49d3d83bca36157fd7bb83a48a6b49b4ac0392ed64a92b318a09943ae3efe5eb

Analysis

max time kernel
148s
max time network
153s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/07/2026, 12:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 84KB
Sample260730-pg9faa1vhx
SHA256 49d3d83bca36157fd7bb83a48a6b49b4ac0392ed64a92b318a09943ae3efe5eb
MD5 07c2fbcab80e949edf31aae293787471
SHA1 cdbedc691f29b0cb0d87414df67a5e2fd2188776
SHA512 bda4ad5138921a6efa9287c0c87ac5c19777529392ce67875b86298e0f490e185581ab21b4ceb174b86f602a2ec34492651814a970aea6e029939bc2b70446eb
SSDEEP 1536:jSZypqUfQI/nEaDWUh8Sy+lAMatcya3IXS:jSUIqvh8Sy+lA/cfIXS
TLSH
T16483F87DD2EE10A10576815CC48F39246AE2FA6FD7184278F6BE51681FCCEBD9913B08
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1816	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134298875616866645"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3797332335-34111092-3597280141-1000\{8A44849E-CCD5-4DB1-BD92-7C5121009F6A}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3276	msedge.exe
3276	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe

Suspicious use of WriteProcessMemory 34 IoCs

description	pid	Process	procid_target
PID 2672 wrote to memory of 5208	2672	msedge.exe	88
PID 2672 wrote to memory of 2352	2672	msedge.exe	91
PID 2672 wrote to memory of 1816	2672	msedge.exe	92
PID 2672 wrote to memory of 2352	2672	msedge.exe	91
PID 2672 wrote to memory of 2352	2672	msedge.exe	91
PID 2672 wrote to memory of 5792	2672	msedge.exe	93
PID 2672 wrote to memory of 5792	2672	msedge.exe	93
PID 2672 wrote to memory of 2804	2672	msedge.exe	94
PID 2672 wrote to memory of 4908	2672	msedge.exe	95
PID 2672 wrote to memory of 2804	2672	msedge.exe	94
PID 2672 wrote to memory of 2804	2672	msedge.exe	94
PID 2672 wrote to memory of 4908	2672	msedge.exe	95
PID 2672 wrote to memory of 4908	2672	msedge.exe	95
PID 2672 wrote to memory of 1296	2672	msedge.exe	96
PID 2672 wrote to memory of 260	2672	msedge.exe	97
PID 2672 wrote to memory of 1296	2672	msedge.exe	96
PID 2672 wrote to memory of 1296	2672	msedge.exe	96
PID 2672 wrote to memory of 260	2672	msedge.exe	97
PID 2672 wrote to memory of 260	2672	msedge.exe	97
PID 2672 wrote to memory of 4152	2672	msedge.exe	99
PID 2672 wrote to memory of 3320	2672	msedge.exe	100
PID 2672 wrote to memory of 4152	2672	msedge.exe	99
PID 2672 wrote to memory of 3320	2672	msedge.exe	100
PID 2672 wrote to memory of 2372	2672	msedge.exe	103
PID 2672 wrote to memory of 4644	2672	msedge.exe	106
PID 2672 wrote to memory of 3396	2672	msedge.exe	107
PID 2672 wrote to memory of 2804	2672	msedge.exe	108
PID 2672 wrote to memory of 2700	2672	msedge.exe	109
PID 2672 wrote to memory of 2700	2672	msedge.exe	109
PID 2672 wrote to memory of 6012	2672	msedge.exe	110
PID 2672 wrote to memory of 6012	2672	msedge.exe	110
PID 2672 wrote to memory of 4612	2672	msedge.exe	112
PID 2672 wrote to memory of 4612	2672	msedge.exe	112
PID 2672 wrote to memory of 3276	2672	msedge.exe	113

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x264,0x268,0x234,0x288,0x7ff9042fc188,0x7ff9042fc194,0x7ff9042fc1a0
  2⤵
  PID:5208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1844,i,3875732916212761652,14647932693912282056,262144 --field-trial-handle=2788,i,1380173523906706538,943752362152368712,262144 --variations-seed-version --mojo-platform-channel-handle=2784 /prefetch:2
  2⤵
  PID:2352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2112,i,13657896638492259655,9013315523685915405,524288 --field-trial-handle=2788,i,1380173523906706538,943752362152368712,262144 --variations-seed-version --mojo-platform-channel-handle=2856 /prefetch:11
  2⤵
  - System Time Discovery
  PID:1816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2448,i,10588998871823196934,17817983090029397062,524288 --field-trial-handle=2788,i,1380173523906706538,943752362152368712,262144 --variations-seed-version --mojo-platform-channel-handle=3084 /prefetch:13
  2⤵
  PID:5792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3572,i,10745363987667001005,361066177007822432,2097152 --field-trial-handle=2788,i,1380173523906706538,943752362152368712,262144 --variations-seed-version --mojo-platform-channel-handle=3620 /prefetch:1
  2⤵
  PID:2804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3576,i,15185892282242000220,10818012847914322903,2097152 --field-trial-handle=2788,i,1380173523906706538,943752362152368712,262144 --variations-seed-version --mojo-platform-channel-handle=3632 /prefetch:1
  2⤵
  PID:4908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4224,i,5551431232228670072,6631058319129431361,2097152 --field-trial-handle=2788,i,1380173523906706538,943752362152368712,262144 --variations-seed-version --mojo-platform-channel-handle=4288 /prefetch:1
  2⤵
  PID:1296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4264,i,2256214769956812596,15122685116216478477,2097152 --field-trial-handle=2788,i,1380173523906706538,943752362152368712,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:9
  2⤵
  PID:260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5332,i,14796258680935557261,16878406175118969621,524288 --field-trial-handle=2788,i,1380173523906706538,943752362152368712,262144 --variations-seed-version --mojo-platform-channel-handle=5388 /prefetch:14
  2⤵
  PID:4152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5288,i,12090361027323938702,7896510251679312714,524288 --field-trial-handle=2788,i,1380173523906706538,943752362152368712,262144 --variations-seed-version --mojo-platform-channel-handle=5368 /prefetch:14
  2⤵
  PID:3320
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6048,i,11862626517797453245,740087796622615904,524288 --field-trial-handle=2788,i,1380173523906706538,943752362152368712,262144 --variations-seed-version --mojo-platform-channel-handle=5968 /prefetch:14
  2⤵
  PID:2836
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6048,i,11862626517797453245,740087796622615904,524288 --field-trial-handle=2788,i,1380173523906706538,943752362152368712,262144 --variations-seed-version --mojo-platform-channel-handle=5968 /prefetch:14
  2⤵
  PID:2372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1236,i,16149154433948295129,2090484684260703648,524288 --field-trial-handle=2788,i,1380173523906706538,943752362152368712,262144 --variations-seed-version --mojo-platform-channel-handle=1232 /prefetch:14
  2⤵
  PID:4644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1240,i,404095782559770843,11723842167705096333,524288 --field-trial-handle=2788,i,1380173523906706538,943752362152368712,262144 --variations-seed-version --mojo-platform-channel-handle=6524 /prefetch:14
  2⤵
  PID:3396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1228,i,13910578417003367905,991735008483205358,524288 --field-trial-handle=2788,i,1380173523906706538,943752362152368712,262144 --variations-seed-version --mojo-platform-channel-handle=6552 /prefetch:14
  2⤵
  PID:2804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5424,i,15908060545474939576,8038129368119624517,524288 --field-trial-handle=2788,i,1380173523906706538,943752362152368712,262144 --variations-seed-version --mojo-platform-channel-handle=1184 /prefetch:14
  2⤵
  PID:2700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5520,i,15746413655112505854,15627671665697589296,524288 --field-trial-handle=2788,i,1380173523906706538,943752362152368712,262144 --variations-seed-version --mojo-platform-channel-handle=4596 /prefetch:14
  2⤵
  PID:6012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4648,i,11487343268205977099,15499429243243262744,524288 --field-trial-handle=2788,i,1380173523906706538,943752362152368712,262144 --variations-seed-version --mojo-platform-channel-handle=4636 /prefetch:14
  2⤵
  PID:4612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6396,i,1408978917430949343,1870654404120026857,262144 --field-trial-handle=2788,i,1380173523906706538,943752362152368712,262144 --variations-seed-version --mojo-platform-channel-handle=6580 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3276

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:748

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5560

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e413e02b9e80ee8d76d52c1043fc32251e2d7634d4b2fbd970df9ace9d91831a
MD5 22959b3a06a842ac30237dd57e8a3801
SHA1 0b7c28071a592034aa2607038000f085c7bb6362
SHA512 644add9ab912ad7fdfc55bc7a1b84482c75cc9bc69a59d169bae63a0400619d999846ebbadb0ef2bd6d35c2bd08a5f07053b600874dd5dfcbda7e8f3076131fe
TLSH
T1A5D02BE476408A0CC980203335F6524092018910D801D1480040B325CC845C1257F0DF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8aaa68aad07ba45abe53bd513aa5f7e7b21bd1b29db6e1d5c1e0a79a5f4eb890
MD5 74012bbce5fada7634c1da1b567562b3
SHA1 09db27f38f27e35986cfd407b57f6f83c8fc59f8
SHA512 c1a6a98f972793c84274c29552107bfe07b775c7c8121e5fdf137ebf9a7cc3f4eb43fe9eadfc842e7b92ca7281bbcea3d660bdd8fc9adc56add068510c41e48d
TLSH
T1FBD02BE07640890CC980203335F75240920189108401D1480040F335CC845C1257E0CF
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 8544e57ffd72b55db0aaaac72ff131928a1332dd5e3a05417be98a46aa417340
MD5 bd478a56b114b609ebc3ead71556ed30
SHA1 24efc1f7f5da2864d869f380e093cef22228bb3d
SHA512 d791f8c8c48554f5d66993e127b408cbf1486423bcbf3981f0ad8eae87ff051d98a629cf761ce3c5a2f9c19772fda677c9ae2d4e9e11ad4c3ee7b60060819f2d
TLSH
T130E026C845D8C36FF2496447426C6B8C82A1364A92C8798E17008C887141440A38ABD4
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 ff8fe841f9aa6d00854f4b908be1b1c1046f833eeb3948c033c37e5ae20293bf
MD5 cd251c9e1f1c81bf4cdbd9ffd3973601
SHA1 e9a6181087cdd8e720f1f15fe527004457ace98f
SHA512 7f9b3f0e2c7ddfa8de31d6625780f2de593a95e5d0b3ef59a0d1ec1106ec6c2b1c1dad51a864d8a7dcb9f32e3ce24b383d29a464c06127a447c81b50401d00c2
TLSH
T12F513BF123E21AC2D32C69B697D28CD836F5A86F04832E107C94BFF09986F0790E1857
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5978df.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5978df.TMP
Size 3KB
SHA256 22877e95b7680d056b07dfe509069bd530f942970f52b0fdfa6f6bffcfdde936
MD5 d0f57dbd5aae58df5f8ce81d17e33ad0
SHA1 e130a81e7aea41cd858d4e8762b5117b5cc437e3
SHA512 a3a17b64d6022885c1a9b504d6215b1c461f213e462ffbccb93bf34fa990fcf051dfc77d4627eefd0dda3ca35870babcc6098d6c9ed4770566c1c547dd95e773
TLSH
T17E512AF123E21AC2D32C69B6A7D28CE836F5A86F44831E107C94BFF05986F0790E1857
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

955f2f4e-9e42-4a24-a991-2aae331caef3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\955f2f4e-9e42-4a24-a991-2aae331caef3.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 8d4657f06ea372d573760ba394649313c946b05e3a518bf2d7f76da88193a80e
MD5 e728c806dc1b91ee3af23adef5dc4fbb
SHA1 835191460d4f1db89a6cf047b3a51493119d6ccb
SHA512 fb029aee0f287da8fceb1406101eb84cc32c4da07ea7318c458693dc399a1456566c3064643e11791b9bd2ce6d3c05c5e89d67614018dde772d10fb573a85d09
TLSH
T14F51BBF7C2E4866D891156F0AB147E2BCE1D0959832C3C6BC9E4EF1BA3E2471E101A5F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 4dcd2db7eb23d9bee667509f8d5902fe912d8ff01ebdc28f61d1dc44a7e215ee
MD5 e074283f7124975d6a6732d66861c3a0
SHA1 726ce4cf82451cdcec9c066bcc8ddf58ffe98579
SHA512 23ac489cd580c507c73b2479e760b3b6834005e43a9d9e0115ba64209d62ac0efe3eed02d3a3de0841832b32a6eaa247b4b8fc348a58880c5046332ca1f537a9
SSDEEP 192:sxRXR4yM/jK1Ml8wb1/ftszfyprQ5x+zoA8p4//g6+WNIYn83hL+G1IgDqJ:sxRXWl1/ftszfyKG/5ITRLL6
TLSH
T12252C9156A349D7BCCDBD20DFA417F53D6F91563A2905E44AAFC9A0C00E67ED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 d85abda4439e685a8232e78395bfed5e34efc055886318987541913c954af0b6
MD5 b5105e0de3fc4576095fdbdcae5855e6
SHA1 0ac2d157a037844a62eb44858b42425bdb1fb206
SHA512 849a6d710afce1c49bff6f0119afe59eb4acb9f991c7c81286da5e651c3203ad63fbf9c0df7e73ffaeb63f86972719dea46afac17614352f00b03cd49f4c3cec
SSDEEP 192:sxRXR4yM/jK1Ml8wb1/ftszfaprQ5x+zoA8p4//g6+WNIYn8YhL+G1IgDQJ:sxRXOl1/ftszfaKG/5ITOLL4
TLSH
T1FE62C8156A249D7BCCDBD209FA417F53D6F91563A2905E44AAFC9A0C00E6BED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 df31b86f6c5a989b49eb3eef709091c2761663bdfe4bd92d676208ca8480dbc4
MD5 8c03672756edd6ece4b3c9dd85891121
SHA1 657ddfd0be203494f92dc868c354ff913944dae7
SHA512 daa497035f9b5695196cee2475ba3c1f4d19a9a6cd8270067a650bb38da347fd143eb8ef4ff43c1b10a1478bba63687f5ff05e2443ab6916677235296ab66794
SSDEEP 192:sxR4R4yM/jK1Ml8wb1/ftsJfyprQ5x+zoA8p4//g6+WNIYn83hL+G1IgIJ:sxR4Wl1/ftsJfyKG/5ITRLLs
TLSH
T1E052D8156A289D7BCCDBD20DFA517F53D6F91563A2905E44AAFC8A0C00E67ED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 32c3d70f8765248326080c6adbc6e38b568326d63193b6e521e137f0a22a75d2
MD5 45e925b617bef2ea0720041167ff227d
SHA1 6452aa651fd495e2e4a6a4bfe5be33b51c40f6c3
SHA512 8bae5de9848988528df2a924ccb460358c0622c68be4883ca90f03fa499faad017943791d54a056c919783f914c7beae8b10e7fcc3ffccdbe83a036084cc154e
SSDEEP 192:sxRXR4yM/jK1Ml8UQbb1/ftszfaprQ5x+zoA8pe//g6+WNIYn8YhL+G1IgDQJ:sxRXOq/1/ftszfaKk/5ITOLL4
TLSH
T1EE62B8166A249D77CCDBD20DFA417F93D6F91573A2905E44AAFC9A0C00E67ED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 699eaf0cf75c4c4ce33c88910b111a799452e235f92588bc3fab8173821255f4
MD5 4fb9db09f5f9f20bb550fcf9761e07a3
SHA1 f95090b6df8aa8c7b8a802164f49908f4b0b16ec
SHA512 30e23bf4fbb70503321392d80485ba453d64a2e0444118fe65402b6c3f004fd21c1b3d4f6359d370e89339039280f56b506a3f5e7c152e1fc70f7b8c7b9eb034
SSDEEP 768:wGedp6WgoufDM8F1+UoAYDCx9Tuqh0VfUC9xbog/OVIu4YJroSh8HX5W:wGedp6WgoufDMu1jatVYiBg
TLSH
T11FC20C2B640CC77E4F844EADEC29EED76DD801CB9B988D5447EA890C03C67EB511A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 5a40e593592e0b00ad6c2c953583a6f47577570541da1dbe6e20c556f52c746b
MD5 19d6fcf549ce6d23fa3d777ae8ac3978
SHA1 57ad2fded9022bed2fb608f09c7cd5c31a13285d
SHA512 0967e928d497fb20d2beb07e3e3c92d6d85721d3e525d3356561d833a752ae957b63fe82c556dc55c13054b0ed7c7dfa9f6ccceba34505cd08f079b6f111b5bc
SSDEEP 96:KR4i4n4O4i4U404k4iW4s454Rg4S4iK44Hg4I4ic4y464h4A4i4LH4/4o4N4J4//:Cr0xFzJZQNi5tPUgD6LTqN5eHyX+SkEw
TLSH
T12B915401717A02943C3DB60889B59C1FE6C274E63029B46B3BA851F61F66E038FFD5D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

af24cdbc-f07e-4ab5-85ec-d3b781413044.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\af24cdbc-f07e-4ab5-85ec-d3b781413044.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 54cb977202365a87c793bbb77b1f79c14ff5a2f78d7e635fde6909de60155e93
MD5 0db68b97554c00f9647550f21f28cab2
SHA1 4076adcf38a8deb6dc454ad3f15c7ae9e537ff48
SHA512 43f6ce5d15c54cfa6264e5e0025b67b4c8943c16268b187d648881853e5856a0e7f1b63251cd9aed33a77376a5f46c7d9bcad2b03179fcf0fa56519fe0aad8e3
SSDEEP 768:Prv+4UNbdI3q57DZIO0DNzc4ReyIsP1kc:PbsbW3ttc44bstkc
TLSH
T1FB03CF36AC28C973ACFA5686F50736537FF8111B82C92A94D9DD2F4C064B5DE131B923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 3c68b608b300bd7fab6cfe1ea76092784f8d258ce79999363e65bccc9dee264c
MD5 d9e5ae22b937728c08fb29242b23d090
SHA1 15ee85b4537bba5417147a51332e7f617cba0105
SHA512 0dc2dbd70e9723ad699d6536d44827bbacc286aaa0801dafb5c55608e5f7829eba337e407e039bdb9f3afd389e1d9cdc6db0af8357b986de1dab53b912b6e934
SSDEEP 384:xZcIf38NSDhnNTFvJDZNfNoXOVSUUA8bETRzcoXfK86sfxEZxxsIj4lB1hObjI9r:Zf3th7DZIO0cNzc4ReyIsP1b9MXP+
TLSH
T1FBF2C035EC24CD73ECFA5642B5473652BEF6912BC2D86E84E6DDAF0C0A475AD031B422
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 09434416e57045c419241e95f5079282ed981eee6daae20342c4021816c9ea3f
MD5 57c0f08d28a46d638a80cba5be84810a
SHA1 1f564d7871b1c73d3f1397cf68aa8a7dc5799bec
SHA512 733b1289a4b0b82cb5e68c20ea6abe2355f544ff98462f2af8ce44f5e288d920e73699187cb4d0bca4bbabccde2aef5012f333c6870a721f2410ab21d6974579
SSDEEP 384:UZcIf38NS+hnNTFvJDZNfNoXOVSUUA8bETRzcoXfK86sfxEZxxsIj4lB1hObjI9r:Sf38h7DZIO0cNzc4ReyIsP1b9MXP+
TLSH
T1C4F2C035EC24CD63ECFA5682B5473652BEF5912BC2DC6E84A6DDAF0C09075AD031B422
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 d1da026a95901b0a65327b8cc2aeb1c0d987a9d6f40b112e25aebf6ea823befa
MD5 e5f284eadf7a9d0d98cddd1595605264
SHA1 5868d66585a9c8ee7b87374226e9f4ac56c7c5da
SHA512 e4c9f893eea1f771dd151a268ab9a54e392d4b040425fef2d2cb36cb8362f708e19a60edb66ccaacd5c79bd42902ea3f8b097dc6d79feef4905336a1cbb12d47
SSDEEP 768:RFQT3hwgyh7DZIO0ENzc4ReyIsP1b9MXP+:gT34tc44bstb+XG
TLSH
T19603BF379C14C977FDFA5B82F64A3252AEF65127C2D8A994E6DDAF0C05075DC034B822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 9454efe2bc14a47e62f489ea5ff6057518dd91000fa7e48e2a158a376d24e109
MD5 ca172027506ede9fa3e7527d100a77f0
SHA1 7329b945e8523f80218f76047c35c255868ae046
SHA512 cebe7f2d2502d22821109c0f7a11e6244f67d46d9310b0e1c4abdabf36c16241e69d01e73ee4de5565d1c37f6d2e100f7e8d4b4cefc58f04ffa37a80293da99a
SSDEEP 768:6rv+4UNbds3RGDZIO0ENzc4ReyIsX3eVH1S5D:6bsbS3ktc44bsnEH1Y
TLSH
T10803DF32A8388A77ECF66686B54776533EF9512BC2981ED0C5DE2F0C064B1DD134B923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download