176b5978c91b65f1cad6c00437b591ef660fa7b095c27f761a064660f3cf64f5

Analysis

max time kernel
148s
max time network
149s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
19/08/2026, 15:02

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
dzcanr8p.html
Size 10KB
Sample260819-seq3pscr4x
SHA256 176b5978c91b65f1cad6c00437b591ef660fa7b095c27f761a064660f3cf64f5
MD5 cca41a462f8f478b88378162c3727c5e
SHA1 697f15e47eb5492cab534ca058a3b574bff91a84
SHA512 474444845ba27ba16a360474de09b8e2325042b6c33b9876c93077ac980842972f750aa091211321d6d773c614fee233987a5d9c31b8d184733080dd01275123
SSDEEP 192:DcpuXsfyGAXmcCcj8SUuYck/ze+2v+FWV96atopaOr6flqWs61CrDpdgu:gpuXzjsOtopaOr6flqWB1CrDpau
TLSH
T1F83220A2A8F03527009282B4A5A9FB0A7F52E143D64EDD00B7EC5BCA0FD1FD69D67315
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2256	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134316253733238728"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-552508041-2681165170-3229858294-1000\{8264562B-DBBF-4C1D-BD34-DDBEBC428A9B}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3700	msedge.exe
3700	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 1856 wrote to memory of 2572	1856	msedge.exe	88
PID 1856 wrote to memory of 4272	1856	msedge.exe	90
PID 1856 wrote to memory of 2256	1856	msedge.exe	92
PID 1856 wrote to memory of 4272	1856	msedge.exe	90
PID 1856 wrote to memory of 4272	1856	msedge.exe	90
PID 1856 wrote to memory of 5176	1856	msedge.exe	94
PID 1856 wrote to memory of 2168	1856	msedge.exe	93
PID 1856 wrote to memory of 4444	1856	msedge.exe	95
PID 1856 wrote to memory of 5176	1856	msedge.exe	94
PID 1856 wrote to memory of 5176	1856	msedge.exe	94
PID 1856 wrote to memory of 2168	1856	msedge.exe	93
PID 1856 wrote to memory of 4444	1856	msedge.exe	95
PID 1856 wrote to memory of 4444	1856	msedge.exe	95
PID 1856 wrote to memory of 4116	1856	msedge.exe	96
PID 1856 wrote to memory of 4116	1856	msedge.exe	96
PID 1856 wrote to memory of 4116	1856	msedge.exe	96
PID 1856 wrote to memory of 5468	1856	msedge.exe	97
PID 1856 wrote to memory of 5468	1856	msedge.exe	97
PID 1856 wrote to memory of 5468	1856	msedge.exe	97
PID 1856 wrote to memory of 4512	1856	msedge.exe	100
PID 1856 wrote to memory of 1428	1856	msedge.exe	99
PID 1856 wrote to memory of 4512	1856	msedge.exe	100
PID 1856 wrote to memory of 1428	1856	msedge.exe	99
PID 1856 wrote to memory of 4132	1856	msedge.exe	102
PID 1856 wrote to memory of 4676	1856	msedge.exe	106
PID 1856 wrote to memory of 4344	1856	msedge.exe	107
PID 1856 wrote to memory of 3176	1856	msedge.exe	108
PID 1856 wrote to memory of 2828	1856	msedge.exe	109
PID 1856 wrote to memory of 2828	1856	msedge.exe	109
PID 1856 wrote to memory of 4736	1856	msedge.exe	110
PID 1856 wrote to memory of 4736	1856	msedge.exe	110
PID 1856 wrote to memory of 3700	1856	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\dzcanr8p.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffef9e1c188,0x7ffef9e1c194,0x7ffef9e1c1a0
  2⤵
  PID:2572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1552,i,9260112409426347360,10571877287375744178,262144 --field-trial-handle=3020,i,17570423278441441950,8361189984250234090,262144 --variations-seed-version --mojo-platform-channel-handle=2272 /prefetch:2
  2⤵
  PID:4272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1884,i,8310687514006790105,16323885778822882807,524288 --field-trial-handle=3020,i,17570423278441441950,8361189984250234090,262144 --variations-seed-version --mojo-platform-channel-handle=3108 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2456,i,13406767690651437770,17584970761348696661,524288 --field-trial-handle=3020,i,17570423278441441950,8361189984250234090,262144 --variations-seed-version --mojo-platform-channel-handle=3640 /prefetch:13
  2⤵
  PID:2168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3352,i,3171910264655364587,2574922605275480879,2097152 --field-trial-handle=3020,i,17570423278441441950,8361189984250234090,262144 --variations-seed-version --mojo-platform-channel-handle=3760 /prefetch:1
  2⤵
  PID:5176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3356,i,2852663568376069716,6703907162046333323,2097152 --field-trial-handle=3020,i,17570423278441441950,8361189984250234090,262144 --variations-seed-version --mojo-platform-channel-handle=3076 /prefetch:1
  2⤵
  PID:4444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4260,i,18005540267099270732,9780113774956112440,2097152 --field-trial-handle=3020,i,17570423278441441950,8361189984250234090,262144 --variations-seed-version --mojo-platform-channel-handle=4740 /prefetch:1
  2⤵
  PID:4116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4272,i,4638892221565428557,4877577757407060709,2097152 --field-trial-handle=3020,i,17570423278441441950,8361189984250234090,262144 --variations-seed-version --mojo-platform-channel-handle=4744 /prefetch:9
  2⤵
  PID:5468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5400,i,816270338559709408,150928780994414674,524288 --field-trial-handle=3020,i,17570423278441441950,8361189984250234090,262144 --variations-seed-version --mojo-platform-channel-handle=3848 /prefetch:14
  2⤵
  PID:1428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5408,i,1568562927545937403,9107613215032117314,524288 --field-trial-handle=3020,i,17570423278441441950,8361189984250234090,262144 --variations-seed-version --mojo-platform-channel-handle=3384 /prefetch:14
  2⤵
  PID:4512
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5944,i,12838283338285365106,12583384508592876805,524288 --field-trial-handle=3020,i,17570423278441441950,8361189984250234090,262144 --variations-seed-version --mojo-platform-channel-handle=5968 /prefetch:14
  2⤵
  PID:2332
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5944,i,12838283338285365106,12583384508592876805,524288 --field-trial-handle=3020,i,17570423278441441950,8361189984250234090,262144 --variations-seed-version --mojo-platform-channel-handle=5968 /prefetch:14
  2⤵
  PID:4132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5968,i,1306687590144508225,1877868176943691394,524288 --field-trial-handle=3020,i,17570423278441441950,8361189984250234090,262144 --variations-seed-version --mojo-platform-channel-handle=4904 /prefetch:14
  2⤵
  PID:4676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3892,i,6904197941202012843,15165555666098683366,524288 --field-trial-handle=3020,i,17570423278441441950,8361189984250234090,262144 --variations-seed-version --mojo-platform-channel-handle=6528 /prefetch:14
  2⤵
  PID:4344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4764,i,1980070969188600057,12500424869729510282,524288 --field-trial-handle=3020,i,17570423278441441950,8361189984250234090,262144 --variations-seed-version --mojo-platform-channel-handle=4932 /prefetch:14
  2⤵
  PID:3176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5544,i,5980648437689636236,12410646199700278195,524288 --field-trial-handle=3020,i,17570423278441441950,8361189984250234090,262144 --variations-seed-version --mojo-platform-channel-handle=2732 /prefetch:14
  2⤵
  PID:2828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5616,i,4150128492160441633,9043508916409902410,524288 --field-trial-handle=3020,i,17570423278441441950,8361189984250234090,262144 --variations-seed-version --mojo-platform-channel-handle=5628 /prefetch:14
  2⤵
  PID:4736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6224,i,14636761350118446222,14832443835391532596,262144 --field-trial-handle=3020,i,17570423278441441950,8361189984250234090,262144 --variations-seed-version --mojo-platform-channel-handle=6196 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3700

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2972

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3824

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 4ee3fa3c9f4e73928ee4752b6a0dad43a75e78e4a4f9049170dc81e5e6451df1
MD5 cb52d1f2c69f20b107a7eb7fc2db055f
SHA1 6a0bed339dea5a6fc359d3bebd7858a2613f08a2
SHA512 58a5b6e167fb3e991abfe8247268fc151386a7988f6cbd8e3e205c8d22acec120599d4fbf102d89068360dcf15f111c3527af3d1edd76dce20c595a89751b0c1
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7z:fwUQC5VwBIiElEd2K57P7z
TLSH
T103B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f8dff5315a0bd3856381f405c1a16257337fd6ff2d8043dd8bea22404cd35129
MD5 5e53a2cd139f0cce4f8ceab3e015f7da
SHA1 1bd884dbaaa352a724c53bfb8f4bfad2623c93f5
SHA512 27cc4cb62f9aa4af6b521efd824b001f3b689bae2ffe57263da18e2bb22d0b13ba656141d7e6ea1d1c202d5f461a44243a00d604f78bd5b04fe6b8512e260ac1
TLSH
T178D02B1463108D04D441F13214D13311B1110833A80C96440050E1284CB634206738DD
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 1f3bc43c50f7d0fa02f98500baf5d78052a5560603459a9325b17de989d121f4
MD5 46a6445fd2c83830bb8c6e03f85bafc0
SHA1 46b07e35efbd47692fdc81ef0e82e2964da2831b
SHA512 800f82b05756fd6fab3fe29924147f0b86afeec21da661e646b431c6ca03903eb45bb09803f5cdaf3d2d1bb16f95d0f2e53a1f9ddde57505b0f3e1580c384ed1
TLSH
T188D02B1063208C04D441F13214D23311B1010833540C96440150E1384CB634206728CD
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 28563f057e26b6c0a61935e6ed1482dac1ef27ec1cc8bb1efc6391ae1dd90068
MD5 593b43b2cbf742d5feab8f293d17bfe6
SHA1 16564f8961e2f2d8ba3f8ec40f78dfa2454237e2
SHA512 d70c838fc8b275ddc6eae1dc55fbd9a1e16ec6f160422790fba373b6630afbd02b29c83e006456ddc784ae7df1cc0291b544364c2bdddc40e71303e62db4f0e4
TLSH
T1FD41A96F036B69C7CB799DB580D294897F3CC4A945CB6E2D464020B98F8B3D89234B30
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59458b.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59458b.TMP
Size 1KB
SHA256 fb55df1e81b3fa454a2311df957b480188435c50d16380aa5568febe28aafd4f
MD5 ee7d2236177d007953fd37bdfd49b249
SHA1 242e32500d109de6fa78eae461a353ae2b8d799e
SHA512 d4976f2de4cde8706f723010e27f7b1f0429dedb61e89bed6db0bdc715d17eaeb08f0338762c61ccd35683cec000d12c1dc1767bba673b26b6f87dd19786352f
TLSH
T1BD41A96F036759C7CB799CB180D294897F3CC4A941CB6E2E464021B98F8B3D89234B30
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 3e31ff9617a8cd60b2ec8e68c35bba92ba3e97e56c11d629a16378da68ebb4c6
MD5 a519bd6a83823596144c1ea5b3163828
SHA1 df8003690d0aefa705e0f29ce80fb7cc20bf32a4
SHA512 aed78fb69f2af19a95b6c622e5331e5343c80faab99bff77ba2757fc973757c5a8f474e34e19a214f13a89c135350ebccf76863faf5e57294671f893c5c4f180
TLSH
T10041C0F783F4857ECA0196F0AA146E1FCE2D0515436C7C6689E0AE2B93F3471E141A9F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 ac855a75e7db7fceebeb805ff4de2f5745808ba74fed96d0b7bf5d24c9f65836
MD5 e402e987ca41dc6914eff0fa717b5aa9
SHA1 78ad0a26eb356ae572c0b22a457053d93cd4ff81
SHA512 f153406cedc2769adb61e2bf48f8f242b59e91cde8ef581c2aef7eb2db38d06ed30758eb1080650d32a88f94d7b867a8250092cc6e9c153c9bb18f1da48b0663
SSDEEP 192:sxRURNyM/jK1Ml8wbc/fEsly5DDde5lSVzoD8p4U/g6+WNIYCNd6ORGsIgDwJ:sxRUjlc/fEslMDc5lOB/5ITrI
TLSH
T1DB62D805AA345D7BCCDBD208FA557F53D6F91573A2901E44AAFC9A1C00E6BEC221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 b24125bd4d21cee74f5b36b1890826dbfb5e2e101123b6f0e0772e71d5c18a46
MD5 667fcc08aeb93623aedd746444d4e89e
SHA1 8a54d9b95709adf44af4dadbfca32ab4d7090677
SHA512 7ab48504c5bc42c6742c9cc5dfbf57ec98b96c65781b8a82edf0caec5c222b66a103d501733640949969cdcc077d309686d0144d16a93ee2300866acfc391120
SSDEEP 192:sxRURNyM/jK1Ml8UQTbc/fEsly5DDde5lSVzoD8peU/g6+WNIYCqvxORGsIgDSJ:sxRUjqnc/fEslMDc5lOb/5IbrC
TLSH
T11A62D805AA345D77CCDBD20DFA557F53D2F81473A2901E44AAFC8A1C00E6ADD221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 9ddc0f4f059f5e3a9de851c69d702d7c6096febf7da862c4b5db7aef2695fad7
MD5 d331dbc116c14b5e4aef8be753b23d9d
SHA1 68fa68e127f56f444e8f663d8cee87e0d15b6aa7
SHA512 ea5974f5f8bc470774698d767acb9b01be5570ff42be7755f35c1c419b4a57fda858559bb93dd776a99cd874fdcfd081ad126fbdd9b8e1224a41c3f23dc17e49
SSDEEP 768:j/8vrQWgQ+fB+8F1+UoAYDCx9Tuqh0VfUC9xbog/OVCQqq9rov2:j/8vrQWgQ+fB+u1ja3Vq2e
TLSH
T186C2EC2B640CC77E4F844EADEC29BED66DD801CF5B588D5447EA890C03C67EB521A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 c1991d1d9eb19ed8730ef0a3fca1fe2ed2fa0b56c769c8a76553b43ab2852eb1
MD5 7ecc77cce18555820b376114e7a670f8
SHA1 037ce2df22e9e075091eccbbcfd2a1e64dee8a08
SHA512 bce5164debb6564f1bc98fad40cc05f1adeb783f7d6c7aa1e758c5961c4b26354e6d69ba66ebe0530b13e94f3251f179d002256c4214a8df3ac836030ed6751e
SSDEEP 96:KRbEBVj5J1WdSIg91K4EgT1c7j6dJOH0VAE+imkWivPgMkK4BgGkckEP+k5HxOfJ:CbEBVj5JAdSp9/EgTK7j6dJOH0VAE+i3
TLSH
T1AD91BE10323F02C4797DB94C80788D6FC6C1B1673419E62B7BA846A65B67E439DFE8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

b0e453eb-1491-43e1-a095-dfb73719e890.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b0e453eb-1491-43e1-a095-dfb73719e890.tmp
Size 14KB
SHA256 dc6c4af75332fd19f9d2e90e77804bd63136d844983329b20ba0640d6fe2e6af
MD5 7d72b2a9517eb64be444c331bf67da4a
SHA1 6f016e9115d29d9532c44642f2b187ac208f2ddb
SHA512 7bc24f99de50cbcb619a31ef07a0f692ef928b6b2496bad1cdb2a80737b2a7b9ff222953e3acdf722ee8aa32b639248f7c3f33f103833574d9b47ae67cf55cc4
SSDEEP 192:sxR/RNyM/jK1Ml8wbc/fEs8y5DDde5lSVzoD8p4U/g6+WNIYCNd6ORGsIgIJ:sxR/jlc/fEs8MDc5lOB/5ITrs
TLSH
T1D462D805AA245D7BCCDBD20CFA557F53D6F91573A2901E44AAFC9A1C00E6BEC221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 f0d980ea3a9a4025ca6010c1cdef8504a3430d7848c0b496f0adc9586322ec84
MD5 4cacd9dbd41822c24ed9cf370743ad21
SHA1 eab326303ef2352dc361fca4a35bdcdbad005d46
SHA512 ff755861990b73771cb5a1617edc1565fe06753b0a415bb037558305b1b9deaec9f12ad4e3d11518c2e3cca1ea3852fea5be0b337c31b46ecb2c8a9764f3aa24
SSDEEP 768:7w33xx8Nip8+p3bd66j+4BRv86aLIWmftu+:7w3688+p3Z6n4ycft5
TLSH
T1C4F2AFB2ECA59D338CF6D688B2963B076FF4415392C41ED498DC6B1D119B2AD170B83B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 76fe63718216ebd05451d9e88c8413f0641dc0e0534229e537331ac9dea014e6
MD5 41c1f6f829242c30c8c7dac621bee95d
SHA1 c0b44ffc30afc6c50697be1247c2ffc60d952350
SHA512 6c69ac7a9e18a86af22a8193469078a546771be8ea9fbc3b66c5cbefeafef27958613a3be1e6b59bd04ddef8797bc2f45b0c35df1844bf92b1de0810da1d276e
SSDEEP 768:grv+4UNbdD3CL8NONp8+p3bd66j+4BRv86aLITm2bwCl1:gbsbp3pOL8+p3Z6n4y30ww
TLSH
T1B403BF72E9A899339DF6C684B1467A437FF8429396C10ED0D8DD2B4E419B19E230BD37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 258449f4248b094e59ddfa8260bc910b789f51fa2441cbca618bcfb71fac7887
MD5 2ba9b0fb1408a1cfbde043a9bceb0df2
SHA1 076f605b88acfaf37cdd6be61d521c5019bbfccb
SHA512 ff25747320bde4e900163c7bd6b2f5155ed7e1a7bf7751deec7a287e929baa820d1be6a9a1d050c2315c252d8e04f045d069ec2aa7c734bcd7233087773e0de3
SSDEEP 768:tV33xx8NOTp8+p3bd66j+4BRv86aLIWmftu+:tV36Ol8+p3Z6n4ycft5
TLSH
T1F6F2AFB2ECA59D338CFAC788B28637076FF4515392C41ED498DC6B1D109B2AD170B83A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 18e039903433523b1f207bd8c6e0c0428ab01e8be245b7180e95998c41e5b991
MD5 1eec8f610fb75daece60e0348229a72f
SHA1 df74b8023eb5adf2054484bcdcdcb288fe50649a
SHA512 4b607dae9953b31f8f2b32426790b5977789314b24ffa319b32567be8216d737973267f11900cdbe10502b7b2666c2b88b7d02e4814a9faf549a2c48fa6653c1
SSDEEP 768:Yrv+4UNbdK3o1x8NOTp8+p3bd66j+4BRv86aLIWmftuX:YbsbQ3LOl8+p3Z6n4ycftk
TLSH
T1AA03BF72EC68DD338DF6C688B1873A477FB8415392C51ED4D8DC6B5D419A1AE230B82B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 77e08fe649962e246eda5427dea0283b0fd5b4bcf6bf059e666329b43509c3c2
MD5 0b720a0fffae0f7dd8386edaa0edbe28
SHA1 6402cd79cf59c618e32d0a202023d0db5fde084d
SHA512 db5d6196603b5bce3b1553a289d54d766e50fb33912dabe57817255f7996d65e68333c855f6e5231c587bb654d09016f9fa3547e2656457ba59addb05ef08df6
SSDEEP 768:Irv+4UNbdD30c8LNp8+p3bd66j+4BRv86aLIiC2bwCl1:Ibsbp3QL8+p3Z6n4yY0ww
TLSH
T1A603BF73E9A899739CF6C644B24A7B433FF851A396C10AC0D4DD2B4E419A19E230BD77
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download