458e74d4e03fc1e038e67d74beb8e287696bd5142d22de646358103f7ec3f256

Analysis

max time kernel
149s
max time network
151s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/09/2026, 12:36

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
index.html
Size 8KB
Sample260910-ptd5xatcmg
SHA256 458e74d4e03fc1e038e67d74beb8e287696bd5142d22de646358103f7ec3f256
MD5 921f6379c91ad7156dbc60660a5133a3
SHA1 6470ba7ed6e5703efd1d4b0245e89d6fe1ad812d
SHA512 cd1962b5cca7d6135572b050edf968170e5eb35cc40c50d6cb30347e194d5878ad0a7363c1240737b0daa0c4a80069f47743d323d81eac5a01720aa567d73ed4
SSDEEP 96:Zu1gjO25L8qMLG8eO3z3MgUcKovo0PJhFQLCTwa:ygCg0Veyz3RbJhmWTN
TLSH
T1A702636E19822024417363ABEA77E20CF733106732028116BA5C92666FF1E19D9E7FDD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2864	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134335174257189624"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3797332335-34111092-3597280141-1000\{0FBF4AA4-1930-40E7-93B8-DC3710FB8205}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2364	msedge.exe
2364	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe
616	msedge.exe

Suspicious use of WriteProcessMemory 33 IoCs

description	pid	Process	procid_target
PID 616 wrote to memory of 2756	616	msedge.exe	88
PID 616 wrote to memory of 2864	616	msedge.exe	91
PID 616 wrote to memory of 4400	616	msedge.exe	92
PID 616 wrote to memory of 4400	616	msedge.exe	92
PID 616 wrote to memory of 4400	616	msedge.exe	92
PID 616 wrote to memory of 4728	616	msedge.exe	93
PID 616 wrote to memory of 4728	616	msedge.exe	93
PID 616 wrote to memory of 3352	616	msedge.exe	94
PID 616 wrote to memory of 3352	616	msedge.exe	94
PID 616 wrote to memory of 3352	616	msedge.exe	94
PID 616 wrote to memory of 1620	616	msedge.exe	95
PID 616 wrote to memory of 1620	616	msedge.exe	95
PID 616 wrote to memory of 1620	616	msedge.exe	95
PID 616 wrote to memory of 3240	616	msedge.exe	96
PID 616 wrote to memory of 3240	616	msedge.exe	96
PID 616 wrote to memory of 3240	616	msedge.exe	96
PID 616 wrote to memory of 4848	616	msedge.exe	97
PID 616 wrote to memory of 4848	616	msedge.exe	97
PID 616 wrote to memory of 4848	616	msedge.exe	97
PID 616 wrote to memory of 5084	616	msedge.exe	99
PID 616 wrote to memory of 5084	616	msedge.exe	99
PID 616 wrote to memory of 4252	616	msedge.exe	100
PID 616 wrote to memory of 4252	616	msedge.exe	100
PID 616 wrote to memory of 3144	616	msedge.exe	102
PID 616 wrote to memory of 3688	616	msedge.exe	105
PID 616 wrote to memory of 3688	616	msedge.exe	105
PID 616 wrote to memory of 3688	616	msedge.exe	105
PID 616 wrote to memory of 5720	616	msedge.exe	107
PID 616 wrote to memory of 5204	616	msedge.exe	108
PID 616 wrote to memory of 4204	616	msedge.exe	109
PID 616 wrote to memory of 4896	616	msedge.exe	110
PID 616 wrote to memory of 4896	616	msedge.exe	110
PID 616 wrote to memory of 2364	616	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\index.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffc14c5c188,0x7ffc14c5c194,0x7ffc14c5c1a0
  2⤵
  PID:2756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1772,i,2603156736235927354,1409135327417460003,524288 --field-trial-handle=2516,i,2305891851121989267,3419156727749414486,262144 --variations-seed-version --mojo-platform-channel-handle=2560 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1596,i,1470226496601828665,17600738014807961359,262144 --field-trial-handle=2516,i,2305891851121989267,3419156727749414486,262144 --variations-seed-version --mojo-platform-channel-handle=2512 /prefetch:2
  2⤵
  PID:4400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2256,i,3797428985350419344,3998511898889512738,524288 --field-trial-handle=2516,i,2305891851121989267,3419156727749414486,262144 --variations-seed-version --mojo-platform-channel-handle=2436 /prefetch:13
  2⤵
  PID:4728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3544,i,4049635042148685002,8406968815960994274,2097152 --field-trial-handle=2516,i,2305891851121989267,3419156727749414486,262144 --variations-seed-version --mojo-platform-channel-handle=3552 /prefetch:1
  2⤵
  PID:3352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3572,i,2872394634397401662,6282183411196706510,2097152 --field-trial-handle=2516,i,2305891851121989267,3419156727749414486,262144 --variations-seed-version --mojo-platform-channel-handle=3616 /prefetch:1
  2⤵
  PID:1620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4368,i,6632388641222818697,12740694209578406096,2097152 --field-trial-handle=2516,i,2305891851121989267,3419156727749414486,262144 --variations-seed-version --mojo-platform-channel-handle=4916 /prefetch:1
  2⤵
  PID:3240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4380,i,4411637743886471277,7167439468848488078,2097152 --field-trial-handle=2516,i,2305891851121989267,3419156727749414486,262144 --variations-seed-version --mojo-platform-channel-handle=4920 /prefetch:9
  2⤵
  PID:4848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3712,i,12089816961685434116,16701338960020561108,524288 --field-trial-handle=2516,i,2305891851121989267,3419156727749414486,262144 --variations-seed-version --mojo-platform-channel-handle=5448 /prefetch:14
  2⤵
  PID:5084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3716,i,7590834787208900668,17674652462457582286,524288 --field-trial-handle=2516,i,2305891851121989267,3419156727749414486,262144 --variations-seed-version --mojo-platform-channel-handle=3648 /prefetch:14
  2⤵
  PID:4252
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6052,i,8313637665602480412,16802550717695058190,524288 --field-trial-handle=2516,i,2305891851121989267,3419156727749414486,262144 --variations-seed-version --mojo-platform-channel-handle=6068 /prefetch:14
  2⤵
  PID:1092
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6052,i,8313637665602480412,16802550717695058190,524288 --field-trial-handle=2516,i,2305891851121989267,3419156727749414486,262144 --variations-seed-version --mojo-platform-channel-handle=6068 /prefetch:14
  2⤵
  PID:3144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=6508,i,16039084538644850543,17778860276387521308,2097152 --field-trial-handle=2516,i,2305891851121989267,3419156727749414486,262144 --variations-seed-version --mojo-platform-channel-handle=6524 /prefetch:1
  2⤵
  PID:3688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4964,i,17649403850606904634,2561958073029815381,524288 --field-trial-handle=2516,i,2305891851121989267,3419156727749414486,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:14
  2⤵
  PID:5720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4364,i,13703755785012625728,11541412859097208806,524288 --field-trial-handle=2516,i,2305891851121989267,3419156727749414486,262144 --variations-seed-version --mojo-platform-channel-handle=3748 /prefetch:14
  2⤵
  PID:5204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4872,i,15810285902000708845,17099959897904415399,524288 --field-trial-handle=2516,i,2305891851121989267,3419156727749414486,262144 --variations-seed-version --mojo-platform-channel-handle=5140 /prefetch:14
  2⤵
  PID:4204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3704,i,9868043415337883760,13499464660247663469,524288 --field-trial-handle=2516,i,2305891851121989267,3419156727749414486,262144 --variations-seed-version --mojo-platform-channel-handle=5608 /prefetch:14
  2⤵
  PID:4896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6308,i,10891372140771490332,7512962059212827771,262144 --field-trial-handle=2516,i,2305891851121989267,3419156727749414486,262144 --variations-seed-version --mojo-platform-channel-handle=820 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2364

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2784

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1000

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e413e02b9e80ee8d76d52c1043fc32251e2d7634d4b2fbd970df9ace9d91831a
MD5 22959b3a06a842ac30237dd57e8a3801
SHA1 0b7c28071a592034aa2607038000f085c7bb6362
SHA512 644add9ab912ad7fdfc55bc7a1b84482c75cc9bc69a59d169bae63a0400619d999846ebbadb0ef2bd6d35c2bd08a5f07053b600874dd5dfcbda7e8f3076131fe
TLSH
T1A5D02BE476408A0CC980203335F6524092018910D801D1480040B325CC845C1257F0DF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8aaa68aad07ba45abe53bd513aa5f7e7b21bd1b29db6e1d5c1e0a79a5f4eb890
MD5 74012bbce5fada7634c1da1b567562b3
SHA1 09db27f38f27e35986cfd407b57f6f83c8fc59f8
SHA512 c1a6a98f972793c84274c29552107bfe07b775c7c8121e5fdf137ebf9a7cc3f4eb43fe9eadfc842e7b92ca7281bbcea3d660bdd8fc9adc56add068510c41e48d
TLSH
T1FBD02BE07640890CC980203335F75240920189108401D1480040F335CC845C1257E0CF
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 32e5de3c678db6c053aa37f575144ff1fdeff8d918914bd80fca0226bc797613
MD5 015e81feb39f445564ab8cf9b922670f
SHA1 112f804d31a467b901f591ed668ef7d48bb35277
SHA512 6b5cec6e962514423c0835746867c380d7b10e1534537a8ff65190899ff560e4d4dc36ff0f949529fe4f95a6087e670456d741837b3356d0cd122a18b7aeb01b
TLSH
T1B061821423E73AD1F32B5AF1B2E6A76876F4445D06072E139381BDF29406F38E8EA453
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59d671.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59d671.TMP
Size 3KB
SHA256 14f1ead515c098218f484eaf4b1aee45b8d99f87cbc6a4bf1cfa0a17062ce04e
MD5 2bf4d3226132001ae4d70d8e61264d5f
SHA1 2346da96b2ab4a1db2e0d33472358034dea438ed
SHA512 2c33e0d9716cc7fa4d37ba4b532b39534167b8a7ca4c583e6513ec9b01f758d500fdc6eb12c72ce2667ad35dc61c18d7c5603297d5ae5979989281f50348472b
TLSH
T1FC61621423E73AD1F32B56F1B6E2A75876F4445D05072E139381BDF29406F38E9EA453
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 d6cff6ed298ff7b3bb47f407d6659b6bfd3cef44ad05cc89813dbcd0fd27cf3c
MD5 34975e7b7ae14e83d2e6e1a348164a97
SHA1 0145f437306c569e82aa2da921ec0d51b1a19f0a
SHA512 fcefff5790fcdde864eab53aec8ba20667b6eb5d958d00bee26e787fa084e6af9df4a903d8e7253bde8d77da82f6250a81d853026ca501ab3c80b297a0d6fe93
TLSH
T12C418DF787E4866E8A1156F0AA14AE2BCE1D0515432C3C5A89E4AF6BA3E3471E04165F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 bed5ba2149b5557e677cb203127d04340256bb8aad7a6a2b7c7083c1a75d291e
MD5 8baaf00a701a52837e715c82e8d1463c
SHA1 1f4a765cd8a910cee4972d6ed3ab642465a1e60f
SHA512 1206e8c0e503a85ffd33c94116d8c992b96dbe618c0e2620fe21401d5e273018947852b6d7deca8b9e00cf094067a8c30590bdd4e722de1e30ea9d94761c5389
SSDEEP 192:sxRlyR7bD/fRsKprQ5tzoA8p4qS/g6+WNIYn8UJhiGdIgDqJ:sxRlydD/fRsK1a/5ITSXq
TLSH
T14B32B716A968A93B4CCBD21DFB55BF53D6F95032A1D02E48A7FC8A1C04E76DD620780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 26b99509c6084c99c6844f9498e70d369826471071f22e8259db98354f78bf76
MD5 c90fc3be4bf8f366c851cd4f6db334b8
SHA1 77cda93663da26b9ad3cf3fff6ce92a1ba837293
SHA512 341e1ea593b03ace7317fae1b227a686f0d8bff8340c0a16337283490bb61ea99c8b168227f297161f494ea93863d9e422e93ffc48bd713f3cb515a9f1a6ccd8
SSDEEP 192:sxRlyR7bD/fRsbprQ5tzoA8p4qS/g6+WNIYn8YxhiGdIgDQJ:sxRlydD/fRsb1a/5ITQXo
TLSH
T12632C916A928AD3B5CCBE21DBB55BF53D2F95032A1D12E48B7FC8A1C04E7ACD520740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 24f0005d64f2f3ab807ee456e22c5175d737d3e07a5d455397d1ec35f3936a4f
MD5 d8acef030b3cf2b83706144cf9690df2
SHA1 90c8ac3284dce16353f4c316540413f4a8f39d03
SHA512 fe0de83be65a02e5f023c756bf5379b02ea135f572a0ee443283411de28328630551ea62be2a6117372fd77c53a2daafa49bece3e692f6b56d5f568aa82c91ef
SSDEEP 192:sxRlxR7bD/fRsTprQ5tzoA8p4qS/g6+WNIYn8UJhiGdIgIJ:sxRlxdD/fRsT1a/5ITSXs
TLSH
T11D32A7166968A93B4CCBE21DBB55BF53D6F95032A1D02E48B7FC8A1C04E76DD620780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 713d1eacdae189b29389ede7ff56cf23204deb03dffdf950e555f777ee49dcbe
MD5 d635316d1390fc877b4b6470ea2f78b3
SHA1 ad60aa3db21c0866340ae8a0e16fd0f8a28269a2
SHA512 7e51616441fc4dfedb5398140cb631dc24175ab2d2d079b5444a971b799d2a3b3913fb6960493655420cfc779f84179e0b44544fac0324fd5c49e750b37dff01
SSDEEP 384:wum8dzAfCtgoSFf6MKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVU494oRPRrohM+:wb8dz6Wgouf6M8F1+UoAYDCx9Tuqh0Vj
TLSH
T12EB2DC3B604DCB7E5F800AADDC19AFDB7D9802C79A988D4447FE990C02C77EA511A4DE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 3d3161aea8d0e308e4664bba7748984c05351fb89f7e0668799455d0b11ad9a3
MD5 5cb23c427f7ee7060631f58da893074a
SHA1 d31224be300fa3538a79ef8ffa68a3620647613d
SHA512 87ddc4b1c4b645bc4db18f61b0d525fc87dc436f4f26f1ce8ac0e769be053e283f01e2094868f6f1cfe5f15f718bdde3ed44fcc16039ef4fda0b4c4206140b4e
SSDEEP 96:KRfItpfd9xWJmsgRxK44g/xcnvOR9SH5WnjRzHDW3EygrDK4aglDcJh8fGJWKK4e:CfItpfd9cJmtR74g/envOR9SH5WnjRzB
TLSH
T117919345723B0291387E7A0980A5CD6FD68234B2721AE52F3BE911B64F66F064DFD8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

313e1b13-c122-4c84-8100-3ae3a269baf7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\313e1b13-c122-4c84-8100-3ae3a269baf7.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 6eacaf2caa945ca5fefd898ff2b530f2319e51e9504c50860954cbbd6a4dfed5
MD5 05085336dadcc1cbab760c755dfc9b4b
SHA1 6d0b8f9bb2161e466ba6b0a0ead6b861995481de
SHA512 4c7a87a62000891ead3ce6997762bf6ed96c5f0c73aa7a6704076e00463023608e4f8087eb71d5bf8edfaf7dd3a4338c0d8f9924ff22abf6c05e8013aeae85b1
SSDEEP 768:Frv+4UNbdL3RXVDZIO0ynfSGNzc4ReyIsPQeVH1S5F:Fbsb53R5fSGtc44bsIEH1W
TLSH
T1DB13BE32AC789A33ACF7A685B04776537EF8911BC2881A94C5DE5F0C0A8B5DD135F923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 323b9f207d867c61b12dee4af224cd4e02861f22191dc73ca20721d0f9620d5a
MD5 9bede5405370bc83e1c44aaaac7c99c4
SHA1 aa1ad9911bff4259ba45055d78d080827f45363b
SHA512 f6ae8ffb5c9b36475f7a1aa83198408b2e8adea269d9460e4503ba473618598d4eb6ff45fda7064747c82e5bb968110c15ac1016c8ea1dad482420f921e519e9
SSDEEP 384:VZcI038NpCFCVU04cJDZNfNoXOVSUUynf8NYETRzcoXfK86sfxEZxxsIj4lBQlat:t03n+VDZIO0ynfSnNzc4ReyIsPQMgGH
TLSH
T171F2BE32AC649D77ACF6A786B9073652BEF0911BC2C82994C6DE5F0C09876DD134B827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 ce25435959f9893f03db3d9e5372ea22bd923204bcea2d1044a8ae00ca85ab39
MD5 fed67e96d8d2e37b312fafbbfdb21a34
SHA1 019cb1cd4a08c8380cda0c95b9ab6f7e8fa41ac6
SHA512 7518d2af621ec224e94574d90b95f943676524bb9e446b6cef3967008ab604a672cd37f2cfb681e54b3843d51710ee2f15e00778a9512d66053478abe8577a3c
SSDEEP 768:EFQJ3MwgavVDZIO0ynfSrNzc4ReyIsPQMgGH:nJ3ZxfSrtc44bsIMgGH
TLSH
T178135AF298D38976ECAE5787A73E2E11ADBCC117B5846994B7C95A0CCC461BFC307812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 cc09f926f5e23e60a34f6ef5c892e28dc9cda62a3f5744ebe5891ce52b7a54be
MD5 496123346cbda13682dbfffbca011a74
SHA1 ff5c0f1f9a4f55f59db8f351ad37358cff79581a
SHA512 30b45880f8e7c44f8ef3a7ccdd44b22e33908488017ed4393abeaba59ab24ebf327af00f07fca81a9fce997ef5cd9d4f7f4877421e3bbade367bd3055ed3c66a
SSDEEP 768:6rv+4UNbds34dDZIO0ynfMNzc4ReyIsXneVH1S5D:6bsbS3efMtc44bsXEH1Y
TLSH
T14B03CF36A8788937ACF6A686B44B76533EF8911BC2D80E94C5DE1F0C4A4B5DD130B923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 defdf367ee6bd64c8efd4fcb1ca071d539ec4e8af05977d3c845f3b5a37b91a5
MD5 0e36d978db90320e8c85f65241a6e10b
SHA1 96b30d4f403518d7be468752cff69a96f5d75328
SHA512 347172a8d76ed1c6e977e420ad4e9f558af88fec6e4e4a9fea94a8a90124ff50f4c4de77ee87f4a373d7e9979383ac5c723d7c5ef7046006d18693d143c2fe5f
SSDEEP 768:Frv+4UNbds3nbDZIO0ynfSxNzc4ReyIs2QeVH1S5D:FbsbS3/fSxtc44bsTEH1Y
TLSH
T18103CF32A8788933ACF66A86B04775577EF4911BC2C41E94C9DE1F0C0A8B5DD134F923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

aef919fe-ca2e-4ad4-b548-e1f9454b9e9d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\aef919fe-ca2e-4ad4-b548-e1f9454b9e9d.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download