0bcd6b19f1267ba8f258228c8fa554460ae9d36e63c981bb82a0d9cc38349504

Analysis

max time kernel
148s
max time network
146s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260629-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
06/07/2026, 12:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
index.html
Size 34KB
Sample260706-pgr61aaz2l
SHA256 0bcd6b19f1267ba8f258228c8fa554460ae9d36e63c981bb82a0d9cc38349504
MD5 58ad25e41e11677fcf29b9c81e846c0b
SHA1 040f852d604c6fbf6e64180d422ccfee24fe2386
SHA512 ff526d983b287263d6e2dd252be3c6737829ee2ce8239eeeb7b2b43baf983a0861dafc6af1c2a937aa0142518e74076e11fd52c8b558d4a1123bb1fbff6d07fc
SSDEEP 768:UEstsNZdapYf3BWUm+i03EMXQSajdftwn:U+Fapc3Y7+i03EMXQSajdftwn
TLSH
T1DFF2FA33A5D8511F624A8BD9F0B9F32DE65D9210C642CBBC32F8216992C5DFB40E764E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3440	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134278139139171314"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1797646245-3139070211-3019596475-1000\{A5A50509-C9F1-477C-A9B1-CC2FD3CEC31A}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4940	msedge.exe
4940	msedge.exe

Suspicious behavior: LoadsDriver 1 IoCs

pid
4

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
1228	msedge.exe
1228	msedge.exe
1228	msedge.exe
1228	msedge.exe
1228	msedge.exe
1228	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
1228	msedge.exe
1228	msedge.exe
1228	msedge.exe
1228	msedge.exe
1228	msedge.exe
1228	msedge.exe
1228	msedge.exe
1228	msedge.exe
1228	msedge.exe
1228	msedge.exe
1228	msedge.exe
1228	msedge.exe
1228	msedge.exe
1228	msedge.exe
1228	msedge.exe
1228	msedge.exe
1228	msedge.exe
1228	msedge.exe
1228	msedge.exe
1228	msedge.exe
1228	msedge.exe
1228	msedge.exe
1228	msedge.exe
1228	msedge.exe
1228	msedge.exe
1228	msedge.exe
1228	msedge.exe
1228	msedge.exe
1228	msedge.exe
1228	msedge.exe
1228	msedge.exe
1228	msedge.exe
1228	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
1228	msedge.exe
1228	msedge.exe
1228	msedge.exe
1228	msedge.exe
1228	msedge.exe
1228	msedge.exe
1228	msedge.exe
1228	msedge.exe
1228	msedge.exe
1228	msedge.exe
1228	msedge.exe
1228	msedge.exe
1228	msedge.exe
1228	msedge.exe
1228	msedge.exe
1228	msedge.exe

Suspicious use of WriteProcessMemory 33 IoCs

description	pid	Process	procid_target
PID 1228 wrote to memory of 6108	1228	msedge.exe	89
PID 1228 wrote to memory of 4484	1228	msedge.exe	90
PID 1228 wrote to memory of 3440	1228	msedge.exe	91
PID 1228 wrote to memory of 4484	1228	msedge.exe	90
PID 1228 wrote to memory of 4484	1228	msedge.exe	90
PID 1228 wrote to memory of 4812	1228	msedge.exe	92
PID 1228 wrote to memory of 4812	1228	msedge.exe	92
PID 1228 wrote to memory of 5084	1228	msedge.exe	94
PID 1228 wrote to memory of 5084	1228	msedge.exe	94
PID 1228 wrote to memory of 5084	1228	msedge.exe	94
PID 1228 wrote to memory of 2944	1228	msedge.exe	95
PID 1228 wrote to memory of 2944	1228	msedge.exe	95
PID 1228 wrote to memory of 2944	1228	msedge.exe	95
PID 1228 wrote to memory of 5796	1228	msedge.exe	96
PID 1228 wrote to memory of 4476	1228	msedge.exe	97
PID 1228 wrote to memory of 5796	1228	msedge.exe	96
PID 1228 wrote to memory of 5796	1228	msedge.exe	96
PID 1228 wrote to memory of 4476	1228	msedge.exe	97
PID 1228 wrote to memory of 4476	1228	msedge.exe	97
PID 1228 wrote to memory of 5628	1228	msedge.exe	99
PID 1228 wrote to memory of 5628	1228	msedge.exe	99
PID 1228 wrote to memory of 1868	1228	msedge.exe	100
PID 1228 wrote to memory of 1868	1228	msedge.exe	100
PID 1228 wrote to memory of 5940	1228	msedge.exe	102
PID 1228 wrote to memory of 1248	1228	msedge.exe	105
PID 1228 wrote to memory of 1248	1228	msedge.exe	105
PID 1228 wrote to memory of 1248	1228	msedge.exe	105
PID 1228 wrote to memory of 5972	1228	msedge.exe	107
PID 1228 wrote to memory of 5012	1228	msedge.exe	108
PID 1228 wrote to memory of 3428	1228	msedge.exe	109
PID 1228 wrote to memory of 1332	1228	msedge.exe	110
PID 1228 wrote to memory of 1332	1228	msedge.exe	110
PID 1228 wrote to memory of 4940	1228	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\index.html
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x284,0x7ffcc5b1c188,0x7ffcc5b1c194,0x7ffcc5b1c1a0
  2⤵
  PID:6108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1552,i,661824129783658747,8874762825775627331,262144 --field-trial-handle=2468,i,6360366400695020855,16263918651278648945,262144 --variations-seed-version --mojo-platform-channel-handle=2464 /prefetch:2
  2⤵
  PID:4484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1684,i,10191567739638235218,2411480461215616998,524288 --field-trial-handle=2468,i,6360366400695020855,16263918651278648945,262144 --variations-seed-version --mojo-platform-channel-handle=3036 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2284,i,15822962259735862636,6675690434155644496,524288 --field-trial-handle=2468,i,6360366400695020855,16263918651278648945,262144 --variations-seed-version --mojo-platform-channel-handle=3208 /prefetch:13
  2⤵
  PID:4812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3624,i,13085630323116894656,106923673082258475,2097152 --field-trial-handle=2468,i,6360366400695020855,16263918651278648945,262144 --variations-seed-version --mojo-platform-channel-handle=3636 /prefetch:1
  2⤵
  PID:5084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3628,i,6077632551199595753,13287295155640425636,2097152 --field-trial-handle=2468,i,6360366400695020855,16263918651278648945,262144 --variations-seed-version --mojo-platform-channel-handle=3700 /prefetch:1
  2⤵
  PID:2944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4324,i,2574147428268066294,3728683970417195148,2097152 --field-trial-handle=2468,i,6360366400695020855,16263918651278648945,262144 --variations-seed-version --mojo-platform-channel-handle=5012 /prefetch:9
  2⤵
  PID:5796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4308,i,2635348116884472464,11844946245949069955,2097152 --field-trial-handle=2468,i,6360366400695020855,16263918651278648945,262144 --variations-seed-version --mojo-platform-channel-handle=4636 /prefetch:1
  2⤵
  PID:4476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3728,i,17658833999876647395,7761636072781239694,524288 --field-trial-handle=2468,i,6360366400695020855,16263918651278648945,262144 --variations-seed-version --mojo-platform-channel-handle=5420 /prefetch:14
  2⤵
  PID:5628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3800,i,7306365392387913841,511391999393321074,524288 --field-trial-handle=2468,i,6360366400695020855,16263918651278648945,262144 --variations-seed-version --mojo-platform-channel-handle=5432 /prefetch:14
  2⤵
  PID:1868
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6132,i,1930181585720620115,10225600887142092714,524288 --field-trial-handle=2468,i,6360366400695020855,16263918651278648945,262144 --variations-seed-version --mojo-platform-channel-handle=6076 /prefetch:14
  2⤵
  PID:1212
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6132,i,1930181585720620115,10225600887142092714,524288 --field-trial-handle=2468,i,6360366400695020855,16263918651278648945,262144 --variations-seed-version --mojo-platform-channel-handle=6076 /prefetch:14
  2⤵
  PID:5940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=5152,i,3428357421192776674,11131761615353873524,2097152 --field-trial-handle=2468,i,6360366400695020855,16263918651278648945,262144 --variations-seed-version --mojo-platform-channel-handle=5008 /prefetch:1
  2⤵
  PID:1248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6380,i,2657092644537116139,13935190698677020300,524288 --field-trial-handle=2468,i,6360366400695020855,16263918651278648945,262144 --variations-seed-version --mojo-platform-channel-handle=6404 /prefetch:14
  2⤵
  PID:5972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6440,i,10247256036435276481,6168754278145305412,524288 --field-trial-handle=2468,i,6360366400695020855,16263918651278648945,262144 --variations-seed-version --mojo-platform-channel-handle=6444 /prefetch:14
  2⤵
  PID:5012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6428,i,10802410659128761608,10602023465930429740,524288 --field-trial-handle=2468,i,6360366400695020855,16263918651278648945,262144 --variations-seed-version --mojo-platform-channel-handle=6436 /prefetch:14
  2⤵
  PID:3428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5628,i,16421911741949762297,3108316528314372001,524288 --field-trial-handle=2468,i,6360366400695020855,16263918651278648945,262144 --variations-seed-version --mojo-platform-channel-handle=5440 /prefetch:14
  2⤵
  PID:1332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6384,i,14929506146186221121,1852322601966089742,262144 --field-trial-handle=2468,i,6360366400695020855,16263918651278648945,262144 --variations-seed-version --mojo-platform-channel-handle=6380 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4940

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2724

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5888

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 85900118c71217b605d5ac64fa104d9bdf3a2ae1825187ef3a6a9c3ea75946b8
MD5 b694af012c621426ee8e90a8ed586333
SHA1 e839cf90b93d2693f8046fc19ae1373628f0cf99
SHA512 b9142bc76c532d8974de0c5db727ec4870a44225dc222a9fdc138b1278d0f4cb8cef786ed6b936ee6b436177a50e31c07b489d69dd8d25de345ea17638a55e56
TLSH
T188D08055364DB40CC151253254615365F6749651B42B57185460B01CDC78DA173576DF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 9ee8b00c5eccab84404f41fa5a938e6b9e2129213bd97cde6c60973bfccf9540
MD5 0a273f57544ca9c385c90abd2fb2f8b8
SHA1 663d351037054236aaa58a924f66180602045244
SHA512 8a731bd22460fb3b026847be48aab957fe90f0ad7e2dcb291305580f3553409cfdff67355886d3d2f95cd8f8ff1d2726447bc2b96bce2cdcc51a8a15cbcb9d0c
TLSH
T1CFD0C010324DB00CC040203214210360F2309610602B47084020F02CCC78DA173466CF
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 8a12930c69417ebc3050055886ed4fd032252006b2efe4f0cd5d436f4ec98a77
MD5 f50e523031d5d4c1e8d3d488a50e3c54
SHA1 388d457ac6bfc84ee8cbe81f03b91ffbc655b8d1
SHA512 fa5bf215004fae95ee9374692142040050388e303a292b39ccdc914d8a1af3ac0411352a31d3e3f522362dccdd39d1122006eadbba75d6c04aa13dfda28ca7d3
TLSH
T154413F1FC2F0AD61C729057AC0D1C248FFB8E0672707EE1C9040B9B2CE2A3705B9E509
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RF4fab8.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RF4fab8.TMP
Size 2KB
SHA256 1ebd5a5d5e906a9b555a6012b1b4fb72ddf02fd1aeea95ab8bb5776b5aa3f9d8
MD5 d60521586671a5d09d1848989cf5c626
SHA1 7b8ce8d989f3ff3ad64f13da1af9dd092d076472
SHA512 dfd93af6433bc316ca37a60fff7298dd7e458bb5179ebdb3cf0ab6b0eeb9f1c6287443cbeaa7fdab0eb92d5006572f5b1f6b67022f354842cf44407fe0bff3c3
TLSH
T1D8410F1FD2F4AD55C729057AC1D1D288FFB8E0672707EE1C9040B9B6DE2A3705B9E109
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 adca536db06e3868648aeb07466d5b8f7ef1c0caea2bab89d028348f6483dffe
MD5 76a09da32c684cf18d94ec97cfbaaaa2
SHA1 b8e550b63ac5909989a96dc569a4e7d306498bc5
SHA512 ffd7e284d1603b3c9cd899d93748f01c1649dff660a9ea7edb865f3350f97a038687090d6cb2c27648aed91d7d9994b2dd1a18ed86bde8a3afa0023094f4e268
SSDEEP 48:YALlgveNvSNOgpMgvSNhv0hv7hv/s5aAsMfoKs93gmgCZs73sFzEskss4PsAC7wf:DnaOrlSFyaUqi34zwEZGwBj6w/S8J
TLSH
T116A1B0F7C3D4877E981596F09A24BE2BCD1D065642283C5689E8EF4F63E24B1D20265F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 984477654c663bcf8860cfc29cc76d81a01d2ce5b28d076fd98d892995a00636
MD5 d6ff82e84851e4b92081126c1eae89dc
SHA1 3ea217b55f3fbb125327ef41e2145f47f975ed53
SHA512 3ed464e70d128fd45738f17a794671e633c582862ac1c80741f8ccf8245f2d2dbb24d424c51d82aca703274e498d3326099b5df0f1c262aab90b5e43b44eb10f
SSDEEP 192:sxRkRGyM/jK1Ml8wF0/fEs4eY6swoRh0zoA8p4X/g6+WNIYHJHMWnGRIgDpJ:sxRkcb0/fEs4gQRhVO/5IGd8/
TLSH
T18462C8566634993BCCDBD209FA957F53D6F80573A2901E04AAFC8B0C01E76ED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 bcc037b09ee7d003ab0cee2853b2a64fed0570cb4d6ce9ed2086165b4e6ecce1
MD5 c27b0aaa4ada3350a5d9e6116b397b6b
SHA1 e701f2b9556252099b04703e82b9be202fd1ef96
SHA512 36f547b3a5b61e9470f606f6e1fbb5eda31b44a4ee26c7fc48e3b8395ce239910db7343349e0531ebe14a6256185ca57c0cffd9d283bd82c65bf5d66228352f5
SSDEEP 192:sxR5RGyM/jK1Ml8wF0/fEs4eYoswoR60zoA8p4X/g6+WNIYH1HMWnGRIgDXJ:sxR58b0/fEs4aQR6VO/5Iod8F
TLSH
T1E852D9166634593BCCDBD209FA957F53D6F81573A2901E48AAFC8B1C01E76ED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 fadd0afe86cfb2537dcf55ac6f197691cc832fe1a2800eb4487349ee855f04ce
MD5 bdf7c6b84d56f59aca5ab0de605fa697
SHA1 455f85dd2a6609822178ddd19d297018a1a806e3
SHA512 c368b4cca211d79c6ace1a96b24b6fa9ee46d339b34585fdc6045fcda67e68a46d875e72b168951aaf41964b1fc2c2707a2ada680d4cf5fedf9edc44072754fb
SSDEEP 192:sxR2RGyM/jK1Ml8wF0/fEsMeYoswoR60zoA8p4X/g6+WNIYH1HMWnGRIgIJ:sxR28b0/fEsMaQR6VO/5Iod8s
TLSH
T1DD52C9166634593BCCDBD209FA557F53D6F81573A2901E48AAFCCA1C01E76ED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 9b6676da92bc6c2eb09738c31629faa808f04ad6ad894d33b32ee0a95cffaf26
MD5 d83754304bfa8d70b8211dcc8471a092
SHA1 9493c5c07596223c2646e5e18eeb697579de3eda
SHA512 b1554441b01d1525eeca8afc3449ba3e94e559b0a389b73ef2b54877a1e4f0db292ab3914bd133b066d3b1b8f8d1608695c8fa55918e84bd92cb354e6f2c1847
SSDEEP 192:sxRkRGyM/jK1Ml8UQ/F0/fEs4eY6swoRh0zoA8peX/g6+WNIYHJHMWnGRIgDpJ:sxRkcq90/fEs4gQRhVM/5IGd8/
TLSH
T13162C8566534997BCCDBD219FA957F53D6F80573A2901E04AAFC8B0C01E76ED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 d1644c68edb2fd593b058ff365b24d7f2ac28f9e39eae3f7f151261add6cb5a2
MD5 ce367654013dd5610e2ee384f841648d
SHA1 01956a195339a26a865614142e73effc74629fe7
SHA512 a36f20e078550b0404b9faa328604a7a24f0237297163178d0e2ad9b421b80d6f6544d6a7e0eaf850add519703136e4d9f8544cd71a8e20087aba2f617b55215
SSDEEP 768:JOVP+1WgesfvQ8F1+UoAYDCx9Tuqh0VfUC9xbog/OVxPE+VroXIhUA5:JOVP+1WgesfvQu1jawc+uiUC
TLSH
T125C2FB2B240CC77E4F844A9DEC297ED66DD802CB9B988D5447EA890C03C77EB521A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

68c62ace-2012-4b4f-b4df-e8337ce52546.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\68c62ace-2012-4b4f-b4df-e8337ce52546.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 3fe9aba8451943c09fa52906fa8fb21dc8e12c1c57958f16dfeef16bec7ec494
MD5 619ec3654c5c41777fa4357dafc57072
SHA1 70137e9b7aa142fea686d7b0dce163f146c173b2
SHA512 3cbbad3c3b8a4289bd50037056f94021866003ec1d70eaaa40aaa8e4f9bd6e3aa334a738526776c6854b3804f206da8da3bce0d599d1f6eb4991e38bcc95a9c1
SSDEEP 768:Fj+9o3eS2SR2B+KoyPYyDPm6MGjzJUib9MK:w9o3eStoNQyDnMi/b+K
TLSH
T1A3F2B031AC905EB35CF2C6D977473B97AFE49253C2850E8499CE2F0E06CBA2C4347826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 8a5796ef2783d3bbfaa259f924556fd68cb90c18df4e17e2e55d5a3ad398e787
MD5 c941c4eaaeed150b587e31494dc912e2
SHA1 063849ab951e7a6b0b199a4358669837a4c79c53
SHA512 dc83c9e8b7ffeb32e30f7df31f2711c8fd55348e880685b9588ab59132740ef40f238be6195130ba7b71ba4d7b404499cc74ac362e3089cd7af48eeef2333580
SSDEEP 768:cj+9o3eJkSR2B+KoJPYyDPm6MGjzJUib9MK:79o3eJDosQyDnMi/b+K
TLSH
T15DF2C032AC905E735CE2C6D673473B97BFE49253D2850E8499CE5F0E06CBA2D4357826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 4ec267d11150dc527d54afea1362104218cce33617ab0258d2876b75c63b7a0e
MD5 1ecd472eb1f9e8f09f38ce0329b8d0c2
SHA1 e93139be78c590bb67b722796e8921c869e5350e
SHA512 105cdde48d3eb5e2dde784b6b00f08fbe7fada6c31422deab2a55c5c66eeca16793aa9e7d649d6f986466a9c5bb43471cc516fe4e2355de37f8e836203af4a92
SSDEEP 768:9F1j+9s3eCwgqkSR2B+KodPYyDPm6MGjzJUib9MK:U9s3e/Do0QyDnMi/b+K
TLSH
T1C603AE339C849E776CB2CB95B74B3A97AFF452A3C1851E84AACD5F0D028B66C4347861
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 df4a6f4ef26bbe24b99446f1ce6e4bbf19cbb79227266e359884e8a8483997b5
MD5 7e24219064dcd7fc3eb5aa42d3a657a9
SHA1 4d563896d2b9b0f7b21bd8cb84bddd84ae3f68e0
SHA512 8d602b8fd4f21203879798688015ffcd2da6ed683ea4df7d04059009bf3d3e815e2011cfe63d8427bfb0f5b92e904df3a3c080e2fd8d07d991b6b926cd7908a8
SSDEEP 768:Vrv+4UNbdl3BsR2B+DPYyDPm6MGjzJ8R+8rY0n:Vbsbn3koOQyDnMi0DrY6
TLSH
T14D03C0329C946A736CF2CA85364B3A477FF4919386C50F8499DA1F4D429FA6D130B8A3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a2e2f98f-cc2d-4eed-b11b-75d051af6293.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\a2e2f98f-cc2d-4eed-b11b-75d051af6293.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download