4393311c167049eee2573d1b6f4d183141d9e2ab0d0b219b11bc616ce6f01e3c

Analysis

max time kernel
148s
max time network
154s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
03/08/2026, 18:02

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 188KB
Sample260803-wmg2jsdd44
SHA256 4393311c167049eee2573d1b6f4d183141d9e2ab0d0b219b11bc616ce6f01e3c
MD5 a73db67052cf4943c947da266c964f2c
SHA1 eb6d3d37baec0f611c7ea3198fb3f88286f43dff
SHA512 d3c18128ad3e9dd0476dcedb5c0e0e5c06bf880384e3580146e379eb5459ec42cfaedc337775c445c45735d58139115833ef90ee8858e95bbd1c7d495995868e
SSDEEP 3072:LfaM14/ekVnjrVYLWbayIrB1adltescWaO5Blo9WGM5gILWBmZVqe7UdsM2W:UescN6W
TLSH
T1A214E8A6B68944BF212F494F806E766CF83DE4A0D70629D1F1F9733847DDCEA218521E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4556	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134302537554634624"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1875162379-3804078649-638427191-1000\{490F5170-6B66-4F79-A28D-EF1BA6237280}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
6104	msedge.exe
6104	msedge.exe

Suspicious behavior: LoadsDriver 1 IoCs

pid
4

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4136	msedge.exe
4136	msedge.exe
4136	msedge.exe
4136	msedge.exe
4136	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4136	msedge.exe
4136	msedge.exe
4136	msedge.exe
4136	msedge.exe
4136	msedge.exe
4136	msedge.exe
4136	msedge.exe
4136	msedge.exe
4136	msedge.exe
4136	msedge.exe
4136	msedge.exe
4136	msedge.exe
4136	msedge.exe
4136	msedge.exe
4136	msedge.exe
4136	msedge.exe
4136	msedge.exe
4136	msedge.exe
4136	msedge.exe
4136	msedge.exe
4136	msedge.exe
4136	msedge.exe
4136	msedge.exe
4136	msedge.exe
4136	msedge.exe
4136	msedge.exe
4136	msedge.exe
4136	msedge.exe
4136	msedge.exe
4136	msedge.exe
4136	msedge.exe
4136	msedge.exe
4136	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4136	msedge.exe
4136	msedge.exe
4136	msedge.exe
4136	msedge.exe
4136	msedge.exe
4136	msedge.exe
4136	msedge.exe
4136	msedge.exe
4136	msedge.exe
4136	msedge.exe
4136	msedge.exe
4136	msedge.exe
4136	msedge.exe
4136	msedge.exe
4136	msedge.exe
4136	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 4136 wrote to memory of 5908	4136	msedge.exe	89
PID 4136 wrote to memory of 584	4136	msedge.exe	90
PID 4136 wrote to memory of 4556	4136	msedge.exe	91
PID 4136 wrote to memory of 1696	4136	msedge.exe	92
PID 4136 wrote to memory of 584	4136	msedge.exe	90
PID 4136 wrote to memory of 584	4136	msedge.exe	90
PID 4136 wrote to memory of 1696	4136	msedge.exe	92
PID 4136 wrote to memory of 5500	4136	msedge.exe	95
PID 4136 wrote to memory of 5500	4136	msedge.exe	95
PID 4136 wrote to memory of 3200	4136	msedge.exe	94
PID 4136 wrote to memory of 5500	4136	msedge.exe	95
PID 4136 wrote to memory of 3200	4136	msedge.exe	94
PID 4136 wrote to memory of 3200	4136	msedge.exe	94
PID 4136 wrote to memory of 2036	4136	msedge.exe	96
PID 4136 wrote to memory of 2312	4136	msedge.exe	97
PID 4136 wrote to memory of 2036	4136	msedge.exe	96
PID 4136 wrote to memory of 2036	4136	msedge.exe	96
PID 4136 wrote to memory of 2312	4136	msedge.exe	97
PID 4136 wrote to memory of 2312	4136	msedge.exe	97
PID 4136 wrote to memory of 1512	4136	msedge.exe	100
PID 4136 wrote to memory of 1384	4136	msedge.exe	101
PID 4136 wrote to memory of 1512	4136	msedge.exe	100
PID 4136 wrote to memory of 1384	4136	msedge.exe	101
PID 4136 wrote to memory of 2160	4136	msedge.exe	103
PID 4136 wrote to memory of 804	4136	msedge.exe	107
PID 4136 wrote to memory of 1632	4136	msedge.exe	108
PID 4136 wrote to memory of 5060	4136	msedge.exe	109
PID 4136 wrote to memory of 4784	4136	msedge.exe	110
PID 4136 wrote to memory of 4784	4136	msedge.exe	110
PID 4136 wrote to memory of 1780	4136	msedge.exe	112
PID 4136 wrote to memory of 1780	4136	msedge.exe	112
PID 4136 wrote to memory of 6104	4136	msedge.exe	113

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ff82d9ac188,0x7ff82d9ac194,0x7ff82d9ac1a0
  2⤵
  PID:5908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1536,i,13819940420237562481,384899131944849575,262144 --field-trial-handle=2624,i,4833559949040667088,17966378891579154101,262144 --variations-seed-version --mojo-platform-channel-handle=2620 /prefetch:2
  2⤵
  PID:584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1816,i,5115758334706232235,5490820020867664937,524288 --field-trial-handle=2624,i,4833559949040667088,17966378891579154101,262144 --variations-seed-version --mojo-platform-channel-handle=3188 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2288,i,9110213324153325933,15483711728569005994,524288 --field-trial-handle=2624,i,4833559949040667088,17966378891579154101,262144 --variations-seed-version --mojo-platform-channel-handle=3216 /prefetch:13
  2⤵
  PID:1696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3576,i,4807697595180050130,15659913196866662594,2097152 --field-trial-handle=2624,i,4833559949040667088,17966378891579154101,262144 --variations-seed-version --mojo-platform-channel-handle=3636 /prefetch:1
  2⤵
  PID:3200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3580,i,5195087804319120310,8110010312318463616,2097152 --field-trial-handle=2624,i,4833559949040667088,17966378891579154101,262144 --variations-seed-version --mojo-platform-channel-handle=3656 /prefetch:1
  2⤵
  PID:5500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4116,i,15355265310508095112,16009631783962267665,2097152 --field-trial-handle=2624,i,4833559949040667088,17966378891579154101,262144 --variations-seed-version --mojo-platform-channel-handle=4456 /prefetch:1
  2⤵
  PID:2036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4248,i,17937059907205739808,4830349178515233651,2097152 --field-trial-handle=2624,i,4833559949040667088,17966378891579154101,262144 --variations-seed-version --mojo-platform-channel-handle=4380 /prefetch:9
  2⤵
  PID:2312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3860,i,7199772601400497428,3369110293145980093,524288 --field-trial-handle=2624,i,4833559949040667088,17966378891579154101,262144 --variations-seed-version --mojo-platform-channel-handle=3832 /prefetch:14
  2⤵
  PID:1512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3876,i,10406488860661397645,2557598594920683773,524288 --field-trial-handle=2624,i,4833559949040667088,17966378891579154101,262144 --variations-seed-version --mojo-platform-channel-handle=3892 /prefetch:14
  2⤵
  PID:1384
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6052,i,17042395052977653059,11688546214043287616,524288 --field-trial-handle=2624,i,4833559949040667088,17966378891579154101,262144 --variations-seed-version --mojo-platform-channel-handle=6072 /prefetch:14
  2⤵
  PID:1972
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6052,i,17042395052977653059,11688546214043287616,524288 --field-trial-handle=2624,i,4833559949040667088,17966378891579154101,262144 --variations-seed-version --mojo-platform-channel-handle=6072 /prefetch:14
  2⤵
  PID:2160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6072,i,17477221660636269052,187369276325204651,524288 --field-trial-handle=2624,i,4833559949040667088,17966378891579154101,262144 --variations-seed-version --mojo-platform-channel-handle=5000 /prefetch:14
  2⤵
  PID:804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6548,i,18271898072065378750,5825537081913210350,524288 --field-trial-handle=2624,i,4833559949040667088,17966378891579154101,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:14
  2⤵
  PID:1632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6576,i,2154230129194322510,17849562038594788081,524288 --field-trial-handle=2624,i,4833559949040667088,17966378891579154101,262144 --variations-seed-version --mojo-platform-channel-handle=4972 /prefetch:14
  2⤵
  PID:5060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3868,i,8770922760851639531,4000933612447580830,524288 --field-trial-handle=2624,i,4833559949040667088,17966378891579154101,262144 --variations-seed-version --mojo-platform-channel-handle=3832 /prefetch:14
  2⤵
  PID:4784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5108,i,16802677472342159779,2853999320651708089,524288 --field-trial-handle=2624,i,4833559949040667088,17966378891579154101,262144 --variations-seed-version --mojo-platform-channel-handle=6248 /prefetch:14
  2⤵
  PID:1780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5664,i,8507872005415341094,2413693241912218594,262144 --field-trial-handle=2624,i,4833559949040667088,17966378891579154101,262144 --variations-seed-version --mojo-platform-channel-handle=5436 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:6104

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3304

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2520

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 8c605a069294252273e8780cd3583a8ae688781cd3bbfb104da743dbc8ec3349
MD5 a8e7775101a6fb7a72b1d795773346ce
SHA1 b9799ea7687f7095b06e80335d2c8a7bf7ff83c1
SHA512 e8db48802db3fbad8d233a135d79e6cfdbd9060a89d8c721205583699814479e9913260c391aba1592a96d4083787169edc78efabcd0d5d7fa9451747cc76d14
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7o:fwUQC5VwBIiElEd2K57P7o
TLSH
T1ADB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ecdd5c8034c45eff453cbaf31d8886e2bd9609a73853367a6d096a69cc81f1be
MD5 a774534a956a5c8affebe08e87c80683
SHA1 b3e4e20a91e4087d3b9247b5ef6815f51858a041
SHA512 27769aee2cac148a0154fe42b51da2a9a1088e9e990873915b4c7ab9bd5442a3facf82b2bd1cbaef75328bd5937813698b96ac06aa76d934d07ab5ebb194a824
TLSH
T103D09B6673449A1CC9C439712461565161115820E41443581C96715CCDE56C707571DE
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 dfacefa73d018d54e3feba3eef28ec722a8422fee8768a2c3d8d6253f863b375
MD5 cb5000b6fab1115bfff50bedcc3eb9fd
SHA1 afbfe0ec03df59e7a1eba1da4227111508419c03
SHA512 aab9a1afd5de2f983466724b6ecf0dbc2e176c5a1eb2f059b9507511cc53643fcf9ed990bd565f22f8d53fb82db71cba238962a75c68db02d5f10b526661bd08
TLSH
T15AD09B667354991CC9C439712462565161015820941443581D96B16CCDE56C707561DA
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 4099223fdc7790397fdc2063a6e3ceecffdc432a3793a0eecbe50de7c1e38319
MD5 5fb2c1a2d320d8b475082f33b3e552c7
SHA1 e5a7c8bca3836a7f8d685b87bd77d68e68846374
SHA512 735945ce43942406bcf673e4873dba3494cfdb3bc18cde7dc9ed15cba10a2c7aaf32121f2f41ad1d22293fba0602de0193b3a9ce86db58788f4f34556a725ec3
TLSH
T1D8513B20A32015D2EF210DBBA0F1879933FAEB89C1E77FA0508D2C785906F34A3E0067
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 0a35623b3ee8942d8a2a1962597165ce01465d43863954edfdb4d56b33b6822e
MD5 cf3f52ecf5648d4deb1e7509cf489848
SHA1 da98faade80450c59d25fec42d9ef6935611654e
SHA512 20b32e17ac94a7eb6346885500b274415dd6f5904e8b93d9c853862aed541df898fef140cdbf446248218823359e56cda49d958ff936adfc1cd6367cb863fcd5
TLSH
T16341C0F7C7E8866E890156F0AB146E1BCE2D0915832C3C56C9E4EF5BA3E24B1E10155F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 5662364f8d63f5c633c57037f9e6a23d97f89c9063e7e6f324a0be72eb57cbe3
MD5 61fc33ee772a92a066f470429ee16fbe
SHA1 4fa17e48d399400923eeb70af5d8acca4bf15fe1
SHA512 53fa67c1278c41a7ea63bde0f0b839f6b0976a9d060930b4faacd13e8381493cd8a60c8d025002eaf9004776cb0b2f93e3790fc9e1c09305e53e1d224d1834d6
SSDEEP 192:sxRPR7yM/jK1Ml8wbL/fns51OlKCA94/AzoA8p4g/g6+WNIYD98wSKGa1IgIJ:sxRPPlL/fns51OlZ8kp/5IoSSs
TLSH
T1F952D905AA346D37CCDBD20DFA457F93D2F91573A2901E54AAFC9A0C00E6AED620781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 f18e702e8a27c15d5a258289a287402da0600b40defa9d9bc28a1f7216bfd949
MD5 6c49a625739abe43ead64ec306599866
SHA1 e8697fa5efa8b5df68cef4993766a28216b3ac24
SHA512 0b13c5f4044bfb89f9a521ec8c28a0a766dc9ff079bcdbe2387a366c42ec88ec6fec967e19883982bac5dd7b1e7d85633663e612441e4019ee7bbc922150f800
SSDEEP 192:sxRcR7yM/jK1Ml8wbL/fnsN1OlKCA94/AzoA8p4g/g6+WNIYD98wSKGa1IgD2J:sxRcPlL/fnsN1OlZ8kp/5IoSSG
TLSH
T1AD62D905AA346D778CDBD20DFA45BF93D2F91473A2901E54AAFC9A0C00E66ED620781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 a0198ceefe604ff7508d6f23de9fa6b0278c0b633b3a76e46f2ae76a495a3400
MD5 6468dd8d6fcdbac46c6d6236d2c28fa8
SHA1 5c41a1cb36fbc3c2f3cdf8fb78644b5e8748ced3
SHA512 ece4c3c057a7eba57a55d2932b8043818202bb70f814435141d6b5459718c9b73e5f806a2c89912bff767a869ed9e3bcc0dda387b0087f3ad789e4f21e860212
SSDEEP 192:sxRcR7yM/jK1Ml8UQjbL/fnsN1OIKCA94/AzoA8peg/g6+WNIYD9/wSKGa1IgDMJ:sxRcPq3L/fnsN1OIZ8k3/5IjSSU
TLSH
T14F62D9069A245D77CCDBD20DFA45BF93D2F91473A1901E54AAFCDA0C00E6AED620781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 83b76561d64f01e10dca4fac8cd6dbb54148962644e66c8fba884b7d5cac4a4f
MD5 8355eec4a8fe47c530d3b44421b8d3e9
SHA1 00faae840f7aa2ee8b80f123d1a433f50b6279cf
SHA512 4061b5f3f6b6b273e7b6ab8939a7ba75cda14bb166081735ae4f3550872780ce421168175922c4a92c505f651002804295ef0052a5e82fcb0d2298f69bd2179d
SSDEEP 768:aW5WP0Wg/XfCf8F1+UoAYDCx9Tuqh0VfUC9xbog/OVyc1syro/0DEpxw:aW5WP0Wg/XfCfu1jazysp/0Ak
TLSH
T17DC2FC3B240CCB7E4F844E5DAD25AED7ADD801CB9B988D5447EA890C03C67EB521A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 116d94b06e459baca650faac1f989b29ec3aa4b344d3a1d8cb48cf9ed9e46482
MD5 f7c85de9d9f4b69195de3e414349b979
SHA1 94605f6c7dab48551787a618cf19a430dcbda561
SHA512 3d341ebfa7f4c62657e4678505bed14fb70f0f58889249ac86e17c97a8901628c673e430dcd6c93c9db1cbfd8e753bbd97e4e765343b604659388bdb767aa046
SSDEEP 96:KREDEREkEQEiEOECEYWEmE7ELgEYEYK4E9gEKEYcEYE4ErEKEQE1HE3EgEFEBE3w:CEDEREkEQEiEOECEPEmE7EUEYE8E9gEi
TLSH
T1B2916240317B12C03C7EA90D88758C5BA2C1B5A2305EA6AB77E851A74F6BE175DFCCC9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

f6514b73-13ec-4847-9809-31449d385ec9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\f6514b73-13ec-4847-9809-31449d385ec9.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 0cd21da33c2b88ac61c85bdc965afce737a930d87540816dc2d00f9df9cd302a
MD5 a69a53ee80922a8c2c52bb5aeaace0ca
SHA1 017f7ecb70c53873901ee43e089027d4edf85502
SHA512 66e1b057d490cf304f75597db7384a2d89b6d3a2da9d497e563b7759fef25e867113677f71015a289ecdabc8f4fbc27f497764a159dc533d7fb09d6ca6f54f41
SSDEEP 384:kZcIH38NZ3CMespL6NuWZlf8hyEGPORuXPN7Oy2rEoajo4cdR8eHhVODjYPNDUM0:CH3je6pi0DyrEnjN3Gac1Fwhy6DqNW9
TLSH
T104F2CF30A9A49DB74CEFE285B1437A02AEE5465386D40FE496DDBB0C11CB5ED530F82B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 3cefff1fa5790b466d541800b454c8d5ca849c1aa34690a6f83e69eb022cc765
MD5 fa24040076d56f3690a9965b0757f970
SHA1 a935d65998bbd17c6a8ea52873c5a1b46d59db00
SHA512 1686dffc2982df0c529d952e2136b8e86eb12cd7f85448444c448df3b10ec1ab1c5ab82fb366748e7916bbca6b0fa612966e0110ba913b6fe4fc4a27c4c73820
SSDEEP 768:+FQr38wg1I6pi0DtrEnjN3Gac1Fwhy6DqNW9:Vr3mf5QnjMa7T+k
TLSH
T11D03BF3299D489BB8CFED785F5467602EEF1069385D48BE4A7CCB90C11875EC530BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 5660e1a244800fcb56a277733f3bfcd64f09c7619bb03d7f9680d7014aa5e2f8
MD5 7e65d4849ffb65a0e8a0ea7bcea2b0a6
SHA1 8e36d36fd763218a0d62dd06e37d737d0ba53bb4
SHA512 15098502617c97c8bbe73643c8faef650eed615b2581c9ff843181ef0049f09c4b75606d03168455183f1d96bdd1c6e533f89360bb39f9aeff2d8dea8a7fe97b
SSDEEP 384:cZcIH38NZaCMeszL6NuWZlf8hyEGPORuXPN7Oy2rEoajo4cdR8eHhVODjYPNDUM0:KH3gI6pi0DyrEnjN3Gac1Fwhy6DqNW9
TLSH
T1FEF2BF30A9A49DB74CEEE385B1437A02AEE5465386D40FE496DDBB0C11CB5ED530F82B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 0b6a118a64261ed80f1c3e34ede2df98096ca5c0256949990038f8f40b5dd8c9
MD5 5f740871eff33614d4c5a95cdbc893c3
SHA1 0c0db80d41a78ca407297d733e417d50e50c8b8d
SHA512 a4b21b5944b94f21f90341e58557cea3c3500db7917abd93a5988a46cf5fd7e123afa51e62da6b79f488b4b4257839d55acde108b80f5ae2b397345dcecf4920
SSDEEP 768:rrv+4UNbdS3Ami0IrEnjN3Gac1ZMReVH1SCz:rbsbg33IQnjMaZEH1V
TLSH
T13903CF3669A89EB38CEBE3857147B6037FB4125385D40BE4CADD6B0D029B5EC130B967
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download