9a7b9ced514452bdba08796636cf97b484193f49751df25213a85adcdab0d37e

Analysis

max time kernel
148s
max time network
153s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
05/09/2026, 00:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
site.html
Size 1KB
Sample260905-ahsftsshmb
SHA256 9a7b9ced514452bdba08796636cf97b484193f49751df25213a85adcdab0d37e
MD5 77155df84d806bcff28fe0d3b35095d6
SHA1 be02593a8769f9ecf3335adbef094c74f1c95570
SHA512 eae6db5361d8cfe1348312d0d36e53be9f4573a210df2ff92604eda367c4644ed2f5692d442c0d5aa1447fc66e634f4fc52cda178118d995862708ad38844b63
TLSH
T1AE319436A6155438E45340423179F7683931102167479B40D3ADED3AE98CEA704BEDEC
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2448	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134330407980501154"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-552508041-2681165170-3229858294-1000\{55037A91-1E9A-4484-A897-BA8FAD5955AD}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3452	msedge.exe
3452	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3780 wrote to memory of 4148	3780	msedge.exe	89
PID 3780 wrote to memory of 2924	3780	msedge.exe	90
PID 3780 wrote to memory of 2448	3780	msedge.exe	91
PID 3780 wrote to memory of 2924	3780	msedge.exe	90
PID 3780 wrote to memory of 2924	3780	msedge.exe	90
PID 3780 wrote to memory of 2820	3780	msedge.exe	93
PID 3780 wrote to memory of 2820	3780	msedge.exe	93
PID 3780 wrote to memory of 252	3780	msedge.exe	94
PID 3780 wrote to memory of 252	3780	msedge.exe	94
PID 3780 wrote to memory of 252	3780	msedge.exe	94
PID 3780 wrote to memory of 5528	3780	msedge.exe	95
PID 3780 wrote to memory of 5528	3780	msedge.exe	95
PID 3780 wrote to memory of 5528	3780	msedge.exe	95
PID 3780 wrote to memory of 1692	3780	msedge.exe	96
PID 3780 wrote to memory of 1692	3780	msedge.exe	96
PID 3780 wrote to memory of 1692	3780	msedge.exe	96
PID 3780 wrote to memory of 4860	3780	msedge.exe	97
PID 3780 wrote to memory of 4860	3780	msedge.exe	97
PID 3780 wrote to memory of 4860	3780	msedge.exe	97
PID 3780 wrote to memory of 4964	3780	msedge.exe	99
PID 3780 wrote to memory of 2488	3780	msedge.exe	100
PID 3780 wrote to memory of 4964	3780	msedge.exe	99
PID 3780 wrote to memory of 2488	3780	msedge.exe	100
PID 3780 wrote to memory of 1828	3780	msedge.exe	102
PID 3780 wrote to memory of 4740	3780	msedge.exe	106
PID 3780 wrote to memory of 2120	3780	msedge.exe	107
PID 3780 wrote to memory of 628	3780	msedge.exe	108
PID 3780 wrote to memory of 4084	3780	msedge.exe	109
PID 3780 wrote to memory of 4084	3780	msedge.exe	109
PID 3780 wrote to memory of 3452	3780	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\site.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x264,0x268,0x26c,0x260,0x288,0x7ff9d7dbc188,0x7ff9d7dbc194,0x7ff9d7dbc1a0
  2⤵
  PID:4148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1596,i,4202170686354310528,6120445766630246038,262144 --field-trial-handle=2312,i,14690476794262319632,18027535108788696083,262144 --variations-seed-version --mojo-platform-channel-handle=2308 /prefetch:2
  2⤵
  PID:2924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1928,i,16940883260750772640,14729073978301457287,524288 --field-trial-handle=2312,i,14690476794262319632,18027535108788696083,262144 --variations-seed-version --mojo-platform-channel-handle=2336 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2436,i,11718742030483465655,9277510904154817436,524288 --field-trial-handle=2312,i,14690476794262319632,18027535108788696083,262144 --variations-seed-version --mojo-platform-channel-handle=3336 /prefetch:13
  2⤵
  PID:2820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3676,i,11334214321166523814,14664736153366891855,2097152 --field-trial-handle=2312,i,14690476794262319632,18027535108788696083,262144 --variations-seed-version --mojo-platform-channel-handle=3684 /prefetch:1
  2⤵
  PID:252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3680,i,937102900143592379,2392239875974814195,2097152 --field-trial-handle=2312,i,14690476794262319632,18027535108788696083,262144 --variations-seed-version --mojo-platform-channel-handle=3688 /prefetch:1
  2⤵
  PID:5528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4376,i,17944080616854082630,8128115012747148437,2097152 --field-trial-handle=2312,i,14690476794262319632,18027535108788696083,262144 --variations-seed-version --mojo-platform-channel-handle=4424 /prefetch:1
  2⤵
  PID:1692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4380,i,12867852823196719026,13350288883615894397,2097152 --field-trial-handle=2312,i,14690476794262319632,18027535108788696083,262144 --variations-seed-version --mojo-platform-channel-handle=4384 /prefetch:9
  2⤵
  PID:4860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3840,i,7923823082175984676,8761120308341236035,524288 --field-trial-handle=2312,i,14690476794262319632,18027535108788696083,262144 --variations-seed-version --mojo-platform-channel-handle=5512 /prefetch:14
  2⤵
  PID:4964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3816,i,5634056117856534410,14620341019241485502,524288 --field-trial-handle=2312,i,14690476794262319632,18027535108788696083,262144 --variations-seed-version --mojo-platform-channel-handle=5532 /prefetch:14
  2⤵
  PID:2488
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6052,i,3500188134542827168,8871291975930193554,524288 --field-trial-handle=2312,i,14690476794262319632,18027535108788696083,262144 --variations-seed-version --mojo-platform-channel-handle=6080 /prefetch:14
  2⤵
  PID:5860
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6052,i,3500188134542827168,8871291975930193554,524288 --field-trial-handle=2312,i,14690476794262319632,18027535108788696083,262144 --variations-seed-version --mojo-platform-channel-handle=6080 /prefetch:14
  2⤵
  PID:1828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4576,i,6237502301017240923,17348674261123812661,524288 --field-trial-handle=2312,i,14690476794262319632,18027535108788696083,262144 --variations-seed-version --mojo-platform-channel-handle=6632 /prefetch:14
  2⤵
  PID:4740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5200,i,13661405086081572390,7815044701922745147,524288 --field-trial-handle=2312,i,14690476794262319632,18027535108788696083,262144 --variations-seed-version --mojo-platform-channel-handle=5260 /prefetch:14
  2⤵
  PID:2120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5268,i,3810557813919515859,17045739442999161136,524288 --field-trial-handle=2312,i,14690476794262319632,18027535108788696083,262144 --variations-seed-version --mojo-platform-channel-handle=5276 /prefetch:14
  2⤵
  PID:628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4396,i,4021041210985369274,9726213748197420839,524288 --field-trial-handle=2312,i,14690476794262319632,18027535108788696083,262144 --variations-seed-version --mojo-platform-channel-handle=5432 /prefetch:14
  2⤵
  PID:4084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5532,i,3388943578767880278,17568215159045624690,262144 --field-trial-handle=2312,i,14690476794262319632,18027535108788696083,262144 --variations-seed-version --mojo-platform-channel-handle=5468 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3452

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4352

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2376

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f8dff5315a0bd3856381f405c1a16257337fd6ff2d8043dd8bea22404cd35129
MD5 5e53a2cd139f0cce4f8ceab3e015f7da
SHA1 1bd884dbaaa352a724c53bfb8f4bfad2623c93f5
SHA512 27cc4cb62f9aa4af6b521efd824b001f3b689bae2ffe57263da18e2bb22d0b13ba656141d7e6ea1d1c202d5f461a44243a00d604f78bd5b04fe6b8512e260ac1
TLSH
T178D02B1463108D04D441F13214D13311B1110833A80C96440050E1284CB634206738DD
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 1f3bc43c50f7d0fa02f98500baf5d78052a5560603459a9325b17de989d121f4
MD5 46a6445fd2c83830bb8c6e03f85bafc0
SHA1 46b07e35efbd47692fdc81ef0e82e2964da2831b
SHA512 800f82b05756fd6fab3fe29924147f0b86afeec21da661e646b431c6ca03903eb45bb09803f5cdaf3d2d1bb16f95d0f2e53a1f9ddde57505b0f3e1580c384ed1
TLSH
T188D02B1063208C04D441F13214D23311B1010833540C96440150E1384CB634206728CD
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 e28264bc37950e7209c67dd75dcce1173d21629fe07ffc2bc24e61677d81b147
MD5 0dc2f19e62eeda062da52c485bbad19e
SHA1 a65c20b5ed20ff4c53d20338d269e25d062b3222
SHA512 b2cb7af75010e1d96566ad5954c7fefbb6e4334a99173aadc5a953ceacf06f8b7324cbee8f6ec1a67a8a65dbfc5b5f76fe722b41fa155c3cbf1f158963579a22
TLSH
T1BB5152930321CBC1F3E245B265E97549BAF9A8990227AE01834CAD789D72F0C91F9F53
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5993ab.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5993ab.TMP
Size 2KB
SHA256 a7839170bcb3ed791a41781c5ef933a6a3cf1d00fae11bc086d242f183084afd
MD5 bd5d2ca2984622da2e3af7cf0f8ac951
SHA1 46c4edbc819988fe7712773730c6f95eb8b11d26
SHA512 dbda998f7e37f77a4c4c03631ba599eebdb53589f20bbe2a22a3b15b8ead1e538d53282493393f17840d18efb64ba8b25f8e7c4bb53e63616c221b0d370b184c
TLSH
T1F35152530311CBC1F3E245B265E97649BEF9A8990627AE01834CAD789D72F0C91F9F53
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

25fde9be-2eeb-4510-8381-9a2be165a109.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\25fde9be-2eeb-4510-8381-9a2be165a109.tmp
Size 1KB
SHA256 08b41361c648f4130461a6d1267f031f1ef28898d4bb1355cac3d5f5d7c84280
MD5 25fb92cf09c2ea253d4e79e3b944f5ba
SHA1 e36e48db11c2ab2f228352e158ea53e84122a614
SHA512 ea224181858b5cbdadc3402ec5a975a7575adb848514631f9ebee87430e2612c5a5c941ffd160fac533f8798d9763e3b1ba4b0171a3f52d19504b0d8c5cf965f
TLSH
T19231D1F783B4857EDA0196F0AA14AE2FCE2D0515432C7C6985E0AE27D3F3472E041A9F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 8a87cc5475bc2369aa12917e1af0b824a5ad2cf60979355b893a8245eb67e024
MD5 194b7550e670661822e3b47cfd78cef9
SHA1 bfa73da5bd34029a833bcc94a592aed6dbfe23a0
SHA512 38fe7d46417fbc8ba50975c682178c2645f63e427a0434c56e621185c3798676ff48581e4807c8c782a2d57c88654b7bd76a6939ab8e804edb64b074edd6c794
SSDEEP 192:sxRcRPby/f0scvDde5lS/zoD8p4e/g6+WNIYCNiuO/GWIgIJ:sxRc5y/f0scvc5lOP/5I6ns
TLSH
T11432C8169E28A93B9CC7E24DBB55BF53D6F91032A1D11E48F7FC861C14EA6DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 ce0c1d19b88ef1f3ac179582d91ac9bda5cff2a9e5b494a5d79cda098f671f8e
MD5 d3b5af40ed16fa2ecc28104970cb36b3
SHA1 bbc5ee1187a03734eb0d16bbe030d8a4f0ca9557
SHA512 401a846ec99abe097e34bcbdf69251ddd7714443f7ee4a6570fa16ba615c2b0c778e528e6b21af24dd031836f25cee2a0b74487d44f80f1779dcce0b73fc7994
SSDEEP 192:sxR/RPby/f0sqgDde5lS/zoD8p4e/g6+WNIYCA52uO/GWIgD9J:sxR/5y/f0sqgc5lOP/5ILnL
TLSH
T1FE42D716A928A97B9CC7E20CBB55BF53D3F9503261911E48B7FC871C15EA6CD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 e82189d3ae76fcb81f79c0828b386aec06788c62b62d59661a2806cf3997b23d
MD5 79b6796e72b6b9432a0d8d284e4a32e7
SHA1 61db32e917019db5f73cd9189c5089823af215ff
SHA512 76b890ebff13604f7ae03f27b9aa438bfea077e2d3bbd32252d6b52931b13fb5fde6dff95db3219695497d0913ca9b2bb3b464d25c262fd1ad0c1d2349652664
SSDEEP 192:sxR/RPby/f0sqvDde5lS/zoD8p4e/g6+WNIYCNiuO/GWIgDrJ:sxR/5y/f0sqvc5lOP/5I6nh
TLSH
T13332D816AE28A97B8CC7D20DBB55BF53D6F91032A1D11E48B7FC871C15EA6DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 040ddc59eb35cd231fb7ea088f87f25de4d47eb917209ba4183910aa9508c78f
MD5 252ef5b144a46dc64b6f1934acb8dcff
SHA1 6e866ed390081c7e4ebe7099befc91ed1c27a54d
SHA512 176ed4f8a3ab101844e140508447c4dab205ce50c95e483cfd1dd6e82252953165b1943305c51b8c60a2a96cde88deb0340386aed719680d87919d8c3f7cd03b
SSDEEP 384:jjm+vhKfCtgQCFf4+KhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVmC9qyRv/roZS0:jC+vhQWgQ+f4+8F1+UoAYDCx9Tuqh0VT
TLSH
T1B9B2EB2B600DCB7F4F800AADAC196FD76DA802CB97589D4047FED90C02C77EA92194DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 b2486b08a79a2051c97d3a9402c2912a910bd3b20433392d162624cfdcd634ab
MD5 babee57cf9e0b7e7c8e3bd05559dd094
SHA1 badedc9fe3ac71c07a4e44ad47a4ba1c73c3f35b
SHA512 4e10bcc1b291cdfdc3b0a0469025b92bead18863e663f7ee6c843ac56652c4478a47d4bfb9e60a0359c69b968d52aa32dab62858481beb16878b9e45f202c4c9
SSDEEP 96:KRbEBVj5J1WdSIg91K4EgT1c7j6dJOHIuoIuZIusIu4IuqIu2Iu6IugWIueIuDIg:CbEBVj5JAdSp9/EgTK7j6dJOHIuoIuZx
TLSH
T14591F714317A0290787EB50C807D8C2E86C5B4B33529E52B7BA846661F66F47BEFD8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 e06cd1acbfca81594213ece860379b72456204cf72942ba6664121e15f69685c
MD5 b3a3af98b1e555f129f840e5640e3ff4
SHA1 7aed69f48850be1e0b7cd600b90b0178873b97b6
SHA512 23e251a767d2291bb56e0258278b02c483f18c1eccb8a5fb80e777e662d30c90146112774249058c5a913f60b04cd4389e9fcb814d939a18a93e7fd20b46f108
SSDEEP 768:Ty35KNIfmKty9oEp8+p3bd66j+4BRv86aLIWdcTRQM:Ty35K+ECS8+p3Z6n4yDcTRQM
TLSH
T137F2AEB2E8A89D339CF5C288B7463A436EF4515392C41E94E4DC7B1E05972AD270BC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 954146ce0dabe428bb2b8840d10ae5899f3da30be17dd0d73b1dbb7cedeab6f2
MD5 603eadcc0239c9a56a42fc8b64cd511a
SHA1 8e3638e14e958ad4d9223ddd2e0400c58f15c766
SHA512 5bd66bc3a22c123a7a89d2178f3d46faa9ba0f55b3e6195d500d084740e8b35c51e10bbf3d69f7f3b895f654d8cdaaeae1c3f7f9c9e7d67cad8c12a7b19b055e
SSDEEP 768:Pl35KNIfmKty9okzp8+p3bd66j+4BRv86aLIWdcTRQM:Pl35K+ECkF8+p3Z6n4yDcTRQM
TLSH
T172F2BEB2ECA89D339CF5C288B6463A436EF4515392C41ED4E8DC7B1E05972AD270BC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 b1869f830af8df0ac69481c47dfbf1487c062111352bac901be6d093413f2245
MD5 1f8ca9f063af7bfa92376b6e15abe6e7
SHA1 fe0d9bcc4daae9472d90f65d2dd49b892660bfcf
SHA512 1931a3c4909d638b308236e31eb1f934d95896f4c7e0ae86d5195aab800eb6b8afdbefda41dc28e1036a90711bec498997a3a2a11d3fd1f1a516bb69170f2712
SSDEEP 768:/l3qKN4fmKty9okzp8+p3bd66j+4BRv86aLIWdcTRQM:/l3qKCECkF8+p3Z6n4yDcTRQM
TLSH
T1EEF2BFB2ECA89D339CF5C288B6463A436EF4515396C41ED4E8DC7B1E05972AD270BC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 40938bb8580d3cf874f7dbf486a62d6d1a924c534cbf0bf399e1504f728897ee
MD5 7cf099f39c8838481b67ce10184d311a
SHA1 594bdf84b8c675954db939d73c9b136b4d123cc5
SHA512 25c74ce8cd486a73a821444ef84acf4edf8f41538b2e40f4ed37b34680fc5641a6cfa848115dbcc3096743a78a8c36a7397f6249bc8092bcb8de100aeac83a1f
SSDEEP 768:Irv+4UNbdD33cKtyZNp8+p3bd66j+4BRv86aLIil2bwCl1:Ibsbp3CZL8+p3Z6n4yb0ww
TLSH
T10703CF73F96899339CF2C644B2867A437FF851A396C10AC4E5DD2B4E415A19E230BD27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 7b401332f2a83aa3ccb5af1f8f51f5b2a0d7a3cf9d32d0e1abb5a2852df11ffe
MD5 0d601d2aa49209db105ab6b6158005f5
SHA1 e69564df9330b204468fc258b9197b85ff344326
SHA512 16169c83d49668707a8f990161a8d9d59b9205e75bfc77e238b67b2af8374114e2e29f842ce7c9322744561688fdf38372bdf09614e1fb868a49eb948c8d3e4a
SSDEEP 768:5rv+4UNbdD38i0Kty9okNp8+p3bd66j+4BRv86aLITd2bwCl1:5bsbp38nCkL8+p3Z6n4y80ww
TLSH
T1C103CF73E968A9339DF2C644B2867A437FF8519396C10AC0E4DD2B4E419B19E230BD77
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2e440cd4-1ce9-4402-89c6-e7fa5f74e825.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\2e440cd4-1ce9-4402-89c6-e7fa5f74e825.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download