c9f4efb516f17b63f449879cee64db462023abd1da92bb551241ead820a9dcfa

Analysis

max time kernel
148s
max time network
155s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
13/07/2026, 12:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
1048576.html
Size 564B
Sample260713-pg53vsaz3t
SHA256 c9f4efb516f17b63f449879cee64db462023abd1da92bb551241ead820a9dcfa
MD5 613f79233487af685baf4b32a2397ede
SHA1 5c23a2e369dd9c4cf969f169f7636d76e6dfc476
SHA512 a8a4cd999964b5cefd77b55a71cc09d2ebe933b6f6bd255221e2906ae1859ec63915b96d5dbb6c8ebb90b2457bc25caab7b55a529a8bebf68edb01c94991022c
TLSH
T145F062DB1F01387F2E239070B48251688F68095ABBE825E28759111F76CA0455AF2FAD
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3360	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134284187516462427"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3797332335-34111092-3597280141-1000\{DB8EC1A5-7408-4266-92D3-23853B9915CA}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5924	msedge.exe
5924	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 5196 wrote to memory of 4192	5196	msedge.exe	87
PID 5196 wrote to memory of 2476	5196	msedge.exe	88
PID 5196 wrote to memory of 3360	5196	msedge.exe	89
PID 5196 wrote to memory of 2476	5196	msedge.exe	88
PID 5196 wrote to memory of 2476	5196	msedge.exe	88
PID 5196 wrote to memory of 2880	5196	msedge.exe	90
PID 5196 wrote to memory of 2880	5196	msedge.exe	90
PID 5196 wrote to memory of 2636	5196	msedge.exe	91
PID 5196 wrote to memory of 2536	5196	msedge.exe	92
PID 5196 wrote to memory of 2636	5196	msedge.exe	91
PID 5196 wrote to memory of 2636	5196	msedge.exe	91
PID 5196 wrote to memory of 2536	5196	msedge.exe	92
PID 5196 wrote to memory of 2536	5196	msedge.exe	92
PID 5196 wrote to memory of 4164	5196	msedge.exe	95
PID 5196 wrote to memory of 5888	5196	msedge.exe	94
PID 5196 wrote to memory of 4164	5196	msedge.exe	95
PID 5196 wrote to memory of 4164	5196	msedge.exe	95
PID 5196 wrote to memory of 5888	5196	msedge.exe	94
PID 5196 wrote to memory of 5888	5196	msedge.exe	94
PID 5196 wrote to memory of 5760	5196	msedge.exe	97
PID 5196 wrote to memory of 5760	5196	msedge.exe	97
PID 5196 wrote to memory of 4664	5196	msedge.exe	98
PID 5196 wrote to memory of 4664	5196	msedge.exe	98
PID 5196 wrote to memory of 4536	5196	msedge.exe	100
PID 5196 wrote to memory of 6028	5196	msedge.exe	104
PID 5196 wrote to memory of 5364	5196	msedge.exe	105
PID 5196 wrote to memory of 1188	5196	msedge.exe	106
PID 5196 wrote to memory of 1992	5196	msedge.exe	107
PID 5196 wrote to memory of 1992	5196	msedge.exe	107
PID 5196 wrote to memory of 5924	5196	msedge.exe	109

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\1048576.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffb19dbc188,0x7ffb19dbc194,0x7ffb19dbc1a0
  2⤵
  PID:4192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1552,i,12911091182124125227,5161568696149129041,262144 --field-trial-handle=2608,i,10235841390687737660,2493793679301150459,262144 --variations-seed-version --mojo-platform-channel-handle=2604 /prefetch:2
  2⤵
  PID:2476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1828,i,639344450865483837,8424114596297775445,524288 --field-trial-handle=2608,i,10235841390687737660,2493793679301150459,262144 --variations-seed-version --mojo-platform-channel-handle=2800 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2140,i,4301155964085777062,15176660267118165839,524288 --field-trial-handle=2608,i,10235841390687737660,2493793679301150459,262144 --variations-seed-version --mojo-platform-channel-handle=3096 /prefetch:13
  2⤵
  PID:2880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3612,i,5010118902351305233,16223595987776194189,2097152 --field-trial-handle=2608,i,10235841390687737660,2493793679301150459,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:2636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3616,i,896883048656024682,10156735991098170339,2097152 --field-trial-handle=2608,i,10235841390687737660,2493793679301150459,262144 --variations-seed-version --mojo-platform-channel-handle=3628 /prefetch:1
  2⤵
  PID:2536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4328,i,12605767622288551852,11789264231311672559,2097152 --field-trial-handle=2608,i,10235841390687737660,2493793679301150459,262144 --variations-seed-version --mojo-platform-channel-handle=4364 /prefetch:1
  2⤵
  PID:5888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4352,i,11596690508887687922,792732275504416474,2097152 --field-trial-handle=2608,i,10235841390687737660,2493793679301150459,262144 --variations-seed-version --mojo-platform-channel-handle=3592 /prefetch:9
  2⤵
  PID:4164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5356,i,13794037554309190853,17159525853453575218,524288 --field-trial-handle=2608,i,10235841390687737660,2493793679301150459,262144 --variations-seed-version --mojo-platform-channel-handle=5392 /prefetch:14
  2⤵
  PID:5760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3760,i,9924276074764540531,7910947302518091073,524288 --field-trial-handle=2608,i,10235841390687737660,2493793679301150459,262144 --variations-seed-version --mojo-platform-channel-handle=5412 /prefetch:14
  2⤵
  PID:4664
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6088,i,6018301268886331940,12542163261148488237,524288 --field-trial-handle=2608,i,10235841390687737660,2493793679301150459,262144 --variations-seed-version --mojo-platform-channel-handle=6032 /prefetch:14
  2⤵
  PID:1504
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6088,i,6018301268886331940,12542163261148488237,524288 --field-trial-handle=2608,i,10235841390687737660,2493793679301150459,262144 --variations-seed-version --mojo-platform-channel-handle=6032 /prefetch:14
  2⤵
  PID:4536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5288,i,2133007687122719397,10202751036156713335,524288 --field-trial-handle=2608,i,10235841390687737660,2493793679301150459,262144 --variations-seed-version --mojo-platform-channel-handle=4404 /prefetch:14
  2⤵
  PID:6028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4368,i,16429456914717041370,2362420386750402831,524288 --field-trial-handle=2608,i,10235841390687737660,2493793679301150459,262144 --variations-seed-version --mojo-platform-channel-handle=5308 /prefetch:14
  2⤵
  PID:5364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4792,i,10621948346738087088,17485069225694520615,524288 --field-trial-handle=2608,i,10235841390687737660,2493793679301150459,262144 --variations-seed-version --mojo-platform-channel-handle=4656 /prefetch:14
  2⤵
  PID:1188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5704,i,15207684704055203486,3710192163777712372,524288 --field-trial-handle=2608,i,10235841390687737660,2493793679301150459,262144 --variations-seed-version --mojo-platform-channel-handle=6608 /prefetch:14
  2⤵
  PID:1992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6048,i,15340895314432498622,12646533800954601827,262144 --field-trial-handle=2608,i,10235841390687737660,2493793679301150459,262144 --variations-seed-version --mojo-platform-channel-handle=5548 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5924

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2376

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5044

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e413e02b9e80ee8d76d52c1043fc32251e2d7634d4b2fbd970df9ace9d91831a
MD5 22959b3a06a842ac30237dd57e8a3801
SHA1 0b7c28071a592034aa2607038000f085c7bb6362
SHA512 644add9ab912ad7fdfc55bc7a1b84482c75cc9bc69a59d169bae63a0400619d999846ebbadb0ef2bd6d35c2bd08a5f07053b600874dd5dfcbda7e8f3076131fe
TLSH
T1A5D02BE476408A0CC980203335F6524092018910D801D1480040B325CC845C1257F0DF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8aaa68aad07ba45abe53bd513aa5f7e7b21bd1b29db6e1d5c1e0a79a5f4eb890
MD5 74012bbce5fada7634c1da1b567562b3
SHA1 09db27f38f27e35986cfd407b57f6f83c8fc59f8
SHA512 c1a6a98f972793c84274c29552107bfe07b775c7c8121e5fdf137ebf9a7cc3f4eb43fe9eadfc842e7b92ca7281bbcea3d660bdd8fc9adc56add068510c41e48d
TLSH
T1FBD02BE07640890CC980203335F75240920189108401D1480040F335CC845C1257E0CF
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 c17fcf1167569e8497ac5fd4ef367e4ef3670c860fcdd263a678b0bbff4980ee
MD5 e6c90189d62cd1172cb7ec22dbc6eefa
SHA1 9b8b65c1bdb881579e7a9798b508d98ad28fb01e
SHA512 158afcf48d60c149249d78fc6648123d2613ca11bbd1ae5afb353cde3aa2b878ee0f281b946f1280139976281eeac28bc6bc54821facc890a16ba53158ab1f86
TLSH
T19461214B236E04E9D36A4A7250D9774436F086704D07BF8080F6DEBADC2AF5892F921F
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe592745.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe592745.TMP
Size 3KB
SHA256 3ceaa9936a17d4d07dc316b0ce60dd673e2a77d2a490b7bd46ada825d9313cb5
MD5 4598b7ec99da234344498ef20cf56b02
SHA1 3228f7c7f7c41d4b05b3e64a348f9c41e8b22295
SHA512 85a70be1e7fec37cc6a226cf1dce58400a541643ea814241ca101b398274911ac8a91660ac4ff87500b3f7d3d5319b60bab0ef8ed145b31c6ff7992b4417a2a5
TLSH
T1C061410A235E04E9D36A4A7250D9774432F086704C07BF80C0F6DEBADC2AF5892F921F
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 d10f3d8a08cb7a7686460ea04b33495b96df0b5cc4706c331701b4406861e468
MD5 58ec876221e1278671721bae320b6362
SHA1 6f66f7cc050635a270a2b75dac8d345ae7e9d36c
SHA512 280c7f322407532b234fdcc3c5d6c6f6f3de187377bf559edae3806a9c67c938b9648e44254d047333662827f95dac54f8311d2a67a6b2da2c508272a481ca5e
TLSH
T11541BDF7C3E4966D990186F0AA187E1BCE1D0955832C3C5AC9E4AF1BA3E3471E141A5F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 a26c53f5445e6a9356b0cf17d1e90aa457853e4ca5171b733057c1dbd5cee849
MD5 4cb0d3cfdb5ae316e48570e57a9b9b3a
SHA1 ad0338a702eff20a2b7a42e855701ed9399f0466
SHA512 53477a272d6846986e3beddb270d2ead9906b3d0b0f26f4738f11bb836d57896ffeae92f4b99cf1448e6a392c5dfc3388362b857abb767cb3e8648c5515299c1
SSDEEP 192:sxR+RWJyM/jK1Ml8UQQbd/f/ksNQLprQ5CzoA8pe3/g6+WNIYn8rhbG6IgDEJ:sxR+Sq+d/f/ksKLKk/5ITd3s
TLSH
T11062C9166A249D7BDCDBD20DFA41BF93D6F81573A2901E04AAFC8B0C00E66DD221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 faed99dc1ef4fa9991c7cc3403eae703d469d3ca48c191b25c5634cbd06d3f71
MD5 f38125a22e23f44fc94fadc73055ae19
SHA1 a3e1dd8b50e3b17efad3190e05ca6e0ebf12fcf5
SHA512 b6cdc89e75c6ab8536a1183356a686acdc3f8a348ce8f78a7f6f9f124af6d2dbdbd6119d0fcd07b55f22832a2ff539486d77e685f7875c9c20a460a554604544
SSDEEP 192:sxR+RWJyM/jK1Ml8wbd/f/ksNQcprQ5CzoA8p43/g6+WNIYn83hbG6IgD+J:sxR+Sld/f/ksKcKm/5ITR3u
TLSH
T14352C8166A245D7BCCDBD209FA51BF93D6F81573A2901E44AAFC8B0C00E66DD221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 aabaffb06203d9a561e0514fe64d0851f8a4431ea65ce85b954460f78d77791c
MD5 4f3a90f1a40cedefb4be5cc29607f88a
SHA1 ec57c00e2bad5af5bc472c5a218cd27bcca1dbff
SHA512 8de287d211374a917b26792ebde89fa4c04d0386b69b6d4ed8816696487903fcebe6c962af15c94fbf7c7fbd7f48f4f9eb009ab2be40e3c9e807ddc1bb154c65
SSDEEP 192:sxRZRWJyM/jK1Ml8wbd/f/ksiQcprQ5CzoA8p43/g6+WNIYn83hbG6IgIJ:sxRZSld/f/ksbcKm/5ITR3s
TLSH
T11352D9166A245D7BCCDBD20DFA55BF93D6F81573A2901E44AAFC8B0C00E6ADD221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 8db1035e810787cf4e9bb1b11b9365b8c5def7ea25842be0533ff116778e84ad
MD5 ff156d64fd7e5edff431c2cd21e977fe
SHA1 ba0f693fb7eab7219bff3382431ee558d56e0c7d
SHA512 d85fe6795ca69bfdd9f57ec2ebe7ddf5dbfa01a764d1dfc63f40aa15ca7ce911519e66d19a4bd84fdd29d0875be93bcc0c203a81440d4e6ff8ec7400ac4fd424
SSDEEP 768:wGedp6WgoufDM8F1+UoAYDCx9Tuqh0VfUC9xbog/OVIu4YjroSh8S53:wGedp6WgoufDMu1jatVYQEN
TLSH
T16BC20C2B640CCB7E4F844EADEC29EED76DD801CB9B984D5447EA890C03C67EB511A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 f91efa7c3bfd7903e00cddb52181334ab09c9fddac4f736ee4d3e4aca3a3db79
MD5 a005e689c942401ab5c39e1ad7edc0c2
SHA1 ea0bc63298ff90383551561311828de3ac848258
SHA512 258bd3a9ff7db91ef0fa55f7ef79d495f7559a0c88c92b8cca277137e90e40bc52605c29a18a90f1a7c8fe7fce57c49e8978c8f3c40d296e54238fd740c0688a
SSDEEP 96:KRtaTHd3LfWTI2gPfK4Ogxfc1NAj70HS3eyEkUyW8pBgiyK43gYyciKxQ1uYKfqv:CtaTHd3LeTInPlOgxU1NAj70HS3eyEkx
TLSH
T160918E42703A0240387E7A589076891BC5C7B4B37405E56F7BE952E10F2BE235EFE9DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

OperationConfig~RFe59c1ef.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59c1ef.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

a606258d-a1af-4345-a12f-1b5a03b0622f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\a606258d-a1af-4345-a12f-1b5a03b0622f.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 235563b007ca34ac01b006e1c38f0089714faf196da81eec5a48f9c8d1d15484
MD5 2e007fff2cd1346b4a2938f3cc642089
SHA1 b56c10cbe9d77291f6dcfa227085afaafde9d649
SHA512 19ce6512500094c39e77484290dd3f9f29f6ab0ed9a8408f71c3fc6cdb58e7cb853a35fe72bb76ba6791e645b9c0878a9060414a2dc1b1539f82d441a9a8db10
SSDEEP 768:Wj+9H3/hH0NDZIO0XxNzc4ReyIsP0b9Mh:F9H3/hHxtc44bs8b+h
TLSH
T10FF2C032BC358D63ECD65795F6073656BEF4512B82C92E94CADE6F0C09876EC432B812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 21e88dcb00c5f77d34522cb074967565d73ab20c8a40ae49b3636ae759112904
MD5 b2b7740705c8d0f5e4e85f2c90e45a10
SHA1 87bf7ae125538549a05e34f1fe910f410a6ef18f
SHA512 b978616e929a6c493660a725c586f20977ef639ca152e1bc2c89caf4ceb24bdbbcc5bae02f95de42e4f0182fc16213e9f3088c66a133f50be0f6a3a4f865c374
SSDEEP 768:wrv+4UNbdR3khHFNDZIO0XWNzc4ReyIsP0v:wbsbD3khHftc44bs8v
TLSH
T10403BE32B8388D77ACE66685F50B76137EF4511782C91A94CADE2F4C464B1DD131F923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 ddd5dcd2e6b63ff40e4b7cc44ab16be4bf161dc65d654f29b4e8510e5ec5fc03
MD5 e2fdb2bdd84d345d6f86d75ae78a2771
SHA1 0dab1787ab7d407d39d935b9b55ef40c8350f316
SHA512 eb2826e91a52ccf6ab6fc17cb03f49e9327209c14fd3c948371242c38b89dd20c3df19bb26f4cc7a7099062d63abbcae41b4c3cc54b5b386f006b2bdf12418a5
SSDEEP 768:Jj+9H38hH0NDZIO0XxNzc4ReyIsP0b9Mh:U9H38hHxtc44bs8b+h
TLSH
T1D4F2B032BC358D63ECD65795F6073656BEF4512B82C92E94CADE6F0C09876EC432B812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 5e21c8974b7c627cd5e61fdabcc1495b77314a23160c049100ed78380814f132
MD5 c2da0d1813dc5384b0d37d03147d42fb
SHA1 c7028f0e5ccf3975c600fae3dfd9882c00fa129b
SHA512 f092fbbe142b07da83d848ca4943963fa7f7d5139b345aac1cf580918f981efe8be57c7762d5316ed0731b9af5d6981b16deb5e028150709fca2e6b149d14f83
SSDEEP 768:sF1j+9X3Vwg9hH0NDZIO0XhNzc4ReyIsP0b9Mh:B9X3phHhtc44bs8b+h
TLSH
T1DB03AE33AC64CD77ECA65B95FA0A3256BEF14167C2C96A94DBCE9F0C05871EC035B812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 22a6bcf69c6aaffef24f1c7c776b7f2db6cb31e38cf5bbd391c1095dcc4ee359
MD5 53e596279ec550bd288ff9e26409e44b
SHA1 36b990ebd952eb0f248ac432298faa7847ba9e72
SHA512 3e2274c93010efe28f1712817607d59508477070527694232d9ac4dafd068570a3ad7da70f20954f604ff1272dc38ccd84c202538a3b79506ba9ecd3691d9682
SSDEEP 768:6rv+4UNbds3TBDZIO0sNzc4ReyIsXIeVH1S5D:6bsbS3Btc44bs4EH1Y
TLSH
T1C303CF33A8788937ECF6A686B50B76137EF8612B82981F90C5DE5F0C464B5DD130B923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1ca6f68c-98a7-4aa5-bf77-387ab15a6c2b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\1ca6f68c-98a7-4aa5-bf77-387ab15a6c2b.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download