7e4a8d3981c78b5b3d3807dff36bb7c1d978901ff26202c9a4e2dbf04441634b

Analysis

max time kernel
148s
max time network
153s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260618-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
28/06/2026, 01:05

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
last_outpost_prototype.html
Size 30KB
Sample260628-bfl2psex5v
SHA256 7e4a8d3981c78b5b3d3807dff36bb7c1d978901ff26202c9a4e2dbf04441634b
MD5 8d33cae0428c6c6a96cc86043ef169ba
SHA1 a20ced88f4f4bdc441e6caeb2cd44319bcef2e7f
SHA512 d7801559ef8badf8f4480559c4b65906ac0c0ff2b59c02de1b83682996002f56a387b16dbbf37b8fc82b30168760756cb0aa85b244dcb0a496a445be56a8be40
SSDEEP 384:sFwaAlQ+T/mEe2kg2WmlleKHffIGkgdSIdSpECajzvAo7sdWj1TAEzH/TS53sKPz:sFwaAl1T/mVQJwUECYvbsoTp/TIBPz
TLSH
T197E2842E13F706379497A0BA1FDBA64A7220E0174E07DD1CFD0E93C85F418698AB5E76
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
6012	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134270823274553560"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-537605601-1362463912-856654178-1000\{960AF84C-1757-4434-B221-C7C2271E9295}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4844	msedge.exe
4844	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4732 wrote to memory of 5912	4732	msedge.exe	89
PID 4732 wrote to memory of 6012	4732	msedge.exe	90
PID 4732 wrote to memory of 1936	4732	msedge.exe	92
PID 4732 wrote to memory of 1936	4732	msedge.exe	92
PID 4732 wrote to memory of 5016	4732	msedge.exe	91
PID 4732 wrote to memory of 5016	4732	msedge.exe	91
PID 4732 wrote to memory of 5016	4732	msedge.exe	91
PID 4732 wrote to memory of 244	4732	msedge.exe	93
PID 4732 wrote to memory of 244	4732	msedge.exe	93
PID 4732 wrote to memory of 244	4732	msedge.exe	93
PID 4732 wrote to memory of 256	4732	msedge.exe	94
PID 4732 wrote to memory of 256	4732	msedge.exe	94
PID 4732 wrote to memory of 256	4732	msedge.exe	94
PID 4732 wrote to memory of 4332	4732	msedge.exe	96
PID 4732 wrote to memory of 4332	4732	msedge.exe	96
PID 4732 wrote to memory of 4332	4732	msedge.exe	96
PID 4732 wrote to memory of 1980	4732	msedge.exe	97
PID 4732 wrote to memory of 1980	4732	msedge.exe	97
PID 4732 wrote to memory of 1980	4732	msedge.exe	97
PID 4732 wrote to memory of 4080	4732	msedge.exe	99
PID 4732 wrote to memory of 3352	4732	msedge.exe	100
PID 4732 wrote to memory of 4080	4732	msedge.exe	99
PID 4732 wrote to memory of 3352	4732	msedge.exe	100
PID 4732 wrote to memory of 2540	4732	msedge.exe	102
PID 4732 wrote to memory of 4968	4732	msedge.exe	106
PID 4732 wrote to memory of 1468	4732	msedge.exe	107
PID 4732 wrote to memory of 4924	4732	msedge.exe	108
PID 4732 wrote to memory of 1144	4732	msedge.exe	109
PID 4732 wrote to memory of 1144	4732	msedge.exe	109
PID 4732 wrote to memory of 4844	4732	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\last_outpost_prototype.html
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x238,0x2d8,0x7ffcf945c188,0x7ffcf945c194,0x7ffcf945c1a0
  2⤵
  PID:5912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1684,i,13841049070294674306,15715789607198971762,524288 --field-trial-handle=2176,i,17079413784001137402,17308034515969306886,262144 --variations-seed-version --mojo-platform-channel-handle=2212 /prefetch:11
  2⤵
  - System Time Discovery
  PID:6012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1552,i,503815511659356082,7447337287842779513,262144 --field-trial-handle=2176,i,17079413784001137402,17308034515969306886,262144 --variations-seed-version --mojo-platform-channel-handle=2148 /prefetch:2
  2⤵
  PID:5016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2344,i,5421555837009727811,15792258968761130501,524288 --field-trial-handle=2176,i,17079413784001137402,17308034515969306886,262144 --variations-seed-version --mojo-platform-channel-handle=2916 /prefetch:13
  2⤵
  PID:1936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3688,i,233815057129868731,7372053405289444587,2097152 --field-trial-handle=2176,i,17079413784001137402,17308034515969306886,262144 --variations-seed-version --mojo-platform-channel-handle=3748 /prefetch:1
  2⤵
  PID:244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3692,i,1292115053561380074,12245697417421861507,2097152 --field-trial-handle=2176,i,17079413784001137402,17308034515969306886,262144 --variations-seed-version --mojo-platform-channel-handle=3768 /prefetch:1
  2⤵
  PID:256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4364,i,3703994136957021664,8065478825745581787,2097152 --field-trial-handle=2176,i,17079413784001137402,17308034515969306886,262144 --variations-seed-version --mojo-platform-channel-handle=4964 /prefetch:1
  2⤵
  PID:4332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4380,i,13628477125151283392,5982112438921628170,2097152 --field-trial-handle=2176,i,17079413784001137402,17308034515969306886,262144 --variations-seed-version --mojo-platform-channel-handle=4988 /prefetch:9
  2⤵
  PID:1980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3904,i,14489268472273750602,4776568363737009678,524288 --field-trial-handle=2176,i,17079413784001137402,17308034515969306886,262144 --variations-seed-version --mojo-platform-channel-handle=5444 /prefetch:14
  2⤵
  PID:4080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3868,i,5993314905650304694,13236197168211157266,524288 --field-trial-handle=2176,i,17079413784001137402,17308034515969306886,262144 --variations-seed-version --mojo-platform-channel-handle=5412 /prefetch:14
  2⤵
  PID:3352
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5936,i,11242255162089152354,7224460323469567967,524288 --field-trial-handle=2176,i,17079413784001137402,17308034515969306886,262144 --variations-seed-version --mojo-platform-channel-handle=5952 /prefetch:14
  2⤵
  PID:1524
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5936,i,11242255162089152354,7224460323469567967,524288 --field-trial-handle=2176,i,17079413784001137402,17308034515969306886,262144 --variations-seed-version --mojo-platform-channel-handle=5952 /prefetch:14
  2⤵
  PID:2540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4368,i,3444524838755432766,18091462397704571815,524288 --field-trial-handle=2176,i,17079413784001137402,17308034515969306886,262144 --variations-seed-version --mojo-platform-channel-handle=3780 /prefetch:14
  2⤵
  PID:4968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4372,i,7188428709185255419,15482690662091242055,524288 --field-trial-handle=2176,i,17079413784001137402,17308034515969306886,262144 --variations-seed-version --mojo-platform-channel-handle=5372 /prefetch:14
  2⤵
  PID:1468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3808,i,8392748959058894949,5181294309074517214,524288 --field-trial-handle=2176,i,17079413784001137402,17308034515969306886,262144 --variations-seed-version --mojo-platform-channel-handle=5236 /prefetch:14
  2⤵
  PID:4924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5192,i,135542017765270073,14454023919156021875,524288 --field-trial-handle=2176,i,17079413784001137402,17308034515969306886,262144 --variations-seed-version --mojo-platform-channel-handle=6584 /prefetch:14
  2⤵
  PID:1144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5416,i,18294935999046024406,8162265701681361043,262144 --field-trial-handle=2176,i,17079413784001137402,17308034515969306886,262144 --variations-seed-version --mojo-platform-channel-handle=6368 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4844

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5860

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3688

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ff19e848916f9346514f95113e3d80cd569935b36d785719b19d90f9f740fbd6
MD5 5ab41182d14eb22e7143c63d2e18b77b
SHA1 ca8c747e1a5e38b0f0a08b492fcea6d3a75865c2
SHA512 bbecb67f89826ee2bd219f14bbc8ca87fb260f8a22bd2d52b6ccdb72d47a4b58eeb897a42a6e591bd4e75fe870419162172353d5d3ec7f1fb0fbc7b5dc6adcf1
TLSH
T1AED080757B467B11D58F0472D424E271A737455135D296057170C10E55602D1FFCA0B7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 5f46172781024fe58b7a7d87a406b81679d17de445e9e90110d33f5747ecc226
MD5 08a5ef0e8eb4590a7f0e6f821698071e
SHA1 1b756aceae48cf2649d310d7ab4883595c2e5bde
SHA512 95c72989df00c3caf1230ca41b6dcbc24f8a592c45202f7b16044b8d574fe569d4db8614652b0d1695d3fe1d795b07ea334de5b4fa9dcbb9d27de40a55592586
TLSH
T155D080757B467A11D58F0476D424E271A737455125D296057170C10E55602D1FFC90A7
MD5 SHA1 SHA512 TLSH

Submit Download

217bc963-0162-4651-8c00-5720fcff991b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\217bc963-0162-4651-8c00-5720fcff991b.tmp
Size 27KB
SHA256 86b829afef9b51972ddb869e28a11bfdd690feb9820a33f6ac571b69189ec891
MD5 548c187a75c01b8b94962cd4c85a662c
SHA1 4faf5f215853f2e5cd7eb1c2df0004055e054dc5
SHA512 ee5c5856c1b4d2543918a971dbca76af1d8eada361d16aa9975d9c4c3f3a88dbdfd1edf00760e204c03eca2f57a879040154415ebe65258f3619638b71c52976
SSDEEP 768:NmymipWgvHfSv8F1+UoAYDCx9Tuqh0VfUC9xbog/OV1Lxg8roRLPR2Dv:NmymipWgvHfSvu1ja8NgnRLPUj
TLSH
T11EC2FC3B640CC77E4F845EADEC25AE976DD801CB9B988D5447EA880C03C67FB911A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 375fcc8b3075b133308f2c7694b1366447f3acba10c3a18a2a1a500d2ebeb117
MD5 32310c173ed04144a6a4599d92fc8935
SHA1 bc3c0fb8bc5647b825723e6c329e86fd0f050d3b
SHA512 a8371f83d84dd741cd458e040bacac1ac62a2fcf5db588520d375b6542b72ad587dd61507bc9aab8a348647118d7081c1d9fb2cfd215e0fc708fcc2f8a7b927c
TLSH
T1A9614F52A232052CE72B853ED1D11CDCF77808D617C31E226475903E99777D850CFC10
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5992d0.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5992d0.TMP
Size 3KB
SHA256 dc6693148546c57ce2a304bdfd106a6380bb850aeba627d350e2d754060e77a4
MD5 d0756c5cd8dcd1e87e77a9ce49e27c58
SHA1 62e614249b6d61d36bc3045d04ca130078cf9901
SHA512 4127f38ad343059ea4a0108c358842475bb87ad18d79d1abca037c17d685673501b91816c2501b53e8954b0a453abb617f269c070ceed7aed4957463839e24a1
TLSH
T162614F52A232052CEB2B853ED5E11CDCF77808D617C31E226475903E957B7D850CFC10
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 e894ec2289abed03f45a0b5391512d467ae42f2a41dab2506ba090d67d36eea3
MD5 5871f33fda0241c5c27fd7abd6ddbf43
SHA1 194823ca6b7da73790bc40ab430cbfc8e0bb95b9
SHA512 3a32f6f1af9854c515cd04374c83ccde24fb6e8fd7027ee909bbfb8d292e3d938b155f3f1937fa3645c84f4623f23645873fc00e4fbca939e0e4d78e6462617e
TLSH
T1D9619BB7C2E4867D891156F0AB257E2BCE2D0516432C3D5AC9F4AF4FA3E2471E10165F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 9140f9fa324a48604803ad9c9ef78111df7d738fc6b1ae69116f69323b426420
MD5 37b688efb72f57795b27af17eb09d707
SHA1 2fc7567366422fe95dd6a581edd30c56b13b9f98
SHA512 7745a26d7f151b7d349187697a4f30479b98173e83e55b852e252e61b2f36a4c34a1d05b429905b6278a2e27bac020cc82d8711ae0c9f4effa26d3d8f16bd091
SSDEEP 192:sxR7RcyM/jK1Ml8wFP/fusMfwzMdybczoA8p4x/g6+WNIY4pjZGeIgIJ:sxR7abP/fusYwIeI/5Ijs
TLSH
T14E52DA166A349977CCDBE20DFA517F53D6F91573A2901E44AAFC9A0C00E7AED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 533e8209669112324c1f0d7bc1721fece2998bc890fca5ab632a77727af8b571
MD5 7d756dbc8b727c671a563f88acc1ab0b
SHA1 d89e65386a6c65c77676fb7e06273f15e09fabc7
SHA512 b909b0fc7188f37dd4bc2ceffc9827d49e5672e32d9041f350d22d2a4aca13a403b4dfe66ec18615182de023fd507fa7c319a57028c1874e4bf03cf97890e88a
SSDEEP 192:sxR8RcyM/jK1Ml8wFP/fusFfwzMdybczoA8p4x/g6+WNIY4pjZGeIgD5J:sxR8abP/fus9wIeI/5IjH
TLSH
T1EC52D9166A345977CCDBE20DFA517F53D6F91573A2901E44AAFC9A0C00E7AED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 9ae0175e6abfcd9c4d447d3861c7c8a04babf08ee8cafdb8fd215f245f62e3dd
MD5 c5ff35e29584bf021d719751dd4c8db3
SHA1 ce360289ff552e1d4fd82b588ec573cb8facb2a6
SHA512 0842e579ee08e4388be3e668e622bed088a4cc4506aae6485daa7741ffee9ba8034a388c900a2e1fbdc51c992cc14f981f84cf63d6ebaece3efbe5b82fbce786
SSDEEP 192:sxR8RcyM/jK1Ml8UQEFP/fusFfTzMdybczoA8pex/g6+WNIY4p0ZGeIgDfJ:sxR8aqSP/fus9TIeq/5IGF
TLSH
T15662B8166A349977CCDBE20DFA517F53D6F91572A2901E44AAFC8B0C01E7ADD221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 2e9ea64dccabc7c173bf26b1aafb6be1079b74a54d2d7178393771eaa956a546
MD5 a2d20d1e3c1f79783a6a394186b9c9bd
SHA1 e6472b191771d0227278a304364ef7683e0ba635
SHA512 afbd6af8423afa4d60c7ee341571f66e5de4c824e978a441c9a5c33ff3f575076cb7fbd3ecc8b52a77ae07b70455c3084ed501e3b988d6bbe8c0ecad4cbfb8be
SSDEEP 48:K1lIFKm4YfypsIbK1iMXFEB1PTnk3T+PI+NkKpBhHk9V0UePV5yc:K1lWKm466sAK1i6SwKHqmD
TLSH
T1249101117976630038FF244892A4B65F564270A7311BA43B7BB814F35AA6E801EFCEFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5a2d5b.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5a2d5b.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 43KB
SHA256 837ab08a158fd72f27de1fb8f42a6e9032738dff7d5b3f65b7fb52484b14bddf
MD5 f5591b132d6c1d12a3db59a6b0d0bbe6
SHA1 48a3838abff655657467ffaf9998defc57469cc4
SHA512 1073f9f1dad2461671940c271d7f5f6f61844a11e00060986019df99935e7716b3a7aef78df6568b539d86efbf2481ceb3019cf37e7032b94a17e3ced0a036dc
SSDEEP 768:BjaeqD4MlshiLdMmL38FD8fy/fRf6tXLA7NpespIRM0UmkTziwjgzSIwn12bfZUd:BqcjhIdM438FwfgfRfdQsZ0UmYoKyZUd
TLSH
T1DA13B072DC245DB78DB7E68A6A43765BAEF00253C2C83A889CD95E4D45D72DC130BC2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 b3f83003276581d2ca8a1dfdf667660c8e971235db8f9ba4d84e2c68222afa01
MD5 182a1693331e65fc0c524d8e53308d6d
SHA1 1b336bcbc54ddc5d64b79d83fbd3fd7d86b32baf
SHA512 f3257aad1a096b59132c71c952de3ab542c6ef5f812557fe724f6ea18eed40822065138678d1b9fa204de8aba7627cf5ca2e4173208f67ca0bb5cde2e89a8ff4
SSDEEP 768:pEF1j+963RwgTFp8fy/fRf6tJA7NpespIRM0UmkTziwjgzSIwn12bfZUf:pJ963jFyfgfRfZQsZ0UmYoKyZUf
TLSH
T18603AF33DC508AB78DF6DB89BA46370BEEE40253C2C42A849ADD9E4D41D72DC530BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 b70e13135f7c58af2d8c0416ea1d01eea22f71f8bfa77e5295bac355fe76f65c
MD5 f8c3b716bd4c18335b9ee2baaf4df9c3
SHA1 38c5301890be06895df1eafaceecc07e7f319846
SHA512 aee2d3e4fd75f252a1fce86311a5979607226739e3f5672f2d54da08d262503407f4a56ef60e8b4e8619415d4b8a4e364d36e176b8a83840a975d7a66571eceb
SSDEEP 768:ij+9F3ZFp8fy/fRf6tkA7NpespIRM0UmkTziwjgzSIwn12bfZUf:R9F3ZFyfgfRfIQsZ0UmYoKyZUf
TLSH
T1C7F2AF32EC215EA34DF6DB8A7943370BAEE40253D2C42A8489DD9F4D45D76DC530BA2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 6990af4e291ba1a0458fe1dc305a0373297c72f68b3674047b6e64d204596cd0
MD5 2f988c42b3e74ea46eaae74cc93c9d72
SHA1 6427be943e15ea438a4e640c0c1c1066aca3f5b8
SHA512 a3f0be0bdc0b80dc44cd2e51e6324b22ab7c134e67561692f44625933e65f3d0be54113f5f958af09e4937b8c6a8b37dabcbd9a758e9a9f5c1027f43a3a04f6a
SSDEEP 768:Qj+9F38Fp8fy/fRf6tkA7NpespIRM0UmkTziwjgzSIwn12bfZUf:v9F38FyfgfRfIQsZ0UmYoKyZUf
TLSH
T1C3F2AF32EC215EA34DF6DA8E7943370BAEE40253D2C42A8489DD9F4D45D76DC530B92B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 38c9956bbcf3652bc50501f069fcc1808e1c9eca6b332768dd5dc8b0dc32451e
MD5 51a6be038d0aa26b65ca2414c6f7e1aa
SHA1 7587d3bc277d5196e98985ac6eca964841b31215
SHA512 985af6cf5e68f1b302e77830ac7cc7efcb8429d52cbfbc50e89cd76e29e4574fc3f929ddf56b9d9596ea67587de04bfebeb35bbe3a20703dea62c1f4ae322928
SSDEEP 768:3jaeqD4MlshiLdMmf3a+fy/fjA7NpespIRM0UmkTziwjgzG5nApXLPQTU:3qcjhIdMo3PfgfGQsZ0UmYRnKXD
TLSH
T16F03CF76D8604DB78CB6E68A664376576FF00253C2C43AC8CCDE6E0D41972DC670B96B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0d634f25-28cb-403f-8042-c392c47eb40f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\0d634f25-28cb-403f-8042-c392c47eb40f.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download