ddae18c1f0a962fc63ac01a3148a5239225feaa3a01d93aab2931da02033797b

Analysis

max time kernel
148s
max time network
132s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/09/2026, 00:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
130550884.html
Size 35KB
Sample260930-al6gvsae85
SHA256 ddae18c1f0a962fc63ac01a3148a5239225feaa3a01d93aab2931da02033797b
MD5 71623ecf1c312423eee1eda14e91114f
SHA1 fbc3911359bcec4542a7eeef3709cc94b917c179
SHA512 d4164e9a8aeb3c632351cebeee52d8db15529541689bf562358bb2a6fb64243f0a82223d296778f0ab7c653d4a8e461c91e1bd1dc7cd4ef408156a665646f57d
SSDEEP 768:DITk3ivgwNKlowNO4IYGmRHRg45PqR4AWM5wUJkrSLtSYvsPNl6y2GndIRbhcJ5C:DITGizKlowNO4IYGmRtPzu1fTNQHs
TLSH
T18CF213D076C4E51717CE0E73BF4EB9E9D17B5CA36484B54782A8B68D68B8217C2E0CB4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1540	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-650287814-2715975232-1279715623-1000\{C2B1DCE8-162A-41E9-A6D5-39D48517C108}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5416	msedge.exe
5416	msedge.exe

Suspicious behavior: LoadsDriver 1 IoCs

pid
4

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1780	msedge.exe
1780	msedge.exe
1780	msedge.exe
1780	msedge.exe
1780	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
1780	msedge.exe
1780	msedge.exe
1780	msedge.exe
1780	msedge.exe
1780	msedge.exe
1780	msedge.exe
1780	msedge.exe
1780	msedge.exe
1780	msedge.exe
1780	msedge.exe
1780	msedge.exe
1780	msedge.exe
1780	msedge.exe
1780	msedge.exe
1780	msedge.exe
1780	msedge.exe
1780	msedge.exe
1780	msedge.exe
1780	msedge.exe
1780	msedge.exe
1780	msedge.exe
1780	msedge.exe
1780	msedge.exe
1780	msedge.exe
1780	msedge.exe
1780	msedge.exe
1780	msedge.exe
1780	msedge.exe
1780	msedge.exe
1780	msedge.exe
1780	msedge.exe
1780	msedge.exe
1780	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
1780	msedge.exe
1780	msedge.exe
1780	msedge.exe
1780	msedge.exe
1780	msedge.exe
1780	msedge.exe
1780	msedge.exe
1780	msedge.exe
1780	msedge.exe
1780	msedge.exe
1780	msedge.exe
1780	msedge.exe
1780	msedge.exe
1780	msedge.exe
1780	msedge.exe
1780	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 1780 wrote to memory of 5764	1780	msedge.exe	88
PID 1780 wrote to memory of 4748	1780	msedge.exe	90
PID 1780 wrote to memory of 1540	1780	msedge.exe	89
PID 1780 wrote to memory of 4748	1780	msedge.exe	90
PID 1780 wrote to memory of 4748	1780	msedge.exe	90
PID 1780 wrote to memory of 4324	1780	msedge.exe	92
PID 1780 wrote to memory of 4324	1780	msedge.exe	92
PID 1780 wrote to memory of 5188	1780	msedge.exe	93
PID 1780 wrote to memory of 5188	1780	msedge.exe	93
PID 1780 wrote to memory of 5188	1780	msedge.exe	93
PID 1780 wrote to memory of 6048	1780	msedge.exe	94
PID 1780 wrote to memory of 6048	1780	msedge.exe	94
PID 1780 wrote to memory of 6048	1780	msedge.exe	94
PID 1780 wrote to memory of 1244	1780	msedge.exe	95
PID 1780 wrote to memory of 1244	1780	msedge.exe	95
PID 1780 wrote to memory of 1244	1780	msedge.exe	95
PID 1780 wrote to memory of 3712	1780	msedge.exe	96
PID 1780 wrote to memory of 3712	1780	msedge.exe	96
PID 1780 wrote to memory of 3712	1780	msedge.exe	96
PID 1780 wrote to memory of 6044	1780	msedge.exe	98
PID 1780 wrote to memory of 5656	1780	msedge.exe	99
PID 1780 wrote to memory of 6044	1780	msedge.exe	98
PID 1780 wrote to memory of 5656	1780	msedge.exe	99
PID 1780 wrote to memory of 4984	1780	msedge.exe	101
PID 1780 wrote to memory of 2420	1780	msedge.exe	105
PID 1780 wrote to memory of 1356	1780	msedge.exe	106
PID 1780 wrote to memory of 5456	1780	msedge.exe	107
PID 1780 wrote to memory of 1212	1780	msedge.exe	108
PID 1780 wrote to memory of 1212	1780	msedge.exe	108
PID 1780 wrote to memory of 5416	1780	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\130550884.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2d8,0x7ffc7364c188,0x7ffc7364c194,0x7ffc7364c1a0
  2⤵
  PID:5764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1820,i,634745853296123069,6041603636627379632,524288 --field-trial-handle=2168,i,5149625877008077442,10815616596190086586,262144 --variations-seed-version --mojo-platform-channel-handle=2472 /prefetch:11
  2⤵
  - System Time Discovery
  PID:1540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1524,i,16747326275482624503,2496314221418429946,262144 --field-trial-handle=2168,i,5149625877008077442,10815616596190086586,262144 --variations-seed-version --mojo-platform-channel-handle=2164 /prefetch:2
  2⤵
  PID:4748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2376,i,7897698031493122992,12227314689569488824,524288 --field-trial-handle=2168,i,5149625877008077442,10815616596190086586,262144 --variations-seed-version --mojo-platform-channel-handle=3224 /prefetch:13
  2⤵
  PID:4324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3572,i,18098276261078579204,15116665051601489426,2097152 --field-trial-handle=2168,i,5149625877008077442,10815616596190086586,262144 --variations-seed-version --mojo-platform-channel-handle=3628 /prefetch:1
  2⤵
  PID:5188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3596,i,15141525876006723631,3082482768045992587,2097152 --field-trial-handle=2168,i,5149625877008077442,10815616596190086586,262144 --variations-seed-version --mojo-platform-channel-handle=3632 /prefetch:1
  2⤵
  PID:6048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4304,i,10790583817814827286,543455015495399000,2097152 --field-trial-handle=2168,i,5149625877008077442,10815616596190086586,262144 --variations-seed-version --mojo-platform-channel-handle=4344 /prefetch:1
  2⤵
  PID:1244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4328,i,9791127650383249548,16121176651544599396,2097152 --field-trial-handle=2168,i,5149625877008077442,10815616596190086586,262144 --variations-seed-version --mojo-platform-channel-handle=4416 /prefetch:9
  2⤵
  PID:3712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5352,i,3273215620791317547,12656769452479972075,524288 --field-trial-handle=2168,i,5149625877008077442,10815616596190086586,262144 --variations-seed-version --mojo-platform-channel-handle=5436 /prefetch:14
  2⤵
  PID:6044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5332,i,17833077335024711302,14681540787595552117,524288 --field-trial-handle=2168,i,5149625877008077442,10815616596190086586,262144 --variations-seed-version --mojo-platform-channel-handle=5412 /prefetch:14
  2⤵
  PID:5656
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5256,i,110124466006892586,14130242806118333900,524288 --field-trial-handle=2168,i,5149625877008077442,10815616596190086586,262144 --variations-seed-version --mojo-platform-channel-handle=5896 /prefetch:14
  2⤵
  PID:4308
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5256,i,110124466006892586,14130242806118333900,524288 --field-trial-handle=2168,i,5149625877008077442,10815616596190086586,262144 --variations-seed-version --mojo-platform-channel-handle=5896 /prefetch:14
  2⤵
  PID:4984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3656,i,3561603380266172352,12289827016336313450,524288 --field-trial-handle=2168,i,5149625877008077442,10815616596190086586,262144 --variations-seed-version --mojo-platform-channel-handle=5128 /prefetch:14
  2⤵
  PID:2420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4380,i,9629003634501732869,443789538326811826,524288 --field-trial-handle=2168,i,5149625877008077442,10815616596190086586,262144 --variations-seed-version --mojo-platform-channel-handle=4328 /prefetch:14
  2⤵
  PID:1356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3696,i,14823190961470601507,4586655696033323169,524288 --field-trial-handle=2168,i,5149625877008077442,10815616596190086586,262144 --variations-seed-version --mojo-platform-channel-handle=4744 /prefetch:14
  2⤵
  PID:5456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4316,i,1460941685618155610,6067708278899190431,524288 --field-trial-handle=2168,i,5149625877008077442,10815616596190086586,262144 --variations-seed-version --mojo-platform-channel-handle=5628 /prefetch:14
  2⤵
  PID:1212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=808,i,9967215608482325925,3820177534665533873,262144 --field-trial-handle=2168,i,5149625877008077442,10815616596190086586,262144 --variations-seed-version --mojo-platform-channel-handle=6224 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5416

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4260

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2432

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 7331d61b72578f10058ae20f1a7351dc99070a754006884c0b775bb57bffd9cc
MD5 df1098b0a62fea8609e624a81ae2865a
SHA1 eb148addd613d8dae155058eacdf967eae295b15
SHA512 0ec5916b4d090394f668a1ee0ca76c2125146f8b8507c9e7dd1bb90a8aed21e61551b85c2a32b975aea241df7bda238c513a58ebe378cd3af3d77e71803ef6d8
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7s:fwUQC5VwBIiElEd2K57P7s
TLSH
T1D2B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e0217c0f2953c25b5ecacbfc82728d57c809cf5450e9203a48d2faaff8836c2b
MD5 04b3b3f543557524e135a08dac44efda
SHA1 4f856c66c17971828ff8fd245186ea6b1b303bc7
SHA512 a11f6ce9f676e6157f7d9b86de7e7c3f0b7758052de5b00121c54342e363951818cf7787ed1baf39e636241455a76f6b90dc0405f5eaf0361a7c1056c3560c1a
TLSH
T1F5D02B71EFBB6C03D184207C100182C01620FC40BF6902C4170001A4042C5444313205
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 6ff73de37e74e04bc32af0dd2dd926bcd2d6c623deb8eb066c65071254002178
MD5 a569aede49695d8fc8b039ab7024fd75
SHA1 de14644ea578b78d3cd08753552602517297fd30
SHA512 b87c4dc8e3e3be51d402a4d2d6166ca389ae05ea059903425483e2dcc38b0f2394d29a7a81921700d62e2a403e94a7b3e6c02c186966742a945996df580c0065
TLSH
T18FD02B71EFBB6C03D184207C100282C01610FC406B6902C4170041B4042C5444313201
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 2bbc5b7ee04f705bdb6dee731e25269046f74c491af00770cdecfcb83906afa9
MD5 9c6c91557533096b09db5758f9ee0c72
SHA1 b2539f96bbb93aaf694cabf7b4054fa5ce0fdf60
SHA512 cb3172b546448c5d3b1b464502372cbc9e4588c3f0e969bd82e6736e1f8030a9bd1dccd79d22a86273e84b1747a2a3d2b324dfcd3b3263c51811b60f9e8b2177
TLSH
T1C16142919B609094FBE8047ECAE01CC73BF98590ECC7DF5E1598F5745847329215B20C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a08cb.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5a08cb.TMP
Size 3KB
SHA256 8f5cb3083836737c79bed00ddba04769ce83cac993b2e8ef2626ad292411228d
MD5 d2705a007608c618f0f49835a07b7f29
SHA1 24bad62d3671e5a9b094707ec54ca6a990d67082
SHA512 e39021c89c666023c98fa38eb01ae942f8cb2094f2d9a8941a0662b411fca33c200d01982a5c033896b830a3646fb1b0003480721464a767511e2ef5d2999dac
TLSH
T1736164909FA09090FBE8047ECAE01CC73BF98690ECC7DF5E1598F5745847329209B10C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 aefe46f2bf8b93cfb8e98dbcaa86e404329dea5551f868a29f71498216d84e1c
MD5 151b754c770a58ccaa1120edcbb68edc
SHA1 a8f9c517f96a7bd3267b6810e028c8e65083536f
SHA512 d56fec3d4fe20bd226435875e52125db7f519ed5d78e44de2457050be74d495a433808ccf6cb8dc809967f45737b33e272cd8e192e2c562b6fbb18d15a8c0b50
TLSH
T1F8419BF3C3E4966E890156F0AB14BE1BCE1D0915832C7D5AC9E4EE1B93F24B1E24199F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 dbb89d5819054f05f381a99eb5741a72f1bedbff66c924a8be0c1e0555e6a0a3
MD5 914fd1e638df66bb02a55c761a8dab08
SHA1 d717a66fff2ab5460d8a918bc8e6d76147a5cfc5
SHA512 dd3a1f67cfef28e671ec4552020e356d210f1ba6656dd1994736aeb20e95dc838aec29286a8e1b450833f6fc16121e4a56216fd74fffde22bf19c5a73a068a08
SSDEEP 192:sxR+Rabq/fIs9CDzoA8p4f/g6+WNIYFikGsIgDyJ:sxR+Oq/fIsQy+/5IGi
TLSH
T1B032B715AD78A97B8CCBD20DBB55BF53E2F91032A1911F48B6FC862C14E76DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 fca79b80bddf05cbabf3a5cfbfd4aca2345a0fbe85bbc8f3b8b2a4174d864afc
MD5 57b4c288009bb08eee4e31b6513fe05f
SHA1 ef26133600b8086dc7a0543c2352a9bacfc4f829
SHA512 48bbdc929ad6643a2dcc1ff1d98086f7436b580ef435789e03fb52ad87e54146b4442d7349236abcabddd04978c6fc82cab249b23de8c2b32cf4ac42eababa40
SSDEEP 192:sxRxRabq/fIsHDzoA8p4f/g6+WNIYFIkGsIgIJ:sxRxOq/fIsHy+/5Ics
TLSH
T12D32B6156E78A97B8CCBD20DBB66BF53D2F91032A1951E48F6FC862C14E66DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 038ebae1bbadce9f297c75abedd4a6c2fc8949ea125ed32f6fe203b80f64374b
MD5 59d56f30b017132538701188de5e86ff
SHA1 01606a01c6f4b87d0ae21435e43b0aeef15eb912
SHA512 0f9d1c1f8734b319fff1106b79d328fb67b0d1766cc7c88b4e2f136975a18b5334c7c6f88971a9f8b5d9b032a6c23646e97998d54f63f0baa765b91cef656f3b
SSDEEP 192:sxR+Rabq/fIswDzoA8p4f/g6+WNIYFIkGsIgDQJ:sxR+Oq/fIswy+/5Ico
TLSH
T11032B715AE78A97B8CCBD20DBB65BF53D2F91032A1911E48B6FC962C14E66DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 d289dedba4c53d76dcb90b49c9bc68ec1483937cfc08860b55df1d72b7e30944
MD5 ac33c1a711441aa7ffd4d96080d8b2b0
SHA1 fa03abe28aa1226c9bf4b3cb2778a0d23e1ceb5b
SHA512 7204a03ba296d6fdcc4c42f740fdbaa336675e3d7c03a88c83f72142404d5903be02e2459c51e056e530d91a741571770d39e0b13df140a7d6cb023afa9b443d
SSDEEP 384:+0e2P7wfCtgwiFf4eKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVS29aSRnbro+PJ:+l2P7KWgwef4e8F1+UoAYDCx9Tuqh0Vw
TLSH
T1B8B2DA2F640CCB7E4FD04A9DAC196EDB6DAC02C796588D4047FE994C03C77EA921A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 f92ed7f659585f805d1c28eac76fd73653d8d0e055eee3a2cc67a96af50339b5
MD5 409f61db3873451631711eec1fe3252e
SHA1 ec2ae52873a6eabf32915befcf90b79407e304bb
SHA512 de889d42799e9d9de3b82b653244f4048729555f64d49b5ade99ec00eeb3e8a50209b3cef6ee798c6f5812a15263595d559782b59c579e28bdb0ce47df84e3cb
SSDEEP 96:KIj6KANvyKsQKC4QKlGbR8HjpTXbkHqqurbKGiu6:UIpzax
TLSH
T12291CF30327A0240783D295481E5A72F8681326B7068EA6B7FEE40A5CF77E445DFD8ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

a9d73b5c-92da-44ad-980f-dc8c7fa45e34.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\a9d73b5c-92da-44ad-980f-dc8c7fa45e34.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 dfb34ec4eef1906fd6354808135dee91d3d2382959c7ad3cbeb0c11f2314eaeb
MD5 eda8485913840ec94ae1fecf96156cc1
SHA1 4cd089e6778b124f17fc714bb9b03dd9b2240b62
SHA512 f6405bd2f5dbda994bd8e5c22e2445766e71dc7f9af844f664e9fd722c795494d6c20546b54dde7fe1e5d1d546f6eb0bf265b454432f35b1872133dff6798574
SSDEEP 768:l/UxvxjgC+z3HvzRf9cphtMzktuyEMbxyJugQVTJ7vvmeXGEXL:IZj3+z3PbDyEmxyJJq17vQEXL
TLSH
T10C03C036ACA59C3398F7D1847645A783EFF4057384CA2E9888DD5E0E158B7AC130BC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 31052a1a5cb339e18ff1d971f3e1d20b5de9879fe0b90787ce568840ef422230
MD5 ca8d4f70d5cd0600a1f1801b1b6fd48d
SHA1 3e4d25e47b7a22b5264def8f709ec0d163e4fc3a
SHA512 97647b456eb03c3ee14333cd3d7cc38ef1e1ab8a2ae29062f7cdc3a79c0378d7b495ff84f79e99c6499c1d5eaa6f33230472fa17dfddd38a9ff5ce9d545a8d5a
SSDEEP 768:8G39vbRf9cphtMzktuyEMbxyJugQVTJ7vvmeXG4YGHw6:8G39zDyEmxyJJq17vQ4YUw6
TLSH
T16AF2BF729C75DCB398FAC1857542B783AFF441A384C91A84D4DDAB1E118B6AD230BC3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 b621cf5efaf104667f44fbde9ecfd6fe504df075928ddd0e60fd26b89d866abf
MD5 365305bd26c8f47ce2f82f357fe5df36
SHA1 00afb35d8a071feb66df667966b12dacbc12f3db
SHA512 81fa91167cea1e4d8c20380b0f0e1237aa7c73842b9a98f098098029aad3986a4e9d9ab9019a2ecf8c4a1ada2c2ab4559780b946d381f9210451a63e4fa4b1ac
SSDEEP 768:ZG3+vbRf9cphtMzktuyEMbxyJugQVTJ7vvmeXG4YGHw6:ZG3wzDyEmxyJJq17vQ4YUw6
TLSH
T114F2BF729C75DCB398F6C1857542B783AFF441A384C91A84D4CDAB1E118B6AD230BC3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 af1fe53c178761305ff36b760c6278bc527c33aa32538def7d399c6782cee976
MD5 5a4594cd79c72fe45328e8f50a8c4ef2
SHA1 f0cfea680be42d55f69083ada6e794a6cfbfb953
SHA512 4b63287fc2d951b06e87ea9db6ae4f85f45bad33df8b3233f740de69879dd243adf842d85848a0c60e9851367e5bc8db819c4c813b01e7d2ca36fc95a16f3ac5
SSDEEP 768:zFQx3jwgxvbRf9cphtMzktNyEMbxyJugQVTJ7vvmeXG4YGHw6:Wx3TzyyEmxyJJq17vQ4YUw6
TLSH
T1FEF2AF739CA4CCB79CFAC685BA45B643EFF541A3C4C96A84D5CCAE1D105B5AC130BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 a248007d8fefb4ef0ac2b939efa61bba4c236e1743b03b709f03897630f05453
MD5 7e55d4db59dc50373319bd101f79014a
SHA1 a562adb41d805c0cdab231cd2ed6a6f381f46ead
SHA512 868100056af9682b3a33555ea6abd0f78db999df613e3b9dbf12697e5baf47eb1653d6f2fd2dbbbfdfad49b9cbbd09f4f2c7b57073aee56887cb10c0cde140b5
SSDEEP 768:p/UxvxjgC+k3yfXf9cphtzyEMbxyJugQVTJ7vvmevwSHtBk:cZj3+k3gAyEmxyJJq17v6Sbk
TLSH
T1F603CF36ACA59C3388F792843649E787EFF505B384C62AA485DD6F0E129B3AC5307C17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ad0d2f63-fc02-4ae5-b7ba-8b3b7a92dcd8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\ad0d2f63-fc02-4ae5-b7ba-8b3b7a92dcd8.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download