e2d774963d9fc7c2b085e481c771077892c80fd8a30e01ffe3ad24511a7e2b31

Analysis

max time kernel
148s
max time network
151s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
13/08/2026, 21:33

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
039ae9bceda2b5e1f1756587ba016f5c.html
Size 205B
Sample260813-1eadysyglf
SHA256 e2d774963d9fc7c2b085e481c771077892c80fd8a30e01ffe3ad24511a7e2b31
MD5 039ae9bceda2b5e1f1756587ba016f5c
SHA1 b1a29a1bfb243d80adca49ed13d2fbdb51b7c4e8
SHA512 53bdc1a1d6c2426774fdc7cee2c51fbdadb730fb760ff7ba960842e00ce40d8b758ddbf9a0d7b5213e22db486289a87bb8c6bbfa3872d3b93b65c41610fe271f
TLSH
T13ED0229E9183228F802221907AC211D2255C23B6B87641E83D82A88E990893DC4CA29C
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4876	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134311304021827385"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2301830172-776172150-2531349243-1000\{F08A98C2-AA58-4810-9A63-99DCD445DFE1}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4124	msedge.exe
4124	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1076	msedge.exe
1076	msedge.exe
1076	msedge.exe
1076	msedge.exe
1076	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
1076	msedge.exe
1076	msedge.exe
1076	msedge.exe
1076	msedge.exe
1076	msedge.exe
1076	msedge.exe
1076	msedge.exe
1076	msedge.exe
1076	msedge.exe
1076	msedge.exe
1076	msedge.exe
1076	msedge.exe
1076	msedge.exe
1076	msedge.exe
1076	msedge.exe
1076	msedge.exe
1076	msedge.exe
1076	msedge.exe
1076	msedge.exe
1076	msedge.exe
1076	msedge.exe
1076	msedge.exe
1076	msedge.exe
1076	msedge.exe
1076	msedge.exe
1076	msedge.exe
1076	msedge.exe
1076	msedge.exe
1076	msedge.exe
1076	msedge.exe
1076	msedge.exe
1076	msedge.exe
1076	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
1076	msedge.exe
1076	msedge.exe
1076	msedge.exe
1076	msedge.exe
1076	msedge.exe
1076	msedge.exe
1076	msedge.exe
1076	msedge.exe
1076	msedge.exe
1076	msedge.exe
1076	msedge.exe
1076	msedge.exe
1076	msedge.exe
1076	msedge.exe
1076	msedge.exe
1076	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 1076 wrote to memory of 4120	1076	msedge.exe	89
PID 1076 wrote to memory of 636	1076	msedge.exe	90
PID 1076 wrote to memory of 4876	1076	msedge.exe	91
PID 1076 wrote to memory of 636	1076	msedge.exe	90
PID 1076 wrote to memory of 636	1076	msedge.exe	90
PID 1076 wrote to memory of 4680	1076	msedge.exe	93
PID 1076 wrote to memory of 4680	1076	msedge.exe	93
PID 1076 wrote to memory of 5508	1076	msedge.exe	94
PID 1076 wrote to memory of 4712	1076	msedge.exe	95
PID 1076 wrote to memory of 5508	1076	msedge.exe	94
PID 1076 wrote to memory of 5508	1076	msedge.exe	94
PID 1076 wrote to memory of 4712	1076	msedge.exe	95
PID 1076 wrote to memory of 4712	1076	msedge.exe	95
PID 1076 wrote to memory of 5172	1076	msedge.exe	96
PID 1076 wrote to memory of 5172	1076	msedge.exe	96
PID 1076 wrote to memory of 5172	1076	msedge.exe	96
PID 1076 wrote to memory of 3816	1076	msedge.exe	97
PID 1076 wrote to memory of 3816	1076	msedge.exe	97
PID 1076 wrote to memory of 3816	1076	msedge.exe	97
PID 1076 wrote to memory of 2836	1076	msedge.exe	99
PID 1076 wrote to memory of 836	1076	msedge.exe	100
PID 1076 wrote to memory of 2836	1076	msedge.exe	99
PID 1076 wrote to memory of 836	1076	msedge.exe	100
PID 1076 wrote to memory of 4556	1076	msedge.exe	102
PID 1076 wrote to memory of 2884	1076	msedge.exe	106
PID 1076 wrote to memory of 4684	1076	msedge.exe	107
PID 1076 wrote to memory of 4656	1076	msedge.exe	108
PID 1076 wrote to memory of 1688	1076	msedge.exe	109
PID 1076 wrote to memory of 1688	1076	msedge.exe	109
PID 1076 wrote to memory of 4124	1076	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\039ae9bceda2b5e1f1756587ba016f5c.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x328,0x7ffaca48c188,0x7ffaca48c194,0x7ffaca48c1a0
  2⤵
  PID:4120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1536,i,6810507735157207883,18027582634399030025,262144 --field-trial-handle=2744,i,14513835851626916540,10659501510477326000,262144 --variations-seed-version --mojo-platform-channel-handle=2740 /prefetch:2
  2⤵
  PID:636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1880,i,12036550877489265011,6561023037895932024,524288 --field-trial-handle=2744,i,14513835851626916540,10659501510477326000,262144 --variations-seed-version --mojo-platform-channel-handle=3052 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1924,i,13674682196988420274,15205404284833214653,524288 --field-trial-handle=2744,i,14513835851626916540,10659501510477326000,262144 --variations-seed-version --mojo-platform-channel-handle=3268 /prefetch:13
  2⤵
  PID:4680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3596,i,14354078208667184602,16992323879509969358,2097152 --field-trial-handle=2744,i,14513835851626916540,10659501510477326000,262144 --variations-seed-version --mojo-platform-channel-handle=3632 /prefetch:1
  2⤵
  PID:5508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3600,i,11780501601714291951,1638327625422690361,2097152 --field-trial-handle=2744,i,14513835851626916540,10659501510477326000,262144 --variations-seed-version --mojo-platform-channel-handle=3668 /prefetch:1
  2⤵
  PID:4712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4256,i,12821676494762386400,1831829612765256290,2097152 --field-trial-handle=2744,i,14513835851626916540,10659501510477326000,262144 --variations-seed-version --mojo-platform-channel-handle=4484 /prefetch:1
  2⤵
  PID:5172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4260,i,7123017550810929670,5937656800588365291,2097152 --field-trial-handle=2744,i,14513835851626916540,10659501510477326000,262144 --variations-seed-version --mojo-platform-channel-handle=4460 /prefetch:9
  2⤵
  PID:3816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5440,i,1785975287143813192,16958234528913577609,524288 --field-trial-handle=2744,i,14513835851626916540,10659501510477326000,262144 --variations-seed-version --mojo-platform-channel-handle=5476 /prefetch:14
  2⤵
  PID:2836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5444,i,11764985428946174033,17280917078996003082,524288 --field-trial-handle=2744,i,14513835851626916540,10659501510477326000,262144 --variations-seed-version --mojo-platform-channel-handle=5500 /prefetch:14
  2⤵
  PID:836
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5964,i,8140137960029185884,398074439834744816,524288 --field-trial-handle=2744,i,14513835851626916540,10659501510477326000,262144 --variations-seed-version --mojo-platform-channel-handle=5988 /prefetch:14
  2⤵
  PID:6124
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5964,i,8140137960029185884,398074439834744816,524288 --field-trial-handle=2744,i,14513835851626916540,10659501510477326000,262144 --variations-seed-version --mojo-platform-channel-handle=5988 /prefetch:14
  2⤵
  PID:4556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3588,i,8424997626472586834,3691769385322726222,524288 --field-trial-handle=2744,i,14513835851626916540,10659501510477326000,262144 --variations-seed-version --mojo-platform-channel-handle=4320 /prefetch:14
  2⤵
  PID:2884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5148,i,11936910002011359477,1116775925427721854,524288 --field-trial-handle=2744,i,14513835851626916540,10659501510477326000,262144 --variations-seed-version --mojo-platform-channel-handle=5192 /prefetch:14
  2⤵
  PID:4684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4260,i,1212297546234396816,8345720705587173489,524288 --field-trial-handle=2744,i,14513835851626916540,10659501510477326000,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:14
  2⤵
  PID:4656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3260,i,14850713876821971462,4225827858279908199,524288 --field-trial-handle=2744,i,14513835851626916540,10659501510477326000,262144 --variations-seed-version --mojo-platform-channel-handle=5668 /prefetch:14
  2⤵
  PID:1688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6256,i,10973558651226444065,8949758437075601022,262144 --field-trial-handle=2744,i,14513835851626916540,10659501510477326000,262144 --variations-seed-version --mojo-platform-channel-handle=6172 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4124

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3644

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4396

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 920989dfdc6aa5e1d74f35527076a2198a2971b6251681fd3e0c436268382b73
MD5 8cfbadd8c96832570ad73d23c096597a
SHA1 1fe78625a4bc7adc20674212ebb18a8fb7af0947
SHA512 fadbe4427f6a821a023a2a74dd7bc949ceb11affa51b7ec072ff842d0af6576a9bc09e90b9448a64388f715467e47353e90d565b6452b72afbbf28c8ad99d9a5
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7R:fwUQC5VwBIiElEd2K57P7R
TLSH
T17BB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c36ac766a384a109222b8b647d2f5c1c2e6c4672a4a2c6b8a01f6eac0a5df074
MD5 f9f896b0e6f281d55b1ca3fa3c1ccdcd
SHA1 db44df3874cd86a961c82d25f3ae2004f249b2df
SHA512 6b8c8d305c2d7e4a3b5efb6e1967d7db1b1ffdb7979edd315013037da369c923060dae4ef8a7219176aa7e0bc1fa4cb98e48470ea2f569243a95d3301f5a40bd
TLSH
T160D09BD575046A14C5A1303A21D1935392604835741945874051E55D5C5479743FB5BD
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 b53c58762bff2a5723ae446675e8f65fd50818b95383c8f3c7efef01af06e466
MD5 629a18fe1b7a241215c77a30d7d8d7ee
SHA1 5e7bd5b514f4e46a4b986c8b89d0025cf81a1f36
SHA512 04fd58619789dc107f680a57dba3aec42e4bab7c29c0defd7e1b8ca2d078ca4c91317932ff076171bae60d370b28de32c94039c6ab690d5004ddcb857977f38a
TLSH
T182D09BD575146914C5A1303E21D2935392504835601945874051E56D5C5479743FB5AD
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 5b1b06bfb1858cb1eb15cf6710091a97875990da2f37fbd627c7d8128fbf03ea
MD5 cd8c83402c5831a19eb3505b1b86a1a0
SHA1 6ac42bd3c77e8e9fc7a27e4b54f58c2dbb429e3b
SHA512 663f9412c2afe2022cf3cad6f688a027d5d9921ed7e8f6d79d1ea37169a2f64a92923226d6bed0ef6f6cb88950594670a4519d17cbed888814f110a990238254
TLSH
T119619459232D59E3DF2559B002D964F832B684C34D4F6E026034BE744906FDF6C29E6C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 ba64de441160f45c47108e6e77ed71b8ade737bbfafeb95b097bc65803371f25
MD5 81cce0a98d509e5173bf649db54778a7
SHA1 72de3bada1a29930eaf8c33973c1ab9bee406f28
SHA512 5f313f1420999d67c9f6453ba67842a8fd64236ad5728c7078ec0de1df04e2c9bb522807ff47075a70045e6f143c28fc8788c51ca9c455d2aadfa69012110cb3
TLSH
T18F61A558232E59E3DF29597002D964F832B688C34D4F6E0260347F744906FDF6C29E6C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 48e9250bf4acc4a8d1d8aeb1cd5412e609878e2b032b19af81758842f9eb440d
MD5 74e704c0821cc4b563be0dd7964a3757
SHA1 4c3e704bf12983fc412d4b91dc093d4e378c3666
SHA512 03e6dcea237410e4d2a27d20a0471ebe5232b34829686bdb1dba0305d3ad62605c81c0207471b3c6698af04b1818fafb580faa176ebc467c2ca45dd30a3ed9b2
TLSH
T12F11BDF3C3E5856E890116F05A24AE1BCE2C0506421C7C15C9E4EF2B87E3476E10155B
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 28191e98498cd1377c1b438e89fd686bdea6830453c6c1fedcabf6cb78c77b4e
MD5 1bc038904bc7da765ffb4b18ae6c5d34
SHA1 b9ec82c371bfbd22d6648573df3b4a102db2afa0
SHA512 b8b440b53c9ae79c3963f4a0483740be2b07d105896b3dcaa8f0c7b61df314ece718cd10404bcd62ca32302c2d8a75f11ab105aed763c214d5de43af2b798bd7
SSDEEP 192:sxRTRpyM/jK1Ml8wb0/fzsRFOsmZ0zoA8p4k/g6+WNIYx/lhNaDGaIgIJ:sxRTDl0/fzs3Ob9/5Igafs
TLSH
T1F552D80569389977CCDBD20DFA517FA3D6F81573A1901E44AAFCDA0C44E6AED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 3434925a4ad02fed0f7602fe0564a1ee9b202368a11604f7c3e7d3be9630a9c0
MD5 5294dde75293ac462a0e11d50ba6c2fd
SHA1 e2568c1bf394c05f737c1ed01a00257acabe7196
SHA512 355720b95ad98b57a73be19b00007caf050d1ec2144cfd2db458b8d5986a591dcd19835eeba7027ecb6b11f80d9b6ec3bff2b5ff0c560f5a879c99de4a7dd77e
SSDEEP 192:sxRgRpyM/jK1Ml8UQOb0/fzsqFssmZ0zoA8pek/g6+WNIYx/lPtaDGaIgDVJ:sxRgDqw0/fzsusbD/5IEafT
TLSH
T14C62D815A5389977CCDBE20DFA417F93D6F81573A1900E44AAFCDA1C44E6AED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 e649d03bbc9f95a0c9eeb818929646a017d2b4096b07cb9cf3c8ab49e46382ab
MD5 4977fd83c24b2fea56d4af99b03433ca
SHA1 321f10711e21cf5d5fe1f2d0cff0af3b4485f2e9
SHA512 6b1fff6c0b0f06ece66048f493fafba201f5ccc15d14bb5beca0b3ee95517560dcae4cfb92b75adb39146b4e61712a220ec19a53e507442b8552209f8c07efac
SSDEEP 192:sxRgRpyM/jK1Ml8wb0/fzsqFOsmZ0zoA8p4k/g6+WNIYx/lhNaDGaIgDTJ:sxRgDl0/fzsuOb9/5Igaf5
TLSH
T1FD62D905A9389977CCDBD20DFA41BF93D6F81573A1901E44AEFC9A1C44E66ED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 179e68be6a1fc4ab5ae9a624d4cc6769beb653c2008f1e4b16afed5aadc9bbd7
MD5 2aedaaffb565f0e41d6eb4ad2cb74345
SHA1 941001406e2310066c2c9cf6422ff62acd38924e
SHA512 28adc124a99fe0c528a639f6af26f8099e8d5054fcade7d624aa5be47d28c0f455be97e6ef8fa8f0161c084cb6e79ea276e2cb335ec6a0fc7d6d64fa2baf6b4b
SSDEEP 768:0xCyAjWgbrfM18F1+UoAYDCx9Tuqh0VfUC9xbog/OV9rVAIroJPeVC:0xCyAjWgbrfM1u1jacpAzJP8C
TLSH
T15FC2EC3B640CC77E4F844AADEC25AFD77DD802CB97984D544BEA880C03C67EB521A5DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 aa66c9c0a34fc5d516f26eb9140314b09e64bd86bc9b82f778e87ef8377b735e
MD5 d53b91297e8d4cd7f9f22cf6e29b093d
SHA1 8256b560022d32d3ca16b5ba730d04cebe7ba8d7
SHA512 6bef4cf560aa73c6f417ad4df0e3fd92f3193089b2e7db764dacd3c437fb988dbf1ddfebec8a1e1f7fc3618a21913b185ce5771120c55259851edf7c769d3f42
SSDEEP 96:KwliKGciC6YKHK+fYr/BpZ2npq9Z/2KRTZ92N3fitfnqz:olf8Py
TLSH
T1FC919845B57956117CBE3948A196D9278E8274733016E82FBFA910630FBAF811DFC9CC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 3KB
SHA256 77130446469a56aff7e76f5cebb0b5f1e9ef4ff31c443aabff92dbb79cc8f96f
MD5 13fc80fa7e4d9e5443a3051e4d185626
SHA1 1d309aadc3c7579e46e99630d54a33009ee505a3
SHA512 ded645db426d72cee694365065e7d1ac14b683faaa3d702d94982be25938f6ba70fbb3661da9879a026cabf17ea60561571c9ecb5930c86cbefb61bd15fe1443
TLSH
T1FF816345B13A56157CBE39089596C9678E8274B33116A82FBFA900730FBAF811DFC9CD
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

5d8f1e11-2cb1-458b-88d2-a78fe557e115.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\5d8f1e11-2cb1-458b-88d2-a78fe557e115.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 15701135b8edcfb8824261bc80e96a8565f6225b00c342291bbb85a1c65c26c3
MD5 5cb7fa34ecfa3c1e12fe174b0fcfc3b3
SHA1 6e08b03e09398591a3a2c4f34d51f9b623e841ea
SHA512 b5eec5920a6fd6ce8077b4d696e9005fec591987f9cd40ecd4d9429e8b493fdbf784dc9689a9c46097c460e0c5afec90e2df5ff169cf018b0282c08130447e0a
SSDEEP 768:Grv+4UNbd03W9kKL2ktbejF669yrqUjWiIwwxMtPzPi9PrgD:Gbsba3TfjF66INWZTMVzPMU
TLSH
T10913BF70B8685AB38CF2EB8571137687BFB40593D6C50AD8CACD970D0A8B4DA2347927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 c29123cde0e2a99d2df910dc79abffead68db5c390441a3829a201a8861f6909
MD5 dac78ecccc4452283a947e8bf48cea25
SHA1 7471e97e1a66a0cada80aceb517d55cbe7a389f2
SHA512 5976c0e6b307089f1adf9ff5d11492e36eabdae58abf4f585d5d22a36a77240413cf939ed0a91ff60d073da2598722fb0f10527ee33e249b7a671ee5db63e6ae
SSDEEP 768:Frv+4UNbd03l9kKL2ktbejF669yrqUjWiIwwxMtPzPi9PrgD:Fbsba3sfjF66INWZTMVzPMU
TLSH
T18713BF70B8685AB38CF2EB8571137687BFB41593D6C50AD8CACD970D0A8B4DA2347937
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 44KB
SHA256 df7a1d03b940fe1b71ea3ecb16b536cc3f4b863b990e2e1eb85badbb381946fd
MD5 1f959e851b3f13bf310efcdf4356e67f
SHA1 6722c38d0445a8b278902d62174211a45a58b3e2
SHA512 ea494d94f1bc8b1a7c9fe56bf0fb01e6399f5b47f5e7312075cad4891ae06a5f6f23b765364a755275197a74a74749737704b8217a78504767766e99701e9ef0
SSDEEP 768:uF0rv+4UNbd738wgQ9kKL2ktbgnF669yrqUjWiIwwxMtPzPi9PrgD:vbsbN3OznF66INWZTMVzPMU
TLSH
T16A13BF71A8989AB7CDF6DF85B2133687AFB40193C5C54AD8DBCC9A0D068B0DD2347D26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 51fb4e9468b085ea4f5939c7386c235f723ed9da177359c09587475d0013eff8
MD5 7ae014b91f3234a80f05f9c87624270c
SHA1 8e8f5046b5618abaea607809cc211cd17b7e19b8
SHA512 5a2b02fa134625d1d1e17f756176b8c80a479b4bec5e170afd8d5b3828f814861e952ff7ffeba55744394e0ea600d71cd3577dc6673f32fe891b77eed32209f6
SSDEEP 768:arv+4UNbdl3+PkKL21jF669yrqUjWiIwwxMRKXOUiler:absbX31NjF66INWZTMEXOUsQ
TLSH
T1E703CE31AC589AB7CDF2D68672533783BFB4109396C50B88CADC670D469B0DD2347A2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 365cb5d70f0f14e0a540df26fcf67e8e2e7ef35050639c41f7c41fe6efb6f888
MD5 7392649acd78b3c65abd03cd0bec6c5d
SHA1 1d22a38684f52197cbd9a0068caa583143e0fa82
SHA512 e6996ff9d76b82f42472f6ff4bb9877a8431477871727b365b5bf711fbe8567d0d01980c823cbc91c56333fb1cf67ca6a3b76020b9b10c6d067c3406e7380a16
SSDEEP 768:0rv+4UNbdl3orkKL2ktbwjF669yrqUjWiIwwxMAPzUiler:0bsbX3z3jF66INWZTMOzUsQ
TLSH
T14303DF30A8589AB3CDF2D78671137683BF74108396C50FC8CACC670D4A9B4DA2347A2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download