8e7ba6995f730673b121e7dbe01d448a5422c3032222e8f143b0015640dcff3e

Analysis

max time kernel
148s
max time network
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260629-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
05/07/2026, 00:15

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
mbox/blocked.html
Size 1KB
Sample260705-aj61lsft2t
SHA256 8e7ba6995f730673b121e7dbe01d448a5422c3032222e8f143b0015640dcff3e
MD5 e2249d8852be9d0f7f15f56e5894fb16
SHA1 43fa5bc552fc415e1982d5c1f2fc39fd195b566e
SHA512 2d15af0517bf9ad40494e005d368428a5b9bfedb970b3088ddf2b033783fba0c495d697038fbbeaa9c8ee22f1330b59a4927345d0d33fdeea9153d456b897f60
TLSH
T102410F1A56A0040628B2E2B96FF3A308FAD350179307456A3ECDA2878FF5611C5E3FCC
MD5 SHA1 SHA512 TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
812	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134276841483107672"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3047816590-610495838-277027736-1000\{A701B40D-34A1-45CB-8D32-8CEF1EBE02F9}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3044	msedge.exe
3044	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
5776	msedge.exe
5776	msedge.exe
5776	msedge.exe
5776	msedge.exe
5776	msedge.exe
5776	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5776	msedge.exe
5776	msedge.exe
5776	msedge.exe
5776	msedge.exe
5776	msedge.exe
5776	msedge.exe
5776	msedge.exe
5776	msedge.exe
5776	msedge.exe
5776	msedge.exe
5776	msedge.exe
5776	msedge.exe
5776	msedge.exe
5776	msedge.exe
5776	msedge.exe
5776	msedge.exe
5776	msedge.exe
5776	msedge.exe
5776	msedge.exe
5776	msedge.exe
5776	msedge.exe
5776	msedge.exe
5776	msedge.exe
5776	msedge.exe
5776	msedge.exe
5776	msedge.exe
5776	msedge.exe
5776	msedge.exe
5776	msedge.exe
5776	msedge.exe
5776	msedge.exe
5776	msedge.exe
5776	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5776	msedge.exe
5776	msedge.exe
5776	msedge.exe
5776	msedge.exe
5776	msedge.exe
5776	msedge.exe
5776	msedge.exe
5776	msedge.exe
5776	msedge.exe
5776	msedge.exe
5776	msedge.exe
5776	msedge.exe
5776	msedge.exe
5776	msedge.exe
5776	msedge.exe
5776	msedge.exe

Suspicious use of WriteProcessMemory 33 IoCs

description	pid	Process	procid_target
PID 5776 wrote to memory of 5880	5776	msedge.exe	88
PID 5776 wrote to memory of 5784	5776	msedge.exe	89
PID 5776 wrote to memory of 812	5776	msedge.exe	90
PID 5776 wrote to memory of 5784	5776	msedge.exe	89
PID 5776 wrote to memory of 5784	5776	msedge.exe	89
PID 5776 wrote to memory of 4644	5776	msedge.exe	92
PID 5776 wrote to memory of 4644	5776	msedge.exe	92
PID 5776 wrote to memory of 4992	5776	msedge.exe	94
PID 5776 wrote to memory of 5720	5776	msedge.exe	93
PID 5776 wrote to memory of 4992	5776	msedge.exe	94
PID 5776 wrote to memory of 4992	5776	msedge.exe	94
PID 5776 wrote to memory of 5720	5776	msedge.exe	93
PID 5776 wrote to memory of 5720	5776	msedge.exe	93
PID 5776 wrote to memory of 4620	5776	msedge.exe	95
PID 5776 wrote to memory of 4136	5776	msedge.exe	96
PID 5776 wrote to memory of 4620	5776	msedge.exe	95
PID 5776 wrote to memory of 4620	5776	msedge.exe	95
PID 5776 wrote to memory of 4136	5776	msedge.exe	96
PID 5776 wrote to memory of 4136	5776	msedge.exe	96
PID 5776 wrote to memory of 3556	5776	msedge.exe	98
PID 5776 wrote to memory of 5372	5776	msedge.exe	99
PID 5776 wrote to memory of 3556	5776	msedge.exe	98
PID 5776 wrote to memory of 5372	5776	msedge.exe	99
PID 5776 wrote to memory of 2256	5776	msedge.exe	101
PID 5776 wrote to memory of 2724	5776	msedge.exe	104
PID 5776 wrote to memory of 2724	5776	msedge.exe	104
PID 5776 wrote to memory of 2724	5776	msedge.exe	104
PID 5776 wrote to memory of 4804	5776	msedge.exe	106
PID 5776 wrote to memory of 5076	5776	msedge.exe	107
PID 5776 wrote to memory of 4808	5776	msedge.exe	108
PID 5776 wrote to memory of 3328	5776	msedge.exe	109
PID 5776 wrote to memory of 3328	5776	msedge.exe	109
PID 5776 wrote to memory of 3044	5776	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\mbox\blocked.html
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ff846fcc188,0x7ff846fcc194,0x7ff846fcc1a0
  2⤵
  PID:5880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1688,i,14196246303884012118,15124345074409101246,262144 --field-trial-handle=2936,i,9096349428914298435,10783469769303437567,262144 --variations-seed-version --mojo-platform-channel-handle=2932 /prefetch:2
  2⤵
  PID:5784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1928,i,17286002082061959979,18143164278570411045,524288 --field-trial-handle=2936,i,9096349428914298435,10783469769303437567,262144 --variations-seed-version --mojo-platform-channel-handle=2964 /prefetch:11
  2⤵
  - System Time Discovery
  PID:812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2316,i,1835616190125059503,7845779433108458004,524288 --field-trial-handle=2936,i,9096349428914298435,10783469769303437567,262144 --variations-seed-version --mojo-platform-channel-handle=3264 /prefetch:13
  2⤵
  PID:4644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3552,i,9829713792936600181,5975403287917683181,2097152 --field-trial-handle=2936,i,9096349428914298435,10783469769303437567,262144 --variations-seed-version --mojo-platform-channel-handle=3616 /prefetch:1
  2⤵
  PID:5720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3556,i,16217076384897898013,7685687087686139470,2097152 --field-trial-handle=2936,i,9096349428914298435,10783469769303437567,262144 --variations-seed-version --mojo-platform-channel-handle=3632 /prefetch:1
  2⤵
  PID:4992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4232,i,2266902811798185590,16677252293368008800,2097152 --field-trial-handle=2936,i,9096349428914298435,10783469769303437567,262144 --variations-seed-version --mojo-platform-channel-handle=4776 /prefetch:1
  2⤵
  PID:4620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4244,i,233127991828831330,15080223717115151033,2097152 --field-trial-handle=2936,i,9096349428914298435,10783469769303437567,262144 --variations-seed-version --mojo-platform-channel-handle=4780 /prefetch:9
  2⤵
  PID:4136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5376,i,5472899577994394677,5700129908514659315,524288 --field-trial-handle=2936,i,9096349428914298435,10783469769303437567,262144 --variations-seed-version --mojo-platform-channel-handle=5456 /prefetch:14
  2⤵
  PID:3556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5368,i,12386648988002173999,16061186541435180899,524288 --field-trial-handle=2936,i,9096349428914298435,10783469769303437567,262144 --variations-seed-version --mojo-platform-channel-handle=5436 /prefetch:14
  2⤵
  PID:5372
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,2597387992530015126,8501386178582314323,524288 --field-trial-handle=2936,i,9096349428914298435,10783469769303437567,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:14
  2⤵
  PID:1892
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,2597387992530015126,8501386178582314323,524288 --field-trial-handle=2936,i,9096349428914298435,10783469769303437567,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:14
  2⤵
  PID:2256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=6460,i,14671418824661290180,16149286599116160194,2097152 --field-trial-handle=2936,i,9096349428914298435,10783469769303437567,262144 --variations-seed-version --mojo-platform-channel-handle=6508 /prefetch:1
  2⤵
  PID:2724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4876,i,10528278960284329862,17338797710374214995,524288 --field-trial-handle=2936,i,9096349428914298435,10783469769303437567,262144 --variations-seed-version --mojo-platform-channel-handle=4828 /prefetch:14
  2⤵
  PID:4804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4860,i,16971001754490306647,5825767022275347805,524288 --field-trial-handle=2936,i,9096349428914298435,10783469769303437567,262144 --variations-seed-version --mojo-platform-channel-handle=3820 /prefetch:14
  2⤵
  PID:5076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4880,i,6522211757833582904,9447592928738213774,524288 --field-trial-handle=2936,i,9096349428914298435,10783469769303437567,262144 --variations-seed-version --mojo-platform-channel-handle=5036 /prefetch:14
  2⤵
  PID:4808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3880,i,3524199945643687597,2721259014475946121,524288 --field-trial-handle=2936,i,9096349428914298435,10783469769303437567,262144 --variations-seed-version --mojo-platform-channel-handle=5552 /prefetch:14
  2⤵
  PID:3328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5612,i,12047569189598977443,3309385307574911063,262144 --field-trial-handle=2936,i,9096349428914298435,10783469769303437567,262144 --variations-seed-version --mojo-platform-channel-handle=6420 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3044

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1608

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1676

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2fd9384e79508a77111bb6310e9414898358885ca508610502ff6f1a15ad704f
MD5 714e68787bb5a6d2fd82139f833a5d0d
SHA1 f7a22adc92641d05515b3ae096da910924f11c1a
SHA512 b133f27abfa4ed5bdbd3eaf997e0664f0627537d4882fdaa63c0b1b301219d07f8ba46857db9a196b1210c29ed9f79e6cfd8c688d502b118a21640805665f762
TLSH
T16DD080F43795F605C786617357D0574173750872241647095051D01CCC645DD63DB1EF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 233c07bfff48b5fbad30cd7d90579abd0886400017cd6e7fb037e5626abb1a4d
MD5 71fa6328268340b183c55defa643c474
SHA1 7c004defb21dc2981b3091495c900e02b34e3a86
SHA512 e5b634d358633981cd343c3da26ee18738fb6c54b2334814637e0a9a45343d14770fed7a09c63d55dd190bf7ef111664ba5872f5d5ce925e6bee783e166c75b7
TLSH
T1D4D080F437A5F505C786617357D0574173650872101647095151D02CCC645DD63DB1DF
MD5 SHA1 SHA512 TLSH

Submit Download

2c5e1306-3c19-4b4c-adc3-e9c5c9d6abb3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2c5e1306-3c19-4b4c-adc3-e9c5c9d6abb3.tmp
Size 14KB
SHA256 51ea576690bd40b3bf9666ffe67caea0b1e7b4843e071b76c267b5ea80395b71
MD5 22303070695e358a9b6caf55b2eb2e24
SHA1 ff8d61525fed15339c18c6dedc47aa1cb0c704d2
SHA512 ccacc3c087edd2d505731bcd5a27f7d1b8c4f6ae73095c4839bc59dee2e61e2e04e080a81dd3aa87cbc7d704de6d09ae92dc1d46005137a47bb233e26907cc7b
SSDEEP 192:sxRz9RfFyM/jK1Ml8UQzFS/fXskDlWdfCr1zoA8p19qk/g6+WNIYyJJqGSIgDKJ:sxRJx5qpS/fXskhW4YX/5IRoC
TLSH
T15B62E816A52499778CDBD20DFA51BF53D6F95473E2901E44AAFCCA0C01E7AED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 5adbe8d0cfbbf93943c06f5c716eef2606de33632cf77fc05b425b748c039603
MD5 0f8281276c0302f8bfa6ced6cfa07f10
SHA1 43bf8870e9c19c73b33ecf20cb75d86af75d6c43
SHA512 97daa8734456557c7cbe1244fa25f11514a9a342899ea9fc034385b589608c2cda20458cc09c12e5dd397130731f24daba39d02e686fdb42f872ffcead8f76fa
TLSH
T11E7185CB142309A5CB3641B637DD04B6B3BAD85E76072E33149CB0717DEA3D6E846430
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 ecc7e08cf778502e27f3cd6298306d9f79c799de617434b839fbe98a39e4243d
MD5 ad36ea966741b3503ff9e1af19cdf8dd
SHA1 983b375f0259947694e349b16d23958b4306efe1
SHA512 4561aa1d02cd92497a3c782d24156437940470bdb20b7925bec51a3f0ca55571f3b66af70bab8b9868833a54a3ee2741c1a2b4bd6f6f18a16145fe07600b4c0f
SSDEEP 96:DMOI0xsZahNifjh1JzBwBj6n5Zu0m2DzR:DHI0xsZahNifjhn1kj65Zur2DzR
TLSH
T158A1BEF7C3E8812DC91156F4AB156F2FCE2D0A14432C3C6AC8D4AE5B93E2871E10565E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 af68e8a8f7733d6a9a2fecc4a595e61124caf059781663e8da64e2ea22d4fd08
MD5 db8f2d1d2737f311dd0c16ff92d218df
SHA1 2bdd73fc24a1a856db3e5d24546fc5e687a50d59
SHA512 1ad0ada2da0b49392904524538b35d7d33114d12f42724d4b6df6d8f34f9bf9f02138e2eea43c1ac4f6c1f0ad4a5dbc29c76c19f26b67782e97c9c5c12ada995
SSDEEP 192:sxRzSRfFyM/jK1Ml8wFS/fXspDmWdfCr1zoA8pj9qk/g6+WNIYyNJqGSIgIJ:sxRux5bS/fXspSW4YZ/5IZos
TLSH
T11162E916693499778CDBD20DFA51BF53D6F91433E2941E44AAFC8A0C01E7AED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 19948bad2babb8a6d0b4727bcceff593b13ce7a15a560cd825f79f9da7d57f0f
MD5 49fe852a93e40d598b559295f055959f
SHA1 54c178fed69fee65294856ea1d5336ecd31054dd
SHA512 3ba6c7033307a1091a616cc6f35b86df1d69aae2530f6cdabfc87807a874a43737ab101a20db86b230f8f3bf48def5ef2717b9427a88f16496e288f173aa57cd
SSDEEP 192:sxRz9RfFyM/jK1Ml8wFS/fXskDmWdfCr1zoA8pj9qk/g6+WNIYyNJqGSIgD4J:sxRJx5bS/fXskSW4YZ/5IZoI
TLSH
T1DC62E916693499778CDBD20DFA51BF53D6F91473E2941E44AAFC8A0C01E7AED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 4e35d19d1e21489544e9fb5c9f6f732b960a088c1aa8e7032efd72058bd80916
MD5 5310fd8a4d14b56a10312dc984c940d7
SHA1 9024a7dd8206ac709bd327396ace23c2f7006a40
SHA512 079bb65d7f855672538c3257f41c5a4fd1ab0dcfe195464c105916e19a11a8360b3241ec2552f172dfa1e750d0b50d076069d00cee73b3624cf19f485b834992
SSDEEP 768:AIox30WguMfnA8F1+UoAYDCx9Tuqh0VfUC9xbog/OVOcciSro5Kl6zI:AIox30WguMfnAu1jazXiJ5K9
TLSH
T161C2EB3B640CC77E4F845EACEC25AE976DD801CB97988D5447FA890C03C77EB921A4DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 75366f50e042aa1723ef3677a4aa8823410e1687aed23f209a331118a21702dc
MD5 cb9f657b8fd6088410ee8ec9a9046abf
SHA1 b147086f042c934546930dc9c304fd70054356a3
SHA512 ef5032413f313849a9d74da13478215d13fc02eb36076c6cb01595e7d9f368ed6f9ea69d5bef19ab85a0d9f98ac5b96c3624b297b8aa7fbbc7ae6f29b34cfcb3
TLSH
T1C2A002349DD01826CD608E7321C9066876607A24B31DCF03B1AE004CCC5638D6D0D2C7
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 4545ae0047f325992ff6187177f0521c65be3a445630eada65010600f47f17ef
MD5 17025318eafd8dfab2a3e0016d8dd05c
SHA1 e41f65c0c7b4b009395390795ff68c6d32d18a99
SHA512 0993bbad237f75ea34b956eed04677d205a9e4a42193d89fffce990a766e8f530ee1bebee12a62b3402920d18a3299e0c47e7b6c8e48bae6b62b970db45ea7f8
SSDEEP 96:K8wQKpiWeTOKQ8IDMpdLBB9WV6wgF9K48gr9cTrC1BGHB+PrZ7o:yzZbDMpdLBB4V6BFX8grSTrC1BGHB+Pq
TLSH
T1D7918A00747F17403C7E681D866CD82A918134DA369EB42B3BD950D61F6BE415FFEACA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

15cfe1b7-c0a7-4f2e-be77-bddae2c953ea.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\15cfe1b7-c0a7-4f2e-be77-bddae2c953ea.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 36e27d10c2b1b5f33a404a0bbfaa1850564a0a8b3bd32d637b6e21480c89fa03
MD5 5edaace3cd1baa5db3281ee730605c3d
SHA1 509fba86c32672477bc5ff89856f5526108d76a6
SHA512 7a442d7c61f992b36d738a042f1e5368f25b304a5039720fb4871596d56dd9925387acea6b3b0b19a4fb2caa269ddf80df91f4c8a6c0e92e2cecfd53be25cf5e
SSDEEP 768:Arv+4UNbd83GaNoOdKiuQOJIIT5/hUAFjQIMyOV3N5E9ENeb9Mm:Absbq3GH1FTVhNFUIpONNm9b+m
TLSH
T1AF13BF31B894DBB39CB7D795B20A72437FF4426B89C60A84D9DEAB0D468B0DD131BC25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 42KB
SHA256 2d9f011380c909447145732c341500851fcb4346178d47c22db71445ac12679e
MD5 ac4a6247832d97e3a4450c3ba7299b09
SHA1 01b8eae06e1f36f2bcd6974e908dba2bb614117e
SHA512 097302324fcfe40aaaf0c7f60469efb8cebbbc6ee6fe4a80892e4271c8ad494fc677015a5868c1ac9f72499f0fcc45b6a4603e7d4019f08e32d886b591b93b41
SSDEEP 768:9F1j+9a3cwgLNoOpkiuQOJIITg/hUAFjQIMyOV3N5E9ENeb9Mu:U9a33dFTwhNFUIpONNm9b+u
TLSH
T172136BF258C38676DCAE8B87673D2E42AEBCC167B8855940B7CD5A0CCD471BFC246814
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 e0b68563e1c18ca396e80d4e2f0df0a7609656b41816971f4abfa1e4b1ab19b5
MD5 69f1198dc5e6a4f4e4f673bfcc42d910
SHA1 b1b7ee4d1ccf8275345a7ca229956ad6dad848cb
SHA512 8555762a9cf1c4f464126bcaebe1d7731bea12600d0efb42d06b894faa24be4620abc7bb33b42c61c6637cd50af74dc207ebb7824110a2d33d2cd8118446112e
SSDEEP 768:9rv+4UNbdF3aMLQOJII7/hUAFjQIMyOV3N5E9MFg+8r0mL:9bsbf3BDhNFUIpONNmvDrv
TLSH
T10A03CF31E8A4D6B39CE797C5760A72437FF441A399C60B84C9DE6B0D824B1DD231BC66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 576514a35b2717c0ce9ce39924a59ab40f0df481dddb65b682301c60805c3acc
MD5 6d95f8a50f0d4cf3101e7c9d301426eb
SHA1 59492f642cfe057a600ab07ab65e82effa3cb0d8
SHA512 f8cb72994c143bfac0cc845cfdaf8eb26d04625f20dec74124581255425858538388b82dc05dc74820dc87828df214cd931f24eb7ca90167177cef8b8d405cd8
SSDEEP 768:Zj+9u3NNoOpKiuQOJIIT5/hUAFjQIMyOV3N5E9ENeb9Mu:E9u3oTFTVhNFUIpONNm9b+u
TLSH
T134F2AF31AC91DBA38CE7D7C5770A3287AFF4426B99C61A449ADEAF0D02871ED0357C25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 73a1bd07e8784ac6cc0a4b8e41edd73da7791fce261581070e0de34d509b20ec
MD5 2bc211053bd50a2d8da07e32ecf2878b
SHA1 af7fa005c4ea8158038c86a17415e89f8e1d7c11
SHA512 7a570374019f140a0d5a136323e67d7063386be630d1254bcd01e475a10e6fdce2a29867dbf001fb26d10d0b713f5fd9f53e0116b2e97b4df1350406cab5489b
SSDEEP 768:cj+9u3wNoOpKiuQOJIIT5/hUAFjQIMyOV3N5E9ENeb9Mu:79u3BTFTVhNFUIpONNm9b+u
TLSH
T176F2AF31AC91DBA38CE7D7C5770A3287AFF0426B99C61A449ADEAF0D06871ED0357C25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

252d6bbf-e751-4196-a69a-bed56e2f0cfb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\252d6bbf-e751-4196-a69a-bed56e2f0cfb.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download