1f9d886b4904d03a03e21712894512d29ac972ce4452a4d022d778da3c559cf3

Analysis

max time kernel
150s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/09/2026, 12:37

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
lost-in-flight/dist/index.html
Size 9KB
Sample260910-ptfnqsxsdw
SHA256 1f9d886b4904d03a03e21712894512d29ac972ce4452a4d022d778da3c559cf3
MD5 f732d38e3d41692f0524abd4f7428af0
SHA1 167d019f1c8fcb347ff8b2a914258be40ab5adff
SHA512 60136591c2bf3b1fbc56b34e5d554a7887d68310097912eb7e741c1af9ae219a8805a2a2ef24cbed659ebdb5cdbe1a303c22fb9c38103e1c4b29269e3e32da3e
SSDEEP 96:bX3qI2HivHigHiX9Hit9HiRtHibHiK7HiHYzHiyH+uKbZxlKIxo:bX3scpuq0ol7dzV8ny
TLSH
T1EF12F09295F1D8FA867F8126EBE832211A3021A3B2C9B00574EF5B551F644136ED77FC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3128	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134335174305845991"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1074038928-2032447174-945360078-1000\{D20D9ABD-9B8D-481B-8B63-3E42B13AEAB3}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
548	msedge.exe
548	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 1132 wrote to memory of 3264	1132	msedge.exe	85
PID 1132 wrote to memory of 3128	1132	msedge.exe	86
PID 1132 wrote to memory of 4188	1132	msedge.exe	87
PID 1132 wrote to memory of 4188	1132	msedge.exe	87
PID 1132 wrote to memory of 4188	1132	msedge.exe	87
PID 1132 wrote to memory of 2856	1132	msedge.exe	88
PID 1132 wrote to memory of 2856	1132	msedge.exe	88
PID 1132 wrote to memory of 2088	1132	msedge.exe	89
PID 1132 wrote to memory of 2088	1132	msedge.exe	89
PID 1132 wrote to memory of 4832	1132	msedge.exe	90
PID 1132 wrote to memory of 2088	1132	msedge.exe	89
PID 1132 wrote to memory of 4832	1132	msedge.exe	90
PID 1132 wrote to memory of 4832	1132	msedge.exe	90
PID 1132 wrote to memory of 4864	1132	msedge.exe	92
PID 1132 wrote to memory of 3420	1132	msedge.exe	93
PID 1132 wrote to memory of 4864	1132	msedge.exe	92
PID 1132 wrote to memory of 4864	1132	msedge.exe	92
PID 1132 wrote to memory of 3420	1132	msedge.exe	93
PID 1132 wrote to memory of 3420	1132	msedge.exe	93
PID 1132 wrote to memory of 3504	1132	msedge.exe	97
PID 1132 wrote to memory of 3504	1132	msedge.exe	97
PID 1132 wrote to memory of 2204	1132	msedge.exe	98
PID 1132 wrote to memory of 2204	1132	msedge.exe	98
PID 1132 wrote to memory of 3796	1132	msedge.exe	100
PID 1132 wrote to memory of 4296	1132	msedge.exe	111
PID 1132 wrote to memory of 4200	1132	msedge.exe	112
PID 1132 wrote to memory of 3232	1132	msedge.exe	113
PID 1132 wrote to memory of 4896	1132	msedge.exe	115
PID 1132 wrote to memory of 4896	1132	msedge.exe	115
PID 1132 wrote to memory of 548	1132	msedge.exe	128

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\lost-in-flight\dist\index.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffc12efc188,0x7ffc12efc194,0x7ffc12efc1a0
  2⤵
  PID:3264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1920,i,8771566752462893354,3470024934713012131,524288 --field-trial-handle=2148,i,14750440106363732168,11173544185902525005,262144 --variations-seed-version --mojo-platform-channel-handle=2320 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1636,i,13872698069090007614,3510002829562935361,262144 --field-trial-handle=2148,i,14750440106363732168,11173544185902525005,262144 --variations-seed-version --mojo-platform-channel-handle=2156 /prefetch:2
  2⤵
  PID:4188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2340,i,15340337191869225024,10557764776593932825,524288 --field-trial-handle=2148,i,14750440106363732168,11173544185902525005,262144 --variations-seed-version --mojo-platform-channel-handle=2568 /prefetch:8
  2⤵
  PID:2856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3432,i,3652755979057662044,5315042589120712029,2097152 --field-trial-handle=2148,i,14750440106363732168,11173544185902525005,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
  2⤵
  PID:2088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3436,i,10795561831443473956,12377953727989470257,2097152 --field-trial-handle=2148,i,14750440106363732168,11173544185902525005,262144 --variations-seed-version --mojo-platform-channel-handle=3544 /prefetch:1
  2⤵
  PID:4832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4116,i,17329909129924641201,18062066254510374810,2097152 --field-trial-handle=2148,i,14750440106363732168,11173544185902525005,262144 --variations-seed-version --mojo-platform-channel-handle=4272 /prefetch:1
  2⤵
  PID:4864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4228,i,14382878367217984471,17585990428418141943,2097152 --field-trial-handle=2148,i,14750440106363732168,11173544185902525005,262144 --variations-seed-version --mojo-platform-channel-handle=4316 /prefetch:2
  2⤵
  PID:3420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5108,i,14355358220948734951,1498855665577033280,524288 --field-trial-handle=2148,i,14750440106363732168,11173544185902525005,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  PID:3504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,12415637300485833490,8286179188921327971,524288 --field-trial-handle=2148,i,14750440106363732168,11173544185902525005,262144 --variations-seed-version --mojo-platform-channel-handle=5208 /prefetch:8
  2⤵
  PID:2204
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5948,i,1564205888894895673,13734213681380826387,524288 --field-trial-handle=2148,i,14750440106363732168,11173544185902525005,262144 --variations-seed-version --mojo-platform-channel-handle=5960 /prefetch:8
  2⤵
  PID:1040
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5948,i,1564205888894895673,13734213681380826387,524288 --field-trial-handle=2148,i,14750440106363732168,11173544185902525005,262144 --variations-seed-version --mojo-platform-channel-handle=5960 /prefetch:8
  2⤵
  PID:3796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1628,i,5007736366505708523,13776838412970482777,524288 --field-trial-handle=2148,i,14750440106363732168,11173544185902525005,262144 --variations-seed-version --mojo-platform-channel-handle=748 /prefetch:8
  2⤵
  PID:4296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5092,i,17153826673601745873,3294355392368486709,524288 --field-trial-handle=2148,i,14750440106363732168,11173544185902525005,262144 --variations-seed-version --mojo-platform-channel-handle=4532 /prefetch:8
  2⤵
  PID:4200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4544,i,16445626340312652142,12994527699463494111,524288 --field-trial-handle=2148,i,14750440106363732168,11173544185902525005,262144 --variations-seed-version --mojo-platform-channel-handle=4476 /prefetch:8
  2⤵
  PID:3232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5408,i,5704884073050335885,7765531928512251041,524288 --field-trial-handle=2148,i,14750440106363732168,11173544185902525005,262144 --variations-seed-version --mojo-platform-channel-handle=5132 /prefetch:8
  2⤵
  PID:4896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=2132,i,696552849184943475,4504883785644366360,262144 --field-trial-handle=2148,i,14750440106363732168,11173544185902525005,262144 --variations-seed-version --mojo-platform-channel-handle=2140 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:548

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1748

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 85da5d101c008762046da9670ca95944217bbb1829e60a748f367ee4f9926b13
MD5 ef105d8d3e87a813544857290c28833d
SHA1 bfe7010cf80fb8cbcb9eeb5e0d0b551ece0b3134
SHA512 ae71c302652e2de890fca25723381f403f4f9ee51e2da6583977318de3e7ff00defb73b202e17a287def3ff618de86c0af96c0fca7729ef3efe0a4ba3cfdfc63
TLSH
T16FD0803377C9A100F6567375F413C7412F27057415868613A168C45CDC784C557C92C7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 98eae6fcc56d922689f3a45ab65635857e6510c437555d4eae3a6cd68dff3acb
MD5 338a3c92e96cad1510815c958fc76de7
SHA1 e1234ace09aad728f9bde0798e2fb22ee82583de
SHA512 e29c9087bb4c9c94c8525a95c307117f14827336de29aa01f837bd02b05b3aecd1c1771970519a60972a1495e05b4f68ab34cf5e4ec9d7060f6383ac019c2ed7
TLSH
T17DD0803337C9A500F6567375F412C7412F2705741586C713A168C45CDC794C557C92C7
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 861d264965093846223a2b5200fc350d0038cbd998e94f2ef3328467bf93ecc0
MD5 4a04224652caa3bb6faece7a94f1ffc0
SHA1 091878cc1867146dc1368bd19f46ac266f6d7ebc
SHA512 396fb8cc0850b01732ab65fb4d86e9ab14543692717a417e980772de5b79b9be04b56b19ff7ccf50a08cccb2d93b0e252dc9dbcba222532d7f7887cc294b4b60
TLSH
T101718F2842A67461EBF41AF0E4C31206B47E47DF0B0F4D4518AC9FBDAE89365B27178B
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58dcfd.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58dcfd.TMP
Size 3KB
SHA256 ee9afc5f19f899b01e4fda32e4d443c1ee33d3e70442e8924646f9f2edee29f1
MD5 7546d26fdea7e98def87c8723521697e
SHA1 34348c1741e96a718a8b9e23cf47eac12ed41408
SHA512 a4c6b164f395677205306b276c6a0ccf52811b78cd6ffb7f2196dc3877fd1bfe0f413c31a6d6f69316423ba1177dd66369893d63c233e9b2e3cf55e3aa28f96f
TLSH
T14971812842A23461EBF41AF0E4C31205B47E47DF0B0F0D45189C9FBD6E89364B17178B
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 d6f1f753024ca2f06fdd2ac26b03517470310dd47c3c618b1207edd6fa2061ea
MD5 6359e75e6d5d268e0b01eedea7705d32
SHA1 4d33cba8da9f6261ff2b55e32b14dd63d3d122c4
SHA512 7f58ecf967694546feb631b0b08e365a2c2ceff46a10a9c105eb4d0d44733a8bfa9cb71a95061bd05a2520278c202c7f9597d247295d85b43a5e86c6c4ef0360
TLSH
T13B219EF3C7D5866E891517F05A24AE2BDE2D0A0582283C1AC9D4EF67D3E3071E11265B
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 f4edd097e3ea0c3e321e69de1b2499128e3f4dfa29961b36c29e56167f99a0a1
MD5 3547eeee098358310625f8299783b27c
SHA1 4bd37fe48ffbae8b113adb4bf457b31a91126f7c
SHA512 4ed9f45bc847c1dfaab40240aaf5c90902f3082c752a6bd6a88ca3c09eb414e0e44217d5fed6081252b65a310ae2ce278cfa3274c0bc00b5037540ba31f2f2ef
SSDEEP 192:sxZbR2yM/jK1Ml8MWn/fJsMTIdpdtHW6+WNGY4wyWAIgrJ:sxZb8un/fJsMMbHbGl9
TLSH
T1E542E711AA346A77CCDBD20DFA55BF53D6F9447396900D44AAFCCA1C04E6AED220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 d22c0d91974df050b825c6ee14d0cf4c35e721431c4b64609ed0538f3808aa95
MD5 52399f39700032f4b73c709444b490c9
SHA1 745825d2c7eae055e1581dc12f08ee2b4c76562b
SHA512 26b7ed62b20f589eb45824dd2bb8616445ff7390c46254ec377da013fd8b93a0275eea0ebfcdf3a58243a0368fa5b5c7c49f9a57b5ceda68c056bc072b677b60
SSDEEP 192:sxZbR2yM/jK1Ml8UQcWn/fJspTIdpHtHW6+WNGY4KzfAIg5/J:sxZb8qHn/fJspMNHbG/f
TLSH
T18F52F715AA346A77CCDBD20DB9417F53D6F8447396900E44AAFCCA1C05E6EED620782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 de156f11a70484f8e5ab781b6ce8c17a7e928ce95b39b85ef3be4d96f64f50c6
MD5 3870a0717f6f48ba58b858a472f5e8e2
SHA1 c62d4b5a1892e0efbb8bc1fe3f6a0631234ae8a4
SHA512 4cf65e182dd4f2f44f943e772001175a8c1bef0ee67a346b24ca0da3baddbaff12a8bbe35f9b876acc0fd1c971e71b0b12384b178363d766c89140b5ac004df0
SSDEEP 768:UK8iJPNWvx76r8F1+UoAYDCx9Tuqh0VfUC9xbog/OVsALl6opdHroxk0Unf:UK8iJPNWvx76ru1jahALocdU9Uf
TLSH
T113D20A3B680CCB7E4F844E9CEC266F966DD801CB5B984D5447FA884C03CB6EA51279DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 d5cf35f9ec6682a3757951fd04a7434842fe66770b106a0d59620d380ccf252c
MD5 bae3a8a8b79d811a45a61a9dec2fa0fd
SHA1 07ce229208593c65fd0158c503bb48f9215eca16
SHA512 72cc638442c4bf99db72ff573ddd9c08b16723ebe0074f10c44fc7fde15ec7cc8ef056ee12d021ba4a7273a97a8ad19753ba84d3da620771ebf14356dc691339
SSDEEP 48:KgpIVKKwovyhiIvKLC87yNRIRKCsEdEnA0auv:KgpiKKwySioKLCCWRyKCsv
TLSH
T15791244230BF02423D7D7919A2B087570B81B1B37128E52B7BA954714E2AE344EFDCED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 050c4415cc2edb868985169e72ce5a7d0e772856eae55f410bbf2e1cf06be7f1
MD5 a69a1267fa8c9a3fbf212aba54ed84e7
SHA1 5c7856774953f0d6c618b3ddac7c3b72f51f4beb
SHA512 f7c58b6e3770fd14a6292f825473921e773d0b81d3e27f4a87dd333af7ccc498cd375043e7d28cae88fb42dce404d72bfb96e28b29c42c709b54c5bf7c5eaf12
SSDEEP 96:ZqONk3QsjpfmUTmDK5ih/cIPURHl8h4otop5+5DfBhPwivh50xy0SFYKQAxsYss2:gONz6kDfQmiUyopZ9036TQis5U6
TLSH
T14E02EA35A8787CBB8EA36E46F44737275FA5212BEA852F85D9E81B1C04D764C1307837
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 6652cf6dd84718019ac1ca798565f8a8a078e6a891ff86b055a492566f05b111
MD5 3321aefecdba6c2e667aaf59d5fea8f9
SHA1 6d228cca73c3b085bb1faa19accf7d0546f75e04
SHA512 8582941d8ea5422f7646ab4c1041c4966c1f41bfa658c658f8658c3592ab0007e41e3dd1c7e51c52e546d8fbd0f0112a21d47c5173bcabcbf4a5525f68cdf29a
SSDEEP 192:ntm+xasuheOwQxMGsNpAQ3IScDmCRQmiU1VnV4k036r1EYgLIgq9qva+4LcYLWA6:uZcIhsNpA20TKk/rqkPsa+VYEGBo3
TLSH
T107828D726874ACBA5CE3A246F58737135FB4D023DBC86F94C6ED9B1C04DA698130782B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 814c47f475d9752713be190d224e8d6e6af52a6885f4ed4f7ea72f8f37c10520
MD5 2d31238fd2ef52b36d76c263e9f17e29
SHA1 c36dbaee79d6d2df1828936160d80b145b3b476e
SHA512 023093e150b33e9c59c1562b10e24784ededb5988c4269010a2fdc4657a24738799f940766f2f46a2bb5fd2faddfc434394481cc8d7e8e8831db6668464798d6
SSDEEP 192:/Rm+xasuheOwQxMlwIsNpAQ3IScDmCRQmiU1VnV4k036r1EYXHIgq9qva+4LcYLQ:6ZcIPIsNpA20TKk/rqzPsa+VYEGBo3
TLSH
T107827D726874AC7B5CE3A246F54777135FB8D023DBC86F9486ED9B1C04DA698130782B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 5d69e58a2657f656842b7fd3badc66fa5676151dc4b019f87aa22bcad358da56
MD5 c0ae24238bd8003f16045f0a49ebedee
SHA1 46e40567e2db4674cf8ffef81f19350302768df3
SHA512 94264a90fda36830cb00cd0cf7b567f7a510280eced1ec39047cee1c143fc542c0f5b0e5da9e2482cf9fce2005f50e3e609a412c96641efe0b0d5a31ef99a0e9
SSDEEP 96:aqONkcQsjpfmUTHK5ih/cIPURHl8h4otop5+bbDfBsPwivh50xy0SFYKQAxsYssM:xONs6kmQmiUyopW9036r1EYhcRgq9U6
TLSH
T198122931A878BC7B5DD3A945F48736135FA48127DFC86F91C5EC2A1C05DB688530B827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 22035488f7afeb610242de90a09eb4c89bb5a3f8b612297c940f1b3791b568ae
MD5 665aeddf0506420d4bee28d1a01a3ecc
SHA1 815e43504336a7fd6860b3bea9da9b24324bfb7d
SHA512 0673b489bcbdf1daa5e0fbf75ec11696b8e6fc253536595c7db2fbefbc74cb736064d8b9d6fdb2b9db839c0db274e30d0bc45b2d8dcd50b3e2ec8550bb72dc8d
SSDEEP 192:om+xasuheOwQxMGsNpNQ3IScDmCRQmiU1VnV4k036r1EYgLIgq9qva+4LcYLWAds:bZcIhsNpN20TKk/rqkPsa+VYEGBo3
TLSH
T1D9828D726874ACBA5CE3A246F98737135FB4D063DBC86F94C5ED9B1C04DA698130782B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

37b5ca92-0983-43a9-9aa3-9abf55d5bcbb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\37b5ca92-0983-43a9-9aa3-9abf55d5bcbb.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 b7fa00b8833aa0152d5471220db90bcabfbf889078b89638e3277b445f015d5c
MD5 a21afec4b0d6fbf23e3312f596903b70
SHA1 d1095215b6d2447b812dab174ca850b48fc60f84
SHA512 d24f90641968fa5ac75cd2a871defd5a400af8eba4d85a30ac9843d1653cc34d9f054471abeb5f3813f518b657a6c791f4d0dbcb8860a1564538ad811461d82a
TLSH
T190410758A6F91108B3B77E5AAFF7A86E483BB9772E06845D00110D4E0A27F40CCB1B33
MD5 SHA1 SHA512 TLSH

Submit Download