7551436b74f5578fa3586b8e01d93104b6555f10f0c78fe79017a48d0c608431

Analysis

user interaction
yes
max time kernel
149s
max time network
151s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
08/08/2026, 04:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
I2djgYKY.html
Size 2KB
Sample260808-e4v63azgkb
SHA256 7551436b74f5578fa3586b8e01d93104b6555f10f0c78fe79017a48d0c608431
MD5 1c8296e09d283b43a99be8da4b55bec7
SHA1 03e88c2a7eab1a13eec11626b1089dbe2a80ac6b
SHA512 a237d81f89595c1b60f937b4b434565c59a9ecb26f650834b1628595e0f867c5cb67307cc3d2c78165444a4352f6dea37c5e4bb4a9d82f5f6c40279b0b1f9a4d
TLSH
T100415223D50480154661E185B0EAB79D802397CFDB325C4067B4B5EBA1D7FE1C2762E9
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
832	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134306370452824483"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1014449518-1831897916-4205727055-1000\{23B1D36F-738E-4EC9-81C2-5F98348CFEED}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2116	msedge.exe
2116	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 4444 wrote to memory of 848	4444	msedge.exe	90
PID 4444 wrote to memory of 4752	4444	msedge.exe	91
PID 4444 wrote to memory of 832	4444	msedge.exe	92
PID 4444 wrote to memory of 4752	4444	msedge.exe	91
PID 4444 wrote to memory of 4752	4444	msedge.exe	91
PID 4444 wrote to memory of 5988	4444	msedge.exe	93
PID 4444 wrote to memory of 5988	4444	msedge.exe	93
PID 4444 wrote to memory of 616	4444	msedge.exe	95
PID 4444 wrote to memory of 616	4444	msedge.exe	95
PID 4444 wrote to memory of 616	4444	msedge.exe	95
PID 4444 wrote to memory of 628	4444	msedge.exe	96
PID 4444 wrote to memory of 628	4444	msedge.exe	96
PID 4444 wrote to memory of 628	4444	msedge.exe	96
PID 4444 wrote to memory of 700	4444	msedge.exe	97
PID 4444 wrote to memory of 700	4444	msedge.exe	97
PID 4444 wrote to memory of 4708	4444	msedge.exe	98
PID 4444 wrote to memory of 4708	4444	msedge.exe	98
PID 4444 wrote to memory of 3228	4444	msedge.exe	100
PID 4444 wrote to memory of 5556	4444	msedge.exe	104
PID 4444 wrote to memory of 460	4444	msedge.exe	105
PID 4444 wrote to memory of 2976	4444	msedge.exe	106
PID 4444 wrote to memory of 3716	4444	msedge.exe	107
PID 4444 wrote to memory of 3716	4444	msedge.exe	107
PID 4444 wrote to memory of 2116	4444	msedge.exe	109
PID 4444 wrote to memory of 1716	4444	msedge.exe	110
PID 4444 wrote to memory of 1716	4444	msedge.exe	110
PID 4444 wrote to memory of 1716	4444	msedge.exe	110
PID 4444 wrote to memory of 3316	4444	msedge.exe	111
PID 4444 wrote to memory of 3316	4444	msedge.exe	111
PID 4444 wrote to memory of 3316	4444	msedge.exe	111
PID 4444 wrote to memory of 4864	4444	msedge.exe	112
PID 4444 wrote to memory of 4864	4444	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\I2djgYKY.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffec055c188,0x7ffec055c194,0x7ffec055c1a0
  2⤵
  PID:848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1528,i,13043742107340369672,15776073200945820783,262144 --field-trial-handle=2192,i,4572941986700915164,17212228747746579394,262144 --variations-seed-version --mojo-platform-channel-handle=2188 /prefetch:2
  2⤵
  PID:4752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1660,i,13243009455757219374,9293878601072494728,524288 --field-trial-handle=2192,i,4572941986700915164,17212228747746579394,262144 --variations-seed-version --mojo-platform-channel-handle=2748 /prefetch:11
  2⤵
  - System Time Discovery
  PID:832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2296,i,9981593511532747236,12101817087255266228,524288 --field-trial-handle=2192,i,4572941986700915164,17212228747746579394,262144 --variations-seed-version --mojo-platform-channel-handle=2912 /prefetch:13
  2⤵
  PID:5988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3488,i,3144917126945822237,12950506411219575093,2097152 --field-trial-handle=2192,i,4572941986700915164,17212228747746579394,262144 --variations-seed-version --mojo-platform-channel-handle=3564 /prefetch:1
  2⤵
  PID:616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3576,i,5198256707266600851,8846765625081764919,2097152 --field-trial-handle=2192,i,4572941986700915164,17212228747746579394,262144 --variations-seed-version --mojo-platform-channel-handle=3608 /prefetch:1
  2⤵
  PID:628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5208,i,5407388894777379082,8875064921191048844,524288 --field-trial-handle=2192,i,4572941986700915164,17212228747746579394,262144 --variations-seed-version --mojo-platform-channel-handle=5264 /prefetch:14
  2⤵
  PID:700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5204,i,16317646425203645905,14218110611946492968,524288 --field-trial-handle=2192,i,4572941986700915164,17212228747746579394,262144 --variations-seed-version --mojo-platform-channel-handle=5248 /prefetch:14
  2⤵
  PID:4708
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5796,i,14751691872625485494,17074725901884835273,524288 --field-trial-handle=2192,i,4572941986700915164,17212228747746579394,262144 --variations-seed-version --mojo-platform-channel-handle=5804 /prefetch:14
  2⤵
  PID:1704
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5796,i,14751691872625485494,17074725901884835273,524288 --field-trial-handle=2192,i,4572941986700915164,17212228747746579394,262144 --variations-seed-version --mojo-platform-channel-handle=5804 /prefetch:14
  2⤵
  PID:3228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5976,i,2783626690723994353,14708434906781347307,524288 --field-trial-handle=2192,i,4572941986700915164,17212228747746579394,262144 --variations-seed-version --mojo-platform-channel-handle=5848 /prefetch:14
  2⤵
  PID:5556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5968,i,7584582459349807347,17875269492666367151,524288 --field-trial-handle=2192,i,4572941986700915164,17212228747746579394,262144 --variations-seed-version --mojo-platform-channel-handle=6108 /prefetch:14
  2⤵
  PID:460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5980,i,17674467321317532715,14431946128306391248,524288 --field-trial-handle=2192,i,4572941986700915164,17212228747746579394,262144 --variations-seed-version --mojo-platform-channel-handle=6352 /prefetch:14
  2⤵
  PID:2976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5216,i,4895771231467760613,5687413006894256861,524288 --field-trial-handle=2192,i,4572941986700915164,17212228747746579394,262144 --variations-seed-version --mojo-platform-channel-handle=5524 /prefetch:14
  2⤵
  PID:3716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5448,i,7071899942852234329,3462998346008568051,262144 --field-trial-handle=2192,i,4572941986700915164,17212228747746579394,262144 --variations-seed-version --mojo-platform-channel-handle=6440 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=3232,i,2791942628022819232,7451404826233176409,2097152 --field-trial-handle=2192,i,4572941986700915164,17212228747746579394,262144 --variations-seed-version --mojo-platform-channel-handle=5572 /prefetch:1
  2⤵
  PID:1716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=3560,i,17575168182453685773,15826194497277964181,2097152 --field-trial-handle=2192,i,4572941986700915164,17212228747746579394,262144 --variations-seed-version --mojo-platform-channel-handle=3668 /prefetch:1
  2⤵
  PID:3316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5368,i,10951559637542342599,16350293417268079724,524288 --field-trial-handle=2192,i,4572941986700915164,17212228747746579394,262144 --variations-seed-version --mojo-platform-channel-handle=5544 /prefetch:14
  2⤵
  PID:4864

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1148

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2684

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ba1406dd0117e6bb02a18e1f0ca40a20fdf33f68d611dcf6b59a242ae289374a
MD5 8a26ea5cde92773cb558eb116e113216
SHA1 2f807e9fd5e13c4ff550fceca7d90f11683ae33e
SHA512 dca9db1a71d0ad99193f78ee9f9221519b875eb1beb13ebfbd9d64a1b449eb8a027a5b2ceadf9158001b4548f036b26ed4f2c36ce3e8b981af5a54590c0e94a5
TLSH
T1B8D0C030B7286803D5141931D022CB007A17002321BBD1025160C00C2C3BCB163CA141
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e9e31f5fb014f6a7439a4e224bdae6d3d8b22db7c287d9c004b0184cc18e6bf8
MD5 00fe8112e1beaff1b09c3e772b0b70e6
SHA1 1d234f4d61d2fe0153bb63a7a246d37e6fc0aabe
SHA512 aaafc34862d38399e66858477aa9d3d624e9e071371fe2961aac0159845c41dbe1ed0ae62f8b9c52f327e4e4a97abdaf614ae741bcfd2627ec55b1d4f6fb6d74
TLSH
T1EAD08071B7286847D9551931D432CB017A57546365BAD1025160410C6C7BDB553CA155
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 49d7024923b2a1101161809ec20fa50a261dd3f9d6d571a84d5be6c61d57badc
MD5 4943f090f6b3f65e14b2de4b45f9ceca
SHA1 65d3efee27b1a05ac43aa8f055a38e38d308ff37
SHA512 7c8a18a456a74eb6eaf342fcb7723b4e2bf6dc20d79cc2238bf8e2675a1eb36c3586469aa31930c9bb074e29bd3d73c9598125d7afe3d812d6e637b8375bad53
TLSH
T177E0E5A9D820BC2729FC1B2960540687E750131B3A41880B3B3C812D4FB9637428AC5C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 55d3b425d2eed4fb3778ec72e45217659c873ab27fed88253e871420bdce6c0c
MD5 ae5e6504e58d62a295d197e4e4e89082
SHA1 cc8fbe3bdc87458632dd558182b0923a1964cc94
SHA512 48a50cbfd1e3ac09da4ef388a0dbc7fdffd2210f85b6370d972adc483fe7ef2eca4fb7318eaf8771b7ec6cf8d1e4f3f766e4230319785467616b0586c574ddee
TLSH
T1BB41AFF7C3E4856EC91195F0AA187E2FCE1D0915832C3D9AC9E4AE1B93E3471E141A5F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 248fc5859341d63b806d1dba0fe09d28ea4e71c7493cbbe65df01d32c0785713
MD5 f97b28228ea9412c2a03b9f0bdea41f8
SHA1 39a56b561dcad5ba697680e2aacd90950f938213
SHA512 d12586aeca7e05814c6b11a8f9d3d704cf56cd29204cc85516e99f53594ca7a63b0f3fb7af29ae7841087876f631d71cf95f49d99e3d88cd5bf74f65ad7d56e1
SSDEEP 192:sxRZRlyMqZjK1Ml8wbp/f1CsG8NRZCHzoD8peZ/g6+WNIYcC4CNsGQ16GLIgjFJ:sxRZelp/fosG8N/CnO/5IW4WsGQ1Njv
TLSH
T12562D9156A749D3B8CDBD219FA95BF93D2F81133A1905E44AAFC9A0C04E76DD2113C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 968fb1eb1fd8729d66f96f3e67086cc897b52d5194f0bc4dcb3b26f5cb5b3a42
MD5 f6af3573841fcbea82ed7838a88fa746
SHA1 e8d0a4a53bdf80c2d832423b5ad915233acf2e0d
SHA512 f534940d75a16634d19a90ff8f801cc79fb2501fc1ec8a945cf659c47732a69d28d8252484963734b2ec799e7494bcbd5045582fc480c49a0c5ae1494a3e832f
SSDEEP 192:sxRZRlyMqZjK1Ml8UQ0bp/f1CsofNRZCHzoD8peZ/g6+WNIYcC493PsGQ16GLIgW:sxRZeqyp/fosofN/CnO/5IW4NsGQ1N4v
TLSH
T17D72E8156A349D3B8CDBD219FA95BFA3D2F81133A1905E44AAFC9A0C14E76DD2113C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 19KB
SHA256 996f79bb15f101b4f779e0cda700ed4dd83f4e481b04cfe1995015f51abec034
MD5 325510cd08692d979e715861a287038a
SHA1 c76eb5c217df80e7e468cc70d12b11156292e0b6
SHA512 e627c099b78a7fdcc2d6fcf9941b953a74d7546102aca56304f71c60bace62f1e6ae8f8bef35b9e95beb2a2f70f4d48ac9b3a752b8b6ea500b099062743d5f22
SSDEEP 384:sxR4eqHOp/fosoHN/CVDQMC0/5B/WENsGQ1N4RI:schup/f0tEp/51WENsGQ1+I
TLSH
T1A092F80659248D77CCDBC619FE65BFA2D3F8112399505E4CAAFCCA1C14EA6ED2113C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 a4d4b6d728dfc7c536d3d6bcb19fad00638687f76418bbc84d9bf210e4905258
MD5 6f39294cf14ca60e275cfa7cc5358dd1
SHA1 20656405029fa7fa9cb6192130afd97c5fbdfec0
SHA512 c22d3054358983bd8c5a7a39c9e261ba1ef2eb198577010a99472ce441058e643759d9b93918b82c166c1c587eb5437c044cca436c27dbfc7511dad19230e500
SSDEEP 768:Ob4YATWg1NfwB8F1+UoAYDCx9Tuqh0VfUC9xbog/OVBbDwzroT4z:Ob4YATWg1NfwBu1jasHwAUz
TLSH
T142C2EB2B244CCB7E4F844A9DAC29AED76DD801CB9B984D5447EB890C03C67FB521A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\32e1baa7-a93e-460e-bc82-040ab9a58570\index-dir\temp-index
Size 1KB
SHA256 5f3f6466480c92fcbddb0cfae5da9e9ccc877e9663e7c2e4099fde332ff2dc13
MD5 5d1969b06a602d38240d7146f154be84
SHA1 18a788f012d249e63bc6ec91e05f6f20692c0563
SHA512 7535e6b51683dc61761bc8df03a52d5eea99a674140ac6689b83efac87e3710d0f011a6958dd4e2666d4d94d6e9722686c868257ed9ab52d0edb8a312a7da11c
TLSH
T189318216DCD3668BDC7658F2663D11C83B3F89FC1609DE87803D7135BD867384541668
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5c670e.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\32e1baa7-a93e-460e-bc82-040ab9a58570\index-dir\the-real-index~RFe5c670e.TMP
Size 1KB
SHA256 9fd84af38d520e71b6b2eb0e634c4bdd75bcda9c6ddc5ca08018208a31f50a36
MD5 277dfb8b8505651147f8cab1a81f6b9e
SHA1 153b05ead1803b438ef8d756b65804630fc471a1
SHA512 8b961efdcc5d7e5e587dd36e8b1451d6bda391b20014fd1dfc197e9ff1e1337232d13eba4de3de6bcb01e7f1be9991cb58dbef8af2633039754f8c82832af689
TLSH
T1493165278082EE0BD93950F1611D109E733F98742359D71F616EF5386C917289AF4995
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 e8ca09079b4eb92198116dbe888cfc9c709401f0f8ebefc0aedacc03541a8cc9
MD5 7bd5d6bff3d43fce11f94bb5d5874430
SHA1 de6977f2aabb704f432a8ca3d9ad3f47ec539da6
SHA512 670088c47e23d4de67c6d43584e15a58880a50bd6ba69a70b4b10f37836b31355c25bd7e1fb171325120325f4971ae0fe0af0644ee0ce38bab884d10ed36c8f9
SSDEEP 384:yv+Rp0nYrnhZZuJCXHnbB1S/HqlcDDRPbIhJ9V79:yv+Rp0nYrnhZZuJCXHnbB1S/HqlcDDR+
TLSH
T1CAB25B11713F4290387EB90C91B8981F86C2B4A37519E52F7BA801A65F67E138DFE8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 d0af765a933412cdedd56e4d6d3389162c97c6a3dac99e6b382d6fd389ea63c0
MD5 5f55d469dd392f316a8a065220d7fbd9
SHA1 4c34b8852c6bb02baadc98e79310cd0bac482d69
SHA512 d608f13aefb843a70ad7edb9fe0910df7c75526f59c6a9c98d6a7442698e02b13420c44330ba1c41383304e137e1879face23b8591e3b0e1606009a0211b0ac8
SSDEEP 384:nFiFiZcIH8NLE8TUNTUlIRYPvuTpcseffoGGBxiYSzv7/m68vaMnTKwBODNZOCup:MFQHQEwg6umTGBkzjf8SMnewBKZOVp
TLSH
T11FD25A72DC64CA77ECEA8B84A60A7147DEE44263D1DC5AE8D6DD6D1C10DB1DD030BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 29f82bfc45cad28d2943a4837d0c3e921c6639a78c84a76e326db62e1f2ad7f9
MD5 2bbb41e77c940060af921627c2329d6f
SHA1 af39547eeaf60398caa650a895f75c8288b63825
SHA512 9afb6090f804b97d3c2df5287a2f3c11c3b520f29581cad6feaec1a4c0f43d676f67c294fd64cc95dad14800d4d5490bdb0861e9a9e01dd9772dcccd5e4394cf
SSDEEP 384:n6iFiZcIH8NLE8TUNTUlIRYPvuTGcseffoGGBxiYSzv7/m68vaMnTKwBODNZOCup:xFQHQEwg6uxTGBkzjf8SMnewBKZOVp
TLSH
T1CAD25A72DC64CA77ECEA8A84A60A7147DEE44263D1DC6AE8D6DD6D1C10DB1DD030BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 73c94ee5dbc5a5600f63674312a2c6d7459d09c1859bd0722cdb05503bdf53ca
MD5 52c86474cf1039c9f9aa8c179fa48895
SHA1 0dd5fb2c3a2895bfe4b6e8b0f38ffb2ebabd9bbe
SHA512 ec0b6c0b5a2f43c7a8cdfadfc77ff9bd6c37fb5e18afe0c971399d7a35fa0dcb385198d94d8be6447b952271e95963d32453784fecf1ac968d277e42ef2d797c
SSDEEP 384:nViFiZcI+8NLE8TUNTUlIRYPvuTpcseffoGGBxiYSzv7/m68wqMnTKwBODNZOCup:cFQ+QEwg6umTGBkzjf8BMnewBKZOVp
TLSH
T1E5D25A72DC64CA77ECEA8AC4A60A7547DEE04263D1DC9AE8D6DD6D1C10DB1DD030BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 221fe182cd0da65ce728da74be40dbcea495abae817ff99dbd94a832a3b2c66d
MD5 1d82189d7c8fa8ec3ca1f480c795b4fe
SHA1 b2200c43df1af2f2b4b17ee8d16ff073035807bb
SHA512 bd457d34240d2fa2c4e1f46623ab1166d0b0e3d12b94ad9a93b3ef62079a77b9b584f4f59f0ba95be2b2429c354df5519a3b3e19f420ab917689b287e1079435
SSDEEP 384:nbiF1tNn/s3n9Sn8Ng68TUNTUlIRiPvuTuWReffoGGBxiYSzv7/m3LFOObjI9G6n:2F1j+9SX6wgUuH6GBkzjaF29M+
TLSH
T11CC25B36E855CEB7EDE68FD8B64A7A4AEEE0126381EC59D8DAC86D0D00C71DD0703C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download