708be501fb993ecf316648afca19410e92b420529e41bb662e269e713498c25a

Analysis

max time kernel
148s
max time network
152s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
27/08/2026, 12:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 172KB
Sample260827-pmx97svarf
SHA256 708be501fb993ecf316648afca19410e92b420529e41bb662e269e713498c25a
MD5 30f085743e9d771c9e11b6cac4cf5eac
SHA1 c2208839fce9359d57c2601f7a06b432d8b33939
SHA512 ccc54209db4040bca200c88e5ebffa2596a5e320e749f69fc4489ddf8d8557f047b1530695c1b1faf47b1d29d609a026927af9b9e4974401b9b7ce90f6939fc8
SSDEEP 1536:Y01jpbLWRzHU3SUUYwkLqMzVQRw6JcOlu7OsnD28yzcBrfAL/1ePHuzR3LEG8HVg:Y01jpnWRzHU3SUUYwkLqMzVQRRb
TLSH
T1F304FB62108724E71B3395C8F476470F71E6A17EFD030F01B7EC96AA9BD6C25A9358C6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3436	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134323072520683017"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2246396966-3025826688-3847171515-1000\{E3E6D293-AA1D-45A2-8FE9-ECAC807102FE}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4516	msedge.exe
4516	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4952 wrote to memory of 4100	4952	msedge.exe	88
PID 4952 wrote to memory of 5332	4952	msedge.exe	90
PID 4952 wrote to memory of 3436	4952	msedge.exe	91
PID 4952 wrote to memory of 5332	4952	msedge.exe	90
PID 4952 wrote to memory of 5932	4952	msedge.exe	92
PID 4952 wrote to memory of 5332	4952	msedge.exe	90
PID 4952 wrote to memory of 5932	4952	msedge.exe	92
PID 4952 wrote to memory of 4868	4952	msedge.exe	93
PID 4952 wrote to memory of 4868	4952	msedge.exe	93
PID 4952 wrote to memory of 4868	4952	msedge.exe	93
PID 4952 wrote to memory of 2320	4952	msedge.exe	94
PID 4952 wrote to memory of 2320	4952	msedge.exe	94
PID 4952 wrote to memory of 2320	4952	msedge.exe	94
PID 4952 wrote to memory of 5572	4952	msedge.exe	95
PID 4952 wrote to memory of 5628	4952	msedge.exe	96
PID 4952 wrote to memory of 5572	4952	msedge.exe	95
PID 4952 wrote to memory of 5572	4952	msedge.exe	95
PID 4952 wrote to memory of 5628	4952	msedge.exe	96
PID 4952 wrote to memory of 5628	4952	msedge.exe	96
PID 4952 wrote to memory of 4772	4952	msedge.exe	99
PID 4952 wrote to memory of 1472	4952	msedge.exe	98
PID 4952 wrote to memory of 4772	4952	msedge.exe	99
PID 4952 wrote to memory of 1472	4952	msedge.exe	98
PID 4952 wrote to memory of 2052	4952	msedge.exe	101
PID 4952 wrote to memory of 2720	4952	msedge.exe	105
PID 4952 wrote to memory of 5996	4952	msedge.exe	106
PID 4952 wrote to memory of 4380	4952	msedge.exe	107
PID 4952 wrote to memory of 5660	4952	msedge.exe	108
PID 4952 wrote to memory of 5660	4952	msedge.exe	108
PID 4952 wrote to memory of 4516	4952	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x274,0x7ffb9e33c188,0x7ffb9e33c194,0x7ffb9e33c1a0
  2⤵
  PID:4100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1852,i,84489579016890160,14179774434117132683,262144 --field-trial-handle=2480,i,1547489693840872632,13316446015699559596,262144 --variations-seed-version --mojo-platform-channel-handle=2476 /prefetch:2
  2⤵
  PID:5332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2152,i,8676261935860187084,6401925284551333923,524288 --field-trial-handle=2480,i,1547489693840872632,13316446015699559596,262144 --variations-seed-version --mojo-platform-channel-handle=3160 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2596,i,14188976328183304853,5371153933278821038,524288 --field-trial-handle=2480,i,1547489693840872632,13316446015699559596,262144 --variations-seed-version --mojo-platform-channel-handle=3200 /prefetch:13
  2⤵
  PID:5932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3564,i,9069201449309015986,12604719391758381132,2097152 --field-trial-handle=2480,i,1547489693840872632,13316446015699559596,262144 --variations-seed-version --mojo-platform-channel-handle=3620 /prefetch:1
  2⤵
  PID:4868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3584,i,15300422794232557954,8614476559047488111,2097152 --field-trial-handle=2480,i,1547489693840872632,13316446015699559596,262144 --variations-seed-version --mojo-platform-channel-handle=3624 /prefetch:1
  2⤵
  PID:2320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4216,i,8142564573258125261,351211233024994408,2097152 --field-trial-handle=2480,i,1547489693840872632,13316446015699559596,262144 --variations-seed-version --mojo-platform-channel-handle=4776 /prefetch:9
  2⤵
  PID:5572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4204,i,6788545890359617959,385683034085472751,2097152 --field-trial-handle=2480,i,1547489693840872632,13316446015699559596,262144 --variations-seed-version --mojo-platform-channel-handle=4772 /prefetch:1
  2⤵
  PID:5628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5284,i,920877773536621662,16036009130924364030,524288 --field-trial-handle=2480,i,1547489693840872632,13316446015699559596,262144 --variations-seed-version --mojo-platform-channel-handle=5372 /prefetch:14
  2⤵
  PID:1472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5292,i,8658968301412516188,9887329832159344954,524288 --field-trial-handle=2480,i,1547489693840872632,13316446015699559596,262144 --variations-seed-version --mojo-platform-channel-handle=5412 /prefetch:14
  2⤵
  PID:4772
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5956,i,12352754298888591384,6498180139790419378,524288 --field-trial-handle=2480,i,1547489693840872632,13316446015699559596,262144 --variations-seed-version --mojo-platform-channel-handle=5980 /prefetch:14
  2⤵
  PID:3720
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5956,i,12352754298888591384,6498180139790419378,524288 --field-trial-handle=2480,i,1547489693840872632,13316446015699559596,262144 --variations-seed-version --mojo-platform-channel-handle=5980 /prefetch:14
  2⤵
  PID:2052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1244,i,6137557831820481912,6326644854331702379,524288 --field-trial-handle=2480,i,1547489693840872632,13316446015699559596,262144 --variations-seed-version --mojo-platform-channel-handle=1232 /prefetch:14
  2⤵
  PID:2720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1248,i,15126996700353032488,4277384775763986299,524288 --field-trial-handle=2480,i,1547489693840872632,13316446015699559596,262144 --variations-seed-version --mojo-platform-channel-handle=1408 /prefetch:14
  2⤵
  PID:5996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1252,i,14158688734562584174,12055286374098375793,524288 --field-trial-handle=2480,i,1547489693840872632,13316446015699559596,262144 --variations-seed-version --mojo-platform-channel-handle=5028 /prefetch:14
  2⤵
  PID:4380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5012,i,2682945068845971821,4997573129117533491,524288 --field-trial-handle=2480,i,1547489693840872632,13316446015699559596,262144 --variations-seed-version --mojo-platform-channel-handle=1252 /prefetch:14
  2⤵
  PID:5660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6444,i,2550250022229404316,13397752314166771644,262144 --field-trial-handle=2480,i,1547489693840872632,13316446015699559596,262144 --variations-seed-version --mojo-platform-channel-handle=6448 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4516

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:6120

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4644

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 08a3eccff4cd9b05162ffe0d083662ea8cd60457899147f42dbbf95a0a97d97e
MD5 394c25b8b347a39d61b9cf28babb5c77
SHA1 c7334bcf8642ac580d30cf31659724fe1ab323c9
SHA512 8e5c09dada01bf020bbf53884d65940c521dc62e17d9ce99fe6c571edde4b95c7c7716f2eda97b70568b2cbac8823e7afed5a9bac7be39d1acc6fc95c23a4b1c
TLSH
T1F6D0C038762962C2C92725B2CC3063007330007030B587425071440C8E3489667CF3C7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 168dc438fa355b9b84e416f9d4caca14da218ad190d72da09fe489277625815d
MD5 39064a84dfec9bbd8c4b789b6d7a7c62
SHA1 5d817a4df5ed7bd1eac0c4bc0464a76007ad0c46
SHA512 3a4f32a1ad3eb6c391e6d11f4f6ba07c4d21cc935ddd8fd93306857b9e0cfda06c39786a872cae88f394320921a63296ad4df0e61334710db192febec2f48618
TLSH
T1B5D0C034763961C2C92725B2CC3163007320007030B587425171840C8E3489667CF3C3
MD5 SHA1 SHA512 TLSH

Submit Download

4f4c7116-0e44-4be6-ad9e-64bc72064516.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\4f4c7116-0e44-4be6-ad9e-64bc72064516.tmp
Size 27KB
SHA256 de2cb1a0dc3398eefec729e4de8c4b33f4625527f5185875958db55f16420e47
MD5 21aab73702f752fc2b00277477e75898
SHA1 85a9715929da2c1cf572867e9f30668b1fec4677
SHA512 c67cfc65d505c1dfd02e12e1f64b924158d277f505a19f85eaf9cd16d44f2d56268cb5fc04785a505ef71adbe28fd97c4586f701fae64e744aa6af229a9993f1
SSDEEP 768:kfISEvWgd5fWb8F1+UoAYDCx9Tuqh0VfUC9xbog/OVMSV2HroHh0wS+X:kfISEvWgd5fWbu1jaBU2UHh0wNX
TLSH
T1C1C20C2B540CC77F4F80499CEC25AE96ADD802CB97988D5447EA890C03C77EB522A5DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 b89b69e90b8572ff85100ee94911cad366178a76da07ec4bd909d4234c5ac220
MD5 9fd9ac07996a30837bb7a7b775734929
SHA1 81ff1b3e24fc8c8fd56e6aff2e35b78d334ee777
SHA512 d74092393be62addcd1e9e4fed27f755738649c2d75598cae009e3c64b984200d188177696042684aba056d6fa44ffd08b79de7fb097ec34d28521f0ab02ef72
TLSH
T11961B794032E4DE3FB658671D0E150DEF2F488C4939B2E2D5DF0E678A48EF756447425
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a3653.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5a3653.TMP
Size 3KB
SHA256 c59752ca145305011ff982b63486a12af0223a457d5ef2f146f8344f5894cca2
MD5 f3b5c03013bf25b176c9fe26c9061b8d
SHA1 e61617e1ea5dc62f653702b5fbc4ecf04eeae0fc
SHA512 121e973a9b55d11131825325a117140fab300c1c151bcd8a6ede0f5ab1ce5d8afaae6079d8779ee06ce769fead24dfabebe6a6a05464fb1cbe4e80f772ede285
TLSH
T15461B794032E8DE3FB659671D0E150DEF2F888C493AB2E2D4DF1D678A48EF356447425
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

bc56531a-20fc-4037-8e57-5b70f8bfe6ed.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\bc56531a-20fc-4037-8e57-5b70f8bfe6ed.tmp
Size 1KB
SHA256 91e94656a1a14ade8a2144cade24194ef48d458a1ba5dd2a1656fd430664ed5a
MD5 6af0eb799ff01e88a027b53bd46f9a3b
SHA1 03c04d21b271be1b9b8b0323eb0396950e18c124
SHA512 2f9c35cbbd8e7e8ef471afb5cbae03b47fdbc9501de653faf966c3b2dd250af2b4488e60969731835c906e0ba5ed71ff0ad62f08ea241e1576b02d0cf5b3ebad
TLSH
T11231BFF783B4967E8A0196F0EA14AE1FCE2D0512432C7C66C5E0AE2793F3471E041A5F
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 c0a4163efb00cebf9857745dd9239d91f43f0b1c7e557fb660ba00a9a46519ed
MD5 520e85a2c6d298dd805dffa413c0ac80
SHA1 aa4186e82d75fb94f14aac4dcfaa3285c3cfd281
SHA512 33639ad31f9e6c3a7b18764ad9a600d2b0894c9b229a722cade0187521fc32181db6e25d65f671eb10904b5808146e6ab6d708a62fbdab251796c0f1be6f2e75
SSDEEP 192:sxRfRFyM/jK1Ml8wbh/fQs/4j/wezoA8p4S/g6+WNIYZ7PqSscGzZIgDpJ:sxRfHlh/fQsgjYDf/5IBxn
TLSH
T12662D715A624997BCCDBD21DFA45BF53D2F81463A2900E44AAFC9A1C00E7BDD221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 d94b296917426672514005ce56c34908fa047532042b4b1ee67503b4c8e9ad91
MD5 b1805b32f4e3a31a9eb51f5d19da3aa6
SHA1 b21a283608ff4c93b74ffd9d123ae8cb12b4e356
SHA512 6ae58d3d1575b347b712388bd6a59a38a2547f057cf08ea4fa06bf4eba1ac7c99ca97c4e827748a60f2125b9dd70b0e02846090e777309379055409b15c4c578
SSDEEP 192:sxR4RFyM/jK1Ml8wbh/fQsu4j/wezoA8p4S/g6+WNIYZ7PqSscGzZIgIJ:sxR4Hlh/fQs/jYDf/5IBxs
TLSH
T1D752D815A624997BCCDBD21DFA557F53D2F81463A2900E44AAFCDA1C00E7BDD221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 927057c27c326da187fdc7e2a1977e94d7078501f59b8d68c03c7ba3d3743362
MD5 418a4a3e3f52da268eb4195609037d60
SHA1 9194c3be5c231cfb091f881bbec60c672abdfc67
SHA512 c6bd5f54ac7b059fa5a31fca8fdd42926c11154d1a55421678f3bfc813b71700c027b432d32f8f2dc9ff8eece833d4c2fd7f3f71277886f831bdd527bf7e8a63
SSDEEP 192:sxRfRFyM/jK1Ml8UQabh/fQs/4B/wezoA8peS/g6+WNIYZ7PF2scGzZIgDPJ:sxRfHqMh/fQsgBYD9/5IKxl
TLSH
T12762C615A624997BCCDBD21DFA41BF53D2F85472A2900E44AAFCDA1C00E7BDD221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 02b12b1d07ad7a0a9136b5865aba00b7fcd650f969c71de9a260134bd0309379
MD5 6b93cefeee1cb16da86bbd9d02907793
SHA1 c98abff92bacf0d82adef5312d473a70246e515a
SHA512 2445649228d12bb432a4b9b6c72c56e6baf324958310519f5ff5688d92f8e82231488bb9a82c9120012b427f68e13934c7360a4b79ed3c1041cb35e17f66cd65
SSDEEP 24:KSitLEitHitWitIPitNSitmitGitx1itaitBDitsI4itSitxKXitOhPitoitx1R7:KsSIfKjCsLyhIIHK1WsEMITKtaMvyVz
TLSH
T14A9111C2B0FA0640397E291C91A5D526DA82F076345DAE6B37E821B11F67E021DFEDC9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

6547731e-4184-4621-931d-1d901bebdbb6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\6547731e-4184-4621-931d-1d901bebdbb6.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 30KB
SHA256 0a329f4faa759f3535613be8210d419dee9f8d5ce8c28e6c8eb70c8c95ab8453
MD5 4500a426ebf8f70be89636d86defe585
SHA1 d6010dca3c7d5dd7dbe4b5e7fab620975831549c
SHA512 f9ac68128484d10b615bb015351c23e41ed09d67ee1672a8f4529fddc79e47616173fda2763da05e8ea8e99fabec358c18d18ca735c137524bbd1bee174b0354
SSDEEP 768:/J3K1q3LjLYlAam6aQMGdjWca4Ghf9tLj:/J3SfmaME6ptv
TLSH
T1B6E2AF315C6888775CA7A695F75B2643FDF0516385C85E80C8EDBB1D029719E130BC2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 1837a83aae836ffe5a041e367f079b4c0f7446294643c537cb689639049ebdc6
MD5 982a17d5d3ee04087af1a8c36be60ddb
SHA1 7f2343369750879f5580f26b903b52034c7bf1ee
SHA512 c7160f97ad4e1ce0f8e7ed0e3d55eca91c1de0064758b77d2bbaab18f66468b27dc169724fde1591c7ea39726fba8600cf3ab3689c891dc360968f08f4f5911d
SSDEEP 768:Crv+4UNbdq30zq3LjLY0Aam6aQMGdjWca4GhfwtPeU/:Cbsbc3uWmaME6peH
TLSH
T11BF2AF32A96CD5739CB79695F25B7687BEF052A389C40E80C9DD6B0D439708E230BD17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 30KB
SHA256 98efca6fc0bf6212184b988489fce0687caf555e476a26ebc3d529f834dbccb6
MD5 634b6be2d5b617c5c9bbd61d5341699f
SHA1 b29f325af5e58d2a79ad48cb18002a2a6d6942fa
SHA512 62c7f36c014d18348ac47eec85a1bf7df11ad0d9d2aaf840d7a9de61e106040478b00d4a7cba151ad4837563e9f828a5b5841ea72e0e90951a52b8f702369707
SSDEEP 768:FJ3E1q3LjLYlAam6aQMGdjWca4Ghf9tLj:FJ3QfmaME6ptv
TLSH
T1ECE2AF315C6888775CA7A695F75B2683FDF0526385C85E84C8DDBB1D039719E130BC2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 db4c84449bf26e8dcb08396d7d3d2f47773c7a0c90fbd837ec4b1f342d9f903b
MD5 afb4d9b7a53831eb2d16caa75b02c229
SHA1 7eb14e6fbe5b366909cf41c194aba0ef8de13b55
SHA512 586cb5983ee9d6c88414cd7b1913283df88ef881744c515263d73c61a89693fe2fcc514ad4e12fc20749d55e4696a11e68919b84f85cacdc83266fe8a27c2f0d
SSDEEP 768:kFQp3owgf1q3LjLAAam6aQMGdjWca4Ghf9tLj:Hp3WmaME6ptv
TLSH
T11DE29E725C98C477ACB79B95F71A2243EEF051A3C4D89E80D6DDAE1D029719D130BC2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 c872255ef4f762061a083593d4e9467170a8157e925b50fa9731d29e495ab35d
MD5 ca67ff9dbba5ca3b0ee6d1ea5a46ce06
SHA1 58bd30f772f978acf707d402af7fdd468c709af9
SHA512 3dce219a856cfc522ded2e88f6553774e12a905992dd9e73dce2d2512ee36b20f4e736b8a234330894505b0c8844410c41bdcc8efb007958a693d34c4a80845f
SSDEEP 768:/rv+4UNbdq3N9q3LoAAam6aQMGdjWca4GhfBHPeU/:/bsbc3XKmaME6pPH
TLSH
T11DF2AE31A9689973DDB79A99F21B6787BEF421A384C40E80C9D96B0D439718E2307D27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fde26a06-158d-42f8-aefd-b3dcdac5cb09.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\fde26a06-158d-42f8-aefd-b3dcdac5cb09.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download