b2b48901ec6f74c03b03afee04f55a5b5d8e9c06e890fe00ca0eded385a96f5f

Analysis

max time kernel
148s
max time network
123s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260618-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
24/06/2026, 16:43

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
.html
Size 12KB
Sample260624-t8a41sdw4v
SHA256 b2b48901ec6f74c03b03afee04f55a5b5d8e9c06e890fe00ca0eded385a96f5f
MD5 6f2619c62d5d4f18421bcc58598f158d
SHA1 7a0816393acd15949a6fcd4afb1e571da1d810e4
SHA512 e246ae6cf56349419f3defd271c14bac5a8a5f0b3123e321de3e8dfb527d17768ee47b74b05b00e3c7c46b4c776e5f591ac2f047a7b894665ea1d22fb4b8d9b9
SSDEEP 192:fvZwl7Kfpj0LcQD3FYoEscLQwKeUX2zh12KyhHAXa9+K1H5zSr:XvMH39ElXSK
TLSH
T14152B626A9F6303B0053C1E6A7AE9B663DA78107D159800036BC57D84FF4C65EE535FE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2112	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134267930042342894"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-4118910392-3846778420-3545080915-1000\{3FDBD221-B877-4306-BCFF-69645D7F0357}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
6132	msedge.exe
6132	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4508 wrote to memory of 1212	4508	msedge.exe	88
PID 4508 wrote to memory of 1820	4508	msedge.exe	90
PID 4508 wrote to memory of 2112	4508	msedge.exe	89
PID 4508 wrote to memory of 1820	4508	msedge.exe	90
PID 4508 wrote to memory of 1820	4508	msedge.exe	90
PID 4508 wrote to memory of 5808	4508	msedge.exe	91
PID 4508 wrote to memory of 5808	4508	msedge.exe	91
PID 4508 wrote to memory of 2020	4508	msedge.exe	94
PID 4508 wrote to memory of 3404	4508	msedge.exe	93
PID 4508 wrote to memory of 2020	4508	msedge.exe	94
PID 4508 wrote to memory of 2020	4508	msedge.exe	94
PID 4508 wrote to memory of 3404	4508	msedge.exe	93
PID 4508 wrote to memory of 3404	4508	msedge.exe	93
PID 4508 wrote to memory of 6124	4508	msedge.exe	95
PID 4508 wrote to memory of 6124	4508	msedge.exe	95
PID 4508 wrote to memory of 6124	4508	msedge.exe	95
PID 4508 wrote to memory of 2520	4508	msedge.exe	96
PID 4508 wrote to memory of 2520	4508	msedge.exe	96
PID 4508 wrote to memory of 2520	4508	msedge.exe	96
PID 4508 wrote to memory of 5036	4508	msedge.exe	98
PID 4508 wrote to memory of 4860	4508	msedge.exe	99
PID 4508 wrote to memory of 5036	4508	msedge.exe	98
PID 4508 wrote to memory of 4860	4508	msedge.exe	99
PID 4508 wrote to memory of 3508	4508	msedge.exe	101
PID 4508 wrote to memory of 5056	4508	msedge.exe	105
PID 4508 wrote to memory of 5420	4508	msedge.exe	106
PID 4508 wrote to memory of 5344	4508	msedge.exe	107
PID 4508 wrote to memory of 2560	4508	msedge.exe	108
PID 4508 wrote to memory of 2560	4508	msedge.exe	108
PID 4508 wrote to memory of 6132	4508	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\.html
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2c0,0x7ffe9378c188,0x7ffe9378c194,0x7ffe9378c1a0
  2⤵
  PID:1212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1932,i,12143232522322553187,10880099193368831601,524288 --field-trial-handle=2804,i,2100749702057968703,4312626416971238645,262144 --variations-seed-version --mojo-platform-channel-handle=2832 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1592,i,12814067847706141737,1076220215997763366,262144 --field-trial-handle=2804,i,2100749702057968703,4312626416971238645,262144 --variations-seed-version --mojo-platform-channel-handle=2800 /prefetch:2
  2⤵
  PID:1820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2288,i,12591687124078273113,8967000151204101906,524288 --field-trial-handle=2804,i,2100749702057968703,4312626416971238645,262144 --variations-seed-version --mojo-platform-channel-handle=2868 /prefetch:13
  2⤵
  PID:5808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3636,i,10407262708528515446,1283062821990610889,2097152 --field-trial-handle=2804,i,2100749702057968703,4312626416971238645,262144 --variations-seed-version --mojo-platform-channel-handle=3664 /prefetch:1
  2⤵
  PID:3404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3644,i,13127445873765109649,2792093962612949332,2097152 --field-trial-handle=2804,i,2100749702057968703,4312626416971238645,262144 --variations-seed-version --mojo-platform-channel-handle=3700 /prefetch:1
  2⤵
  PID:2020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4300,i,14868836951488085025,11716201597860053323,2097152 --field-trial-handle=2804,i,2100749702057968703,4312626416971238645,262144 --variations-seed-version --mojo-platform-channel-handle=4884 /prefetch:1
  2⤵
  PID:6124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4368,i,11929547869073323514,15470446948910004621,2097152 --field-trial-handle=2804,i,2100749702057968703,4312626416971238645,262144 --variations-seed-version --mojo-platform-channel-handle=4888 /prefetch:9
  2⤵
  PID:2520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3668,i,6862866138063018568,14725250957125351622,524288 --field-trial-handle=2804,i,2100749702057968703,4312626416971238645,262144 --variations-seed-version --mojo-platform-channel-handle=5416 /prefetch:14
  2⤵
  PID:5036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3948,i,7560710534936090848,6060325033264103081,524288 --field-trial-handle=2804,i,2100749702057968703,4312626416971238645,262144 --variations-seed-version --mojo-platform-channel-handle=5436 /prefetch:14
  2⤵
  PID:4860
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6136,i,10842069834108174409,3100437255913097834,524288 --field-trial-handle=2804,i,2100749702057968703,4312626416971238645,262144 --variations-seed-version --mojo-platform-channel-handle=6156 /prefetch:14
  2⤵
  PID:3408
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6136,i,10842069834108174409,3100437255913097834,524288 --field-trial-handle=2804,i,2100749702057968703,4312626416971238645,262144 --variations-seed-version --mojo-platform-channel-handle=6156 /prefetch:14
  2⤵
  PID:3508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5336,i,2276239871669200581,1212935074063952998,524288 --field-trial-handle=2804,i,2100749702057968703,4312626416971238645,262144 --variations-seed-version --mojo-platform-channel-handle=6564 /prefetch:14
  2⤵
  PID:5056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3952,i,3975091065585082306,4425809624356823979,524288 --field-trial-handle=2804,i,2100749702057968703,4312626416971238645,262144 --variations-seed-version --mojo-platform-channel-handle=6620 /prefetch:14
  2⤵
  PID:5420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6156,i,15078569579299965527,8467046506250652490,524288 --field-trial-handle=2804,i,2100749702057968703,4312626416971238645,262144 --variations-seed-version --mojo-platform-channel-handle=4940 /prefetch:14
  2⤵
  PID:5344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2128,i,5233540881577987241,1011579965382653305,524288 --field-trial-handle=2804,i,2100749702057968703,4312626416971238645,262144 --variations-seed-version --mojo-platform-channel-handle=5528 /prefetch:14
  2⤵
  PID:2560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=812,i,16796224681277064744,3185716791025085548,262144 --field-trial-handle=2804,i,2100749702057968703,4312626416971238645,262144 --variations-seed-version --mojo-platform-channel-handle=5660 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:6132

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2476

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3832

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 cffda89706c34029bbadb3a079f8166927ce29a27926faf81be0941753fa411c
MD5 7cdea7179a599d50436be1171f9511c2
SHA1 6d8054f3ef2c68bd8edc0e0a0c209a8d0ec96169
SHA512 9254b7cacbb6da2f3991af0c9a702b61e8ea1514e5a421096b8814aba7d20757eb9270096433d7132ac27e348f1f0dafca2c9bdfe53b1301eac088ad262db76a
TLSH
T14BD080F53F45BA05D4471472C5105620513FC44138C6D609B171C50DDDA4DC0FBD6597
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 00fbb63799d26e9a7e30ff53840386023c5150d62b9ea487041ad388db361544
MD5 447de69b347844c29cf7a3b3f5e89252
SHA1 67ad860b72f4cf3188b263680869e8d3e2f79164
SHA512 b8977c20ec2389237c40a065ee9041a0ba55bc2336c4da14ff107c76ebafa289f5512cf0cafa740524f3299ee4cacddcee021abb68d7450550e6d21aa04cbdae
TLSH
T17ED080F13F45B905D4471476C5105620513FC44124C6D609B271C50DDDA4DC0FBD5593
MD5 SHA1 SHA512 TLSH

Submit Download

9a86eb14-f370-4550-b9c6-8c1934640abb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9a86eb14-f370-4550-b9c6-8c1934640abb.tmp
Size 27KB
SHA256 00234d366489a9f7fc3d144938e301e5a23acf579880b66f06afe0c5d9a2e8da
MD5 baf297e798bb0ac4421749551455b45c
SHA1 6160eb84dda203ae0589a9ea67d21d97f91c8215
SHA512 df9eb97ab704b56dc323a97e817c5b7d8ed0ebb4437a129a9de40dc9c9b26ab4361b6c02b5e6a06bb622ca1616ead845e6e5624c63ba13cf931acf81e96dd24d
SSDEEP 768:BcfLYDWg5tflq8F1+UoAYDCx9Tuqh0VfUC9xbog/OVZLO/Lro4uVQnD:BcfLYDWg5tflqu1ja8K/444QD
TLSH
T17DC20A2B640CC77E4F844E6DEC25BED76DE801CB9B984D5447EA890C03C67EB911A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 75b103bf5185b75cd65c754a89ec56203df6c98a52d4b71b9938d51927c3348f
MD5 e25a1f8c7fe43e50217ff9c83aae2307
SHA1 0fc715bad2442caf12b0f3ae150282d11133f395
SHA512 159b9239fdbb2d72040b7f8670f069669fb49119bb780e24e0b13dafe28bd05707864e52b6925f22c0bd815842c7aa0a6a74f1b21260c04566b9e5c28ee21cb4
TLSH
T12F6161EA40F12D6DF7EA6A7F14DE149533B014E5650F2E4E23F4B170FE06B05459D501
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe591265.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe591265.TMP
Size 3KB
SHA256 f565f1b7b6564739433c9228441129822dea071cf2de1c431ef93fe10f04729a
MD5 86a556fafc0a806e3c67bca02dcbcf94
SHA1 e612bd8a09f5992d792efa34ba13f3b355aba865
SHA512 6e8ce07845aeae161ffa670bf72c038bd049ecf1d23535aa6280640bbed4ef96550d2efcdb256cad536b71ca030b867eadf7b720504bcac46bb3578fc6913cfb
TLSH
T1C96171EA40F12D6DF7EA6E7F14DE109533B014E9650F2E4E23F4B170FE06A05459D500
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 9ac59b2d1b10ffa1b0e00ddf5ae719fbb79e90b055e7f3b920d68dbf8ae99b97
MD5 c489196a7b8a18a1d6e9f43080c9e376
SHA1 2a83197786b023f8504ce3a17a08ed09a69a6bbd
SHA512 92f63d1e1f55ae6846867d1b39e0eef6e85c5ff437d59ade1f3a7664b9306cc78489b4eaa3d238db5308bb99fcd9d2bb80e56a469472d2d3901ea1a84371cd23
TLSH
T1AE418AF7C3E8867D890146F4BB246E1BCE2D0955932C3C5A89E4EF0B93E2871E14195F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 9bd46397380d886b95ee5ba4bd3281152143c2a5e11f511f70fe68f878ea5095
MD5 536ab659cb7a33eb1d3b050019ec3b36
SHA1 e96f9ad53d724580966f7f70e82fd7280fa2182b
SHA512 f68c601c9cae87836ed9a02a87f9564bf3819dfa70bf6f4436cf6c15e17d5ac84c786455fff55b5a8aa99409c28ce8553f3a382b0adc4f62d0964f76749c54ac
SSDEEP 192:sxRARpyM/jK1Ml8wFG/fAs96zcTdDzoA8p4T/g6+WNIYbzjbGu5IgIJ:sxRAtbG/fAs96zWyy/5Ikrs
TLSH
T12452C8155A38597B8CDBE20DFA517F53D6F81573B2901E44AAFCCA1C00E6AED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 0105ea175bfdcb6f7e5fe21f7b2f6e004033d29e1d46614ac20f2cbbb3ac7dfe
MD5 80f2ff17872bea0e63740746e177aa97
SHA1 ec805f37f52cfa3522424a31bea6557a5da3448e
SHA512 93283232f10db6044c19b2fba89ce063c0f8fc5a66e61b6d52ff998be0f656ea251897859cb5cfa5113168465995e6e491745ec9563ca9c6a24f3b0ebac5bfe4
SSDEEP 192:sxRbRpyM/jK1Ml8wFG/fAsp6zcTdDzoA8p4T/g6+WNIYbzjbGu5IgDDJ:sxRbtbG/fAsp6zWyy/5IkrZ
TLSH
T1C452C8159A38597B8CDBD20DFA517F53D6F81573B2901E44AAFCCA1C04E6ADD221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 3ef73dda667e1ded4b0bc4eae96cd67568ad0b5cc0fff4ec46f21b5fba9e895f
MD5 77366879a67ff02661d69140395e5d8b
SHA1 dc3a4fa973f204993c884ef58ed7c6b0c696db7d
SHA512 0330e7e1dbf58c640b88078523476629095b672d1a880bfe15662a261d462eb4ccad5a60a88d5a143b993d5493901ec23c23dfab2b2157791ac09c6a8bd3eee7
SSDEEP 192:sxRbRpyM/jK1Ml8UQRFG/fAsp6GcTdDzoA8peT/g6+WNIYbJjbGu5IgDFJ:sxRbtqXG/fAsp6GWyU/5IErz
TLSH
T1D162C616AA3859778CDBE20DB6517F53D6F81473B2941E44AAFCCA1C00E6ADD221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

47a25f87-e95d-4abf-83d1-df8d422103ab.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\47a25f87-e95d-4abf-83d1-df8d422103ab.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 35129ec689861742f4c1481fdf98a3eb52eb1e1d227339d2d4940d6e597187e7
MD5 a34f9301b57480dc6ffec6de32231955
SHA1 8b50794ef19fbbff7aeb4d0d897066165a6d21a9
SHA512 0cd8496f1b33f900ad7694103d00882dbfc0928ca8237d28df27455a3bd07aae36de3b77c62c7ec286d3a7741144356242e2839b5c10f70d2333c6f6b87bd10b
SSDEEP 768:bj+9O37RfF/fOt+Mfa62tbnuGfDdzn12bfRPvL:O9O3tfZfUfa62tbnxZBylvL
TLSH
T102F2BF32E8644933ADF39989B2073B977EF48663E2C8264898DD4B4D45E779C130B91B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 4bfd81851d5773f7c0ab96138315b31e3cfdfa366ac1525e6700e50a2f5141b0
MD5 dae02573a885f831222a90a607fce8ce
SHA1 d6d8516f799bfb3cd1f01fe30ca71d1d145f93a8
SHA512 5ba44d64d6ae6784906abf34eced87f80f3569b4f9b12136e3851d07068c8e62d9cbf6fa57487c1da79ba7290fbabdb19348bd9063b48067d13fc5d4e34532eb
SSDEEP 768:tj+9O3sRfF/fOt+MfQ62tbnuGfDdzn12bfRPvL:I9O32fZfUfQ62tbnxZBylvL
TLSH
T1E8F2BF36E8244933ADF39989B2073B977EF48663E2C826489CDD4B4D45E779C130B91B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 5859e46670f85b33010d0bd17dbf9c7bc5e78affc5e291c8278fe276a3da175d
MD5 74b3fae57308442ebb26ff0c494d517f
SHA1 23b92af4a43505c32688db793880c6d1708c9d17
SHA512 a268d46dae761b16d60a1c5cf64a86116d23ed6b8c0987b8fc6259ac0fca4ac1eb360c02ea35d3c71307c21219e2356a40f5866d1eaf21b78a28e93c095c41d4
SSDEEP 768:0+F1j+9r3dwgJRfF/fOt+MfXi2tbnuGfDdzn12bfRPvL:U9r3jfZfUfXi2tbnxZBylvL
TLSH
T19F03AE33DC548937ADF29E89F20A3757AEF08663D2C86654AACD4A0D01E77DC130BD1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 3f85adf71ef3fa19843d3c1ed39c98ecb1e36b1674d91525ff6e22ae37c233a5
MD5 b9e231bec57661f8f27bcbb7bf535cd4
SHA1 8dc72767a848f24ee56de0dc7d8795eb3398f204
SHA512 a046fa90af839f3ca59bb272f7236c3a0dc99708d0e74fea286c4bc83f29249318d614823e1eb64181ba94cda68baedb867f3315d3cbcd2ee3921f5fb8ff8002
SSDEEP 768:ajaeqD4MlshiLdMms33QZfF/fOt+F62tbnuGfTy1+ApXpfTS:aqcjhIdMD33yfZfd62tbnxu1+KXs
TLSH
T19203BF39A85849779CB3A585B2467B937EF442A3D3C53B98ECDD1B0D01A76CD230742B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2f328a10-e319-4206-b9d9-31282b913b22.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\2f328a10-e319-4206-b9d9-31282b913b22.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download