6082d34e9cb41cf08085b1b74db1ad47c04d3bfeb44360c9e5fabd8ec9494f12

Analysis

max time kernel
148s
max time network
146s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
16/09/2026, 18:29

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
monde-ouvert-2d/public/index.html
Size 2KB
Sample260916-w5bbqaek7x
SHA256 6082d34e9cb41cf08085b1b74db1ad47c04d3bfeb44360c9e5fabd8ec9494f12
MD5 47ca1f56f5ae3ba3c772ac619709218c
SHA1 e40cb37286c914f1e8a32b1096cb4959f7c57cd7
SHA512 9a2e0ad5aeb0ecca68b759f4328fe8bae5b75fb46040b664a11f8753cb8a0501a68b894bbdf35bc79147fecb07d8cbf4bd762e5c2547ed3148dfdc18447e973c
TLSH
T1B241FE6181B5412642A1C1C039E1AB0F2ADAEA8FE70A55417BED4AE00FDBEC5DC67079
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1972	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134340569959535006"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2101206053-1414382737-268919432-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2101206053-1414382737-268919432-1000\{2789E3AA-1FB1-4576-83E1-0F8D717749F6}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4344	msedge.exe
4344	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 1800 wrote to memory of 4212	1800	msedge.exe	82
PID 1800 wrote to memory of 1972	1800	msedge.exe	83
PID 1800 wrote to memory of 3844	1800	msedge.exe	84
PID 1800 wrote to memory of 3844	1800	msedge.exe	84
PID 1800 wrote to memory of 3844	1800	msedge.exe	84
PID 1800 wrote to memory of 788	1800	msedge.exe	85
PID 1800 wrote to memory of 788	1800	msedge.exe	85
PID 1800 wrote to memory of 2468	1800	msedge.exe	86
PID 1800 wrote to memory of 3156	1800	msedge.exe	87
PID 1800 wrote to memory of 2468	1800	msedge.exe	86
PID 1800 wrote to memory of 2468	1800	msedge.exe	86
PID 1800 wrote to memory of 3156	1800	msedge.exe	87
PID 1800 wrote to memory of 3156	1800	msedge.exe	87
PID 1800 wrote to memory of 3928	1800	msedge.exe	89
PID 1800 wrote to memory of 3928	1800	msedge.exe	89
PID 1800 wrote to memory of 3928	1800	msedge.exe	89
PID 1800 wrote to memory of 3824	1800	msedge.exe	90
PID 1800 wrote to memory of 3824	1800	msedge.exe	90
PID 1800 wrote to memory of 3824	1800	msedge.exe	90
PID 1800 wrote to memory of 3544	1800	msedge.exe	94
PID 1800 wrote to memory of 3688	1800	msedge.exe	95
PID 1800 wrote to memory of 3544	1800	msedge.exe	94
PID 1800 wrote to memory of 3688	1800	msedge.exe	95
PID 1800 wrote to memory of 436	1800	msedge.exe	97
PID 1800 wrote to memory of 4344	1800	msedge.exe	107
PID 1800 wrote to memory of 5000	1800	msedge.exe	108
PID 1800 wrote to memory of 3964	1800	msedge.exe	109
PID 1800 wrote to memory of 5060	1800	msedge.exe	111
PID 1800 wrote to memory of 5060	1800	msedge.exe	111
PID 1800 wrote to memory of 4344	1800	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\monde-ouvert-2d\public\index.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x25c,0x7ffbe05cc188,0x7ffbe05cc194,0x7ffbe05cc1a0
  2⤵
  PID:4212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1968,i,5500509962643562681,8300810788997777890,524288 --field-trial-handle=2072,i,16584220878553854674,6905222958207051914,262144 --variations-seed-version --mojo-platform-channel-handle=2104 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1640,i,10030169439331491144,4161145891542326104,262144 --field-trial-handle=2072,i,16584220878553854674,6905222958207051914,262144 --variations-seed-version --mojo-platform-channel-handle=2064 /prefetch:2
  2⤵
  PID:3844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2556,i,2379387929571149701,14418230891311467195,524288 --field-trial-handle=2072,i,16584220878553854674,6905222958207051914,262144 --variations-seed-version --mojo-platform-channel-handle=2576 /prefetch:8
  2⤵
  PID:788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3428,i,4203334980969677816,9811211042347275198,2097152 --field-trial-handle=2072,i,16584220878553854674,6905222958207051914,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
  2⤵
  PID:2468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3432,i,6996038129357267568,15103418609645781984,2097152 --field-trial-handle=2072,i,16584220878553854674,6905222958207051914,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:3156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4252,i,1965611342386099443,1099073097648934122,2097152 --field-trial-handle=2072,i,16584220878553854674,6905222958207051914,262144 --variations-seed-version --mojo-platform-channel-handle=4260 /prefetch:1
  2⤵
  PID:3928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4392,i,15221665212083435847,15495788697849095795,2097152 --field-trial-handle=2072,i,16584220878553854674,6905222958207051914,262144 --variations-seed-version --mojo-platform-channel-handle=4388 /prefetch:2
  2⤵
  PID:3824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,18218957637087708518,312959026351401009,524288 --field-trial-handle=2072,i,16584220878553854674,6905222958207051914,262144 --variations-seed-version --mojo-platform-channel-handle=5144 /prefetch:8
  2⤵
  PID:3544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5132,i,71334896009732396,7448527718481393473,524288 --field-trial-handle=2072,i,16584220878553854674,6905222958207051914,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  PID:3688
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5816,i,7953017614831741528,10145616506631126252,524288 --field-trial-handle=2072,i,16584220878553854674,6905222958207051914,262144 --variations-seed-version --mojo-platform-channel-handle=5828 /prefetch:8
  2⤵
  PID:4828
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5816,i,7953017614831741528,10145616506631126252,524288 --field-trial-handle=2072,i,16584220878553854674,6905222958207051914,262144 --variations-seed-version --mojo-platform-channel-handle=5828 /prefetch:8
  2⤵
  PID:436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4424,i,17584228371779198527,13477919895171264051,524288 --field-trial-handle=2072,i,16584220878553854674,6905222958207051914,262144 --variations-seed-version --mojo-platform-channel-handle=4460 /prefetch:8
  2⤵
  PID:4344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4440,i,2308459167533118794,2164862705237507,524288 --field-trial-handle=2072,i,16584220878553854674,6905222958207051914,262144 --variations-seed-version --mojo-platform-channel-handle=4524 /prefetch:8
  2⤵
  PID:5000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4856,i,13992803152910057580,4423455738374639606,524288 --field-trial-handle=2072,i,16584220878553854674,6905222958207051914,262144 --variations-seed-version --mojo-platform-channel-handle=4528 /prefetch:8
  2⤵
  PID:3964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4856,i,4034898460989701068,406004382618647207,524288 --field-trial-handle=2072,i,16584220878553854674,6905222958207051914,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
  2⤵
  PID:5060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6160,i,5568205125200513908,17626923661049128712,262144 --field-trial-handle=2072,i,16584220878553854674,6905222958207051914,262144 --variations-seed-version --mojo-platform-channel-handle=716 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4344

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3888

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4604

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 6fa1b02b96b249c932f11a4c4f1eb52f042c98bf33d02c325fd422f437c15214
MD5 dab629217416704f76a79a88ad8104e7
SHA1 7976f0ba766ba9c277031e8bb5fb53af02fda376
SHA512 08718b5a2794b585eb95d2cba2f1738b354033d24a471097fdf4f83b9cfe6ba984c2b3c4dae177b4e601dc47eb8b72225f8677ed39d32449fb3f874f22b26d8d
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7+:fwUQC5VwBIiElEd2K57P7+
TLSH
T1C1B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 61a97be736e0441d45644d31b38bd9bef6c1bd260fa1ecbb5d099fa493fee6b4
MD5 99bbd8400adc948f85ebd87cb24b3fcb
SHA1 c8fb9564ede7ecb06cef446bdb527025127a796e
SHA512 75b3ee70eca487cbbfb3d5b4b25bae158ff99188ab36d55f391e9f80c51ce9fa433897d79a0ae37ad64698bc3eb5aa9a10a49116fb8f7f35ed0a6e98aa8321b7
TLSH
T109D022C8F2A0300CE00C3233A02BCE022B88CEA8F0032BCA000E8C80E8800C80CF2C8E
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 35c0581c4aa4be81dfdc0844dd9c6b519ef7785c6ce0bec2b1fd14cd987be893
MD5 211842d14c5ac7224b299d3dd62db56d
SHA1 8d65254f7f40fc6aa94772801c4296df5bc88745
SHA512 25d3bf43bd1f20146825fd9840a36be932459d32f46783c29508b4382496f74d0b47c5bb8a396c47fa1482b680e446ccce469ed1ca1e3a348ed0ae9dcf093d5b
TLSH
T19261C7F5719341E9FB98467393D6948B317065B0A9831F6230E9F4789CCA7158CF780B
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe591fa4.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe591fa4.TMP
Size 3KB
SHA256 c08d97850eeeb2c6e182f79b3f6f8a3aacbb21ab20ef3666bbbc54fdd85729e8
MD5 6fcc1b9a0c85fa248a61b7c1f618bc21
SHA1 51ac0d4f8f9b7102c4a91de9032edc0c1abb279e
SHA512 373c128c49266bcd27454ec4db654b7f2f598e7250a9585ec89b0dd729b3b2370975ed7ddfc31ec017ac2818a2bfb1b9c250c64a27a664962bb8a2c9050ac525
TLSH
T12B61D8F5759341E9FB88467393D6948B313065B0A9831F6230E9F4789CCAB158CF790B
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 60ee23dc4793d36421851ccb6680647759c164c1a201474ec62deced017be336
MD5 58bac567f6d374dd8774784135840eef
SHA1 f2770632f24e35509632e449c54055bf373c119c
SHA512 81e43ff35cec5d48fcfd62c970b0d3144e99df6422125dfdbfcdff4a83c52c5908fa04e6c5354151818c5da1c1fca0cefc3219adf9edf5966882c6346960a2f8
TLSH
T152117DF3C3E985AE890156F05A28AE2BCE2D0506421C7C19C5D4EF67D3E3075D10195B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 d6a73917b4afa6a29e1cd9bf60900646554c0f33ed2318bed719c6d6cb3390c3
MD5 93d67bff9f8e2468e52e5a3509f837b8
SHA1 a9b133ebcb9624aefd97a29497878cd881d69946
SHA512 8c296ce42711c8dd76b03085cf0315efc899ae90676e3e3a4d15a6b9d7e8e5712d88ffe2466976cca5a99aaebdf1ab4da65a422c00d7df5ad0165c27a6342ae1
SSDEEP 192:sxZ4ReWN/ffsrbUQIdpdfHW6+WNGYaQdBIgrJ:sxZ47N/ffs/UxVHbGu9
TLSH
T1272295157E28A97B8CC7D219BA25BF53E6F9503291951E88EAFC861C04E6ADD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 6254d4fdc0828cf3d9ca647912cdd389a85a4f177c04844cef359b9dbc4ab5ef
MD5 9f277ef6b03c2fda24965e605bf8489d
SHA1 c1074cc67cc7fb9d6a8dd4f92369f9a259a7cbe4
SHA512 e41e8f8c278c0c5b813eb715b48a56d9208d2a270a2127358620b23ea303798a81afe5b48b7f5d78a2c11ca9044ee950f546c0901f85600e156ef72e1443a2d1
SSDEEP 192:sxZ4ReWN/ffsibUQIdpdfHW6+WNGYa/dBIg51J:sxZ47N/ffseUxVHbG79
TLSH
T1FE22B6157E28A97B8CC7D209BB15BF43E6F9503251D51E88EAFCC61C05E76DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 9a1dd01e58252b2a12a35fbaa268b8a00ecaba6032d555680843cbc23c9223f1
MD5 52a23a096983fe8374ae746e4f4d805e
SHA1 4003c1908ed1f84ec520ca455b8e42e8815264ea
SHA512 9a92e92c8db74b8810d37f3db45bea142c1c82f125fed2e81378aab6352a500083fee0d259268b2c8bc12331f8f7778357dda4e154ffd30e7d5a5997bc909c52
SSDEEP 192:sxZ4ReWN/ffsibUQIdpHfHW6+WNGYa/dBIg51J:sxZ47N/ffseUx/HbG79
TLSH
T1CC22B6167E68A97B8CC7D20DBA15BF53E6F9503291911E88EAFCC61C05E7ADD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 5bcf8a16b3551436a3f794523af9949ee25587e8bdd1c5873ec1ed93faa85bae
MD5 6046f6ab417b4c3d717ea6ce558a70bf
SHA1 106f95603f8618bc4c8b7e1051401a68adefb051
SHA512 e409470917ccf41f59e15b4e964c32f580c15d5ade9d55e0f7370b2b86594a44afe25cded935ec344eded8b1c281f83c5d9f511f56b9b05a38a07796313078ab
SSDEEP 192:sxZ4ReWN/ffsAbUQIdpdfHW6+WNGYaQdBIg5nJ:sxZ47N/ffs4UxVHbGu7
TLSH
T14A22A5157E28A97B8CC7D209BB25BF53E6F9503291D51E88EAFC861C05E66DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 aabf1f209c99f85c38367ddd61bba6f10955b6649f46fd4aacb7801770399bf4
MD5 c7e522ff00fd64ff314b950e5d05e3ff
SHA1 1dedce5ca12f761424b7c7aea227301ee062d979
SHA512 965d7fbb4568a629342e8205ed9ed66e5569c4da7d3082e493c6394d6dac7b8ebc95ed8522a200dfae273b070ece3ad97018648ac45e3c7bec5eae9fb8de2042
SSDEEP 768:XgyQRbrWvvlpZ8F1+UoAYDCx9Tuqh0VfUC9xbog/OVaKLlRXH3kroEZCS:XgyQRbrWvvlpZu1jaXKLf33vEZCS
TLSH
T1C6C2E92F640CCB7E5FC01E9DDC6A6F976EA802C766588D4047FA984C02C77EE512A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 b3e282366c6be0f3fd700215a906d4b92a9751d2822be6063ae8e242705921d3
MD5 c613a3061d58065526a1a33e4973c1b4
SHA1 f1429ec5cd970d079d14f426abac3104603cab1a
SHA512 360e65d168c5f0365e6653b5190ff933b453969a1f58eb3337d9b9e5ad36775a42bbdb2d4af76f7407b3d52eb2561b8b2f1c4d6eff3df95647680da9fdd8096d
SSDEEP 96:KMIQKxiGOhWKSs6B6DGq8gcY4INL6CYKi960YuCi901:izp9B6DGq8gc5IN2CO960xCi901
TLSH
T13891046531B70A0538BD254893B69B6E024231F37019F52BBFBC50D6AE6EE044EFE5C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

85bd5cee-40ae-471e-b94e-03852dd84a6a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\85bd5cee-40ae-471e-b94e-03852dd84a6a.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 76ee25be81c4e27cf67c261e187c43117f5810f81de33cd5856f7459f0322895
MD5 9d58497c7116bd6fbb56a82bd3c3f103
SHA1 8e1fded9be01db71248c8eb0ae7d407e0e74159d
SHA512 323c8b9f623df71846327ea9a162f4b2bb3109942dbaf3b4b69f46221e2bdd505906df652e33ec3f738550ff618345809e40d0e7123555c2f3d462b7ec42e663
SSDEEP 384:GiFiZcIWTsN38TUNTUlIlWSvuIhsp5u8iEm+N+xBkwc0aIwoR:tFQ+awgdJWkEbKBkuaIw+
TLSH
T1EDA27E735CA4987BBDF39A55F9473A038EB881A7C7C86B84E6D8971D00DB1D8130BD22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 b9219fd67a5bc19c87f188e5ad0fe93829503d6619c4a6cfd5d9a630de80bf0f
MD5 54f6ec229c8bb84f6f4f855a2d17e2f6
SHA1 71aeab17a5d6ac511b1892be29568208ab962eb7
SHA512 28deff210c3ec5891804f2fd406a86eee639a013cf062542c9cbfb620ae6008f202e5c8d31d357917455c48fabd38a929f088ea6e59b0f700a48524af8e9a54b
SSDEEP 192:uzrsNtGQqsxDPcNQmiU1jbD4p5u88P1uhYoetATlAC/btLU8:qsNtGvuIhsp5u8iEm+G+xU8
TLSH
T150420936AC786C3A5DE3A564B9473A135EA8416BD7C82FC4D6EC571C41EF29C130BA23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 02b963d2c5bfcf38900e641d0a9bfad20acbec78eaccea2999579467b2ff4f42
MD5 7803c212240b9c67047ddae4202e46b8
SHA1 fd227cd8974a07bb587f795e2d24d647ffff13b3
SHA512 d889deb4bd3cc746eaa6131e4615e8f4d0aa8f6e3e33a11b5ae4c7e35ddd4fe5709c9688f3689b97893922a123d4fb34d201554caf0a8a72a48fb9146f2a81f8
SSDEEP 192:SONk6iDCQmiUyHdHq5u88P1uhfSqrIlU6:SONk6/AHq5u8iEjEU6
TLSH
T1EB02E839AC683C7BAEF3AD15B5877B175FE5013BA6942B84C9E81A2C41D729C1307923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 14KB
SHA256 35c92ac1ceaa35669d4b35bbb6334c23363b116862aa8589345aa7a1b774cfae
MD5 5bdcb4d3058ec8415e996152209e3510
SHA1 72454320e66af1f0ca2560d034bfd932b9e7609a
SHA512 4ab47ec09c4f5afa29619412bbca391b9709ee38d1a2a6662a724760e6090477c6a184dd07c4c661c64fb61273a86347fa42102c925052abacdc5c254598c956
SSDEEP 192:uGrsNtuQqsxDPcNQmiU1jbD4p5u88P1uhYoetATlAC/btLtd5kHQc0a3KpsgpZI:ZsNtuvuIhsp5u8iEm+G+xBkwc0aIi
TLSH
T10F625C3668B47C76A9E39454B9473A139EB8816BC7CC2F84D5DC971D01DF2D8230BA23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 507c481cf2d7e5960f2950479ca4e3db3bf1c842e6ea19af39c88aa0fd361998
MD5 5194b67b8d23c9749720d9021901d7dd
SHA1 a72a352c53fa39cd592c9ed9de8c672219b38f53
SHA512 4991776d02d57c2cd481e4fc315a5b6a0cee4c588a4d12f83dcf5b41e33a13c3b93c0103dd1868dafef7c1b5c015aa5a44c3ee0c53454c61eca5c95fb177c4cf
SSDEEP 192:uzrsNtGQqsxDPcAQmiU1jbD4p5u88P1uhYoetATlAC/btLU8:qsNtGvuzhsp5u8iEm+G+xU8
TLSH
T1D2420A35AC786C3A5DE39564B9473A135EA8416BD7C82FC4D6EC571C41EF29C130BA23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 9dc0f53ccba7da8ec347010a0175e17ec90a630ba943a5cbadc40b182e88b4f3
MD5 57e6ea9270ad800535ac55954107d5cc
SHA1 32738c456722d0f63dc766afd75f8b5f091d59fd
SHA512 de12850aaa00df38d3c1f0c30e7fc5254d108d8d88a0dc73c79608047a081294bf57c7f6f9abec69ff1f5720b8f960f2306312dc3ca34a3148342abed7eb17d4
SSDEEP 384:WZcIBsNtWSvuIhsp5u8iEm+G+xBkwc0aIwoR:EBgJWkEIKBkuaIw+
TLSH
T11F827D766CB86C76A9F3A455B9473E038EB88167D3CC2F84D5EC971D01DB698130BA23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 5bd1611d78c0040506c02c57c3b6cb01cc4340048c210a906848c5c47188b7cc
MD5 1648d8b48899ceed46c4787ec531081a
SHA1 4ec23c67b9903aa45abd29ebfcfac04fc2a672bb
SHA512 6c000716287862249a30d47a2fe13b730f4a96611e83a391f057400d9f6a7fcd10e3d915ef5a532b93b1ee88e84dcab07bbc7883029f940e531dbdfce8c8477a
SSDEEP 192:SON46iDUQmiUy8d8q5u88P1uhYoetAsuZC/btLU6:SON46NB8q5u8iEm+z+xU6
TLSH
T1EC122B35A8786C7B6DE39964B5873A135EA5423BDBC96F84D9DC271C00EF29C130B913
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5f51ada8-24f6-4e4c-8548-0188223baa59.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\5f51ada8-24f6-4e4c-8548-0188223baa59.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 b6afc53072c9370030d627ab5725954b1654a503b4e666f33ce9bc4f169f4261
MD5 f94fb4c8d22d625567b95a388a9ed622
SHA1 e9862c1b61074619716f525b54f2c2a4a9c089fd
SHA512 740348336b096addd97208e8cd66da83f0b1e5b575054dddb97f403802dca3660c8e59fd5864d45d0ec2ca4db49135615ff9a97b14b8d33f9d7caf331a56e4e2
TLSH
T1DC41295CAAF9114CB3B7AE5A9BF6A86D547FBD372E46D45D00010E4F0537A40C862B37
MD5 SHA1 SHA512 TLSH

Submit Download