4a4f495c2a92279c668697a83d6af3923b16342987bae253b400b3c100da2572

Analysis

max time kernel
148s
max time network
130s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260618-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
23/06/2026, 06:59

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Eaglercraft-1.20.4-Updated--main/Eaglercraft-1.20.4-Updated--main/index (2).html
Size 2KB
Sample260623-hr84yabs71
SHA256 4a4f495c2a92279c668697a83d6af3923b16342987bae253b400b3c100da2572
MD5 91ddd512f6781af237a7913699f6e758
SHA1 b7b5555a039783aeb151024c33caa4218099984d
SHA512 bb78ffc779ff1374af8229968433a1e35da70215b6df7d0495932a3a69f8b6cca25740fe967e95029de8e2b11247e12dcdda2ffd2b1d6a26eaf9ca27ee22024a
TLSH
T13541335BB64CF59F42A0435989B3F10C817EC63B926094A276C9206FE3C9B2DC1561E5
MD5 SHA1 SHA512 TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
620	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134266716953283419"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-537605601-1362463912-856654178-1000\{3E844F7D-3DC4-4659-B5CA-48C5444BF26C}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4960	msedge.exe
4960	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5592	msedge.exe
5592	msedge.exe
5592	msedge.exe
5592	msedge.exe
5592	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5592	msedge.exe
5592	msedge.exe
5592	msedge.exe
5592	msedge.exe
5592	msedge.exe
5592	msedge.exe
5592	msedge.exe
5592	msedge.exe
5592	msedge.exe
5592	msedge.exe
5592	msedge.exe
5592	msedge.exe
5592	msedge.exe
5592	msedge.exe
5592	msedge.exe
5592	msedge.exe
5592	msedge.exe
5592	msedge.exe
5592	msedge.exe
5592	msedge.exe
5592	msedge.exe
5592	msedge.exe
5592	msedge.exe
5592	msedge.exe
5592	msedge.exe
5592	msedge.exe
5592	msedge.exe
5592	msedge.exe
5592	msedge.exe
5592	msedge.exe
5592	msedge.exe
5592	msedge.exe
5592	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5592	msedge.exe
5592	msedge.exe
5592	msedge.exe
5592	msedge.exe
5592	msedge.exe
5592	msedge.exe
5592	msedge.exe
5592	msedge.exe
5592	msedge.exe
5592	msedge.exe
5592	msedge.exe
5592	msedge.exe
5592	msedge.exe
5592	msedge.exe
5592	msedge.exe
5592	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 5592 wrote to memory of 1140	5592	msedge.exe	88
PID 5592 wrote to memory of 620	5592	msedge.exe	89
PID 5592 wrote to memory of 5868	5592	msedge.exe	90
PID 5592 wrote to memory of 1548	5592	msedge.exe	91
PID 5592 wrote to memory of 5868	5592	msedge.exe	90
PID 5592 wrote to memory of 5868	5592	msedge.exe	90
PID 5592 wrote to memory of 1548	5592	msedge.exe	91
PID 5592 wrote to memory of 2620	5592	msedge.exe	93
PID 5592 wrote to memory of 2620	5592	msedge.exe	93
PID 5592 wrote to memory of 2620	5592	msedge.exe	93
PID 5592 wrote to memory of 2548	5592	msedge.exe	94
PID 5592 wrote to memory of 2548	5592	msedge.exe	94
PID 5592 wrote to memory of 2548	5592	msedge.exe	94
PID 5592 wrote to memory of 552	5592	msedge.exe	95
PID 5592 wrote to memory of 552	5592	msedge.exe	95
PID 5592 wrote to memory of 552	5592	msedge.exe	95
PID 5592 wrote to memory of 5312	5592	msedge.exe	96
PID 5592 wrote to memory of 5312	5592	msedge.exe	96
PID 5592 wrote to memory of 5312	5592	msedge.exe	96
PID 5592 wrote to memory of 3768	5592	msedge.exe	98
PID 5592 wrote to memory of 3768	5592	msedge.exe	98
PID 5592 wrote to memory of 1828	5592	msedge.exe	99
PID 5592 wrote to memory of 1828	5592	msedge.exe	99
PID 5592 wrote to memory of 2616	5592	msedge.exe	101
PID 5592 wrote to memory of 2068	5592	msedge.exe	105
PID 5592 wrote to memory of 756	5592	msedge.exe	106
PID 5592 wrote to memory of 4388	5592	msedge.exe	107
PID 5592 wrote to memory of 5508	5592	msedge.exe	108
PID 5592 wrote to memory of 5508	5592	msedge.exe	108
PID 5592 wrote to memory of 4960	5592	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\Eaglercraft-1.20.4-Updated--main\Eaglercraft-1.20.4-Updated--main\index (2).html
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x284,0x7ff9dbfec188,0x7ff9dbfec194,0x7ff9dbfec1a0
  2⤵
  PID:1140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1816,i,12542683416830370618,3596024753263187289,524288 --field-trial-handle=2492,i,5004697967563472287,936113880801109576,262144 --variations-seed-version --mojo-platform-channel-handle=2548 /prefetch:11
  2⤵
  - System Time Discovery
  PID:620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1604,i,2420841018549001370,16413384951522343695,262144 --field-trial-handle=2492,i,5004697967563472287,936113880801109576,262144 --variations-seed-version --mojo-platform-channel-handle=2488 /prefetch:2
  2⤵
  PID:5868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2336,i,14066330162821321161,17947332690473828017,524288 --field-trial-handle=2492,i,5004697967563472287,936113880801109576,262144 --variations-seed-version --mojo-platform-channel-handle=2648 /prefetch:13
  2⤵
  PID:1548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3592,i,1298933168295729890,1726972419338284305,2097152 --field-trial-handle=2492,i,5004697967563472287,936113880801109576,262144 --variations-seed-version --mojo-platform-channel-handle=3648 /prefetch:1
  2⤵
  PID:2620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3596,i,16503853691784902912,4322121439612469598,2097152 --field-trial-handle=2492,i,5004697967563472287,936113880801109576,262144 --variations-seed-version --mojo-platform-channel-handle=3656 /prefetch:1
  2⤵
  PID:2548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4416,i,2533797287102373922,15691759160899846200,2097152 --field-trial-handle=2492,i,5004697967563472287,936113880801109576,262144 --variations-seed-version --mojo-platform-channel-handle=4632 /prefetch:1
  2⤵
  PID:552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4436,i,16342549149651285237,2031428198261830492,2097152 --field-trial-handle=2492,i,5004697967563472287,936113880801109576,262144 --variations-seed-version --mojo-platform-channel-handle=4484 /prefetch:9
  2⤵
  PID:5312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5460,i,14343954949990104238,10136192966706040620,524288 --field-trial-handle=2492,i,5004697967563472287,936113880801109576,262144 --variations-seed-version --mojo-platform-channel-handle=3708 /prefetch:14
  2⤵
  PID:3768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5468,i,3978889073622129662,199725482036041188,524288 --field-trial-handle=2492,i,5004697967563472287,936113880801109576,262144 --variations-seed-version --mojo-platform-channel-handle=3724 /prefetch:14
  2⤵
  PID:1828
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6052,i,5712591136559560324,6001996613471328851,524288 --field-trial-handle=2492,i,5004697967563472287,936113880801109576,262144 --variations-seed-version --mojo-platform-channel-handle=6068 /prefetch:14
  2⤵
  PID:4816
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6052,i,5712591136559560324,6001996613471328851,524288 --field-trial-handle=2492,i,5004697967563472287,936113880801109576,262144 --variations-seed-version --mojo-platform-channel-handle=6068 /prefetch:14
  2⤵
  PID:2616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5372,i,12058480283603582301,13326438026856847652,524288 --field-trial-handle=2492,i,5004697967563472287,936113880801109576,262144 --variations-seed-version --mojo-platform-channel-handle=5224 /prefetch:14
  2⤵
  PID:2068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5016,i,17156559682555807295,6600416487236539616,524288 --field-trial-handle=2492,i,5004697967563472287,936113880801109576,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:14
  2⤵
  PID:756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5232,i,16840627055731556453,13771808727534577452,524288 --field-trial-handle=2492,i,5004697967563472287,936113880801109576,262144 --variations-seed-version --mojo-platform-channel-handle=6112 /prefetch:14
  2⤵
  PID:4388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5472,i,276370953427415773,8934418813257344014,524288 --field-trial-handle=2492,i,5004697967563472287,936113880801109576,262144 --variations-seed-version --mojo-platform-channel-handle=3748 /prefetch:14
  2⤵
  PID:5508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5744,i,5507880594344503163,16529757996037305948,262144 --field-trial-handle=2492,i,5004697967563472287,936113880801109576,262144 --variations-seed-version --mojo-platform-channel-handle=6236 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4960

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1004

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1052

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 994380ffd288a5f1a9acc9eb76a487a55b12cc1daec839d811240f6cbdc4da3a
MD5 f5ed4946834be586ac6410ed88740a7c
SHA1 6108ce368e8b3bb8012956bb25606c3b16835c7b
SHA512 76bf60b37c50422ab125edd3da70629e685408a106655a9b7e5cb6aa7b6a9000c76d8ac2f5dc85e58e893b61bef9b539b9488ac894f1fc1338a58944dc9f4711
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P77:fwUQC5VwBIiElEd2K57P77
TLSH
T1E5B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ff19e848916f9346514f95113e3d80cd569935b36d785719b19d90f9f740fbd6
MD5 5ab41182d14eb22e7143c63d2e18b77b
SHA1 ca8c747e1a5e38b0f0a08b492fcea6d3a75865c2
SHA512 bbecb67f89826ee2bd219f14bbc8ca87fb260f8a22bd2d52b6ccdb72d47a4b58eeb897a42a6e591bd4e75fe870419162172353d5d3ec7f1fb0fbc7b5dc6adcf1
TLSH
T1AED080757B467B11D58F0472D424E271A737455135D296057170C10E55602D1FFCA0B7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 5f46172781024fe58b7a7d87a406b81679d17de445e9e90110d33f5747ecc226
MD5 08a5ef0e8eb4590a7f0e6f821698071e
SHA1 1b756aceae48cf2649d310d7ab4883595c2e5bde
SHA512 95c72989df00c3caf1230ca41b6dcbc24f8a592c45202f7b16044b8d574fe569d4db8614652b0d1695d3fe1d795b07ea334de5b4fa9dcbb9d27de40a55592586
TLSH
T155D080757B467A11D58F0476D424E271A737455125D296057170C10E55602D1FFC90A7
MD5 SHA1 SHA512 TLSH

Submit Download

0d2365fc-d017-44d7-b8fe-e17fe3d350d5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0d2365fc-d017-44d7-b8fe-e17fe3d350d5.tmp
Size 27KB
SHA256 3ff32a02eaed813b776bd4ade013f8107580d2c28147749f84d8900f7de877aa
MD5 06beddb34a8978222e215cb82f5ac3e1
SHA1 4f013f3d0c97b2ad754335539c10e75ed6f90af1
SHA512 783bf5ee1e601cb4f03ede9132fe770a308d8807b2575317050f80bc9f01c0ac02efe29cd0e3f4449c9f9784ecab1b13fe0a1188c7aedaeb375a084d49454c94
SSDEEP 768:NmymipWgvHfSv8F1+UoAYDCx9Tuqh0VfUC9xbog/OV1LxguroRLPM2Dd:NmymipWgvHfSvu1ja8NglRLP7B
TLSH
T1CCC20C3B640CC77E4F844EADEC25AE976DD801CB9B588D5447EA880C03C67FB911A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 4bf32ee7f019196ca525e2112d27aba6298304890d750098f0b9b9a415648622
MD5 c29b78e97598753c1536d9f629fddef3
SHA1 3bbd48a1558710ce426e73374c767005fbbc5810
SHA512 4fedb7043d29c631af2eb22521323f568ded16b77cda65069d7c1629b7092685e2ca534ee82d52ed268b7389d254ce5aef7c1f01e791b3f9842df65119f564ee
TLSH
T184610BD59D5109A6EF661339CCE228DA3BB0093FC90F2ED55598E138BB5AF12DCF0054
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5952e9.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5952e9.TMP
Size 3KB
SHA256 265026b080e3670f7bbb50206f590b0a82011c20d3d84d1101f581250feda8a8
MD5 ff68a91ff602477e7dcf35e91d6a2c9c
SHA1 e1a4047acaf9c419f81c46248643643b87d48244
SHA512 5495818631790d00243551e73e349b9483d8512565aedc83852905b396fdfb1d56b1882ff6eec9c032ebb2ad8c93f9f4fe66dbb68f0ffc18873e480d7c204e16
TLSH
T1B2612DD59D5109A5EF261339CCE128DA3BB0093FC90F2ED55498A138BF5AF12DCF0054
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 e0a4b0612cd26241e86e7778f2c96ea7a023b83d4deaf23fa39c145566232149
MD5 49a95296e993901b0a68be3e9cc14bd0
SHA1 b7c85cb816fc74fe80ab3c2b5bbc92861799a0b2
SHA512 ab21ef942c10ed3bb3dbd1528a53f55b58cb5778b17d6a06cd6c6b82ec41ef89158c92b2c38458ff6048dce89309cef427fae503207886d71f1bc11688d7ace6
TLSH
T18731DDF3C2E8866D890146F0BB146E2BCE2D0914832C3D1AC9E4AF1B93F2471E14184F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

dc85ba73-f429-420d-b451-d5d1b72aaba7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\dc85ba73-f429-420d-b451-d5d1b72aaba7.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 16c67a47836b3a20ef6f331c9d95e663a58e5742364fd7fc8ba4f9a5524c07e4
MD5 af08191cb5f43fa8984f6cb4ce71ad63
SHA1 eb5648f6368cee2c847179080faad3963a3b2bde
SHA512 7bb4f0169a72694650a5a3d77122de6c32b10fadbd217f9dced4124f65a0dfccff235f5c896cbf96b5d87ef3ccac926d02c35794c4045edc66f9999ce7c136e5
SSDEEP 192:sxRDROyM/jK1Ml8wF+/fAsRwLzMdybXzoA8p4F/g6+WNIY4pj2GxIgIJ:sxRDIb+/fAsRUIv4/5Ids
TLSH
T10552D9166A34597B8CDBD309FA517F53D6F81573B2905E48AAFCCA0C04E6AED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 675bf2a2197a4d0e088ed1ab922b3719b85d149c8693c95dfab7404c7e08612b
MD5 99600b174b08a533392a823869eb48de
SHA1 7100103ac588346dbe10acca23995e427ebcd926
SHA512 bc5e41ab2913c1d122e89330f3ed81cd72f84a56a2eac59bebbdad282b3c9f274332d6454f5db9bef761277fcb34835a7de44e6c17ab40631b70312e5d23eac9
SSDEEP 192:sxRsROyM/jK1Ml8wF+/fAsmwLzMdybXzoA8p4F/g6+WNIY4pj2GxIgDsJ:sxRsIb+/fAsmUIv4/5Id8
TLSH
T10852DA166A34597B8CDBD309FA517F53D6F81572B2905E48BAFC8B0C04E6AED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 1cc5534166281f3abd9ceecf6bccbb71ee0068ab2192f0b87f2cab6b91a66ae9
MD5 56c8dec4ad6dda8d5c2a8f6a8515c52d
SHA1 2f0d5ff7ee138ce28c6ce88e7fd7b41a3ea64648
SHA512 a38720cd27c7b9c7e2fcc2153f77c2d95be7781f402bf1d43a6f3346a43327094d3dab8344772d7ebfb0b1759e976d63638d9281990da9d0a38513991ed3217f
SSDEEP 192:sxRsROyM/jK1Ml8UQfF+/fAsmwfzMdybXzoA8peF/g6+WNIY4pc2GxIgDOJ:sxRsIqd+/fAsmgIvi/5I8m
TLSH
T1BC62C9166A3459778CDBD209F6517F53D6F81572B2905E08BAFCCB0C04E6ADD221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 710f962ced6cdf312715deb5de29ea65ad6c247c6e7f005b7558008965e779f2
MD5 163e9dc871a7737924d7ae46f5006f3e
SHA1 f0e6a49dc76aae2ef58e88adff89aea1f13e51e4
SHA512 e309878f352037d8d5197e9b6d51be89ceb151c1677fae6f70ba10d8b937b8528cffc60c34d09167e97a6e1c7267f977afb8fe61fed08c5d05f3f2b952b8c7ed
SSDEEP 96:KIJ+KKcqon0LHBZJ2/ZG9JH2KRTJV2lPnOFR6cKbaKG2:kNon0LHBZJSZGHHXTJV2PnOFeH7
TLSH
T1D391944036766200387E345C80A28E9F1A45357B741BA43B7BB968F55E2FE406EFDED8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

e71f2317-967c-4cb5-85c6-e306c578bca6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\e71f2317-967c-4cb5-85c6-e306c578bca6.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 22d447a8a018503fbe83bfa1b60217deae331b40ba43ff291de30674cb5b7ee0
MD5 9af0a0302ac6d292f98e7404f3a20fab
SHA1 5bb13b26d6f4482708c4b2a277aa349affdf2455
SHA512 c98e9740ad05cd4d2ba6ae6bdc5394dc6f41ca450be56a1a0fe82b910a2924ea7d809ec99e100eb8dbd1e25979eb6430df4e591d46d04942b4a727b91a472fc8
SSDEEP 768:6j+9E3uhjsfyjf2M8fCDA7NpespIRM0UmkTziwjgzS75AjRIvN:59E3uhwfcfEfRQsZ0UmYb5AFIvN
TLSH
T19BF2BF3294209D774DF7EB8969033B4B6EF00213A1C52E8899DDAF0D45C76EC670BA57
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 9ad0ba8241c7ab5779cf325ca910982cadeac29fd021eac5363629b647f5a83b
MD5 80a2cd729429b0d4a62cfde92adbbd81
SHA1 5ff54eab2c689b0b6b4856fbdb6bbbdea3b6612c
SHA512 9222fb796b25863161a7cfd5ff8785b8e5387bb854bbe1a693e6a01e1004d955c896c169f06112566103c17eb7bf1b0d860ae4dba629dde14f6c7f1d4dee7393
SSDEEP 768:Uj+9E3dljsfyjf2M8fCDA7NpespIRM0UmkTziwjgzS75AjRIvN:D9E3dlwfcfEfRQsZ0UmYb5AFIvN
TLSH
T10DF2BF3298209D774DF7AB8965033B4B6EF00223A1C53E8899DDAF0D45C76EC670BA57
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 4303dd0c74af6ec0976f95417e385488bef04a41f718936a1663d47ebce4953f
MD5 fa61b958c51c2859f856244cbd91c389
SHA1 34af59107bb88b809ea3c568a10d5c630c7c7f92
SHA512 0a8b9b45041a73740f5b9b583b8115dbd494150ac3aab73346d19362e9a662990e691ba0b7a54a7011fe1622ad57c1939a8d02cb9c47d8eb0bf3b7d0341ab984
SSDEEP 768:zF1j+9d3bwgShjsfyjf2M8fCKA7NpespIRM0UmkTziwjgzS75AjRIvN:i9d3shwfcfEf+QsZ0UmYb5AFIvN
TLSH
T1D2039E3388508E7B5DF79B89A9073607AEF00263D5C57A94AADDAE0C01876EC134BE56
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 02c15ff46e0897ffe8ad258084f52238fdb518f4acb00dc51166c397f33f416e
MD5 6393a64d2a3ff3d0a2151a9139abc9d7
SHA1 063e1ac94feb60455e8d5fdfcbbc934e4a7d81ad
SHA512 38f01f7e70c20e7081da267545e282722029f344fe4e5e13043fe24089794da808fa9e8ad95f13ab2f658a2775490464b017dfb9a8540c13ee12086e07a3e047
SSDEEP 768:3jaeqD4MlshiLdMmf3bSNfyjf2MUA7NpespIRM0UmkTziwjgzGsnApXLPQTU:3qcjhIdMo3bofcfBQsZ0UmYknKXD
TLSH
T16E03CF76D8205DB78CB7E68A264336576FB00253D2C43AC8DCDD6E0D42932DD670796B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2afee2a3-101b-4520-9150-b5a8f843e4f5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\2afee2a3-101b-4520-9150-b5a8f843e4f5.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download