59ffa208a969f9000d3b551561419f6ee9fb4e98138aca88da3675aefa16fec6

Analysis

user interaction
yes
max time kernel
150s
max time network
136s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
27/07/2026, 23:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
P211000552026.html
Size 457B
Sample260727-3a9dlatarg
SHA256 59ffa208a969f9000d3b551561419f6ee9fb4e98138aca88da3675aefa16fec6
MD5 4f63887f05ce0307822f6180754da251
SHA1 d77bcca7169ef58f144bbc902b9d7705c48823cd
SHA512 3bc401b81738a21c47590ce8eb1878e9ff757d6d80dbdc772f43c101b8824801ecb7182b18daf5a4b887c44a52fbe57b21f5ca142f23d609021b666fd031459e
TLSH
T176F0DCF203B0202B672213158FA5F31AB183208B8D5E9494E81CD02D3EC4D4DDA6BB59
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1144	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134296680098563944"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1014449518-1831897916-4205727055-1000\{9ADCC981-1499-4829-8629-350C6D8DBC06}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5336	msedge.exe
5336	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5384	msedge.exe
5384	msedge.exe
5384	msedge.exe
5384	msedge.exe
5384	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5384	msedge.exe
5384	msedge.exe
5384	msedge.exe
5384	msedge.exe
5384	msedge.exe
5384	msedge.exe
5384	msedge.exe
5384	msedge.exe
5384	msedge.exe
5384	msedge.exe
5384	msedge.exe
5384	msedge.exe
5384	msedge.exe
5384	msedge.exe
5384	msedge.exe
5384	msedge.exe
5384	msedge.exe
5384	msedge.exe
5384	msedge.exe
5384	msedge.exe
5384	msedge.exe
5384	msedge.exe
5384	msedge.exe
5384	msedge.exe
5384	msedge.exe
5384	msedge.exe
5384	msedge.exe
5384	msedge.exe
5384	msedge.exe
5384	msedge.exe
5384	msedge.exe
5384	msedge.exe
5384	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5384	msedge.exe
5384	msedge.exe
5384	msedge.exe
5384	msedge.exe
5384	msedge.exe
5384	msedge.exe
5384	msedge.exe
5384	msedge.exe
5384	msedge.exe
5384	msedge.exe
5384	msedge.exe
5384	msedge.exe
5384	msedge.exe
5384	msedge.exe
5384	msedge.exe
5384	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 5384 wrote to memory of 5408	5384	msedge.exe	90
PID 5384 wrote to memory of 1144	5384	msedge.exe	91
PID 5384 wrote to memory of 936	5384	msedge.exe	93
PID 5384 wrote to memory of 936	5384	msedge.exe	93
PID 5384 wrote to memory of 5208	5384	msedge.exe	92
PID 5384 wrote to memory of 5208	5384	msedge.exe	92
PID 5384 wrote to memory of 5208	5384	msedge.exe	92
PID 5384 wrote to memory of 1864	5384	msedge.exe	95
PID 5384 wrote to memory of 1864	5384	msedge.exe	95
PID 5384 wrote to memory of 1864	5384	msedge.exe	95
PID 5384 wrote to memory of 6460	5384	msedge.exe	96
PID 5384 wrote to memory of 6460	5384	msedge.exe	96
PID 5384 wrote to memory of 6460	5384	msedge.exe	96
PID 5384 wrote to memory of 2080	5384	msedge.exe	97
PID 5384 wrote to memory of 2080	5384	msedge.exe	97
PID 5384 wrote to memory of 2080	5384	msedge.exe	97
PID 5384 wrote to memory of 4760	5384	msedge.exe	98
PID 5384 wrote to memory of 4760	5384	msedge.exe	98
PID 5384 wrote to memory of 4760	5384	msedge.exe	98
PID 5384 wrote to memory of 5912	5384	msedge.exe	99
PID 5384 wrote to memory of 896	5384	msedge.exe	100
PID 5384 wrote to memory of 5912	5384	msedge.exe	99
PID 5384 wrote to memory of 896	5384	msedge.exe	100
PID 5384 wrote to memory of 5184	5384	msedge.exe	102
PID 5384 wrote to memory of 1388	5384	msedge.exe	106
PID 5384 wrote to memory of 2364	5384	msedge.exe	107
PID 5384 wrote to memory of 1620	5384	msedge.exe	108
PID 5384 wrote to memory of 1564	5384	msedge.exe	109
PID 5384 wrote to memory of 1564	5384	msedge.exe	109
PID 5384 wrote to memory of 3456	5384	msedge.exe	111
PID 5384 wrote to memory of 3456	5384	msedge.exe	111
PID 5384 wrote to memory of 5336	5384	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\P211000552026.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x32c,0x7ff8b5bfc188,0x7ff8b5bfc194,0x7ff8b5bfc1a0
  2⤵
  PID:5408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1676,i,1562015889096711210,10189821316982703659,524288 --field-trial-handle=2128,i,2262055431944236459,1696830947063614248,262144 --variations-seed-version --mojo-platform-channel-handle=2168 /prefetch:11
  2⤵
  - System Time Discovery
  PID:1144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1528,i,13560937053862443842,6415857381741228577,262144 --field-trial-handle=2128,i,2262055431944236459,1696830947063614248,262144 --variations-seed-version --mojo-platform-channel-handle=2116 /prefetch:2
  2⤵
  PID:5208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2468,i,17668694986800144445,393271278911731864,524288 --field-trial-handle=2128,i,2262055431944236459,1696830947063614248,262144 --variations-seed-version --mojo-platform-channel-handle=3016 /prefetch:13
  2⤵
  PID:936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3552,i,17175192809694078965,13917840660635355399,2097152 --field-trial-handle=2128,i,2262055431944236459,1696830947063614248,262144 --variations-seed-version --mojo-platform-channel-handle=3600 /prefetch:1
  2⤵
  PID:1864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3556,i,815034874971717247,5597839150461887418,2097152 --field-trial-handle=2128,i,2262055431944236459,1696830947063614248,262144 --variations-seed-version --mojo-platform-channel-handle=3656 /prefetch:1
  2⤵
  PID:6460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=5104,i,16700982518891509037,15921626898484510656,2097152 --field-trial-handle=2128,i,2262055431944236459,1696830947063614248,262144 --variations-seed-version --mojo-platform-channel-handle=5116 /prefetch:1
  2⤵
  PID:2080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=5156,i,383576624699972391,1575849388614782682,2097152 --field-trial-handle=2128,i,2262055431944236459,1696830947063614248,262144 --variations-seed-version --mojo-platform-channel-handle=5360 /prefetch:1
  2⤵
  PID:4760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3644,i,1923457477318645080,15099570861892958790,524288 --field-trial-handle=2128,i,2262055431944236459,1696830947063614248,262144 --variations-seed-version --mojo-platform-channel-handle=3804 /prefetch:14
  2⤵
  PID:5912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3616,i,6734799883389044727,17622420640030607837,524288 --field-trial-handle=2128,i,2262055431944236459,1696830947063614248,262144 --variations-seed-version --mojo-platform-channel-handle=3764 /prefetch:14
  2⤵
  PID:896
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5868,i,6282053775802210164,12494545120612643458,524288 --field-trial-handle=2128,i,2262055431944236459,1696830947063614248,262144 --variations-seed-version --mojo-platform-channel-handle=5884 /prefetch:14
  2⤵
  PID:6248
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5868,i,6282053775802210164,12494545120612643458,524288 --field-trial-handle=2128,i,2262055431944236459,1696830947063614248,262144 --variations-seed-version --mojo-platform-channel-handle=5884 /prefetch:14
  2⤵
  PID:5184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6012,i,8360218210383638729,6757379312155954892,524288 --field-trial-handle=2128,i,2262055431944236459,1696830947063614248,262144 --variations-seed-version --mojo-platform-channel-handle=6256 /prefetch:14
  2⤵
  PID:1388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6000,i,2375945038803506689,6186909281095096633,524288 --field-trial-handle=2128,i,2262055431944236459,1696830947063614248,262144 --variations-seed-version --mojo-platform-channel-handle=5980 /prefetch:14
  2⤵
  PID:2364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6008,i,13345916698543835772,5100272853354377290,524288 --field-trial-handle=2128,i,2262055431944236459,1696830947063614248,262144 --variations-seed-version --mojo-platform-channel-handle=6368 /prefetch:14
  2⤵
  PID:1620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3540,i,3253598994072026187,1752074154578024207,524288 --field-trial-handle=2128,i,2262055431944236459,1696830947063614248,262144 --variations-seed-version --mojo-platform-channel-handle=4964 /prefetch:14
  2⤵
  PID:1564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3644,i,4964751193923314051,4634358146107109457,524288 --field-trial-handle=2128,i,2262055431944236459,1696830947063614248,262144 --variations-seed-version --mojo-platform-channel-handle=3800 /prefetch:14
  2⤵
  PID:3456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6408,i,2441554445358503691,11944268890219990052,262144 --field-trial-handle=2128,i,2262055431944236459,1696830947063614248,262144 --variations-seed-version --mojo-platform-channel-handle=6232 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5336

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:460

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3268

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ba1406dd0117e6bb02a18e1f0ca40a20fdf33f68d611dcf6b59a242ae289374a
MD5 8a26ea5cde92773cb558eb116e113216
SHA1 2f807e9fd5e13c4ff550fceca7d90f11683ae33e
SHA512 dca9db1a71d0ad99193f78ee9f9221519b875eb1beb13ebfbd9d64a1b449eb8a027a5b2ceadf9158001b4548f036b26ed4f2c36ce3e8b981af5a54590c0e94a5
TLSH
T1B8D0C030B7286803D5141931D022CB007A17002321BBD1025160C00C2C3BCB163CA141
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
Size 268B
SHA256 ed9213056ae74bab1723509a60f5bff2d26eb586bac34d2fd71f1ce6e2853860
MD5 a743c3d6de41ca00ccb2cafd2fb5884f
SHA1 f457b825e75a96a9d306a3be49238c0b20ec0e44
SHA512 7edb56dd603f7d38bf5dc4235910af5ad8db833164905db50591542be6a6f2b5ddc6d59e79a0b535a1ab59473a1802e677bd8870886ae79d59bdbf14a68a774d
TLSH
T1B7D0C2A8A8ECA94ED6E409BE97A5F0100F6402820416DA120160F9C136A52E41BAA020
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 649B
SHA256 66ba56022760bd9d7a97c6a56c1d16d9578242bb82b3ccd3c43a3ae22c8fbe8c
MD5 66a88341edfd310fe6169a87dcbb1863
SHA1 03017a83b298c74ff7c50317af0e3c55ab609a55
SHA512 42bcb9839761339a067e4ce8fb0b1aa35b7701b15f205379f02000e7ae6454eeef537c9de4e9fa0e35d9ff8bcf6950002b3cb8871edec34ef58f5dbd71eb5dd1
TLSH
T15AF0F9A6C921BC3719FC1B2860540A47EB50135B3B41995B3B3C821C4FB163B8686C1C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 bed32f38159f687746bea9c27ad25d657b294ddbc46cfe03d21de591368dba14
MD5 06012597d4a5f5671cd55e1f5ed66ef9
SHA1 e5084528badaf603f8bc1c8a09235c395b5a0e93
SHA512 3aa4904dd1020f0047b63ec7e0c5adb59c4960e4d4922067cfba4320e146bf54249ab6817f4ec4253ed7aba9f6efd9e057670243d7b31bc1dfe03e3e904a5ee9
TLSH
T18851BDF783F4856ECA1196F0AB186E2BCE2D0515832C3D5AC9E4AE1793E3471E141A4F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 3fd76c3c621fcf6f1ce9ccc69a1016e568a3a60becf098b32c8be7ffd78d12ae
MD5 991623cb31929f04062c15831d298f21
SHA1 12ccc5ef2b6109ef43607facdbf5a00c3c480117
SHA512 940ce58241226a3f6466d694719ffc10ca02c904e855f92d7512b22b2bbd0589ab065cf57f7d72fb3577dd6a662ca3edd0fd1c36e5d345b74d5c500581ec5ac7
SSDEEP 384:sxRIG6q+I/frsgdN/n+C/5IJWCjsGQ2U5:szF+I/fB/r/5MWCjsGQV
TLSH
T14872D71A99748D7BCCDBD619F6457F93D6F92173E2905E44AAFC8A0C00E66EC221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 33d8eaec2a3be07270a9239fdfc997e98cc7192496ee7ed83ba0cd49c7cf3adb
MD5 4dd4d8134c5262c56e2e71e320bb5dd1
SHA1 f9d4794ff4c579e047ab7b9ee3ad9dd55e259017
SHA512 96eb2cac58a3afcc456e100fb364269469bd9f0767bfef7ec9a7678785dafc58846571e397b75000c06e16c7a1b71deea89fddffadef6e688ab7663f22dcea48
SSDEEP 192:sxRIGRNyMqZjK1Ml8wbI/frszpNRZnCzoD8pekQ/g6+WNIYcC4CpsGQDGPIgjXJ:sxRIG6lI/frszpN/n+C/5IW4esGQ2j5
TLSH
T13E62E91A6A749D7B8CDBD619FA557F93D6F81133E1905E44AAFC8A0C00E66EC221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 a4d4b6d728dfc7c536d3d6bcb19fad00638687f76418bbc84d9bf210e4905258
MD5 6f39294cf14ca60e275cfa7cc5358dd1
SHA1 20656405029fa7fa9cb6192130afd97c5fbdfec0
SHA512 c22d3054358983bd8c5a7a39c9e261ba1ef2eb198577010a99472ce441058e643759d9b93918b82c166c1c587eb5437c044cca436c27dbfc7511dad19230e500
SSDEEP 768:Ob4YATWg1NfwB8F1+UoAYDCx9Tuqh0VfUC9xbog/OVBbDwzroT4z:Ob4YATWg1NfwBu1jasHwAUz
TLSH
T142C2EB2B244CCB7E4F844A9DAC29AED76DD801CB9B984D5447EB890C03C67FB521A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 c9c2880449587e0fa6839f923d70056a44de4a9c88e665dfef1004e2d708d552
MD5 961e80b93dece2e2a447905e4dbd3d7c
SHA1 8ec4285a549996e4a70ff88316683930c57205a0
SHA512 76543a5953e64b5919e7c213136adf6a2a11759f01a026bb5a0276f50278d10d6ce94b58b76281040299265fbf67a54077df014a8bf6669af36a2f03aa78675c
SSDEEP 384:yv+Rp0nYrnhZZuJCXHnbB1S/HqlcDDRPbIhJ9JVo:yv+Rp0nYrnhZZuJCXHnbB1S/HqlcDDRl
TLSH
T1DBB26C11713F4280387EA90C91BCD81E96C2B4637519E52F7BAC01A65F67E038DFE8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 24KB
SHA256 6f4501f203f7c162574ddba548eadec7f1a817ccbc3e80257a1936d200397c3c
MD5 24a0856f4ff26f5fefeb29863ebf41a6
SHA1 7344714564a15b76e80c3a47e00d420346aca2a2
SHA512 27c781baef4a812e6ddb76123d7b1659955d22cb889d1a7d28a423ea0dac3ed6e2116b7b6e6ec7a2e6515bca5626408fcffc3819b30c1c227073c130938dd14c
SSDEEP 384:nZiF1tNn/s3n9SE8NLd8TUNTUlIRyPvuTpejTeff+GGnR9nnFL5PjQ3kb8LEEIz4:wF1j+9dQdwgEuMjEGRFjQ3ki
TLSH
T1EFB22936DC95DA7BECE74ED8B64A7646DEF042A3C5886AC4E9D95D0C00DB2DD030BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 223e31b5e6c300bf14e4646126760a4f61984e9de170aa5a736dfe9ad6585782
MD5 7c3c4b7eabeeaefd268126ba116f50a0
SHA1 d4febde66caf4c116188d0a912e583e8af347375
SHA512 484e85f84735528e841bbc253beca9d4dabc0045b8cfe428af55efb8077a6befccaa17954d90420c78b7ac06f39c311904e5b30db0090687e59d78db9c103d9d
SSDEEP 384:n3iF1tNn/s3n9SE8NLd8TUNTUlIRZPvuT5ejTeff+GGnR9nnFL5PjOObjI9G6w7O:yF1j+9dQdwgnu8jEGRFj29MO
TLSH
T1DDD24A36DC95CEB7EDE74EE4B24A3646EEE052A3C58C6AC4E9D95E0C00CB1ED4307816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 7435e4ef65237a15ba38aee9fc39d825d7670a23c7ab345d4d42e8e1e64eaed7
MD5 990659ced0d14c002117dd30dd42a61b
SHA1 4ce7df14daabf33c338901171f68eec49d40bfb8
SHA512 8f154fb7fa227196a514f3443d52d210b4f4de4e28d293d61cd572196fee58b368e6b41b17852a0c738efb9c2ab03c680ab10d4fe7260b1c47956db008af573e
SSDEEP 384:nZiFiZcIm8NLd8TUNTUlIRcPvuTpejTeff+GGnR9nnFL5PjQ3kb8LEEIzf:wFQmQdwg2uMjEGRFjQ3kB
TLSH
T143B22832DCA4CA77ECE74AD5A6497606DEF05263C68C9AC4E9D95E0C00DB1EE030BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 30KB
SHA256 002b3703074037cc995b67705c3daa191afca383dcfab4193ff67d7a2cff34d1
MD5 af744e2529bf64f670295df6c32d6e10
SHA1 aa3296d8aa79fd30a3803b68438d4ec9f2e23637
SHA512 7270178b0a506476be7dc2888aad661fb9d5b4706f7a1ab1cf0cf2ffd1b8d4e6edf58334f0053aa8be669159b209917772ed944630b8a789a5eebaae404af885
SSDEEP 384:nriFiZcIO8NLd8TUNTUlIRcPvuTpe5Teff+GGnR9nnFLF7jQ3kb8LEEIzf:GFQOQdwg2uM5EGRVjQ3kB
TLSH
T1AED290F298D78976E8AE4B97A37D2D029DFCC153B5885984B7D85D0CCC861BFC306816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 1945aecf4c922cc8ec2d992a4048f03fbcea0ef48e56295579f6594ab9ed5b32
MD5 0dbc3da017a1ce67d00d87595508b573
SHA1 86bdfe3ae9765121d0ca7f95f776d67c787c508e
SHA512 a1dd8186d2585ef4cb633b5542bbab838bee80f9ffc83a544c8a8e97061c1ce8ee3b9be58ca80d9de2f008571e0fd335bce894073a1161a91463ee6a7d5c9195
SSDEEP 384:n4iF1tNn/s3n9Sn8NgO8TUNTUlIRiPvuTu5Reff+GGnR9nn/LaOObjI9G6w7uW8O:DF1j+9SXOwgUuAmGRRa29Mj
TLSH
T16BC24A36DC95CEB7EDE74F98B24A7A4AEEE012A7859C69C4DAD81D0D00C71ED0307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download