b3f873a2bd042c20cc1d4da543c9107ce9738e1fd3aba474b76d6db32408c4fa

Analysis

max time kernel
148s
max time network
152s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
20/08/2026, 12:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
vishal1/index.html
Size 4KB
Sample260820-plz3eack4x
SHA256 b3f873a2bd042c20cc1d4da543c9107ce9738e1fd3aba474b76d6db32408c4fa
MD5 069cf64ada1da508bfd02f35ad1b4a88
SHA1 172e8693dc136984cbb5da322ca4d01f541efdca
SHA512 817ef74041d781cf5b827bcf19f0acd2e19699daf0b98f6f88609f49a98126967cb97487b7f8947016705383e64ff5391c0e9e91d15e550d6ee09961bbc46270
SSDEEP 96:xrOrhV+kTDYHvY5zu2pMHHJgyWYzVXTfhBi7iaLrM:xrmhV+dvYgFzV1BibM
TLSH
T1E1913178A1F204A760E3C6B3B6C26F6BADA8C91FD667D5A071DC81812FCBC418D47304
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2276	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134317023534335306"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3797332335-34111092-3597280141-1000\{307E83D2-CB82-4B44-A3B1-C91AE0ADCC73}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5576	msedge.exe
5576	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4976 wrote to memory of 4044	4976	msedge.exe	89
PID 4976 wrote to memory of 1076	4976	msedge.exe	90
PID 4976 wrote to memory of 2276	4976	msedge.exe	91
PID 4976 wrote to memory of 1076	4976	msedge.exe	90
PID 4976 wrote to memory of 1076	4976	msedge.exe	90
PID 4976 wrote to memory of 2856	4976	msedge.exe	92
PID 4976 wrote to memory of 2856	4976	msedge.exe	92
PID 4976 wrote to memory of 4184	4976	msedge.exe	93
PID 4976 wrote to memory of 3020	4976	msedge.exe	94
PID 4976 wrote to memory of 4184	4976	msedge.exe	93
PID 4976 wrote to memory of 4184	4976	msedge.exe	93
PID 4976 wrote to memory of 3020	4976	msedge.exe	94
PID 4976 wrote to memory of 3020	4976	msedge.exe	94
PID 4976 wrote to memory of 1556	4976	msedge.exe	96
PID 4976 wrote to memory of 1556	4976	msedge.exe	96
PID 4976 wrote to memory of 1556	4976	msedge.exe	96
PID 4976 wrote to memory of 3308	4976	msedge.exe	97
PID 4976 wrote to memory of 3308	4976	msedge.exe	97
PID 4976 wrote to memory of 3308	4976	msedge.exe	97
PID 4976 wrote to memory of 5204	4976	msedge.exe	99
PID 4976 wrote to memory of 3216	4976	msedge.exe	100
PID 4976 wrote to memory of 5204	4976	msedge.exe	99
PID 4976 wrote to memory of 3216	4976	msedge.exe	100
PID 4976 wrote to memory of 2404	4976	msedge.exe	102
PID 4976 wrote to memory of 4240	4976	msedge.exe	106
PID 4976 wrote to memory of 4524	4976	msedge.exe	107
PID 4976 wrote to memory of 4716	4976	msedge.exe	108
PID 4976 wrote to memory of 2012	4976	msedge.exe	109
PID 4976 wrote to memory of 2012	4976	msedge.exe	109
PID 4976 wrote to memory of 5576	4976	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\vishal1\index.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x324,0x7ff8eb18c188,0x7ff8eb18c194,0x7ff8eb18c1a0
  2⤵
  PID:4044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1672,i,14108225521307197815,6086908932905495457,262144 --field-trial-handle=2332,i,6113485022757834130,15798938273504176523,262144 --variations-seed-version --mojo-platform-channel-handle=2328 /prefetch:2
  2⤵
  PID:1076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1804,i,14727904708083715517,17620483173384707271,524288 --field-trial-handle=2332,i,6113485022757834130,15798938273504176523,262144 --variations-seed-version --mojo-platform-channel-handle=3164 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2472,i,5368278883828033372,2583463426534738802,524288 --field-trial-handle=2332,i,6113485022757834130,15798938273504176523,262144 --variations-seed-version --mojo-platform-channel-handle=3332 /prefetch:13
  2⤵
  PID:2856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3624,i,3768915512079723325,6261796463204305451,2097152 --field-trial-handle=2332,i,6113485022757834130,15798938273504176523,262144 --variations-seed-version --mojo-platform-channel-handle=3648 /prefetch:1
  2⤵
  PID:4184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3628,i,7578469533307218615,2323867912750750315,2097152 --field-trial-handle=2332,i,6113485022757834130,15798938273504176523,262144 --variations-seed-version --mojo-platform-channel-handle=3652 /prefetch:1
  2⤵
  PID:3020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4340,i,16687631752640685487,5799734842746357190,2097152 --field-trial-handle=2332,i,6113485022757834130,15798938273504176523,262144 --variations-seed-version --mojo-platform-channel-handle=4368 /prefetch:1
  2⤵
  PID:1556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4360,i,14152452148910301274,8229614249355281721,2097152 --field-trial-handle=2332,i,6113485022757834130,15798938273504176523,262144 --variations-seed-version --mojo-platform-channel-handle=4412 /prefetch:9
  2⤵
  PID:3308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5352,i,13574558345596921545,15274161370728056302,524288 --field-trial-handle=2332,i,6113485022757834130,15798938273504176523,262144 --variations-seed-version --mojo-platform-channel-handle=5412 /prefetch:14
  2⤵
  PID:5204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5332,i,3589939375434763034,17154801185067243950,524288 --field-trial-handle=2332,i,6113485022757834130,15798938273504176523,262144 --variations-seed-version --mojo-platform-channel-handle=5432 /prefetch:14
  2⤵
  PID:3216
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5968,i,6654808517452233071,221598054173018270,524288 --field-trial-handle=2332,i,6113485022757834130,15798938273504176523,262144 --variations-seed-version --mojo-platform-channel-handle=6004 /prefetch:14
  2⤵
  PID:1168
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5968,i,6654808517452233071,221598054173018270,524288 --field-trial-handle=2332,i,6113485022757834130,15798938273504176523,262144 --variations-seed-version --mojo-platform-channel-handle=6004 /prefetch:14
  2⤵
  PID:2404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4552,i,14267282549869770155,15979806045497121113,524288 --field-trial-handle=2332,i,6113485022757834130,15798938273504176523,262144 --variations-seed-version --mojo-platform-channel-handle=3752 /prefetch:14
  2⤵
  PID:4240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4524,i,16186396462145693151,15477236974292262361,524288 --field-trial-handle=2332,i,6113485022757834130,15798938273504176523,262144 --variations-seed-version --mojo-platform-channel-handle=5220 /prefetch:14
  2⤵
  PID:4524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5044,i,5786806790638591488,11031991796941388557,524288 --field-trial-handle=2332,i,6113485022757834130,15798938273504176523,262144 --variations-seed-version --mojo-platform-channel-handle=5284 /prefetch:14
  2⤵
  PID:4716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5608,i,3176352218466804240,131650178768074063,524288 --field-trial-handle=2332,i,6113485022757834130,15798938273504176523,262144 --variations-seed-version --mojo-platform-channel-handle=5636 /prefetch:14
  2⤵
  PID:2012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6460,i,9815288627257243607,16794580452900977094,262144 --field-trial-handle=2332,i,6113485022757834130,15798938273504176523,262144 --variations-seed-version --mojo-platform-channel-handle=800 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5576

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3348

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5716

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 cac55920f8823c4ceaf21e9df262ea5144feec125c060a5abe9067d5317a32d5
MD5 758e232e0cd6d9a81ac6d391eae4c336
SHA1 87b9bddbaf74e9eec5f3f50faec56838c804652d
SHA512 070c7f645a47bcff78d2d6cd584b80ebb96040ad737531962fdbfe7971fda7ba4ce3ef9b1d1ab66f8279fd13535f41075f904d2b233a1a35c9f128131f7dafbb
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7i:fwUQC5VwBIiElEd2K57P7i
TLSH
T16AB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e413e02b9e80ee8d76d52c1043fc32251e2d7634d4b2fbd970df9ace9d91831a
MD5 22959b3a06a842ac30237dd57e8a3801
SHA1 0b7c28071a592034aa2607038000f085c7bb6362
SHA512 644add9ab912ad7fdfc55bc7a1b84482c75cc9bc69a59d169bae63a0400619d999846ebbadb0ef2bd6d35c2bd08a5f07053b600874dd5dfcbda7e8f3076131fe
TLSH
T1A5D02BE476408A0CC980203335F6524092018910D801D1480040B325CC845C1257F0DF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8aaa68aad07ba45abe53bd513aa5f7e7b21bd1b29db6e1d5c1e0a79a5f4eb890
MD5 74012bbce5fada7634c1da1b567562b3
SHA1 09db27f38f27e35986cfd407b57f6f83c8fc59f8
SHA512 c1a6a98f972793c84274c29552107bfe07b775c7c8121e5fdf137ebf9a7cc3f4eb43fe9eadfc842e7b92ca7281bbcea3d660bdd8fc9adc56add068510c41e48d
TLSH
T1FBD02BE07640890CC980203335F75240920189108401D1480040F335CC845C1257E0CF
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 c63d90c9856bb5975e9cfe95884eb9684983c931447e77f9f1c76163abddbf16
MD5 b108850b2baa8c4aeee0d5a4486578a3
SHA1 1b6664679cd3b72cc34ed41e8618dd5131c93c04
SHA512 444e4cd861772ed855139645d049bddc1044873a87b81928c1d2ef4cebcf8df3e9e25327eff3c08bc81346f69798fdb16120b49709780b135a47bada5d865ed5
TLSH
T151612DD2A3A10AE2E7358EBF84E1F45737F8CC5A81B31E1474835E746462FE4A2D5163
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe590e5e.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe590e5e.TMP
Size 3KB
SHA256 e880b2b0aa5b91000b6724855eaf2db736166dd1e7a26b5360040f8d84bbbf28
MD5 00a38ca4bf4e19718c9fc047331c314d
SHA1 d0e0a8b8eb42730bd5f3c4493dd5a525d78ff047
SHA512 49da7f4bd0eef0eab87b80fdec6442e134fdf6f44422365ce1608a18c3e352b3db04c9017f8519670637ae612f46133e301be0d1de6afb0422338cdd65efc6ba
TLSH
T10E612DD2A3A10AE2E7358EBA84E1F45737F8CC5A81B31E0474835E746462FE4A2D5163
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 13047d5c34474c8fa360ff3b44101eed5bc3df37589148f47cd83b9e5cf85a03
MD5 84fa0a56196fd657380dcce64bba7c62
SHA1 6b7b33e25ff5aee9c8b4b08eb622359f75d3f6b8
SHA512 9bff533c017205ba09073ab1d55a54c1e596c84e7108f644dc3b352fed51cd7f8c714162dca925a3bd7515f840746224676748a322221072cfce684a02bbe83d
TLSH
T1884179F783E4967E890156F0AA14AE2BCE1D0516432C7C6689E4EF2B93E34B1E14169F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 162232fc4f7f55a823efcaf5ee2be62e97d0368e0fc6f08f635c717820f2ec74
MD5 949a07b45cca3746738b0481b29d2710
SHA1 0d347c5fdd62b8a83441a82441452ae88886ab2d
SHA512 d2eefd0e3cab0e71556c0d2bc7b9b91673b8bef8d161abafb7264f4a79ad557ad7bb4548b61c79071ac0b66bb0561edd603510c656e4dc4c5727ea75208300f0
SSDEEP 192:sxRGRgyM/jK1Ml8UQAba/fDszq2prQ5szoA8peK/g6+WNIYn8JdhZGVIgDaJ:sxRGmqua/fDszq22N/5ITVSq
TLSH
T1E062C916A624A977CCDBE21DFA51BF53D6F85573A1901E44AAFCCA0C00E7ADD221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 078b2c6b2deb6c8459af18a8b0d66d96e917d1d47eb96837e4f99f45f2997863
MD5 447dc153f0b9b8532d86ac03e656e12e
SHA1 e3a125370d2c1e9f4ac7c506a8add4c6af100e67
SHA512 b9bcdc59e9ec58c028c691c94f489739e74b20fb40baa1db5bf9a476a6ede7ffd2d038ebd0e682208064215ca6a4b1eed20f2e178e850ce53112cfcfde5cff36
SSDEEP 192:sxRGRgyM/jK1Ml8wba/fDszp2prQ5szoA8p4K/g6+WNIYn8UNhZGVIgDIJ:sxRGmla/fDszp22f/5ITqSg
TLSH
T14852C9166634A97BCCDBD21DFA51BF93D6F81573A1905E44AAFC8A0C00E7ADD221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 e32ae497662a417ef6e70ae0451356babafe584316390e34a34b0d5456e25995
MD5 0ee2324f64f3169c9295a7cb6d452bc7
SHA1 1382680c917827c0a072cb8f02e56f5d46a62e2b
SHA512 53d284271b870afcefe79d3f27fa4d4b49c5e95c00be04b5193aa2d7d15d31f6a694a7f09857e7753ab3648e24e8b95d0accc3a9972eadec69a3eb25c0665165
SSDEEP 192:sxR5RgyM/jK1Ml8wba/fDs1p2prQ5szoA8p4K/g6+WNIYn8UNhZGVIgIJ:sxR5mla/fDs1p22f/5ITqSs
TLSH
T1CA52C9166634A97BCCDBD20DFA51BF53D6F81573A1905E44AAFC8A0C00E7ADD221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 12fc8bb77828c2570cab0bb5fc4166e066d90e7290e6fffd69e926b82c443a3b
MD5 a82a4a92785dea95c8190b2528eae6a5
SHA1 d7e5cd26da78519cef5778b8e03ad4cdef4260bb
SHA512 3e2e23eb14d1ec6d055fb550dd6d3d20a47ef39b7f1157e012bf0febfc56ef679524159b07dbd95b2319aaad0384c249e56e351fe6bed8501621cf3b05427cea
SSDEEP 768:wGedp6WgoufDM8F1+UoAYDCx9Tuqh0VfUC9xbog/OVIu4YRroSh8e59:wGedp6WgoufDMu1jatVYqI7
TLSH
T108C21C2B640CC77E4F844EADEC29EEDB6DD801CB9B984D5447EA890C03C67EB511A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 90b14e2609bb394bf64e77b2ccbaf7c2de7a3fd4b119d5b31779467bc15fb1cf
MD5 0338a2778a03ce051064b9b8f33df84d
SHA1 c0f74bee9e780f15f0c97f754eae37af0694d145
SHA512 23e949ce6a740ee2bed9c17f2d6fb9597fba1b92a861a20b2de95c4d03e804060a70bdd3f586f1015d683529c243b93924833755a702f48ffc8a016546c58473
SSDEEP 96:KRdqjXNn7vWj4mgfvK4+gBvcldQzLkHm7KmgIIOW4tVgGOK47g0OcOGlklvGKMM9:CdqjXNn7Oj4XfV+gBkldQzLkHm7KmgIr
TLSH
T1FC916C1171BB03843C7E76299668D86ED58274B3315DB4AB37A811A20FABD024FFDDC9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59a723.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59a723.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 afc050f4551e263febddc00c8b1c32bc42bc88547848eb195f356a6561fef9ad
MD5 556a1f8d00b7887ef2ef55b16a06e6d9
SHA1 57ae9735d596a6ff0279ec0705fe5f04dbb6951c
SHA512 660b5f37e5bb8fe12deddef0afc07cc460510d2c707d5c53cc23529699ce1a7f2cf6bc1c0caa23bdfe1cd958ef83c4067603455758631576e51d19abf08a70d2
SSDEEP 768:srv+4UNbdk3CVDZIO00heiNzc4ReyIsPyfH:sbsb230ftc44bsqfH
TLSH
T1FE03BE32B868D973ACF69685F10739537FF8511B82C81A98C9DE5F4C068B5EE231B913
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 aa2694d349d1e8e43337de384b10f4527c6b73c31da1c7f6de5e4c67f0916420
MD5 3716c83a7f5ff2b54b2f733f874270a4
SHA1 0f9e389f20a23d1228bc27533baeca6174720805
SHA512 fb660000f9deb413689d9122833b6d5040d8984c0e3eb444c4727b0c0034883ab6b8628f1573bdc2cc6fb762ad88a0bfd6d828cbe02b64b6848e181d71f11bc6
SSDEEP 384:qZcIj38NLXSNd1VJDZNfNoXOVSUUq3heiTETRzcoXfK86sfxEZxxsIj4lByfvAUa:Ij3jVDZIO00hejNzc4ReyIsPyfKP
TLSH
T1E5F2BE71AC759C63ACF9D681F50636437EF5911782C82E98C9ED5F1C058B6AE131B823
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 4f1184c9fd60f90abacfd98f0a835b3f6fb93c2a9afa94fffa664616643b627c
MD5 7bb40a44e716c06b37605aa087d2bae2
SHA1 b400acb6331f94fb3d48dde3b10fb80fce22e785
SHA512 db1933e97e18b679d8aa034e5df5031e4bf80bbb1b18a43979d563eacd5336930252ce79fa8ca1a8c13c12343b1b436970122bb03c124e7caa67bab7245e5500
SSDEEP 768:SFQZ3awgzVDZIO00hezNzc4ReyIsPyfKP:pZ3eItc44bsqfKP
TLSH
T169F2AE729CA4C87BACF99B81FA063243BFF58167C1D8A994DADD9E1C014B1DD134BC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 d2449b63146b96a41e01e73f92b52e62677ad877b9cc5894a5cadd3ec4b7869c
MD5 6a929635004b345630726efaab3c345f
SHA1 c26bf9a6ae85dad3867bc5c9435c7717190245d6
SHA512 cad73e00f927fad0bdc62e9b95a64977550d2648195ba74994ef08a77ac44c85c9481836abde91c431d5d884860692e468c4f77e6c4d638d8a81b3703637bde4
SSDEEP 384:IZcIj38NLaSNd1VJDZNfNoXOVSUUq3heiTETRzcoXfK86sfxEZxxsIj4lByfvAUa:2j36VDZIO00hejNzc4ReyIsPyfKP
TLSH
T1F7F2BE71AC659C63ACF9E681F5063643BEF5911782CC2E9889ED5F1C058B6AE131B823
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 64b184111c16c32eaa97e066dc6850425041760b4b6352ad06cb8b8c140a68f1
MD5 1042eb11cae1a0622c82b5b2b5caca84
SHA1 1ee06a6ace12bf0cb57e35c030e654ec0ffbf807
SHA512 e12d17e3f903bbf6e62b26ca9beade40503eca9a025b673071245d888cb6ce344c3c20bbbec837535d9fae11001f739682283b9313210c9a0d17d3a54cde80ca
SSDEEP 768:6rv+4UNbds3awDZIO0tNzc4ReyIsXgeVH1S5D:6bsbS3etc44bswEH1Y
TLSH
T1CA03CF32AC789977ECF6A685B50B36533EF8911B82D81E94C5EE2F0C464B1DD131B923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 c033067df59956d406acf01eddfbb56a6b5e27151a167d42efdfc7384e32f0d1
MD5 299e0a8ed4b18396bc0342eb79728365
SHA1 b903c4d125aed6cbd49189e9a94f2ca5be41f7ed
SHA512 fcd7884056b5c3e73f3a7b69dbc23277ca102457458536bac91eb8a21c9b271119d37f44d35eddfab637257c6b4ce82046f33ce411e5031000df076837795498
SSDEEP 768:Frv+4UNbds3NbDZIO00hesNzc4ReyIs2yeVH1S5D:FbsbS3Fztc44bstEH1Y
TLSH
T17803CF32A8789937ACF69A86F04735533FF8921781981E94C8DE2F4C4A8B5DD130F923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

98c9fe6d-89cb-4e0f-a37a-adb3c7568f0d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\98c9fe6d-89cb-4e0f-a37a-adb3c7568f0d.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download