	100
PID 1524 wrote to memory of 1832	1524	msedge.exe	101
PID 1524 wrote to memory of 3472	1524	msedge.exe	100
PID 1524 wrote to memory of 1832	1524	msedge.exe	101
PID 1524 wrote to memory of 2976	1524	msedge.exe	103
PID 1524 wrote to memory of 4984	1524	msedge.exe	107
PID 1524 wrote to memory of 1152	1524	msedge.exe	108
PID 1524 wrote to memory of 4644	1524	msedge.exe	109
PID 1524 wrote to memory of 3436	1524	msedge.exe	110
PID 1524 wrote to memory of 3436	1524	msedge.exe	110
PID 1524 wrote to memory of 2372	1524	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2cc,0x7ff9042fc188,0x7ff9042fc194,0x7ff9042fc1a0
  2⤵
  PID:5264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1816,i,947977796633427029,7261547856027833481,524288 --field-trial-handle=2536,i,15844975561023665520,7440209747193246323,262144 --variations-seed-version --mojo-platform-channel-handle=3144 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1552,i,12547172993480886047,4685239637361044059,262144 --field-trial-handle=2536,i,15844975561023665520,7440209747193246323,262144 --variations-seed-version --mojo-platform-channel-handle=2540 /prefetch:2
  2⤵
  PID:1580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2348,i,17970982910951685308,9818158731563409434,524288 --field-trial-handle=2536,i,15844975561023665520,7440209747193246323,262144 --variations-seed-version --mojo-platform-channel-handle=3156 /prefetch:13
  2⤵
  PID:2352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3592,i,6542862069149846622,13462939585046012935,2097152 --field-trial-handle=2536,i,15844975561023665520,7440209747193246323,262144 --variations-seed-version --mojo-platform-channel-handle=3608 /prefetch:1
  2⤵
  PID:2804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3612,i,16817816364886271375,2109378966735377055,2097152 --field-trial-handle=2536,i,15844975561023665520,7440209747193246323,262144 --variations-seed-version --mojo-platform-channel-handle=3624 /prefetch:1
  2⤵
  PID:4908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4352,i,17518990989953973279,14715164893862962633,2097152 --field-trial-handle=2536,i,15844975561023665520,7440209747193246323,262144 --variations-seed-version --mojo-platform-channel-handle=4380 /prefetch:1
  2⤵
  PID:260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4368,i,4444108213253721551,18282799081741631467,2097152 --field-trial-handle=2536,i,15844975561023665520,7440209747193246323,262144 --variations-seed-version --mojo-platform-channel-handle=4384 /prefetch:9
  2⤵
  PID:1296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5256,i,8565340284139919601,7628234457251208793,2097152 --field-trial-handle=2536,i,15844975561023665520,7440209747193246323,262144 --variations-seed-version --mojo-platform-channel-handle=5244 /prefetch:1
  2⤵
  PID:3732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5488,i,11239521868076392217,8173519383211630712,524288 --field-trial-handle=2536,i,15844975561023665520,7440209747193246323,262144 --variations-seed-version --mojo-platform-channel-handle=3816 /prefetch:14
  2⤵
  PID:3472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5496,i,9472513748319965905,16058796925499388033,524288 --field-trial-handle=2536,i,15844975561023665520,7440209747193246323,262144 --variations-seed-version --mojo-platform-channel-handle=3868 /prefetch:14
  2⤵
  PID:1832
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5960,i,231054198351099297,9267757077852746285,524288 --field-trial-handle=2536,i,15844975561023665520,7440209747193246323,262144 --variations-seed-version --mojo-platform-channel-handle=5984 /prefetch:14
  2⤵
  PID:2972
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5960,i,231054198351099297,9267757077852746285,524288 --field-trial-handle=2536,i,15844975561023665520,7440209747193246323,262144 --variations-seed-version --mojo-platform-channel-handle=5984 /prefetch:14
  2⤵
  PID:2976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5064,i,13950101562929198832,6080776034211316566,524288 --field-trial-handle=2536,i,15844975561023665520,7440209747193246323,262144 --variations-seed-version --mojo-platform-channel-handle=4436 /prefetch:14
  2⤵
  PID:4984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4360,i,17311920843233101099,7860872923904376076,524288 --field-trial-handle=2536,i,15844975561023665520,7440209747193246323,262144 --variations-seed-version --mojo-platform-channel-handle=4400 /prefetch:14
  2⤵
  PID:1152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4368,i,16161324067540033391,2520979340575656472,524288 --field-trial-handle=2536,i,15844975561023665520,7440209747193246323,262144 --variations-seed-version --mojo-platform-channel-handle=4376 /prefetch:14
  2⤵
  PID:4644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5524,i,6587067328699831706,4038671191825751562,524288 --field-trial-handle=2536,i,15844975561023665520,7440209747193246323,262144 --variations-seed-version --mojo-platform-channel-handle=5676 /prefetch:14
  2⤵
  PID:3436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6384,i,3967984797874800635,5003510661653375286,262144 --field-trial-handle=2536,i,15844975561023665520,7440209747193246323,262144 --variations-seed-version --mojo-platform-channel-handle=6280 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2372

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2532

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2884

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e413e02b9e80ee8d76d52c1043fc32251e2d7634d4b2fbd970df9ace9d91831a
MD5 22959b3a06a842ac30237dd57e8a3801
SHA1 0b7c28071a592034aa2607038000f085c7bb6362
SHA512 644add9ab912ad7fdfc55bc7a1b84482c75cc9bc69a59d169bae63a0400619d999846ebbadb0ef2bd6d35c2bd08a5f07053b600874dd5dfcbda7e8f3076131fe
TLSH
T1A5D02BE476408A0CC980203335F6524092018910D801D1480040B325CC845C1257F0DF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8aaa68aad07ba45abe53bd513aa5f7e7b21bd1b29db6e1d5c1e0a79a5f4eb890
MD5 74012bbce5fada7634c1da1b567562b3
SHA1 09db27f38f27e35986cfd407b57f6f83c8fc59f8
SHA512 c1a6a98f972793c84274c29552107bfe07b775c7c8121e5fdf137ebf9a7cc3f4eb43fe9eadfc842e7b92ca7281bbcea3d660bdd8fc9adc56add068510c41e48d
TLSH
T1FBD02BE07640890CC980203335F75240920189108401D1480040F335CC845C1257E0CF
MD5 SHA1 SHA512 TLSH

Submit Download

93b04155-54f6-42c7-93cb-4471500bda53.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\93b04155-54f6-42c7-93cb-4471500bda53.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 4d6b55d023dfcd5328c7c9e97a6edfe767fe7a76de013d8fa5cb1e12fc2de49f
MD5 94b58644574cf26bd95154ddce5afff3
SHA1 f8c8083810f9d6d52452fb0189450ca917a8003b
SHA512 e78037940153fb154911f4bca0e61aa442234e87d0cdc9ef6ea74f5b67a26ecfe7d86b05cfdbf216a4a0df695975c03c08450a92898c6a70f837f7357d20ae61
TLSH
T171513CF123E21AC2D32C69B697D28CD836F5A86F04871E107C54BFF45986F0790E1857
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59769d.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59769d.TMP
Size 3KB
SHA256 1b14fafa140d63aa90f10cefa0f8cc2d7e3336f7da2b0c43117e0797f698fb5a
MD5 68b6da56b4371789096ab864adb20df6
SHA1 cf6c82ad21438bfdd1ed6f1b37b589c942714153
SHA512 135cf40b64da60d6f5396d82accf4b9db074073f2969a2d5d9568772f22e5987caa90d2d51b9406f00f7563e30f2391236daf3830168f0f8c9ff79659d34753c
TLSH
T1035129F123E21AC2D32C69B697928CDC36E5A86F44836E107C94BFF05986F0790E1857
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

699ee7e9-fb17-4b47-a33a-d3042421627b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\699ee7e9-fb17-4b47-a33a-d3042421627b.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 b53bdfec7d7cf331c05d4f84f13807d704798a56ad93cc9fd9c8854312d20156
MD5 4c642711456e5cf57dd579e47adc6aab
SHA1 967906206ffbde09da30f1779e209b7d7af0d166
SHA512 3429859a5fd10ea72d8e62038ad2a798a1d21e81d152eac0982ff394e9a559b0b2c8cbd6cfbf99465d4e1231867665b5a450e255ab1da5ce37ed2a5b79338cfe
TLSH
T14B31A0F783F4956E8A0196F0AA14AE1FCF1D0511431C7C6AC9E0AE2793F3472E041A9F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 92055cf82645000731cb381577ea83bef823737a03f416f90f990a5e7900663f
MD5 9a972460a4db9c6dcc2daa4d7d57dc41
SHA1 ea3cb1cf3cc551c2dc50353502bc7da4a89cae22
SHA512 9cebac4a454f647e5f3abd69c7354a9239ccd9e4fc3cb634d2f5ae7e48de6836d665eace55ccbc2fd7fcdf1fc5a0117843ea0addec6bcc427a07daa48c0cf59b
SSDEEP 192:sxRjR+yM/jK1Ml8wbJ/f5sB7pprQ5gzoA8p4NV/g6+WNIYn8UCh5+GAIgDDJ:sxRjwlJ/f5sB7p0+/5ITN5qB
TLSH
T1AB52D8166A34A97BCCDBD20DFA517F93D6F81573A1905E44AAFC8A1C00E76ED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 c4439625782c2c5d3996615af966cb8b66ecce011a455b9c78e55f224fe2d892
MD5 67af75284b79a8471815634d41f6f3f4
SHA1 5fa63847c7bb398e871388cb04cf8e8c888dec66
SHA512 3158962fad8c4da4f60b563c8f5c0640f335d33cf0d98e4769e881cd4cdd22ad824307d6fb6e39ca58b42d9451db4d793a11f34345e94c2d521463b7fdd4a8af
SSDEEP 192:sxRQR+yM/jK1Ml8wbJ/f5sY7pprQ5gzoA8p4NV/g6+WNIYn8UCh5+GAIgIJ:sxRQwlJ/f5sY7p0+/5ITN5qs
TLSH
T14E52D9156A24A97BCCDBD20DFA517F93D6F81573A1905E44AAFCCA0C00E7AED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 daa5181574591cc67391d039b7f8193d24b8e482b76f5f5a5708b70f2961369a
MD5 39974058d591dab63aff557c06e01da6
SHA1 4e973b8239b8226709daea21f969e2563f66b585
SHA512 7647c086f14e8710474e7926a04762821b05b6fe390538d6a87a0f4e6e4ca2c6fa954567d4ea41a9d5244bcdfb9995a5a2be85aceda9d77eaea2dca6dedd5472
SSDEEP 192:sxRjR+yM/jK1Ml8UQrbJ/f5sBApprQ5gzoA8peNV/g6+WNIYn8Dgh5+GAIgDFJ:sxRjwqPJ/f5sBAp0Q/5ITq5qr
TLSH
T13B62D8166624997BCCDBE20DFA51BF93D6F81573A1905E44AAFCCA0C00E7ADD221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 6d15d33b8d6db6278015ab3132bc4de82d9ca0fdfef1e3afa9f355a5693df065
MD5 5d16d30b4c9cd3e143861c5fcab546d3
SHA1 d28524c2483e632d01f76cd927065e4647c1c7ac
SHA512 4dde10918cc811d9880430d6cd326c4fd6b58137543f4f95b58f391ad92e636054e398d774f74161f5ca655c7702ffa59effc1b3a535f378b4b85b4c69163e01
SSDEEP 768:wGedp6WgoufDM8F1+UoAYDCx9Tuqh0VfUC9xbog/OVIu4YyroSh8E5/:wGedp6WgoufDMu1jatVYpGB
TLSH
T193C21C2B640CC77E4F844EADEC29EEDB6DD801CB5B988D5447EA890C03C67EB511A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 46b41c2b493b5573414a894354880747b08caccf63328db6fbd759633f7905cb
MD5 3a76b58be8369ef8c6f4667bd1923259
SHA1 2c6b880ccaf09f7e61239ffbcee7c1879b0b7a2f
SHA512 824947995c3ca4582c7d63b2c59ad64801d125d7b971303f32963626338ebd07fbd08407852745e21818eed09f1144c1f163ddb8d030faa05bea611b325b52ca
SSDEEP 96:KR4i4n4O4i4U404k4iW4s454Rg4S4iK44Hg4I4ic4y464h4A4i4LH4/4o4N4J4/7:Cr0xFzJZQNi5tPUgD6LTqN5eHyX+SkEA
TLSH
T150915515717A02543C3EB9188AF8DC2FB68174E6305DB46B3BA851B50F66E029EFDCC9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 66f951995a658118d483501ec56c2953c345ff06cf6a944c703fb3aa189bd216
MD5 8c951abe118b655f9163820a69e9c912
SHA1 89856622cb7f4de807f315a30b940695b0a70831
SHA512 8b5e0b2c5d50f677988ccb7bb0626955a08bbafd8d18ef1c68aaa3a25f997a08f13c1337930573ba1c41358f168c8eb1bc739d9ebcbcff11d1e9de1fcc7fc3bf
SSDEEP 384:7ZcIt38NhxJgx9uvJDZNfNoXOVSUUA8oETRzcoXfK86sfxEZxxsIj4lBHfvt18L3:jt31iDZIO0LNzc4ReyIsPHfVuD
TLSH
T198F2CF36AC25DC67ACFAA3C2FA023663BEF5512781DC6D9089DD6F1C064B5DD031B822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 5a20aa22439a18dc269fcebb035a2b3bca22599ea4c725c4669305e6e501bfdf
MD5 43d782c3314e3c1b9b7e3e94d9115169
SHA1 c0c4b8fa35422b40f7c6aa86d9ea5b32d8cc6265
SHA512 61bca77db649a6f339dec94e5396d6bd95f6a30ab5be092f8b1a5ea4b6dd9b3c2842b2ff9ba6a1bc6234041f6036563397871bde28572534936d26c0ebffb144
SSDEEP 384:LZcIt38NhnJzx9uvJDZNfNoXOVSUUA8oETRzcoXfK86sfxEZxxsIj4lBHfvt18L3:Tt3qiDZIO0LNzc4ReyIsPHfVuD
TLSH
T162F2CE32AC269C67ACFAA3C2FA023653BEF5512781CC6D9089DD5F1C064B5DD031B822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 40a27acb53fe8a841df21de8505fe020b69e0f812c5c9a30e40ff56a901731f8
MD5 b9dcf0f8ea51cc23a00f412d0e18cc64
SHA1 4dfd0e53d44ccb77ae35d56014fc3e6be85906f8
SHA512 29b1c83f04a478ec69f17aec8a9a2389f3cf1049630b50dee8b8072d065f590b1e9a665e49ebcc7a6371e9c4cf5c14bd0257edd24383a9e77212240b69fd65be
SSDEEP 384:HZcIt38NhuJzx9uvJDZNfNoXOVSUUA8oETRzcoXfK86sfxEZxxsIj4lBHfvt18L3:vt3PiDZIO0LNzc4ReyIsPHfVuD
TLSH
T11FF2BE32AC259C67ACFA93C2FA023653BEF5512781DC6D9489DD6B1C064B5DD031B822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 da0afced843361963d4a42392a4fbad33ad96fc242f07cf332f9c43f3e85abd1
MD5 8d29bcc6fa1f7c5535887118dc2b8954
SHA1 dbaf5d2b39e8fccd8721aa0b43c4aebe0091336b
SHA512 725922237dc36735a26d8876e890dcdd572cc58c79bc3c9ab7464367e0b9fa8858ce4a2e610c984a12432bb8515335f723039afe882859b392c9e36d0dbae905
SSDEEP 384:kZcI738NhnJzx9uvJDZNfNoXOVSUUA8gETRzcoXfK86sfxEZxxsIj4lBHfvt18L3:C73qiDZIO0jNzc4ReyIsPHfVuD
TLSH
T15CF2CE36AC26DC67ACFAA3C6FA023653BEF5512781CC6D9089DD6F1C064B59D131B822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 b54c28587f2e12854e290da553786c29777cab39019d6bce69082a5f2f01b3c1
MD5 72bb2b4f799b9343b4b1e64fbb88ffae
SHA1 ee8cdf1a0a72ddf8065657c5e3004869c3b93fc5
SHA512 1c3ec3dc447878884c74c30c18efd55a7b8fe7f88f2cc2ef9b03114bce5851301056bc8df4a3c6bf3a218fc5cc4eb7c24b2e36d72e04f330b1579c132a18e091
SSDEEP 768:6rv+4UNbds3yGDZIO0ENzc4ReyIsXseVH1S5D:6bsbS3xtc44bscEH1Y
TLSH
T18603DF32A8388A77ACF66786B54776637EF8512BC2981ED4C5DE2F0C064B1DD130B923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 e33ac7dc931813b09ec2bbd9b1e1392425c4fd219153fce1e21d98a0b7306237
MD5 b8375edd545deed0052cc429226a4a11
SHA1 e1711ca591aa632b83c9c7984cb5c5488088fa8b
SHA512 6ce4701e12ec6179baa5e872c8bbed277e4991ce8b8224959c7b57501cc5fa77b9d8b4ddd1da72cccdd81192606984cd98cc42012abcfd17083be6bacca531b2
SSDEEP 768:Qrv+4UNbds3WMDZIO0LNzc4ReyIs2HeVH1S5D:QbsbS3ktc44bsAEH1Y
TLSH
T14D03DF32A828DA73ACF66686B44776537EF9521B82981ED4C8DD2F4C0A4B0DD131F923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

df4a4c1b-607f-401f-ad3d-7c5b59beecf6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\df4a4c1b-607f-401f-ad3d-7c5b59beecf6.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download