eaa4193e205905c4946437c4ad6d14d94485f02920b59f40cdc2cd9f2d3d08a8

Analysis

max time kernel
148s
max time network
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
07/09/2026, 15:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
client/html/site/t_ent.html
Size 3KB
Sample260907-sp7hfazarc
SHA256 eaa4193e205905c4946437c4ad6d14d94485f02920b59f40cdc2cd9f2d3d08a8
MD5 feadcc689f02662ea09424fae7c4c4d2
SHA1 1c0a521533890a165c9620c8bcd4854b61779f6e
SHA512 c34e2d8648ea7259463799b39da4469c4c119e57ad0f038616e0bb377fef2d303f7a0e9f90566a7e2d27510a63d7421063c48208a349e6773118116647b88434
TLSH
T1E771DFA4E8AEAC378133D2D5D4D0DF5968DF4EA0D73144A9E6FF8A3503CBD88780A456
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5524	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134332679715591359"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3797332335-34111092-3597280141-1000\{F02DF9D1-4319-4200-B6D8-A520F6D0677F}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3340	msedge.exe
3340	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 4048 wrote to memory of 4876	4048	msedge.exe	89
PID 4048 wrote to memory of 1284	4048	msedge.exe	90
PID 4048 wrote to memory of 5524	4048	msedge.exe	91
PID 4048 wrote to memory of 1284	4048	msedge.exe	90
PID 4048 wrote to memory of 1284	4048	msedge.exe	90
PID 4048 wrote to memory of 5916	4048	msedge.exe	92
PID 4048 wrote to memory of 5916	4048	msedge.exe	92
PID 4048 wrote to memory of 2104	4048	msedge.exe	94
PID 4048 wrote to memory of 4680	4048	msedge.exe	95
PID 4048 wrote to memory of 2104	4048	msedge.exe	94
PID 4048 wrote to memory of 2104	4048	msedge.exe	94
PID 4048 wrote to memory of 4680	4048	msedge.exe	95
PID 4048 wrote to memory of 4680	4048	msedge.exe	95
PID 4048 wrote to memory of 1052	4048	msedge.exe	96
PID 4048 wrote to memory of 1052	4048	msedge.exe	96
PID 4048 wrote to memory of 1052	4048	msedge.exe	96
PID 4048 wrote to memory of 2332	4048	msedge.exe	97
PID 4048 wrote to memory of 2332	4048	msedge.exe	97
PID 4048 wrote to memory of 2332	4048	msedge.exe	97
PID 4048 wrote to memory of 244	4048	msedge.exe	99
PID 4048 wrote to memory of 2620	4048	msedge.exe	100
PID 4048 wrote to memory of 244	4048	msedge.exe	99
PID 4048 wrote to memory of 2620	4048	msedge.exe	100
PID 4048 wrote to memory of 4656	4048	msedge.exe	102
PID 4048 wrote to memory of 1160	4048	msedge.exe	106
PID 4048 wrote to memory of 2104	4048	msedge.exe	107
PID 4048 wrote to memory of 4696	4048	msedge.exe	108
PID 4048 wrote to memory of 2308	4048	msedge.exe	109
PID 4048 wrote to memory of 2308	4048	msedge.exe	109
PID 4048 wrote to memory of 3464	4048	msedge.exe	110
PID 4048 wrote to memory of 3464	4048	msedge.exe	110
PID 4048 wrote to memory of 3340	4048	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\client\html\site\t_ent.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffc14c5c188,0x7ffc14c5c194,0x7ffc14c5c1a0
  2⤵
  PID:4876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1688,i,17367509130426011568,6364097542965079767,262144 --field-trial-handle=2340,i,13514216648621164272,3033660896146323760,262144 --variations-seed-version --mojo-platform-channel-handle=2336 /prefetch:2
  2⤵
  PID:1284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1896,i,11625108385314202072,9115396808896639235,524288 --field-trial-handle=2340,i,13514216648621164272,3033660896146323760,262144 --variations-seed-version --mojo-platform-channel-handle=2368 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2444,i,1575018698845309599,16987577548440825999,524288 --field-trial-handle=2340,i,13514216648621164272,3033660896146323760,262144 --variations-seed-version --mojo-platform-channel-handle=3296 /prefetch:13
  2⤵
  PID:5916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3620,i,12958033340150958820,11066795349232323379,2097152 --field-trial-handle=2340,i,13514216648621164272,3033660896146323760,262144 --variations-seed-version --mojo-platform-channel-handle=3628 /prefetch:1
  2⤵
  PID:2104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3632,i,17980900724201254645,12347351295201012155,2097152 --field-trial-handle=2340,i,13514216648621164272,3033660896146323760,262144 --variations-seed-version --mojo-platform-channel-handle=3704 /prefetch:1
  2⤵
  PID:4680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4316,i,14130010359520004086,17448144453922668687,2097152 --field-trial-handle=2340,i,13514216648621164272,3033660896146323760,262144 --variations-seed-version --mojo-platform-channel-handle=4380 /prefetch:1
  2⤵
  PID:1052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4364,i,14170954490051946770,11417055826302821876,2097152 --field-trial-handle=2340,i,13514216648621164272,3033660896146323760,262144 --variations-seed-version --mojo-platform-channel-handle=4384 /prefetch:9
  2⤵
  PID:2332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5456,i,14904275703739847158,14273232049091108362,524288 --field-trial-handle=2340,i,13514216648621164272,3033660896146323760,262144 --variations-seed-version --mojo-platform-channel-handle=5488 /prefetch:14
  2⤵
  PID:244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5452,i,12540136016997134620,4458721821422348882,524288 --field-trial-handle=2340,i,13514216648621164272,3033660896146323760,262144 --variations-seed-version --mojo-platform-channel-handle=5236 /prefetch:14
  2⤵
  PID:2620
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5944,i,14985681558976292491,8187981692540366112,524288 --field-trial-handle=2340,i,13514216648621164272,3033660896146323760,262144 --variations-seed-version --mojo-platform-channel-handle=5960 /prefetch:14
  2⤵
  PID:3748
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5944,i,14985681558976292491,8187981692540366112,524288 --field-trial-handle=2340,i,13514216648621164272,3033660896146323760,262144 --variations-seed-version --mojo-platform-channel-handle=5960 /prefetch:14
  2⤵
  PID:4656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5180,i,5844479012063718609,5718691404352691652,524288 --field-trial-handle=2340,i,13514216648621164272,3033660896146323760,262144 --variations-seed-version --mojo-platform-channel-handle=600 /prefetch:14
  2⤵
  PID:1160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5164,i,8946607790108183902,9245235444780975166,524288 --field-trial-handle=2340,i,13514216648621164272,3033660896146323760,262144 --variations-seed-version --mojo-platform-channel-handle=4384 /prefetch:14
  2⤵
  PID:2104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5168,i,8660248775251604401,6277603447884297373,524288 --field-trial-handle=2340,i,13514216648621164272,3033660896146323760,262144 --variations-seed-version --mojo-platform-channel-handle=4396 /prefetch:14
  2⤵
  PID:4696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2136,i,1308937068147835224,1481189468113293678,524288 --field-trial-handle=2340,i,13514216648621164272,3033660896146323760,262144 --variations-seed-version --mojo-platform-channel-handle=2896 /prefetch:14
  2⤵
  PID:2308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3656,i,2528325776065957292,13800457128257992489,524288 --field-trial-handle=2340,i,13514216648621164272,3033660896146323760,262144 --variations-seed-version --mojo-platform-channel-handle=6676 /prefetch:14
  2⤵
  PID:3464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5600,i,16973399251094777750,7055013447079874779,262144 --field-trial-handle=2340,i,13514216648621164272,3033660896146323760,262144 --variations-seed-version --mojo-platform-channel-handle=6412 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3340

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:6068

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1000

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e413e02b9e80ee8d76d52c1043fc32251e2d7634d4b2fbd970df9ace9d91831a
MD5 22959b3a06a842ac30237dd57e8a3801
SHA1 0b7c28071a592034aa2607038000f085c7bb6362
SHA512 644add9ab912ad7fdfc55bc7a1b84482c75cc9bc69a59d169bae63a0400619d999846ebbadb0ef2bd6d35c2bd08a5f07053b600874dd5dfcbda7e8f3076131fe
TLSH
T1A5D02BE476408A0CC980203335F6524092018910D801D1480040B325CC845C1257F0DF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8aaa68aad07ba45abe53bd513aa5f7e7b21bd1b29db6e1d5c1e0a79a5f4eb890
MD5 74012bbce5fada7634c1da1b567562b3
SHA1 09db27f38f27e35986cfd407b57f6f83c8fc59f8
SHA512 c1a6a98f972793c84274c29552107bfe07b775c7c8121e5fdf137ebf9a7cc3f4eb43fe9eadfc842e7b92ca7281bbcea3d660bdd8fc9adc56add068510c41e48d
TLSH
T1FBD02BE07640890CC980203335F75240920189108401D1480040F335CC845C1257E0CF
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 f5e1e5760bd0e26cebcdb735febac8b0f112cc5fc5d4eb68d84df35f8a7e6c62
MD5 27df9539c7a58556be7fd2d9326d8789
SHA1 850fe6288ce18db60f40bf948d3f5c9592f1ff7c
SHA512 e14613d3d6779d34c15704547b606c2ba6beeb68ebaf3013e987cbddcc9d19196d916059038dfccb3bdf854fef694ae7c4b7a254d59e4c9db3a28a75ae641ee5
TLSH
T18461831423E73AD1F32B5AF1B2E2A76876F4445D06072E139381BDF29406F38E9EA453
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59d9cc.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59d9cc.TMP
Size 3KB
SHA256 5fc5df08573a43938acbf39ccfdd344ce753b5e9962583a05695077df0fa0dd9
MD5 0dc1452816dca6c425a12abdb64b88aa
SHA1 75d349b3c4bb96189761cfdd19727e4df6ee996b
SHA512 bba75dd01f319f8791e0f0d8b0e20a65833886c4f69f6ae618981f9923b56f3c13263dd8235ebf33847121dd1af52407692897d8546e0b1a87378302857474f0
TLSH
T13361721423E73AD1F32B56F1B2E2A76876F4445D01072E139381BDF29406F38E8EA053
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 58967d3e1d925b0d4617fb1946be774197f96d940b78585848bf8e732d9e891c
MD5 de5e9147c80bfff57192efd079d5aee7
SHA1 dfef8c13fcc5c8780e20dca34a3e59175f75c6cc
SHA512 c702df04bef9e4186da87d6f0de81d0a21606b5d73eb5fa9570535e9c7d146fe39d0c26b1ff63b9cc852500e014df0ca15f0b7cb18d5cbad10ec3b1d852cb626
TLSH
T1CA217CF747B4957E9A0182F0EA08AF1FCF6D0411431C7DAAC5E06D2793F3462E041A9B
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 00c15a5a7fc9533feec8159e8d142c9ca1be52553ecf1ab574432fd7cd464849
MD5 10b1380de5292e832197058fc2df5800
SHA1 f93f3328e0e13a6e210c6562dc1b9c4b6abdaff4
SHA512 14c28af75ef6b228057a666512420586cad08514e48e3f2517e180240e0fd6d551f0248385991e27ceb0a2f433a9119a63b7aff7eac4ceefc67eeff5c4d75a8e
SSDEEP 192:sxR3rbX/fEs/iNprQ5r6zoA8p43/g6+WNIYn8U6hEGOIgDnJ:sxR3PX/fEsqN6y/5ITZmF
TLSH
T12432A6166A78A93B9CCBD21DFB55BF53D6F95032A1E41E48A7FC8A1C04E76CD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 b8c3ade42ef3451fd40a99b5823975688d8b702275733523a12ac13e96edd0b9
MD5 43a7a8b2e4e7753cb6e84a68ea546227
SHA1 6ef347a12e58000db811b1e0e0033a0e20ff9999
SHA512 3930071d6a1d20d9fbbb232dc61dc89e858fcad75f86caba3d8f75c610e5d19abb067cc68f37bf26f42ca9c407ab4b9235db2a05d685c3e69fd60c6741e50cd1
SSDEEP 192:sxR3rbX/fEs/iPprQ5r6zoA8p43/g6+WNIYn8hohEGOIgD5J:sxR3PX/fEsqP6y/5ITQm/
TLSH
T1AA32A7166978A93B9CCBE21DFB55BF53D6F95032A1D41E48A7FC8A1C04E7ACD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 222ca28d65766a461c7eb93e6c41bb027bb5b9229de531373b6e6df3433e58cf
MD5 3a6a9ff2cecca2891750aa573611dc6f
SHA1 ef3335a2d47a8d54aedd13267b21e84752dc64db
SHA512 d47ab52e714aa7ca21651cc80f1982bccb7bd6e607861e14880ef98bcf04e3ed96eefb0edca9abab1ca3259da3feb1ce27956c4eefe112df9e02a4bfb02ca1b2
SSDEEP 192:sxRErbX/fEsoiNprQ5r6zoA8p43/g6+WNIYn8U6hEGOIgIJ:sxREPX/fEsVN6y/5ITZms
TLSH
T11132A6166A68A83B9CCBD21DFB65BF53D6F95032A1D45E48A7FC8A1C04E76CD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 65253fe4c17da2367cabbb4945559c98aadb3134bdaadc01eb58ca89045867ba
MD5 259a7aafa23eb1b48102dc17db298c45
SHA1 9fd4bc98b16424dab3102d7dac24b01aa9681f35
SHA512 7962c5a93db37e75b3170caaf6821f84e126d449919a99c1ececca1f29f8209de80fb18a24a4ae1d37d672a7969b95e3fffe78bef5dc8af8746977c4d470f78f
SSDEEP 384:wum8dzAfCtgoSFf6MKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVU494oRPxrohMF:wb8dz6Wgouf6M8F1+UoAYDCx9Tuqh0V4
TLSH
T191B2EC3B604DCB7E5F800AADEC19AFDB6D9802C79A988D4447FE990C03C77EA51194DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 013d2ee5cf05d57ea104024b815b7e1628cdb7fb00518a44748a5fad26a4d941
MD5 43311e829962c8a5d5b5b3f0520a1aac
SHA1 3df25ff1cdcf8f88f673582d169edadd79027bb8
SHA512 69ead7c79357dec2a5a31613906ded27972fc99281f44d85a610d0744ce00e743d63572d43c4c17d9071d620bdc11a364be05fc613bbb1679a9138721b88317d
SSDEEP 96:KRfItpfd9xWJmsgRxK44g/xcnvOR9SH5WnjRzHDW3EygrDK4aglDcJh8fqSkKLKG:CfItpfd9cJmtR74g/envOR9SH5WnjRzZ
TLSH
T1C7916E00313B0242387D7A0D85AA8D2F928279A67119B52F7BE911B65F67E064EFDCCD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

6c2d9e41-34c9-4cf9-b544-62efdf8537ee.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\6c2d9e41-34c9-4cf9-b544-62efdf8537ee.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 bb0953d8f1be4bca1bcac49aeab18fb5e193c937b60606b69433be3c06c1b18c
MD5 67a8e020243708c2fb5a958af3926f87
SHA1 28ad60e0f57326d61c6294716003b2761778c85e
SHA512 897d367a35fa51100e18564e6a1e3140ead038e00a8795fdcea3832151627f0450432e4f4b295fa9cbdefe3b1f471a1f645e1dcb9766ea7d5482f3fb4e3f81dc
SSDEEP 768:6rv+4UNbdv33Z1DZIO0ynfSbNzc4ReyIsPceVH1S5F:6bsbZ33TfSbtc44bsUEH1W
TLSH
T19C13CF32AC789937BCF6AA85B04735437FF8911B82881A94C9DE5F4C0A4B5ED134F923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 784e8c33f58e12c2ff860d4a259cdb8bf75b1a88ba0ae505bff79e37545d2ec5
MD5 f14834dd5ec31cb42550eca0f3a40c65
SHA1 e857c0af7f84e0c1e97b42977497cfcc143a3d70
SHA512 6fc0b4a09b3f15eb280afe48f1e49b6fef0c8af6e9c691f9b96d91786502582eb5fab71e851a95d167cb71cd2ecd3b58eca298f0d51f016e4909b4be5be62ebd
SSDEEP 768:Yrv+4UNbdv3eY1DZIO0ynfSbNzc4ReyIsPccTRR:YbsbZ3eSfSbtc44bsUcTRR
TLSH
T16203CF32AC389933ACF69696B00735437FF4515B82C91A94DADE5F4C094B9DD134F913
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 676c1f0199f80602766d600e82f5c62b03986cba7059d4f39ae820228921e9be
MD5 06f1b4c48ec60b2674b9f4256687a9cc
SHA1 8d96eff4b0edbd1b7b09c05266b3379391ae584a
SHA512 cdbe14d3b23aaf9e92e85623aeb788e073cf8cc033a272405bf674b4eae1d4a1a92fc9e0416e9e5f564284437c9aa4a910baa0019f6da40c42a1c49cfbe92a71
SSDEEP 768:crv+4UNbds3Q7DZIO0ynfSuNzc4ReyIs2ceVH1S5D:cbsbS3cfSutc44bs7EH1Y
TLSH
T18E03CF32A8788933BCF66A86B04775537FF8911B82981E94C9DE5F4C0A8B5DD134F923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 42KB
SHA256 9911bf2d3a1310ba7938a985f999cf83aef3f95cc99ede5a3573057d5a0bf5c9
MD5 310fccf1dbec2da8c97108a1d2fe8438
SHA1 46768db00932eeeae072a53229d50141fa493edd
SHA512 085c21c8318a035a60fd0155e3a43aa106d9045076245059fdc9f1ff8dc51a00acfcefb87d7a99e3f5ed3455701bc24e5d5cb7aafc6be2e42319025c02877ffc
SSDEEP 768:BF0rv+4UNbdM3Gwg1Y1DZIO0ynfSkNzc4ReyIsPccTRR:0bsb+3QSfSktc44bsUcTRR
TLSH
T14013BE32AC68C97BBDFA9A95F50A3603BFF4515B82C55AA0EACE5E4C054B4DC134F812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 71a0914cac8e55344ab9f140c7ee4e1098562f98a9fe59a63bf94b3f06991931
MD5 1f845886921fbfafd5ca8a5befb4bba8
SHA1 e4b9cc9c1f391e4cbc6a415a9028e2f74cf953d4
SHA512 3a37d49d5c69457189983bb19261578331072b5002cf582f677c70d4f22152918b2d0df3baa545443919d237b8bff9d5e37d43f0e842b66d187045a1d3a79f8c
SSDEEP 768:6rv+4UNbds3IdDZIO0ynfMNzc4ReyIsXeeVH1S5D:6bsbS3ufMtc44bsOEH1Y
TLSH
T18803DF36A8788937ACF6A686B44B76137EF8511BC2D81E94C5DE1F0C4A4B5DD130F923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ee52d7f8-69f4-4a44-9405-cdf295d8f102.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\ee52d7f8-69f4-4a44-9405-cdf295d8f102.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download