4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896

Analysis

max time kernel
148s
max time network
143s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
27/08/2026, 18:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
crypted.html
Size 1KB
Sample260827-w2b4vaaf97
SHA256 4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896
MD5 8150f458ed6fb9b1db4e5cfa57a1a281
SHA1 6e5726854d28687b560d7fdcb5c782c425c7dfb9
SHA512 4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c
TLSH
T1C021353EC1C1560AE0271164FBC1F7A86669825291970F703B9EB176F6CD0BB56A36C8
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5296	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134323286855334085"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-552508041-2681165170-3229858294-1000\{B12C1648-CC40-4206-BDE6-4A1AF01C64A3}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5696	msedge.exe
5696	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe
552	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 552 wrote to memory of 2396	552	msedge.exe	89
PID 552 wrote to memory of 5296	552	msedge.exe	90
PID 552 wrote to memory of 4900	552	msedge.exe	91
PID 552 wrote to memory of 4900	552	msedge.exe	91
PID 552 wrote to memory of 4900	552	msedge.exe	91
PID 552 wrote to memory of 5852	552	msedge.exe	92
PID 552 wrote to memory of 5852	552	msedge.exe	92
PID 552 wrote to memory of 4584	552	msedge.exe	94
PID 552 wrote to memory of 4584	552	msedge.exe	94
PID 552 wrote to memory of 4584	552	msedge.exe	94
PID 552 wrote to memory of 4752	552	msedge.exe	95
PID 552 wrote to memory of 4752	552	msedge.exe	95
PID 552 wrote to memory of 4752	552	msedge.exe	95
PID 552 wrote to memory of 5604	552	msedge.exe	96
PID 552 wrote to memory of 1132	552	msedge.exe	97
PID 552 wrote to memory of 5604	552	msedge.exe	96
PID 552 wrote to memory of 5604	552	msedge.exe	96
PID 552 wrote to memory of 1132	552	msedge.exe	97
PID 552 wrote to memory of 1132	552	msedge.exe	97
PID 552 wrote to memory of 940	552	msedge.exe	100
PID 552 wrote to memory of 2476	552	msedge.exe	99
PID 552 wrote to memory of 940	552	msedge.exe	100
PID 552 wrote to memory of 2476	552	msedge.exe	99
PID 552 wrote to memory of 4120	552	msedge.exe	102
PID 552 wrote to memory of 5976	552	msedge.exe	106
PID 552 wrote to memory of 932	552	msedge.exe	107
PID 552 wrote to memory of 5792	552	msedge.exe	108
PID 552 wrote to memory of 2880	552	msedge.exe	109
PID 552 wrote to memory of 2880	552	msedge.exe	109
PID 552 wrote to memory of 4532	552	msedge.exe	111
PID 552 wrote to memory of 4532	552	msedge.exe	111
PID 552 wrote to memory of 5696	552	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\crypted.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2a0,0x7ffdce05c188,0x7ffdce05c194,0x7ffdce05c1a0
  2⤵
  PID:2396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1820,i,4619175018640921332,2211059663671118714,524288 --field-trial-handle=2584,i,10218458423324039126,4508708862876876856,262144 --variations-seed-version --mojo-platform-channel-handle=2620 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1620,i,1643747558782220061,8878727932052925415,262144 --field-trial-handle=2584,i,10218458423324039126,4508708862876876856,262144 --variations-seed-version --mojo-platform-channel-handle=2512 /prefetch:2
  2⤵
  PID:4900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2244,i,17481647062086366610,14542085475022919519,524288 --field-trial-handle=2584,i,10218458423324039126,4508708862876876856,262144 --variations-seed-version --mojo-platform-channel-handle=2708 /prefetch:13
  2⤵
  PID:5852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3520,i,11119245295483134187,4412309018827593892,2097152 --field-trial-handle=2584,i,10218458423324039126,4508708862876876856,262144 --variations-seed-version --mojo-platform-channel-handle=3568 /prefetch:1
  2⤵
  PID:4584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3532,i,12625828190673972242,2790536267360480616,2097152 --field-trial-handle=2584,i,10218458423324039126,4508708862876876856,262144 --variations-seed-version --mojo-platform-channel-handle=3616 /prefetch:1
  2⤵
  PID:4752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4368,i,17052515606174789956,10007667714278018248,2097152 --field-trial-handle=2584,i,10218458423324039126,4508708862876876856,262144 --variations-seed-version --mojo-platform-channel-handle=4392 /prefetch:1
  2⤵
  PID:5604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4372,i,7946095069605273530,17734252266808790406,2097152 --field-trial-handle=2584,i,10218458423324039126,4508708862876876856,262144 --variations-seed-version --mojo-platform-channel-handle=4456 /prefetch:9
  2⤵
  PID:1132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5340,i,6833259035148133198,495238737283414935,524288 --field-trial-handle=2584,i,10218458423324039126,4508708862876876856,262144 --variations-seed-version --mojo-platform-channel-handle=5320 /prefetch:14
  2⤵
  PID:2476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5348,i,15618817847472420570,6245204038831157462,524288 --field-trial-handle=2584,i,10218458423324039126,4508708862876876856,262144 --variations-seed-version --mojo-platform-channel-handle=5392 /prefetch:14
  2⤵
  PID:940
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5244,i,3740375959085939031,16593296673339861511,524288 --field-trial-handle=2584,i,10218458423324039126,4508708862876876856,262144 --variations-seed-version --mojo-platform-channel-handle=5940 /prefetch:14
  2⤵
  PID:2200
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5244,i,3740375959085939031,16593296673339861511,524288 --field-trial-handle=2584,i,10218458423324039126,4508708862876876856,262144 --variations-seed-version --mojo-platform-channel-handle=5940 /prefetch:14
  2⤵
  PID:4120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6012,i,14746872283112880050,11529901069111659622,524288 --field-trial-handle=2584,i,10218458423324039126,4508708862876876856,262144 --variations-seed-version --mojo-platform-channel-handle=6000 /prefetch:14
  2⤵
  PID:5976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5088,i,5081256431053594737,10255244450767651518,524288 --field-trial-handle=2584,i,10218458423324039126,4508708862876876856,262144 --variations-seed-version --mojo-platform-channel-handle=4384 /prefetch:14
  2⤵
  PID:932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3592,i,347221128872218359,2713757393710999372,524288 --field-trial-handle=2584,i,10218458423324039126,4508708862876876856,262144 --variations-seed-version --mojo-platform-channel-handle=5048 /prefetch:14
  2⤵
  PID:5792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5540,i,9676389276838895468,2866634663953627284,524288 --field-trial-handle=2584,i,10218458423324039126,4508708862876876856,262144 --variations-seed-version --mojo-platform-channel-handle=5004 /prefetch:14
  2⤵
  PID:2880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5468,i,8497751345213404051,6530411292987097678,524288 --field-trial-handle=2584,i,10218458423324039126,4508708862876876856,262144 --variations-seed-version --mojo-platform-channel-handle=6224 /prefetch:14
  2⤵
  PID:4532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6476,i,5422713127908819149,6656105529884493781,262144 --field-trial-handle=2584,i,10218458423324039126,4508708862876876856,262144 --variations-seed-version --mojo-platform-channel-handle=6480 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5696

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2348

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4528

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f8dff5315a0bd3856381f405c1a16257337fd6ff2d8043dd8bea22404cd35129
MD5 5e53a2cd139f0cce4f8ceab3e015f7da
SHA1 1bd884dbaaa352a724c53bfb8f4bfad2623c93f5
SHA512 27cc4cb62f9aa4af6b521efd824b001f3b689bae2ffe57263da18e2bb22d0b13ba656141d7e6ea1d1c202d5f461a44243a00d604f78bd5b04fe6b8512e260ac1
TLSH
T178D02B1463108D04D441F13214D13311B1110833A80C96440050E1284CB634206738DD
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 1f3bc43c50f7d0fa02f98500baf5d78052a5560603459a9325b17de989d121f4
MD5 46a6445fd2c83830bb8c6e03f85bafc0
SHA1 46b07e35efbd47692fdc81ef0e82e2964da2831b
SHA512 800f82b05756fd6fab3fe29924147f0b86afeec21da661e646b431c6ca03903eb45bb09803f5cdaf3d2d1bb16f95d0f2e53a1f9ddde57505b0f3e1580c384ed1
TLSH
T188D02B1063208C04D441F13214D23311B1010833540C96440150E1384CB634206728CD
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 60f94a6547f3d2ff885dfe3f8739bf31123dd6df15a2b4c956d8c55d8edb2a57
MD5 e0fe5675ebbab66ac98a67d2fa80eb8f
SHA1 3c93d3e3f07f7cfe0029a4d9c588e1e10dbcb21a
SHA512 0effcc12d0ad15fb43d6b764b248408bbcbff72c51c99977330d3570c6f1d22f2903f34de87b22fb5f4112bec7dad8bf1b024470e3df82efb26f33236a523e51
TLSH
T16541F8D40BE90AC2DBFC8EF520E1AADD33F0C4AE01176E8064422E701B0AF9791D2973
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59bfdb.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59bfdb.TMP
Size 2KB
SHA256 9000b85adee9a9ab955bcf4872eca232ad3bbc6f8723c5f1c8a617fe8aefe09b
MD5 35143e4ee7df0f2b578c628eaf3afdab
SHA1 da3c77cfc95436bab7d76a8c9632fa2ed6b1ca33
SHA512 9282b2058f91b775021f5fafef41f9286d25f706cf895efdd52bd381c6689fb3764a1b61ddb3dfb5f1fcd24afce904cf1563413a65ce94ba79ef2d9520136183
TLSH
T11D41F8D40BE90AC2DBFC8EF560E16ADD33F0C4AE00176E8164462E701B0AF9791D2973
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 7cbde0704a0d0bfa5716f78f0561db32c976ea386d383f9a93590decdcb5dfda
MD5 f6043c7979fbb5c93bdd3c527ef005fc
SHA1 ee9e3f6ea140236fbacd9936195f0cd73ced2e03
SHA512 46ea638f2197a39aa9b04a714988f9fde5d12a4805f17277cda31fffb3cab992d1ee744185b3e872ad54fa8bacc0b9035cfc13db82d025ac9bfd39e1809a8fd7
TLSH
T18531AEF787F5957E8A0186F0EA14AE1FCE2D0515432C786A85E0AE2793F3472E041A9B
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 e8c7208b623be6f691e44f72d8f94be41b9cf06dd465436594ae1c86c89da4b6
MD5 8e6b7fcc44246a990454c0bf50c8e96e
SHA1 2a582237ec54133c0f425f839b185f619309442e
SHA512 b58a145244bf2d8ed69edc5366466f87ed3f19359e5694aeb00387eaf7374e3449c086e2e8d3505c9728a7cd49c01fa3635c9332bd382b8d6d2fa89a8e2afeb6
SSDEEP 192:sxRDReb1/fhs5iDde5lS2zoD8p4U/g6+WNIYCNKuOGG6IgIJ:sxRDe1/fhs5ic5lJN/5ISos
TLSH
T17E32B7156A28AD3B8CC7D21DFA55BF53D6F96032A1E41E48A7FC861C04EB6DD220741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 afae022720c01bb5294bbd9de9b3bbae63492434852b339fcf8147c51d58d50b
MD5 43083a73e49ad1f76fec6fc9be6c6e71
SHA1 6023b9566d7837d0b490a1fd93dcf7464a99ebd2
SHA512 2d020ed11dfbfd2e5594e7b2cf67c0a739ed0ae8430779555e06a4bd2e78494be3090773c1ecb45f38735cda263a31dd7761e19d5427e92d924be2eb1f324b2e
SSDEEP 192:sxRUReb1/fhspoDde5lS2zoD8p4U/g6+WNIYCMOuOGG6IgDu9J:sxRUe1/fhspoc5lJN/5I1oE
TLSH
T1E542B5156A28AD3B8CC7E21DFA56BF53D2F96032A1941E48A7FCC61C04EB6DD220741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 4601a9588fcd19b1b1c6ad71b073c9e668d97ce322782bb9237e4e7cd5b07a67
MD5 844567ad70c52b647d2ebba742fa2ca4
SHA1 64eccfdab23a9123cfd8693d7b49e8145328d53e
SHA512 a84e066d7eeca628c0e8646e084eb1ed756a70dd3190df076ed004b0b7c0b6f3f3e2d73a34f55f949c41ffeb10de6946b50abb731697684392a4214c2cf4f246
SSDEEP 192:sxRUReb1/fhspiDde5lS2zoD8p4U/g6+WNIYCNKuOGG6IgDurJ:sxRUe1/fhspic5lJN/5ISo2
TLSH
T13932B6156A28AD3B8CC7D21DFB55BF53D6F96032A1E41E48A7FC861C04EB6DD220741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 15a6502c94afa865c201fa748e43c73fd7faf72d708f84e51867af4d234c519a
MD5 d3d96ea8538044e90de391a1d38706fb
SHA1 2dacf1274a525561f7f8a740f6a3096a12f00aab
SHA512 1e5c257e6bb3e769fb2c17590677ac58d3fb94772e95883f6f7c4b6764ec40035fd76c64b9606e3635c5e555e21a90f720dadeb4f3f3ccb1cb53b507cfec0918
SSDEEP 384:jjm+vhKfCtgQCFf4+KhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVmC9qyRvHroZSS:jC+vhQWgQ+f4+8F1+UoAYDCx9Tuqh0VB
TLSH
T1FDB2EA2B600DCB7F5F800AADAC196FD76DA802CB97589D4047FED94C02C77EA92194DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 531eba693488dfd9761056bd2e4fc37584dff766dd8994a850c6474d6e20985b
MD5 a710c2b031eca8644e53efecdb988c8d
SHA1 5e442b490c5051ccdadfb9193a5f728e4158575d
SHA512 866e384536bb880668c5f38f61bac949a4f25abeae39994a28d47c1460e7868a846029aee69f6b856d3c4ffca8d394f805e56b75ec5b0991f955b9d9841acdc4
SSDEEP 96:KRbEBVj5J1WdSIg91K4EgT1c7j6dJOHFSr/VPTXWbAOgHXK42gZXc9l45KKSUK+y:CbEBVj5JAdSp9/EgTK7j6dJOHFSr/VPC
TLSH
T1A591851130BB46403C3E650C81B99C2B52927077345EE5EBBBA845AA0FA7E465EFDDC8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

c846a5c8-65be-4883-a3d6-4f100e6f0eac.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\c846a5c8-65be-4883-a3d6-4f100e6f0eac.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 46e62d31fc3f7cb66c83109ee01564c0b73013846fd8182583bb11f2a63eca45
MD5 c76f5cbaed270549c7b0c7e631f55344
SHA1 4fbfb9e0eece6716e49ff5b6fae46de385168c1f
SHA512 093eab849729c4f16bd104800d16decc314c9d512e93cf553baabce3ad85d6c329ca564ede4abc216c524ab8b4309594acca03318a06d0c3f6151897ef3075b2
SSDEEP 768:V936baQVFup8+p3bd66j+4BRv86aLIW29BS:V9367o8+p3Z6n4yY+
TLSH
T143F2AEB2E8B59D378CE5C359B64777036EB8916386C05AE4D8DC6B1E109716E130F83B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 8a6d75965602e2f26d664a22fb895c82e0d77a82c929ff2ff4ed41d348e5612f
MD5 c3cbae2d3fc4e17c988424b5f8ed7d70
SHA1 08e152e16180e53f91a5cc972fd6e79650609d8c
SHA512 2ec5ee56210c874cbb06dac2193ab92f83f19dc1d1f138bdb604c02ed53b2308ba69c22b2c0aab0ab68581bea3e4bef680658a01cca0c015c7c372c60c46a84a
SSDEEP 768:S93/baQVFup8+p3bd66j+4BRv86aLIW29BS:S93/7o8+p3Z6n4yY+
TLSH
T194F2AEB2E8B59D378CE5C359B64777036EB8916386C05AE4D8DC6B1E109B16E130F83B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 f4eb1640f8e07767d4d4c603982005bf661e7a30d1d175846e608345c77ce0a1
MD5 6158a677edb89e9a21539fd478303f2a
SHA1 32747b1558c95f6bf5689a1e1c005b0ee59d2c2d
SHA512 959e77562c028c747e92c7acf9bbcf0cf874a4e40e00f4a1ecf7a8fa59058a47e62e19865d398c6c62ed4c0133187b8fad9c77496e9d9fe5183f4d7cfd129d96
SSDEEP 768:+rv+4UNbdC3/taQVFip8+p3bd66j+4BRv86aLIW29Bc:+bsbY3/t88+p3Z6n4yYo
TLSH
T12903BE72F8B899339DF6C648B2477A433FB8516386C01AE4D4DC6B4D459B1AE230F927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 38e4faee4177e802a4f9434600cff94205789f6e7469b77854b155e08961df3f
MD5 c9ecdb928b50c199a6a54e490c5481ab
SHA1 7bf052a20791061dcb0ac676f5c72d64087e39de
SHA512 d0e79589de70ebcd7cfb27ceb2f88bdb7a2279402e5614c74e59164068e981b189356e43ed39b2f07c4d647daa75fc6eed2a4e543b48975fee75e1dc34e2dad5
SSDEEP 768:oFQ03nwgCbaQVXp8+p3bd66j+4BRv86aLIW29BS:L03Ub8+p3Z6n4yY+
TLSH
T110F29DB3D8A4D93B9CF5CB99F64636039EF4416386C0AAA4D5DCAA1D10971AD130FC37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 a7b65b5faa0747c34206b79f291f2e9898a35a93914fd6d2927bf090589b05d3
MD5 ec5f06f602481fddbfabb95292c739fd
SHA1 e4237db371c007c4d6859478f09ac2fe51afe7cb
SHA512 57e29908a97ac5936abf5a00399f4c24a085e40ded656e850ce94eeb3f27bb1ac4c020a1d1a9b651d424d5ab5a421665352d8589f636c7a516e639adf043839e
SSDEEP 768:Irv+4UNbdD3GcQVTNp8+p3bd66j+4BRv86aLIiA2bwCl1:Ibsbp30L8+p3Z6n4yi0ww
TLSH
T1CC03BE33E9A899739CF6C648B2467B433FF851A396C10AD4D4DD2B4E419A19E230BC77
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 284ec03f9a67cbb23570bc74adfd3ebfaa6456c4e09387dd604fbfa9e01cc95c
MD5 3b1916c6bea2d1305390eaa59ebab565
SHA1 0bcb325dd7341b84df941519d1722ea538d1edba
SHA512 4d8084a943302bb41ad5de46aa6651ddd60b3142d44256b3592ef8cdac152081bae218c145a000fcafe3ad9b55d8ad9d33a51a77e47595e37bafd0e4e7960a88
SSDEEP 768:Arv+4UNbdD3zIQVFNp8+p3bd66j+4BRv86aLIT22bwCl1:Absbp3VL8+p3Z6n4yH0ww
TLSH
T11803BF72E96899339DF6C644B18776433FF8529396C10AD0D4DD2B4E419B1AE230F937
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download