e08a62b61331c459011058962f5e58c4f49edfa86310134dbd3d1a7c945193f5

Analysis

max time kernel
148s
max time network
159s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260618-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
28/06/2026, 06:02

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
e08a62b61331c459011058962f5e58c4f49edfa86310134dbd3d1a7c945193f5.html
Size 80KB
Sample260628-grlszafw2s
SHA256 e08a62b61331c459011058962f5e58c4f49edfa86310134dbd3d1a7c945193f5
MD5 ba1f6e87eed4ddab7c79ebd79dd36003
SHA1 92070ced9514141e3e691df84499313e04c62d87
SHA512 a4293d31fa42c85427b274930c31283a255b4cdb1eba99b4f748773390921eec4d1c5e5e7fced9a0bfa2fd7fa7db8242b417e5ca11c135a884d4c14b41a5b789
SSDEEP 1536:QohoEr+MGUIgxJ/H9tKiDTzJpRXYP0jQwQWZhl+1l:vrvl9tKezJral
TLSH
T14B83F9B9F5A070325E23F970402F510FBA3B686BE44C0DA8F254D8F1AEF69854467F69
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5024	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134271001554820212"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2289519114-2956110270-1748446682-1000\{7EA8FC6B-198B-42A3-8860-59F51073807A}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2808	msedge.exe
2808	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3236 wrote to memory of 4464	3236	msedge.exe	89
PID 3236 wrote to memory of 5024	3236	msedge.exe	90
PID 3236 wrote to memory of 4244	3236	msedge.exe	91
PID 3236 wrote to memory of 4244	3236	msedge.exe	91
PID 3236 wrote to memory of 4996	3236	msedge.exe	92
PID 3236 wrote to memory of 4996	3236	msedge.exe	92
PID 3236 wrote to memory of 4996	3236	msedge.exe	92
PID 3236 wrote to memory of 2264	3236	msedge.exe	94
PID 3236 wrote to memory of 2264	3236	msedge.exe	94
PID 3236 wrote to memory of 3576	3236	msedge.exe	95
PID 3236 wrote to memory of 2264	3236	msedge.exe	94
PID 3236 wrote to memory of 3576	3236	msedge.exe	95
PID 3236 wrote to memory of 3576	3236	msedge.exe	95
PID 3236 wrote to memory of 2612	3236	msedge.exe	96
PID 3236 wrote to memory of 2612	3236	msedge.exe	96
PID 3236 wrote to memory of 2612	3236	msedge.exe	96
PID 3236 wrote to memory of 1444	3236	msedge.exe	97
PID 3236 wrote to memory of 1444	3236	msedge.exe	97
PID 3236 wrote to memory of 1444	3236	msedge.exe	97
PID 3236 wrote to memory of 3836	3236	msedge.exe	99
PID 3236 wrote to memory of 3344	3236	msedge.exe	100
PID 3236 wrote to memory of 3836	3236	msedge.exe	99
PID 3236 wrote to memory of 3344	3236	msedge.exe	100
PID 3236 wrote to memory of 5612	3236	msedge.exe	102
PID 3236 wrote to memory of 3292	3236	msedge.exe	106
PID 3236 wrote to memory of 5392	3236	msedge.exe	107
PID 3236 wrote to memory of 1320	3236	msedge.exe	108
PID 3236 wrote to memory of 3180	3236	msedge.exe	109
PID 3236 wrote to memory of 3180	3236	msedge.exe	109
PID 3236 wrote to memory of 2808	3236	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\e08a62b61331c459011058962f5e58c4f49edfa86310134dbd3d1a7c945193f5.html
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2c0,0x7ffcdb0cc188,0x7ffcdb0cc194,0x7ffcdb0cc1a0
  2⤵
  PID:4464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1684,i,13452228162860988162,3577407843733500636,524288 --field-trial-handle=2316,i,4523137204894916188,16475588506796215235,262144 --variations-seed-version --mojo-platform-channel-handle=2740 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2208,i,9231838876868639573,14923295354385788179,524288 --field-trial-handle=2316,i,4523137204894916188,16475588506796215235,262144 --variations-seed-version --mojo-platform-channel-handle=2764 /prefetch:13
  2⤵
  PID:4244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1552,i,13043578855744524476,5398383235203154929,262144 --field-trial-handle=2316,i,4523137204894916188,16475588506796215235,262144 --variations-seed-version --mojo-platform-channel-handle=2312 /prefetch:2
  2⤵
  PID:4996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3548,i,13184035679840574903,2349384671927650366,2097152 --field-trial-handle=2316,i,4523137204894916188,16475588506796215235,262144 --variations-seed-version --mojo-platform-channel-handle=3580 /prefetch:1
  2⤵
  PID:2264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3552,i,1294982077206316300,1392419035982927522,2097152 --field-trial-handle=2316,i,4523137204894916188,16475588506796215235,262144 --variations-seed-version --mojo-platform-channel-handle=3604 /prefetch:1
  2⤵
  PID:3576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4224,i,15651881726707675265,8003662220421066135,2097152 --field-trial-handle=2316,i,4523137204894916188,16475588506796215235,262144 --variations-seed-version --mojo-platform-channel-handle=4884 /prefetch:1
  2⤵
  PID:2612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4236,i,17465650447942791555,15941625209534688641,2097152 --field-trial-handle=2316,i,4523137204894916188,16475588506796215235,262144 --variations-seed-version --mojo-platform-channel-handle=4888 /prefetch:9
  2⤵
  PID:1444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3692,i,3681064069602643066,1759797827492064878,524288 --field-trial-handle=2316,i,4523137204894916188,16475588506796215235,262144 --variations-seed-version --mojo-platform-channel-handle=5252 /prefetch:14
  2⤵
  PID:3836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5208,i,9297950779383926620,11332969802493441583,524288 --field-trial-handle=2316,i,4523137204894916188,16475588506796215235,262144 --variations-seed-version --mojo-platform-channel-handle=5244 /prefetch:14
  2⤵
  PID:3344
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6096,i,15886026593844726481,17486680339090685402,524288 --field-trial-handle=2316,i,4523137204894916188,16475588506796215235,262144 --variations-seed-version --mojo-platform-channel-handle=6124 /prefetch:14
  2⤵
  PID:1404
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6096,i,15886026593844726481,17486680339090685402,524288 --field-trial-handle=2316,i,4523137204894916188,16475588506796215235,262144 --variations-seed-version --mojo-platform-channel-handle=6124 /prefetch:14
  2⤵
  PID:5612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4908,i,16253470270737169498,17209792644224717955,524288 --field-trial-handle=2316,i,4523137204894916188,16475588506796215235,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:14
  2⤵
  PID:3292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5280,i,13881407024059438489,4699615415275903236,524288 --field-trial-handle=2316,i,4523137204894916188,16475588506796215235,262144 --variations-seed-version --mojo-platform-channel-handle=5144 /prefetch:14
  2⤵
  PID:5392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5248,i,3944311918453240693,10234634946318784260,524288 --field-trial-handle=2316,i,4523137204894916188,16475588506796215235,262144 --variations-seed-version --mojo-platform-channel-handle=6496 /prefetch:14
  2⤵
  PID:1320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5660,i,7171522751320943029,8846933972202362281,524288 --field-trial-handle=2316,i,4523137204894916188,16475588506796215235,262144 --variations-seed-version --mojo-platform-channel-handle=5472 /prefetch:14
  2⤵
  PID:3180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5596,i,4419892493503440432,16397838299060591139,262144 --field-trial-handle=2316,i,4523137204894916188,16475588506796215235,262144 --variations-seed-version --mojo-platform-channel-handle=5608 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2808

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2328

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:784

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2b471d5790d1e8ac94438a5662d0ed854761db5162e9ed715d3f950974387da2
MD5 f3139b9e55fe18feb36cb00db002d273
SHA1 755162342b8e0f46c67a7ca7edf74a3293cdaeb7
SHA512 d229aade54d55576064d540cb4f4250cd3d32106eb04bcac5449501aba91bfbfe3857ca0457eab714fad16945c3e3a00e1b408afe8edd04cdf8574cf34450a48
TLSH
T17CD0C02437457610C40D05704410CE02C133C803B0C3DA003032C50CC5158C0FBCD0EB
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 b842906cea16d7b3aa3205573cacb7d4d1d2364d11253f46244aaa1a7745db30
MD5 aff0d41e14c14a0f33ef71eb300b3517
SHA1 1b323ae2f9d64108caaa43e8fc26a953c57942d4
SHA512 7d91f5d419c8dab3b5c13b763160d5c782dae9d50314591afda7d0f4db293ab075d234d6ab8602002e921be583a3c7b2c7977545c7522af94ab7cfae1e8bd620
TLSH
T1FAD0C02037457510C40D05704410CE02C133C80370C3DA003032C50CC5158C0FBCC0D7
MD5 SHA1 SHA512 TLSH

Submit Download

3525eac3-10f2-413e-b576-1ca9b3c8a3d5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3525eac3-10f2-413e-b576-1ca9b3c8a3d5.tmp
Size 14KB
SHA256 595041530d1f8ce1b9e8905ba2364d6a0c35da4dfe2ffd5a919577866a9d0871
MD5 0d406d5c1ea0a94533d094bfe6913c25
SHA1 b04e93085013c931a824388e0a15f089b1f3e7b6
SHA512 333cfe5aea5ea2fff823eccc36e14369e1a573369e0ac8b4d4eb0247345b01886a92200c074d17404d647031e523f3a8477c53ee9b444f6aebdd50b12f1a6bb3
SSDEEP 192:sxRepRCyM/jK1Ml8wFL/fUsoBaDVB9paEzoA8p4u/g6+WNIYJOjG2IgIJ:sxR8IbL/fUsoBaBB9palr/5IRs
TLSH
T10952DA16A6245977CCDBD20DFA557F53D6F81573A2905E44AAFC8A0C00E7BED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 794e4e7b9d619df7923ef2a257a8149d9972170efb8819fb5682349996fba4c3
MD5 65c0ee064b5d2eee54e55c206636ebb5
SHA1 9e5d36f58ecf475a4b7380e97343ead77d45b1b2
SHA512 13f6efbf72d1a6da4f14d8a7c018dd557470db5239660693a47f23405b2f3aa319e2c475bf5bcc7dfffab2e03aae1b54537705083f5cbd2b83711786b0571c57
TLSH
T142514C5F2D252922D75ADDF960E13B9E33B0E4354A233EC590E712749E023E29CA169D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe590834.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe590834.TMP
Size 2KB
SHA256 b614b28ab99ffc8d5e1c1323a9740a15d477427e3cd62e0eb689dba6c8305def
MD5 981accce09f84ea73770a5b9acaf60b2
SHA1 7c911c6a96833454eea5d0bfd70f27df436d8fca
SHA512 9c05b56c49984571e69b2c8ef1e80b0bfe1344957fa118e2fd6e68430ce0daeb2f8632e89a2eea5d46565135a8611544466404afc0dd9b91f0a3ac6d95532e33
TLSH
T1D2515C1F2D212922C35ADCF960E03B8E33B0E4354A273EC090E702749E023E29CA128D
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 e04c2182547b6e4f35f5f5bd5df985981c3f9eea8eaf1533c13a4214748289f8
MD5 747c47c32d388bc6f4830556ffeb4186
SHA1 a396ec0b87a67e5a66611a63c18986586e4be08f
SHA512 5e8b5d03330c26762c470e5d4ca700f7ca9309222f2c5061ba13a16a285b7040ea3d211bf82d3c69a3d76a987dbbfb0907606cc1d75d12abe289b7293c7994f0
TLSH
T1AB519DF7C7E4866DC91156F0BB186E2BCE2D0915832C3C56C9E4AF1BA3E2471E14195F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 08a29e6c88610a9e11370df4af31e1018a2fc140e79b6391bb26265d697868cd
MD5 de1277740c582209e841d2d119a696e0
SHA1 6a5bc782ccf60a2a72075faa5dfcf54784fe11f8
SHA512 d02dd2943f8937a7eff99c33d34561fd60e220dbdbeede0e4cd80f8594f07b6fdf83166f0a880c06bc75bab609bd45b88af45aebf749af0bbfa4fc3eaa8c15c4
SSDEEP 192:sxRdpRCyM/jK1Ml8UQBFL/fUsh+aDVB9paEzoA8peu/g6+WNIYJljG2IgD7J:sxR/IqHL/fUsh+aBB9palN/5Imx
TLSH
T1C462C91696245977CCDBD209FA517F53D6F85573A2901E44AAFC8B0C00E7BED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 b816212575d0f93f45042e6714a15eecc33ccb17b475791efe9a90daaf12c1d3
MD5 84c2f962a5f4089cbc983c55a032f5ec
SHA1 3469bbb43c299efe0fe766424d65ad926046a053
SHA512 4d02933c77a22ac615f611d6e5918a9da594d7e50059a8608b9b3ecd50fa42a6a2ebe9552b2792ef0619960a5b82e5e2a07ff111562f39a6f52219ff68da048e
SSDEEP 192:sxRdpRCyM/jK1Ml8wFL/fUshBaDVB9paEzoA8p4u/g6+WNIYJOjG2IgD1J:sxR/IbL/fUshBaBB9palr/5IRz
TLSH
T16C62D916AA245977CCDBD20DFA517F53D6F85573A2905E44AAFC8A0C00E7BED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 0f5ed960d4ce4f02215075bbc7e28806fedfd5d0f80bc8a8136da50bbb5c5bc6
MD5 c97287b437170a843539bce105daaaee
SHA1 074c8f82d111a4f6d47544cfc417b2a176b44870
SHA512 1f5edeb40f37c856fba415a8712d8a7a3702c0019976d5cd9ee87dcb5f69c79500473285c13592d26cf0de3989b23332a281642b8e96add21228fbce8fd5dd0d
SSDEEP 768:v1D847WgeEftq8F1+UoAYDCx9Tuqh0VfUC9xbog/OVpDZhlrol2ZF8:v1D847WgeEftqu1ja0NheV
TLSH
T1D1C20B3B640CCB7E4F844A6DAC29AED66DD801CB97988D5447EA8C0C03CA7FB511A5DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

e4f6fa6e-a853-4b13-ad5e-d604966ef3d3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\e4f6fa6e-a853-4b13-ad5e-d604966ef3d3.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 cc941e15fed924c0df65e518e761af09681bc65bef301c1002804b2a31a8b3a5
MD5 e92c435fbe7b0244fd5fa34f406d01d7
SHA1 02866842b8f58cb63a2ec0879bb48fc9cc09ec41
SHA512 78695f953c4802ce03eb77d5e96a3dad0cec52989ad04c0a0190dd50927187efdddc40b681458a328245e99bf231eee1d86f729c2c6bc6e64c2acfa8d3519ade
SSDEEP 768:Kj+9m36675GMft9VCgZSVCKPFECrBhpjcNtzn12bfZ6q:p9m3b8gs0KPF1HRcTByZ6q
TLSH
T13FF2BF31A8E45E734CE7D698B1077246BEF842A783C91E4889DC6B4E46DB79D1307C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 4a78873a4c66d8d1f0f2f43ff9793ce917e03a62a916d4722327a01cbdd82d64
MD5 ed76249c37cb7056548997f29bf18696
SHA1 0568c4ea94583541afb7e13c8354d279df9bf66d
SHA512 19bf97e5e05eb79220a15baa59e7ea9a1ca4052ba23d6bd2010c3be8973ef92adfadf47aff39b200bd10ef517c03196c35e0c42d5c1eee380259d18054e21fa8
SSDEEP 768:3jaeqD4MlshiLdMmU3Dm75GMftQVCgZSVCKPFECrBhpjcNt8TX:3qcjhIdM/3z8gs0KPF1HRcTE
TLSH
T1CD03BF75A8E45D738CB7D594B2077283AEB4029787C92E8C98DD760D46DB3DE1207C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 caf362ff28b03e8e953982b7008cf83f39a3f4e337fc8cd2dccf307698e12430
MD5 c3d7aee7a779ef00ba71062944991511
SHA1 595e184fa5a64d035e285b6d2417d255ec97cca3
SHA512 45a17595325240648d72461212f2828d0d0e3d3388a96d13f656a4d325d92b652649ecde99cba0df785199bfcaef71ac6939cd5cb2030e479a9a23c2018ab5fb
SSDEEP 768:qF1j+9T3gwgZ675GMftKVCgZSVCKPFECrBhpjcNtzn12bfZ6q:v9T3q8gs0KPF1HRcTByZ6q
TLSH
T10A03AF32ACD48E779DE7CB98F10B3246EEF442A7C6C92A5896DC6A4D41DB39C1307C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 4a733b1977d6c4e9de57a27c380f12e8c55b0832970db85024cc0ca781ee34ff
MD5 7fc5a5c3aa0e30494c49196723dbeab0
SHA1 3e6bc087b1e86d3cfb26fbb267477f56e55ab094
SHA512 ac50db1bae5e93e7301da5fb5e02c950420f74aa5e30aed1cf6bdba489bcffa934f386f1374ad4fa7c75266037ab2799e01e00c587ec30bc35d04c771e6c4561
SSDEEP 768:ij+9m3P675GMft9VCgZSVCKPFECrBhpjcNtzn12bfZ6q:R9m308gs0KPF1HRcTByZ6q
TLSH
T192F2BF31A8E45E734CE7D698B1077246BEF842A783C91E4889DC6B4E46DB39D1307C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 888899b682925f00c922bb851f83167b55820566409311791cc6a0e03a99ba1c
MD5 bd63e4b22100c8e7fd7a3476c7562ec6
SHA1 3cce5d6c41fc1403fd442b23274b923c3b8a47d6
SHA512 bc41507482abd46672a8831e76f1fd9f79e65c753cb2904b2276320d7b5447b3773e6f893152bcb2363f66af09d15dff16d426d077e39f3d68966ca575590c85
SSDEEP 768:bjaeqD4MlshiLdMmu3AM5GMVVCgZSVCKPFECrBhpjcxU+ApX32TB:bqcjhIdMB3T8gs0KPF1HRcC+KXk
TLSH
T1F503BE79A8E45E738C77D245B207B6466EB402A7D6C92F8CD8ED6A0D41D72DD130382B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1538d1a4-18ff-49d5-ad1e-e5fa3c1c6818.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\1538d1a4-18ff-49d5-ad1e-e5fa3c1c6818.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download