4104e91cc8a89af78ca20313909ea2aaefb835dfb914c3946019e75ef28ba3d5

Analysis

max time kernel
149s
max time network
151s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260706-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260706-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
09/07/2026, 05:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 177KB
Sample260709-fvendsdx2x
SHA256 4104e91cc8a89af78ca20313909ea2aaefb835dfb914c3946019e75ef28ba3d5
MD5 df9612db4351dd9ba8b280092ca45213
SHA1 0d642786df15822f539e3da6ce7ff6df2b72f468
SHA512 d0ac8c380f5d6daeb3cbcdc7187d3152b234ae639f806c6bf263c3b14a4143dbbc1134da688d4c75a7c0974ae4c07746bdcb2592f3b43d94778de5202f496300
SSDEEP 1536:mnHxeWdnXZ5iUwkfv41A4xHl7Vis2KJ/5q0cTe/CddTIlu95zJF9ZUx60RJ5CZd7:iHxeWdnXKxXQTe2T0RO1ZZ
TLSH
T181043B375640203AD34397CEBDAA3719A5B2D02BEA114CC8FAEC4A144FE79D717215AF
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4108	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134280474901451576"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2532687178-1633831978-1202193935-1000\{CC6C218C-459A-4AD1-9E3E-8E5EEF0681F7}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3620	msedge.exe
3620	msedge.exe

Suspicious behavior: LoadsDriver 26 IoCs

pid
4
4
4
4
4
4
4
4
4
4
4
4
4
4
4
4
4
4
4
4
4
4
4
4
4
4

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
5760	msedge.exe
5760	msedge.exe
5760	msedge.exe
5760	msedge.exe
5760	msedge.exe
5760	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5760	msedge.exe
5760	msedge.exe
5760	msedge.exe
5760	msedge.exe
5760	msedge.exe
5760	msedge.exe
5760	msedge.exe
5760	msedge.exe
5760	msedge.exe
5760	msedge.exe
5760	msedge.exe
5760	msedge.exe
5760	msedge.exe
5760	msedge.exe
5760	msedge.exe
5760	msedge.exe
5760	msedge.exe
5760	msedge.exe
5760	msedge.exe
5760	msedge.exe
5760	msedge.exe
5760	msedge.exe
5760	msedge.exe
5760	msedge.exe
5760	msedge.exe
5760	msedge.exe
5760	msedge.exe
5760	msedge.exe
5760	msedge.exe
5760	msedge.exe
5760	msedge.exe
5760	msedge.exe
5760	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5760	msedge.exe
5760	msedge.exe
5760	msedge.exe
5760	msedge.exe
5760	msedge.exe
5760	msedge.exe
5760	msedge.exe
5760	msedge.exe
5760	msedge.exe
5760	msedge.exe
5760	msedge.exe
5760	msedge.exe
5760	msedge.exe
5760	msedge.exe
5760	msedge.exe
5760	msedge.exe

Suspicious use of WriteProcessMemory 33 IoCs

description	pid	Process	procid_target
PID 5760 wrote to memory of 2552	5760	msedge.exe	88
PID 5760 wrote to memory of 4108	5760	msedge.exe	90
PID 5760 wrote to memory of 1880	5760	msedge.exe	91
PID 5760 wrote to memory of 1880	5760	msedge.exe	91
PID 5760 wrote to memory of 1880	5760	msedge.exe	91
PID 5760 wrote to memory of 5988	5760	msedge.exe	92
PID 5760 wrote to memory of 5988	5760	msedge.exe	92
PID 5760 wrote to memory of 5268	5760	msedge.exe	94
PID 5760 wrote to memory of 4848	5760	msedge.exe	93
PID 5760 wrote to memory of 5268	5760	msedge.exe	94
PID 5760 wrote to memory of 5268	5760	msedge.exe	94
PID 5760 wrote to memory of 4848	5760	msedge.exe	93
PID 5760 wrote to memory of 4848	5760	msedge.exe	93
PID 5760 wrote to memory of 3120	5760	msedge.exe	95
PID 5760 wrote to memory of 3120	5760	msedge.exe	95
PID 5760 wrote to memory of 3120	5760	msedge.exe	95
PID 5760 wrote to memory of 1488	5760	msedge.exe	96
PID 5760 wrote to memory of 1488	5760	msedge.exe	96
PID 5760 wrote to memory of 1488	5760	msedge.exe	96
PID 5760 wrote to memory of 2300	5760	msedge.exe	98
PID 5760 wrote to memory of 2300	5760	msedge.exe	98
PID 5760 wrote to memory of 6088	5760	msedge.exe	99
PID 5760 wrote to memory of 6088	5760	msedge.exe	99
PID 5760 wrote to memory of 2608	5760	msedge.exe	100
PID 5760 wrote to memory of 2608	5760	msedge.exe	100
PID 5760 wrote to memory of 2608	5760	msedge.exe	100
PID 5760 wrote to memory of 4988	5760	msedge.exe	102
PID 5760 wrote to memory of 3568	5760	msedge.exe	106
PID 5760 wrote to memory of 5860	5760	msedge.exe	107
PID 5760 wrote to memory of 1904	5760	msedge.exe	108
PID 5760 wrote to memory of 5508	5760	msedge.exe	109
PID 5760 wrote to memory of 5508	5760	msedge.exe	109
PID 5760 wrote to memory of 3620	5760	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2a8,0x7fffde61c188,0x7fffde61c194,0x7fffde61c1a0
  2⤵
  PID:2552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2152,i,8026454509304434080,18124579396191709662,524288 --field-trial-handle=3088,i,16251566313819772932,10907778578706335972,262144 --variations-seed-version --mojo-platform-channel-handle=3144 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1860,i,6964758078160395774,17696520007620063616,262144 --field-trial-handle=3088,i,16251566313819772932,10907778578706335972,262144 --variations-seed-version --mojo-platform-channel-handle=3076 /prefetch:2
  2⤵
  PID:1880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2392,i,15218545786178015935,12987556666192162554,524288 --field-trial-handle=3088,i,16251566313819772932,10907778578706335972,262144 --variations-seed-version --mojo-platform-channel-handle=3152 /prefetch:13
  2⤵
  PID:5988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3640,i,406283510070763666,16842608443761522,2097152 --field-trial-handle=3088,i,16251566313819772932,10907778578706335972,262144 --variations-seed-version --mojo-platform-channel-handle=3684 /prefetch:1
  2⤵
  PID:4848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3648,i,864131137709647500,3983759824419572760,2097152 --field-trial-handle=3088,i,16251566313819772932,10907778578706335972,262144 --variations-seed-version --mojo-platform-channel-handle=3708 /prefetch:1
  2⤵
  PID:5268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4252,i,9165661267606260700,1232372561286292932,2097152 --field-trial-handle=3088,i,16251566313819772932,10907778578706335972,262144 --variations-seed-version --mojo-platform-channel-handle=4948 /prefetch:1
  2⤵
  PID:3120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4264,i,15806203446932043473,8295266907050881532,2097152 --field-trial-handle=3088,i,16251566313819772932,10907778578706335972,262144 --variations-seed-version --mojo-platform-channel-handle=4952 /prefetch:9
  2⤵
  PID:1488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3912,i,10147583528888832996,10000177656699592043,524288 --field-trial-handle=3088,i,16251566313819772932,10907778578706335972,262144 --variations-seed-version --mojo-platform-channel-handle=3900 /prefetch:14
  2⤵
  PID:2300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3864,i,17851046404812954945,15920589291581838059,524288 --field-trial-handle=3088,i,16251566313819772932,10907778578706335972,262144 --variations-seed-version --mojo-platform-channel-handle=5280 /prefetch:14
  2⤵
  PID:6088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=5816,i,4710193230683077312,14522052048532871914,2097152 --field-trial-handle=3088,i,16251566313819772932,10907778578706335972,262144 --variations-seed-version --mojo-platform-channel-handle=5848 /prefetch:1
  2⤵
  PID:2608
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6332,i,5263589767817686337,4594762338981179968,524288 --field-trial-handle=3088,i,16251566313819772932,10907778578706335972,262144 --variations-seed-version --mojo-platform-channel-handle=6320 /prefetch:14
  2⤵
  PID:6024
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6332,i,5263589767817686337,4594762338981179968,524288 --field-trial-handle=3088,i,16251566313819772932,10907778578706335972,262144 --variations-seed-version --mojo-platform-channel-handle=6320 /prefetch:14
  2⤵
  PID:4988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1232,i,11132870050651762556,6890915241939122079,524288 --field-trial-handle=3088,i,16251566313819772932,10907778578706335972,262144 --variations-seed-version --mojo-platform-channel-handle=1168 /prefetch:14
  2⤵
  PID:3568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1236,i,2080258420005062289,30173830615527645,524288 --field-trial-handle=3088,i,16251566313819772932,10907778578706335972,262144 --variations-seed-version --mojo-platform-channel-handle=5092 /prefetch:14
  2⤵
  PID:5860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1240,i,14087678888946320762,1533634908068254108,524288 --field-trial-handle=3088,i,16251566313819772932,10907778578706335972,262144 --variations-seed-version --mojo-platform-channel-handle=5144 /prefetch:14
  2⤵
  PID:1904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5644,i,6049674310854562394,4868106748066995168,524288 --field-trial-handle=3088,i,16251566313819772932,10907778578706335972,262144 --variations-seed-version --mojo-platform-channel-handle=5684 /prefetch:14
  2⤵
  PID:5508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6312,i,11744390537760886806,2904226014619492516,262144 --field-trial-handle=3088,i,16251566313819772932,10907778578706335972,262144 --variations-seed-version --mojo-platform-channel-handle=4996 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3620

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2008

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3444

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 99348710dfa24f06e3cc9e5d66d99b450d2606932193b821d1cccbb1b0382494
MD5 99dd082560f2d99883b896493c6f1a16
SHA1 8c1328ed9b1727d8e368914ffd96b9d8d9882e17
SHA512 2eac54e4bf6c56c6a86be1ac66b75e47cf5afa02dca24674366691d2eae08e023308cf9c0e790eecff6d37160a3b4bc6aa0d7b2cbe2bf4b7074898f149ff8bfb
TLSH
T11DD09BE56640D94DC58020721593D555F5705931D80553C85001743DDC952C703574EF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f2f36159b1a73a0ea0e59f51f1f373932375016885fcf17933887e7d1b2c3016
MD5 2dd00ee0ca93975f2038728e856681d5
SHA1 24fcfdb6befe18bca66bab129cd0fba4ad709e15
SHA512 d734e4919f2bc11b3e1a733c99b812ac0c7d2d76c45401d957b2b60a896b0bfc172f211ec13501d83d82cd3445e59aa5e9e4a25b2d71ff9d2f99bdb12460b4e4
TLSH
T10FD09BE56640D94DC58020721593D555F5705931D40553C85101B43DDC952C703574DB
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 1b2ebecaddc1313e50b6a37efcef4b07157332fc331465ceaca0c569b8db2b18
MD5 ab1e331b46e27aaed58b75b1b25b3ef8
SHA1 2eb6d66a234281e961280daed76379158bf9f64e
SHA512 d19d85221d58def73b8c5c179043396381ee88941eb4c68b6eca874f75e105483f5d1868901d5eb742e2f01dca59b92bcd5476d4217f290ed6992c195e5d3a44
TLSH
T1E5412DA503F68BE2EFD141BA01D0128936B6C45A05C37AC0377865305DFBB78534AEE9
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59a639.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59a639.TMP
Size 2KB
SHA256 13f7436f8b49afdd7cb841345d55a59651a95e55b092486f6d5b20aab867962e
MD5 f35409d8c1d338dfe836c1e3e3be0e58
SHA1 0031f74dc51b5a3db7bbd5c6e72342e551684286
SHA512 1ef2e75bb12a958b50a6d3043cfae9839b94299142f89818a79d70277a4840e242e52ca68e93309b5730df33bf259d8a99486a1383fd5356f02a39dcd20185a6
TLSH
T1DA413EA503F68BE1EFD140BB01D0128936B6C49A05C3BAC0377865305DFBB78974AEE9
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 6KB
SHA256 f04a2dbe2da27467ead12ddcd2e563c77a7107d515451895d19a9efa289eda5d
MD5 015e76ba13ee70857e981267f1692ee4
SHA1 0d35233dd4f0b1e9da3191eba162b54a8b4a1aee
SHA512 1ee5978601b263f1682b4e41f173965dc2ec8a469372e8f31b4fb9ee15fe96bfbcfec243a22674ce555f5a8ff4b077907d5ba2683272d9568613dc14594e36c9
SSDEEP 192:DzqReFkJ3JeJ2Rvyg2jhnP1NZh/YwRZrUZ8yToakiwRZOGwkj6VGFXTPg6pd:DzqReuZG2Rvyg25P1NZh/YwRZrUZ8yTw
TLSH
T175E1BBF783E4477E851256F49B256E2ACD2D151B432C3C6688F4AE1B73F24B1E1026AF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 6b7841e4655544df41379f6e512b2c636467dbc2063794d81457723456a6ca0b
MD5 aff0ac7da28eedb0ee3eda346aac69a5
SHA1 025a4a98641cf907abf756a78fe8948e7001fd62
SHA512 b0500e44e65f9105f5eedf2660fe554ee98955048bed73eb87e5369882079048064423249f4d6e55992cd59ff424de527ba0e562c5e88bf94297cece34f5a183
SSDEEP 192:sxRmRSyM/jK1Ml8UQ7bY/f4sOLwGpioM1zoA8peV/g6+WNIYPLdlZ+GmIgDBJ:sxRmcqfY/f4sOLRUnY2/5IgX8n
TLSH
T1DD62C8166A349D779CDBD209FA51BF93D6F91572A2901E04AAFCCB0C01E7ADD211382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 b6ae2d6e6a100c4981bf6584a08488912676f1cb5ff1848def0c406e01384d27
MD5 11546692c677d1abdcb9e42b356ef8ba
SHA1 0e0fa99470adb51831d582a3273d7b83fb195b9e
SHA512 c518b5299bfc66476344116d00aaf90065cf4281695fee15a566dbbf986451204aceb2518d938867cf2a29fee88a9f97a374f22e952ae5cc51f71e0e53efd762
SSDEEP 192:sxRlRSyM/jK1Ml8wbY/f4sdLw4pioM1zoA8p4V/g6+WNIYPqdlZ+GmIgIJ:sxRlclY/f4sdLrUnYE/5I5X8s
TLSH
T1CE52C9166A349D7BCCDBD20DFA517F53D6F91572A2901E44AAFC8A0C01E7ADD221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 42cf00daff087a100f99c6ef5768252194ec26cb81b61ae71a058e83c020628a
MD5 75a228807d91bd03c7dd664710114bbd
SHA1 27e56f09a9749ee9789dfac12d3015f4e57031da
SHA512 3153f64963f5d28b119939b4ac16388a11255de05f9c5ba24ba03641da4fce9323a5bcb8371b172b8cb52eb129dd087b6c7125ae0bdacb7b6ff29cd6f3e07abe
SSDEEP 192:sxRmRSyM/jK1Ml8wbY/f4sOLw4pioM1zoA8p4V/g6+WNIYPqdlZ+GmIgDfJ:sxRmclY/f4sOLrUnYE/5I5X8d
TLSH
T1A652C8166A349D7B8CDBD209FA517F93D6F91572A2901E44AAFC8B0C01E76DD221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 2090895487801ac22b1683808c9d9aa9c32f7bea3ac9041092d74faaf009541b
MD5 b822551775fa0c4f2790512bcc851466
SHA1 998fa190229204cc0279e32c06785ca62da6ab5c
SHA512 4160ea305b77321df094a3ba633ab44c6d831c7895a5a00ab87f92aea974f3858a0bbf504ee2007ddd71ff5a1d28563809307b2cafa9c7685664186aee80473c
SSDEEP 768:5+Mc6pWgFZfsl8F1+UoAYDCx9Tuqh0VfUC9xbog/OVhj/e2roVjT:5+Mc6pWgFZfslu1jaUTeNVjT
TLSH
T13CC2FB2B640CCB7F4F844AADEC25AE966DD801CB9B984D5447FA890C03C77EB521B4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 5a539fdd04ff2aee847a49aec5d8de4697741d3ea7b23eecf1280683408e8b81
MD5 2fd2f35cd00401b860c8cf66bc26b0a7
SHA1 98333dfb3025282781e53fcfb519d35a88376219
SHA512 8bed1a700f991b73d6df152dfe3570f8917ba72f2e7eee4b5ac7a425097d371b14a4011f09cfbd40b1b19829c1b6bfc699213fb1f93fc8c5a878aff4501e6b72
TLSH
T12EA0022133C58945C0A10BB050C6E1667A24EC201D95520760D01D87E9B05804101550
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5a419e.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5a419e.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 cb3dd278fa4d90c5b6e666768ae6f25bc650458311ac22fbcc69027da050aa87
MD5 c48e712319209eac8eb7c014d6b181f5
SHA1 d3a900b8e027b79cba92969b96192ae8ff598f44
SHA512 2897662a0b0abeb1b333ec9bab1d0b1abffa69b6b5062fc22c4daf55fc03cda1f198dbe830f46f8b49ffaf98de5a2ef0654266a1fbfa0d613dad2b9bfeda4908
SSDEEP 768:Vhj+9h3ppqJGkMf5af4fva5WFbxsz56f0+ynobnob9MST:V89h39fAf4fi5WkQ5job+ST
TLSH
T169F2BE36EC225DA34EE39695B2573A5BBEF44763D3C01D849ADC7B0C06CBAAC5307816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 986df349752e84e11b7acf9910ae4104f73c4e28b9f53950208d6fca9e0e1d80
MD5 10371c82d2543e17c268dd114cdcb6bb
SHA1 2add5f3931a576614f81f3e5b4fb12c379fa9730
SHA512 996e72097d4ded8e65833b2cee0f5b698681bf7fb3472c12e58e51f2887681228653c38bdaff35fec4d66a66ee6f6cfe70f70c019fe02f569e2aa595648f882f
SSDEEP 768:9CF1j+913VwgrpqJGkMf5af4fvi5WFbxsz56f0+ynobnob9MST:93913PfAf4fK5WkQ5job+ST
TLSH
T1AC03AE339C5189BB5EE39BC5F25B365BAEF14263D6C02D94AACC7A0C05C7AAC5307C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 5f7b0eded796d76cec6f243012a473ab361065b7aca32c8d0023c667a11cdd40
MD5 b0164a7e6639f1e72722186147f55233
SHA1 94c49508953e0d2391d714c0219c0a1a944a6de5
SHA512 57e85da30983c53baae620e5e32a1e27fa83d6b7eb1328febdbebefc5097fe37087f4144ebc50d4dbe9b461e1117d79a1aa92e995a0d8e210f12ab264ef1297b
SSDEEP 768:9hj+9h3KpqJGkMf5af4fva5WFbxsz56f0+ynobnob9MST:989h32fAf4fi5WkQ5job+ST
TLSH
T12BF2BF36EC225DA34EE39685B2573A5BBEF44763D3C01D848ADC7B0C06CBAAC5307816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 790b01dc217d9b4f0c200743e88574519bd25eefbe6a0946a518c03ad9822e63
MD5 7ef268f8889bf0f7ce10c7232a185e90
SHA1 f766d48f26e7e49a3112d00d41eb853b7e415d9a
SHA512 d01df3a3809e5f12bf3131463741d2dcb8f71ca1a05cd875245467d6f2a1215bf17c18fa8eb7308f1007efa7cbec21e26c2f72fd69cd4b90847d8aad58ea3fd4
SSDEEP 768:Dirv+4UNbdl3wvQyJGkMf5af/5WFbxsz56f0+ynobnxUixK:Dibsbr3EifAf/5WkQ5jxUX
TLSH
T17103CF36E82499778EF3D685B28B7A477EB81263D6C00E94C9DD3B0C469B55D2307CA3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 59ced08b905c122b2ee3e644bd1f49d288102045550bc4447a36bcfb7e6bbd74
MD5 4c665334a1e3e109eae2dee20b475b33
SHA1 1a89dab9056c382d9d2fd74ce09682f7e96d3334
SHA512 9175bbb4ccb35a4ad07288fe0fe42c9eba022d33338a7789f38dfd05aaf800700e575e0bfcbc9b817264cbc8534d69bd30cb43c492dab7be4511f633157aa07e
SSDEEP 768:9Yrv+4UNbdP3KmqJGkMf5af4fvG5WFbxsz56f0+ynobnob9MSl:9Ybsbt33fAf4fe5WkQ5job+Sl
TLSH
T15E13CF32E82499B34EF39685B2473A177FF45653D7C00E8499DD7B0C4A8B9AD630B813
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

66fdd985-32eb-4ba6-a199-f142858071f2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\66fdd985-32eb-4ba6-a199-f142858071f2.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

memory/4988-269-0x000001D983D50000-0x000001D983EAF000-memory.dmp

Download

memory/4988-260-0x000001D983D50000-0x000001D983EAF000-memory.dmp

Download