af5fe5674e0a5290ec18fd5929be16fd162ccf56f2d10a36bbb05680c766675a

Analysis

max time kernel
148s
max time network
149s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
22/09/2026, 12:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
start.html
Size 2KB
Sample260922-pldt6sec68
SHA256 af5fe5674e0a5290ec18fd5929be16fd162ccf56f2d10a36bbb05680c766675a
MD5 dd55e3488e835cc92b356cda04de5b7c
SHA1 cca913827b5540b77298fdbea5026f02e285d228
SHA512 6e2bfc14c44f52bbcb15c5acf41ccea4fd54f3cfedd7207b05ec377d158b4d113a50f431707ecc3d9f2c612aa8c1880ec2cc9c20637434fb17531facb8a87f6c
TLSH
T1C45173B1BE0CD07463608614D8BEF88A31364DA2900ADC65DC90E87D18D8FCD53E3DE6
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4868	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134345535075892185"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2304238888-3968896904-642854331-1000\{65344833-E75A-42B5-AC8A-29C984F89434}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1532	msedge.exe
1532	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 4456 wrote to memory of 1004	4456	msedge.exe	89
PID 4456 wrote to memory of 4868	4456	msedge.exe	91
PID 4456 wrote to memory of 2260	4456	msedge.exe	92
PID 4456 wrote to memory of 2260	4456	msedge.exe	92
PID 4456 wrote to memory of 4328	4456	msedge.exe	93
PID 4456 wrote to memory of 4328	4456	msedge.exe	93
PID 4456 wrote to memory of 4328	4456	msedge.exe	93
PID 4456 wrote to memory of 4488	4456	msedge.exe	94
PID 4456 wrote to memory of 4488	4456	msedge.exe	94
PID 4456 wrote to memory of 1344	4456	msedge.exe	95
PID 4456 wrote to memory of 4488	4456	msedge.exe	94
PID 4456 wrote to memory of 1344	4456	msedge.exe	95
PID 4456 wrote to memory of 1344	4456	msedge.exe	95
PID 4456 wrote to memory of 120	4456	msedge.exe	96
PID 4456 wrote to memory of 120	4456	msedge.exe	96
PID 4456 wrote to memory of 120	4456	msedge.exe	96
PID 4456 wrote to memory of 236	4456	msedge.exe	97
PID 4456 wrote to memory of 236	4456	msedge.exe	97
PID 4456 wrote to memory of 236	4456	msedge.exe	97
PID 4456 wrote to memory of 1712	4456	msedge.exe	99
PID 4456 wrote to memory of 6096	4456	msedge.exe	100
PID 4456 wrote to memory of 1712	4456	msedge.exe	99
PID 4456 wrote to memory of 6096	4456	msedge.exe	100
PID 4456 wrote to memory of 4244	4456	msedge.exe	102
PID 4456 wrote to memory of 2412	4456	msedge.exe	106
PID 4456 wrote to memory of 1536	4456	msedge.exe	107
PID 4456 wrote to memory of 2972	4456	msedge.exe	108
PID 4456 wrote to memory of 2644	4456	msedge.exe	109
PID 4456 wrote to memory of 2644	4456	msedge.exe	109
PID 4456 wrote to memory of 2616	4456	msedge.exe	111
PID 4456 wrote to memory of 2616	4456	msedge.exe	111
PID 4456 wrote to memory of 1532	4456	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\start.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffd5f6bc188,0x7ffd5f6bc194,0x7ffd5f6bc1a0
  2⤵
  PID:1004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1988,i,14750397669420228467,5206365510016621520,524288 --field-trial-handle=2488,i,13296111616943471916,16225037509005254757,262144 --variations-seed-version --mojo-platform-channel-handle=2856 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2464,i,1784864581112040833,1582722732300246696,524288 --field-trial-handle=2488,i,13296111616943471916,16225037509005254757,262144 --variations-seed-version --mojo-platform-channel-handle=2816 /prefetch:13
  2⤵
  PID:2260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1840,i,2886506094224442956,6038223999580174144,262144 --field-trial-handle=2488,i,13296111616943471916,16225037509005254757,262144 --variations-seed-version --mojo-platform-channel-handle=2484 /prefetch:2
  2⤵
  PID:4328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3656,i,12604652173514984201,6482477434019737834,2097152 --field-trial-handle=2488,i,13296111616943471916,16225037509005254757,262144 --variations-seed-version --mojo-platform-channel-handle=3684 /prefetch:1
  2⤵
  PID:4488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3680,i,1552031023479395557,13317080067912090840,2097152 --field-trial-handle=2488,i,13296111616943471916,16225037509005254757,262144 --variations-seed-version --mojo-platform-channel-handle=3700 /prefetch:1
  2⤵
  PID:1344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4392,i,13700439290940707003,8051121389746653561,2097152 --field-trial-handle=2488,i,13296111616943471916,16225037509005254757,262144 --variations-seed-version --mojo-platform-channel-handle=4848 /prefetch:1
  2⤵
  PID:120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4404,i,7885445350585613144,18292127588798504336,2097152 --field-trial-handle=2488,i,13296111616943471916,16225037509005254757,262144 --variations-seed-version --mojo-platform-channel-handle=4852 /prefetch:9
  2⤵
  PID:236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5368,i,1880556748655898312,4798426122779176487,524288 --field-trial-handle=2488,i,13296111616943471916,16225037509005254757,262144 --variations-seed-version --mojo-platform-channel-handle=5452 /prefetch:14
  2⤵
  PID:1712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5372,i,12623287023280021478,8421098772794027790,524288 --field-trial-handle=2488,i,13296111616943471916,16225037509005254757,262144 --variations-seed-version --mojo-platform-channel-handle=5432 /prefetch:14
  2⤵
  PID:6096
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6148,i,14330515213931303529,10618452440317374985,524288 --field-trial-handle=2488,i,13296111616943471916,16225037509005254757,262144 --variations-seed-version --mojo-platform-channel-handle=6172 /prefetch:14
  2⤵
  PID:944
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6148,i,14330515213931303529,10618452440317374985,524288 --field-trial-handle=2488,i,13296111616943471916,16225037509005254757,262144 --variations-seed-version --mojo-platform-channel-handle=6172 /prefetch:14
  2⤵
  PID:4244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5076,i,5752414024773911517,12370358880407285627,524288 --field-trial-handle=2488,i,13296111616943471916,16225037509005254757,262144 --variations-seed-version --mojo-platform-channel-handle=4884 /prefetch:14
  2⤵
  PID:2412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5048,i,16778852048832768924,7257825712998107045,524288 --field-trial-handle=2488,i,13296111616943471916,16225037509005254757,262144 --variations-seed-version --mojo-platform-channel-handle=1204 /prefetch:14
  2⤵
  PID:1536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5052,i,17951288963133741271,2486109644309928905,524288 --field-trial-handle=2488,i,13296111616943471916,16225037509005254757,262144 --variations-seed-version --mojo-platform-channel-handle=1392 /prefetch:14
  2⤵
  PID:2972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5432,i,9518735049710108504,14369233274300386260,524288 --field-trial-handle=2488,i,13296111616943471916,16225037509005254757,262144 --variations-seed-version --mojo-platform-channel-handle=5440 /prefetch:14
  2⤵
  PID:2644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5368,i,18224193054913414004,13198042766727615139,524288 --field-trial-handle=2488,i,13296111616943471916,16225037509005254757,262144 --variations-seed-version --mojo-platform-channel-handle=5448 /prefetch:14
  2⤵
  PID:2616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5956,i,12658497536501605926,12119587713180034155,262144 --field-trial-handle=2488,i,13296111616943471916,16225037509005254757,262144 --variations-seed-version --mojo-platform-channel-handle=5012 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1532

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4940

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2008

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 84d025c8484a1ba1eae075fe4fb60ee1013d5e3c0fe4757f9d23c77a5ecf4bff
MD5 40a03f8f45ceb83458e7ff6718e8114c
SHA1 3aee2deed85e7e1b8a1a9090347606288ce5f90c
SHA512 011f7c1ff606c9271e176c099ac19361c51f6a3eb7ee8dae4e0bead781595a3fa38a006247688a203ba11818d1de1b9066033932d5d22ba79d5a19f921cf6159
TLSH
T164D02B316CDD4D23C08CA27C0056004117617400FE10404011211048080824142823AD
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 72a43fbaed1cd4a89462ff759b5bb2f6f6d1a7a9c08002937c809c101fc685e4
MD5 b04c9bc22d86d65999036cf784bd7a42
SHA1 74f3b96e34181e491a9fd238877d82f72fce321d
SHA512 9bbf9224f5546df81a26e79932518e2c3bea2fc0e37127e4af1f02d1a5543680b5d9370365c28b8bb5427b3bb4f27eb12737d158490216ff77859483f95a6b00
TLSH
T189D02B316CED4C23C08CA27C0057004117517400EA1040401221504808082414281399
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 c1a14e5d64e1754325fa5ca583f5b243cbf513a02262d72f5e1ce60f80dd2fe5
MD5 3cd1816a51fdea3f3bb7adbf62ec3921
SHA1 68afa11e013dd8cce8ade20e22bcd364b04068ad
SHA512 2ce41b2c2831be63eb845e3b1a261e10eb6638e53f7da87cd52f153c5ba8425bad0d53f95b83bf32204e1d874ccf01f1b1e5344fa5f61fb43ac65687c4574bf0
TLSH
T1A6E026DA05C8C2AFA608744B427CD71CD390370BD3CC6B8E270594C57085450A693791
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 ceb4cc3c7600f9969dffbcef6523c67a747602d4b6c4b57b0494ce813fdc595a
MD5 26136bb82a4344eb53a8ec28f9673489
SHA1 234dade5dc4cdb5c2cc0716d00864222e86f2d48
SHA512 1147275930b8e08d98727cdb2bbed2f661c1958cd9bdf75fe1f11176f69d05a5fbd20b877f60afbbb790e284db97988f94480edd41efd19d726233d545ed1e33
TLSH
T1CC612D8597EFB47EF7A801F0B2C60D8B7A7C4D82598B1F0345E8E67858C37E55088354
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe592b8b.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe592b8b.TMP
Size 3KB
SHA256 f3380358559cdf4bbe8f744e38c4f3bbf7628c3b55f5f84627a78750ffad5b9b
MD5 97e9a96e22a18440ececf57b7506d373
SHA1 6247f4aa90745fdf7454a8f0358d4227c17d9e09
SHA512 68e6aa8e76c8d0d6e1f2ffca629e949cb8f485985a6a39f0575b3dc534070b1cf99eb8cae8e8caaaefd5c3103ac04545b4d06933bcd2723a5bf872ec75396465
TLSH
T122612D8497EFB47EFBA801F0B6C60D8B7A7C8D82698B1F0345E8E67858C37E55088355
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 7577263babfbd87ede53e4d8721441811cbad27de3a741ebc968911ec69765dc
MD5 9ba5d8384474b6a7d4488508e36f2bdb
SHA1 76af0a5be7d58464ff61aa1bff0d531748358aea
SHA512 1eced152571de0d1e9dd9647b95c5b13f40f81d1ab9c7353983d08cc43c020e61fb8c7b908b5fe4a58ceb719c9ee9843f5644d88557b540691cea814460c9fd7
TLSH
T1FC41BEF7C3E8866E890156F4AB186E2BCE1D0915832C7C56C9E4AE2B93F34B1E14195F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 66624d4842aa438267f6da5841052a6785a6fdaa9e044ac7039b47842f8d9ab5
MD5 6901c08b5266af6de4d3daac9c827d42
SHA1 11d3529274aeb7015d915f0c3a81e0059e3e5e27
SHA512 901d935912d634f3dd72ce39157fba8d86341a0c172a736a0a0fa6462b7e972e3a81b983c84597a9f3e8f38326f27bb0c49ff7fd2e68218c077b1ff08b0697c1
SSDEEP 192:sxRqRLb6/fdsWWzoA8p4T/g6+WNIYueinGjIgIJ:sxRqJ6/fdsWLa/5IEs
TLSH
T106229715AE68A93B8CCBD20DBB55BF53E2F9513261911F48F6FC961C04EB6DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 c9b56cee48034419cfd9c0acacf91d7418a221d8fa612dc8a6f78522d2234cd4
MD5 805747ad64dc3c805a3af197732681be
SHA1 915d77afe4e9b532410948bba3a3cd27dc10f967
SHA512 f6c83d0834c573a7b01b629fa16483cb1aca35159115182667a963780a078e067a3a9803d958365e83beab83e0d960c1fd7749e95f301986ff387838da51bfd0
SSDEEP 192:sxR1RLb6/fds9WzoA8p4T/g6+WNIYueinGjIgDKJ:sxR1J6/fds9La/5IEK
TLSH
T1AC32B815AE68A93B8CCBD20DFB55BF53E2F95032A1911F48B6FC961C04EB6DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 d5af93f35cfd0bcb8b15692c1e608696ef8b60643ec0e7a0a44f73ef89fe23aa
MD5 4c516a967ad962821bd4d242a271ae14
SHA1 090ef9039ab918babd4fabded5e35c2f4a16bf9e
SHA512 c3a9fab24ae38b002fef9eb4e648e0ddbed169b2cd724aef99179281d1647b8f4e89f55f08f7d3d049a018fb9e936384ed9817911cb05e103194d13d4bd26796
SSDEEP 192:sxR1RLb6/fdsSWzoA8p4T/g6+WNIYuNinGjIgDwJ:sxR1J6/fdsSLa/5IlI
TLSH
T1FB32B815AD28A93B8CCBD20DFB55BF53E2F9513261911F48B6FC9A1C04EB6DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 e5caa722ba1898bb51fd840b5bd9fcb51c4a5a44cf96f2dc8fa75ac984507dac
MD5 e492232aea1ad95399c5d849b6bc8333
SHA1 3d08cd8e7240897125c93c95aa58234ac123ed2b
SHA512 d41e89bbb806b6161813f225f0234fa095d2c442d69f1558957bd5987fbcd40cb6a21ff660e15c624b24a63c214c1803b82c8cc7e1932c7cc944623e150f1e8d
SSDEEP 384:/7fnhUVfCtg6UFfCwKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVXb9kMR6trocbf:/jnhUJWg6cfCw8F1+UoAYDCx9Tuqh0V5
TLSH
T1C9B2DA2F644CCB7E9FC00AADDC196F976D9802C796A88D4047FE994C03C77EA911A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

3986a6e0-6653-48f0-814d-5a129c899c01.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\3986a6e0-6653-48f0-814d-5a129c899c01.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 d08e0b0c721620fbc0f7e750f7886f5988283fbbfaba7629fff2c4e7b0494513
MD5 723f6b0a1cfab144b45c838228933c93
SHA1 09edbd80c78c132e61be819492654fa61d6a585a
SHA512 3f017a0a0b6d55dae2cd8455245f5ac06d654e455d5f97f293c6baee67a50f23ee1831e830aeaee132201b0c88519d90f417cb71746ebc772269a6608be44b1c
SSDEEP 768:52/UxvxjgC+P3oGuSO5IR/2MIYNa8S5oYklnA+fD184pTAX:RZj3+P3oXg0TWRdAEWuAX
TLSH
T1F913B035B9E4BD639CEAA2C5B60A6753AEE05123D1C41AEC89EC5F0E06C73AE5307815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 bb529f34c6d98697599e16dcd0fb2e8f0b650b56fc1efbfeed096da7489967cb
MD5 28741553402ebd724486b3e00f1c7864
SHA1 d9cfae53dc78b3ff2fe22b8eac55e4a2ad8eca1c
SHA512 0bc5d7405be59fd4e4e25fa79b08649bd017724fff7a76459f03919507ebf6b4d66596251e7b2093f70d2475ea70592ad8a29c04a38d781575ef726232614744
SSDEEP 768:wK32OuSO5IR/VMIYNa8S5oYklnA+fD184pTvE:wK32fgrTWRdAEWuvE
TLSH
T116F2BF35A9E4ADB39CE993C5B60677427EE09223D1C81AD8C9EC6F1E06872BF1303C15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 3950899a0517f0db1c55e8d07f6e4698fc7f7c628ebfb5cc6a18f698d03acd36
MD5 79254700da0e63f6b7a27ef021e7f35b
SHA1 f326c9556a4b440f3684063c0f9f75d2ba1e16ea
SHA512 7c6f536c837bd96405f4cb9310dd388a950e1bb06a36b5e61d99662897755d51b1d4767694898c3c8572f650c22f82ac0e9d9a0520f239c5c4e7dfb1c3abb587
SSDEEP 768:gFQ13MwgROuSO5IR/MMIYNa8S5oYklnA+fD184pTvE:T13AfgeTWRdAEWuvE
TLSH
T16103AF3699D4DDB7ACEA93C5F60A7302AEF04263D5C85AD8D6EC6F1E01972AE0307C15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 8b40cf06ca879df430498497b0f69614526625a41983a525efcb06e3502079f5
MD5 fe3cb4f3da04bca964629248ee14e9fa
SHA1 1e639d36a511c17d7d2a633858db296f292efe87
SHA512 4753b9a31795f11baf581007a819e15662a8b4df97628fb44e2949b5daf7ccb2d054452652156653f2d55cf52d2bffbbaa7c15d21a7f4c93e30ae9218b982caf
SSDEEP 768:do/UxvxjgC+23lflSO5IRhJMIYNa8S5oYklnAajSH8L4:nZj3+23V5ghHTWRdAgS04
TLSH
T14C03C03AED94A9738CF663C4734AA357AEE55263D0C56AF88AEC1F0E07C72AD5303451
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a9e7693f-ef62-4383-b8eb-685a3deaf1e5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\a9e7693f-ef62-4383-b8eb-685a3deaf1e5.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download