04be25867930328bb75efd802d8b613fb304e2f70c33292f7e037c9149bd647e

Analysis

user interaction
yes
max time kernel
149s
max time network
127s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260629-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
06/07/2026, 00:57

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 288KB
Sample260706-bbc81acw9n
SHA256 04be25867930328bb75efd802d8b613fb304e2f70c33292f7e037c9149bd647e
MD5 102d7e886f5f51db85923ccf5a634ed9
SHA1 0421f5cfa11b6ca30118c2b414bbc01b51129a9f
SHA512 9fe031c37745330a900d9904d4a6ddda39cc65e39733dd6c55668de771946686a1db2ced00f673b487ea1397731bd696d616dcdfbe2d2cf167077e3f491cf76e
SSDEEP 3072:7HHSevzqlo9bI2NBxClHLc0ImThX8bwQmIpIbGXFDK5hUa:7HHSevzqloRI2NGLd58kApISEUa
TLSH
T1CC545C726200B43BA423DDA1E2BF7E4E3C35E12BDC0A46F86591E535DFE2EB2141526D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4548	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134277730843043959"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1991999443-3181470666-3272020885-1000\{59AD61FF-9479-4335-ADBC-6544F5837BC2}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4476	msedge.exe
4476	msedge.exe

Suspicious behavior: LoadsDriver 2 IoCs

pid
4
4

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5828	msedge.exe
5828	msedge.exe
5828	msedge.exe
5828	msedge.exe
5828	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5828	msedge.exe
5828	msedge.exe
5828	msedge.exe
5828	msedge.exe
5828	msedge.exe
5828	msedge.exe
5828	msedge.exe
5828	msedge.exe
5828	msedge.exe
5828	msedge.exe
5828	msedge.exe
5828	msedge.exe
5828	msedge.exe
5828	msedge.exe
5828	msedge.exe
5828	msedge.exe
5828	msedge.exe
5828	msedge.exe
5828	msedge.exe
5828	msedge.exe
5828	msedge.exe
5828	msedge.exe
5828	msedge.exe
5828	msedge.exe
5828	msedge.exe
5828	msedge.exe
5828	msedge.exe
5828	msedge.exe
5828	msedge.exe
5828	msedge.exe
5828	msedge.exe
5828	msedge.exe
5828	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5828	msedge.exe
5828	msedge.exe
5828	msedge.exe
5828	msedge.exe
5828	msedge.exe
5828	msedge.exe
5828	msedge.exe
5828	msedge.exe
5828	msedge.exe
5828	msedge.exe
5828	msedge.exe
5828	msedge.exe
5828	msedge.exe
5828	msedge.exe
5828	msedge.exe
5828	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 5828 wrote to memory of 1716	5828	msedge.exe	88
PID 5828 wrote to memory of 1552	5828	msedge.exe	90
PID 5828 wrote to memory of 4548	5828	msedge.exe	91
PID 5828 wrote to memory of 1552	5828	msedge.exe	90
PID 5828 wrote to memory of 1552	5828	msedge.exe	90
PID 5828 wrote to memory of 1104	5828	msedge.exe	92
PID 5828 wrote to memory of 1104	5828	msedge.exe	92
PID 5828 wrote to memory of 3756	5828	msedge.exe	93
PID 5828 wrote to memory of 3756	5828	msedge.exe	93
PID 5828 wrote to memory of 3756	5828	msedge.exe	93
PID 5828 wrote to memory of 1600	5828	msedge.exe	94
PID 5828 wrote to memory of 1600	5828	msedge.exe	94
PID 5828 wrote to memory of 1600	5828	msedge.exe	94
PID 5828 wrote to memory of 2400	5828	msedge.exe	95
PID 5828 wrote to memory of 2400	5828	msedge.exe	95
PID 5828 wrote to memory of 2400	5828	msedge.exe	95
PID 5828 wrote to memory of 1068	5828	msedge.exe	96
PID 5828 wrote to memory of 1068	5828	msedge.exe	96
PID 5828 wrote to memory of 1068	5828	msedge.exe	96
PID 5828 wrote to memory of 6132	5828	msedge.exe	98
PID 5828 wrote to memory of 4260	5828	msedge.exe	99
PID 5828 wrote to memory of 6132	5828	msedge.exe	98
PID 5828 wrote to memory of 4260	5828	msedge.exe	99
PID 5828 wrote to memory of 4748	5828	msedge.exe	101
PID 5828 wrote to memory of 2448	5828	msedge.exe	105
PID 5828 wrote to memory of 2608	5828	msedge.exe	106
PID 5828 wrote to memory of 4092	5828	msedge.exe	107
PID 5828 wrote to memory of 5668	5828	msedge.exe	108
PID 5828 wrote to memory of 5668	5828	msedge.exe	108
PID 5828 wrote to memory of 4476	5828	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2c8,0x7ffc92f7c188,0x7ffc92f7c194,0x7ffc92f7c1a0
  2⤵
  PID:1716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1596,i,2241519630357346480,15805243958916837603,262144 --field-trial-handle=2636,i,16890166150141665739,16938176867735967766,262144 --variations-seed-version --mojo-platform-channel-handle=2628 /prefetch:2
  2⤵
  PID:1552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1852,i,6617710038561352633,16816095342061907665,524288 --field-trial-handle=2636,i,16890166150141665739,16938176867735967766,262144 --variations-seed-version --mojo-platform-channel-handle=2676 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2332,i,10828489336506820294,6331020604161643783,524288 --field-trial-handle=2636,i,16890166150141665739,16938176867735967766,262144 --variations-seed-version --mojo-platform-channel-handle=2684 /prefetch:13
  2⤵
  PID:1104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3568,i,18111685282457995445,2272438608067466303,2097152 --field-trial-handle=2636,i,16890166150141665739,16938176867735967766,262144 --variations-seed-version --mojo-platform-channel-handle=3624 /prefetch:1
  2⤵
  PID:3756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3572,i,7477379138803153920,4858834632499726204,2097152 --field-trial-handle=2636,i,16890166150141665739,16938176867735967766,262144 --variations-seed-version --mojo-platform-channel-handle=3628 /prefetch:1
  2⤵
  PID:1600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4232,i,15925193511125091643,5502588263034285079,2097152 --field-trial-handle=2636,i,16890166150141665739,16938176867735967766,262144 --variations-seed-version --mojo-platform-channel-handle=4312 /prefetch:1
  2⤵
  PID:2400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4288,i,14624346679958132667,2601594625366244911,2097152 --field-trial-handle=2636,i,16890166150141665739,16938176867735967766,262144 --variations-seed-version --mojo-platform-channel-handle=4420 /prefetch:9
  2⤵
  PID:1068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5364,i,8538696327934955702,7180908998702604336,524288 --field-trial-handle=2636,i,16890166150141665739,16938176867735967766,262144 --variations-seed-version --mojo-platform-channel-handle=5456 /prefetch:14
  2⤵
  PID:6132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4988,i,13211517467778158835,1422373244860980417,524288 --field-trial-handle=2636,i,16890166150141665739,16938176867735967766,262144 --variations-seed-version --mojo-platform-channel-handle=5436 /prefetch:14
  2⤵
  PID:4260
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6140,i,1982262807278918589,18262349557537162788,524288 --field-trial-handle=2636,i,16890166150141665739,16938176867735967766,262144 --variations-seed-version --mojo-platform-channel-handle=6156 /prefetch:14
  2⤵
  PID:4320
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6140,i,1982262807278918589,18262349557537162788,524288 --field-trial-handle=2636,i,16890166150141665739,16938176867735967766,262144 --variations-seed-version --mojo-platform-channel-handle=6156 /prefetch:14
  2⤵
  PID:4748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4888,i,74135794872723627,8882580324793583769,524288 --field-trial-handle=2636,i,16890166150141665739,16938176867735967766,262144 --variations-seed-version --mojo-platform-channel-handle=4292 /prefetch:14
  2⤵
  PID:2448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3544,i,14002997989489799951,6986963470302169541,524288 --field-trial-handle=2636,i,16890166150141665739,16938176867735967766,262144 --variations-seed-version --mojo-platform-channel-handle=3736 /prefetch:14
  2⤵
  PID:2608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4400,i,12191372578659526420,7857663529874382176,524288 --field-trial-handle=2636,i,16890166150141665739,16938176867735967766,262144 --variations-seed-version --mojo-platform-channel-handle=5076 /prefetch:14
  2⤵
  PID:4092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5672,i,3455002971729651847,13337692466570600979,524288 --field-trial-handle=2636,i,16890166150141665739,16938176867735967766,262144 --variations-seed-version --mojo-platform-channel-handle=5404 /prefetch:14
  2⤵
  PID:5668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5612,i,4582502255491014949,4525427823978466030,262144 --field-trial-handle=2636,i,16890166150141665739,16938176867735967766,262144 --variations-seed-version --mojo-platform-channel-handle=804 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4476

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5796

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4484

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 48b0127c48894e5c8e42b14bcc7f6b1f91ca5d97355f42d22391fb602568bb1d
MD5 df62623cabc43e309a7767f4081f29d9
SHA1 420f1a4b11b86944a73d3cbcd4aec4883dfdfd62
SHA512 02067a08d194a87842f985ff7d0bee13c7b7228146565bf19114ffaebc120cb3d2ba8b19c941bb0d2773043366f064246a55efd57127d4a0de5768f453b2730c
TLSH
T1FDD08035774DFD08C18054717890D3517A204460345AC3186329A01DDDBC68513DF0EF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3a958178f477b8cf0f18d83e0835916167b3eaf95d859728b647bc0100a82efc
MD5 b2c496fb89251ff9b8ff1c46a5315932
SHA1 19626950ca3b280d084016871229a48eb3fa5ffc
SHA512 bbd974e4a08ca8f629f0b9a8892ba78ac7d4191c1640d1037e4fd018dadb4d8edd0a663e4a673a29497151c4defd9be09b6a4a4788adf24b182cbc36b18ccda7
TLSH
T1C5D08031774DFD08C18054757890D3517A104460245AC3186329E01DDDBC68513DF0DF
MD5 SHA1 SHA512 TLSH

Submit Download

85158f1f-7a8b-40dc-a03b-afa33394c2fc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\85158f1f-7a8b-40dc-a03b-afa33394c2fc.tmp
Size 27KB
SHA256 3b1117478d251900e0bebc6ecdb1e2ce1624438093837363eadad06662a69b53
MD5 154ae59ab329e4b1cbee8ab6c8637291
SHA1 71bbc1a67773a46d0467430d7f762a2193a772c1
SHA512 289cc3ccc9b8fc297173d696df0a4b5fc7b1852c0d40652309f25f114e1b085d0e232649eb9c2975af183652b9aa982a7c4bb4d63c38d704d18c472a684d914d
SSDEEP 768:Tqi0E3WgNxfez8F1+UoAYDCx9Tuqh0VfUC9xbog/OVtXNGBroKTyTz:Tqi0E3WgNxfezu1ja49G6r
TLSH
T1CDC2EC2B640CC77E4F804E6DEC2AAF976DD801CB97988D5447EA890C03C77EB511A5DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 4b8ef8ae705b98518cf6b761a147a14bd2e646e847a55bea48cfb7953ca01fe6
MD5 88fb8aa0d35115531aceec94399ecf4a
SHA1 ca8fa9e6874d5f504f1786ad7ee627f81e75fe63
SHA512 08f1f2441425be32ea0393b8372b93dce11ae599a3ceb7285c1477ace20357a039a4e25cb414378511fe9d6daf1bfe4852febd41d2a35e714d9dca8b9f7ac02a
TLSH
T1F951403B1E350B53EB99817F46D1D387BF3AC6E1800B6F006207B077DD0A7A06AA1752
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe598da0.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe598da0.TMP
Size 3KB
SHA256 a4360209c581eb41e2edd875c310c07ffe3f8e9e959bb1db11dc152a8f3a99bb
MD5 c70904c470c1d2995324288905d796cc
SHA1 846a7f8a944d722b2366a20ad6778d9ba5e1c466
SHA512 d3449e91e832ff1b83be801dd2d3182516302790928eacdb9be5c93176102d40f7c197f663bab10945aec93689011fa2712b883dd5b04098e0d88eb8fcee4f66
TLSH
T12351303B1E350B53EB99817F46D1E387BF3AC6E1810B6F116207B077DD0A7A06AA1752
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 6a9c31bf2ae6e02de7c821801fa8f59405715663e83fc9c3092122baf184ee7d
MD5 638d81f50af69251a6b36cbb41be29cd
SHA1 6d358db3f8ebd79b4bd6360001f5051c867aa1b3
SHA512 9ec1748a6e23b6e339f2eb8c63f3b530ddd82c52fdd23c5b627223d880f043bb8c1bca56df9b5922127f41a413cd2d76ba12910650edd1a8264a8a0e89dd7d56
TLSH
T12671EDF7C3E8867E890146F0AB146E1BCE2D0916832C3D57C8E4AF5B63E2471E20165F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 c91e7f937b9dd88b30209a43478ac130fdae71e9d3281dd780b4eb7932c3e583
MD5 13f89b79a9ec5cb18f4f31879a5c1070
SHA1 72a06ce8ff291618143105403adf9c5874314527
SHA512 53c50e8785764d43749404aa0ae078311e4e1b4b763f7d397aaca0e62246d9830791d7aa68474ba6da39193f2eac1a1edd10514938093890eebdd5eed28af2f6
SSDEEP 192:sxRFR5yM/jK1Ml8wF2/fKsU53qodzoA8p4J/g6+WNIY4SAe0FG1IgIJ:sxRFRb2/fKsU56B0/5IFe0Ys
TLSH
T1A652D915A934997BCCDBD20DFA557F53D6F91533A2901E08A9FC9A0C01E76DD221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 2d0aa4248143f70e954cdfd121428d44dd08ec10784525dceee94eb644e3eaf9
MD5 c012d509bc9d1629a7f777d9f402cc33
SHA1 14a4852f66f764c25e76fc48fd1ecec836cdbe09
SHA512 fd4fe3956ceebf4145ad6b164dfe3e6e729006c0b7ab88f1ad4b69e73852308fb401a9fc73db38b6422a7616bafa1dc51cf4dc5aabd2a7aeacac71e0b693118a
SSDEEP 192:sxR+R5yM/jK1Ml8wF2/fKsZ536odzoA8p4J/g6+WNIY44Ae0FG1IgDBJ:sxR+jb2/fKsZ5KB0/5IXe0YP
TLSH
T13F62D815A9289977CCDBD20DFA557F53D6F91523A2941E08AAFC8A0C01E7ADD221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 c52b563e3c4403d650ea6d7d04ec32b9ad0cfc591ab8c29a6ea951ec7b659a6d
MD5 6e3ffa7ad93fa57218ed9a689a06fb37
SHA1 9eb9dff2db6d124e3e975c029d4bf4df92d79460
SHA512 205ae42951c4978adfe73ba58d56baf619bfa059c2a8d729f7c291092e563b1e0a382b1546aa537ab2084998e727b52dff6f7f99975d314d45d99ded1c7b2158
SSDEEP 192:sxR+R5yM/jK1Ml8UQvF2/fKsZ536odzoA8peJ/g6+WNIY44Ae0FG1IgDBJ:sxR+jqt2/fKsZ5KB2/5IXe0YP
TLSH
T1CA62D715A92899778CDBD20DFA417F53D6F91533A2941E08AAFC8A0C01E7ADD221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 6c14fef37f43f71cfa6ccfe8c000498b2037c8dcab1317467ad0f74de040f7d0
MD5 a68101d7e4d572213077559ae54392a5
SHA1 df41f02caf8278534c679c2d3ee9ba1cd0702f36
SHA512 06fa736b65f7d81759f0509627450e7548c7e2a72075320498d2c69593eb2384025f48146ced5ae0a09d7bd6eb20a3ebb8415f2237a1204cecbdcb21adc3bfb6
SSDEEP 192:sxR+R5yM/jK1Ml8wF2/fKsZ53qodzoA8p4J/g6+WNIY4SAe0FG1IgDfJ:sxR+Rb2/fKsZ56B0/5IFe0YV
TLSH
T1D252E915A938997BCCDBD20DFA557F53D6F91533A2901E08AAFC9A0C01E76DD221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5a2869.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5a2869.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 688810b58ee50a63c9f665684d622b63bba68483684bf944c8d67a435c361e5e
MD5 d5b3801c53ee1f05badb780f9f9e60e3
SHA1 8e5cce05d0264dffa1b583d80a4f12202ff7c0d6
SHA512 088b3a24651585532524d67c8407d41aaded7b2c7f1a64cc8af27d77ad9b56e559003096054db204e9056d6f0a474a60875042619b6bf97c4e42d0d3e0bef381
SSDEEP 768:pj+9X3GBQthVc8O1f+AW+152MvSCai+b9MK:09X36xpx2phb+K
TLSH
T161F2BE32AC5ADD738C9287D4B74B3613AFF0125786C51E488DD8AF0E06C729D539AD2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 13c26936a1bb7b80de8046f57983734555718568570c542e71281eff94c164c7
MD5 3da6bbc741824fc23fbf4c0e38ea5b02
SHA1 f524d504590ae74e47256bd0c6c11a3ad7809066
SHA512 8cf757ffecc5e6576c8684ed6bf882a85aa0017d78fca739f183826ee213c313ad271e612c200f04aa14cb31259789b77a8563f22244951207b0359dc0d1ce49
SSDEEP 768:Brv+4UNbd93ytQthVc8O1x+AW+152MvSCai+b9Ml:Bbsbb3u7px2phb+l
TLSH
T11313BE32A869ED738DA28694B24B7613BFB0164386C50B88CDD96B4D06CB5DD234BD27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 d7377b4f43f19f5eed489b91dd5118830d11e49fd84355d574984d8e2f4061d6
MD5 19e2530529998f09cc9674ed596e537e
SHA1 abdbbf335b9f1a5c6f1619cb6eb9ba7b913c26c9
SHA512 89e7d9540c3282773b59e09410b630ba05da6ae02d4de0737db56b03bde95e54f129d761241a5058712a6ea85c859d9d8142d765f5b5f7637bb63f0d649f57c6
SSDEEP 768:AF1j+9N3gwgnBQthVc8O1g+AW+152MvSCai+b9MK:N9N3gypx2phb+K
TLSH
T10D03AE339C49DD778DA68BD4B74B3612AEF10297C6C51E549EC8AE0D02C72DC138BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 7db54e73105da3ff3eb7efc0411233d1c21418ea42a2f0f86e3cf44d2d6d20c2
MD5 027d7c987778e0bba18d537c3aca2d94
SHA1 f555d753e3696a64a779d9eb8275b2020e07afcc
SHA512 64bfb117b93b974ca42f556dcd56a8b1aa294833f3e5c9802fa92a39cf8643a832ed8dc1310811d84dd815f8cb186b009828f7cfe2d048fbd9460d039f2da169
SSDEEP 768:Arv+4UNbd23sPthVcq+AW+152MvSCa2FX+8rir9:Absbs3epx2p4XDriR
TLSH
T1C503BE32E8A9A9738CA686C4764B36137FB0519386C10F94CDD92B4D429B6CD235FD37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download