65cdb4bd749bcc714b35e48fa386080c4c95cb4b1fae508d64973d84ced9ee65

Analysis

max time kernel
148s
max time network
152s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
14/07/2026, 06:00

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
65cdb4bd749bcc714b35e48fa386080c4c95cb4b1fae508d64973d84ced9ee65.html
Size 80KB
Sample260714-gqrmtsht2w
SHA256 65cdb4bd749bcc714b35e48fa386080c4c95cb4b1fae508d64973d84ced9ee65
MD5 4b0b0c4c2758bbdc15dffb24670427c3
SHA1 ff9a5b5a01279fbcb5c264e463f6e4d5264cc679
SHA512 3b972000788422a0b89852b11bba6fec591e22f1817a2adbda102c829e1a355c549a95c51b1eae9d841c07ca20c1596b06518160ad981144d4b71fe80258e33a
SSDEEP 1536:i6oB7dbXoH8BUR/watHiDTzJpRXYok+/0QWChOwyDA:Cb9patHezJ3
TLSH
T15783F9F9F5A070325E13F970412F410FBA3B686BE84C0DA8F254D8F16EF598A4466F69
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
52	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134284824596706159"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1738198120-2966725515-3980530802-1000\{B938FC09-A065-4FA3-ACFB-A5F5558DDEED}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1532	msedge.exe
1532	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5192	msedge.exe
5192	msedge.exe
5192	msedge.exe
5192	msedge.exe
5192	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5192	msedge.exe
5192	msedge.exe
5192	msedge.exe
5192	msedge.exe
5192	msedge.exe
5192	msedge.exe
5192	msedge.exe
5192	msedge.exe
5192	msedge.exe
5192	msedge.exe
5192	msedge.exe
5192	msedge.exe
5192	msedge.exe
5192	msedge.exe
5192	msedge.exe
5192	msedge.exe
5192	msedge.exe
5192	msedge.exe
5192	msedge.exe
5192	msedge.exe
5192	msedge.exe
5192	msedge.exe
5192	msedge.exe
5192	msedge.exe
5192	msedge.exe
5192	msedge.exe
5192	msedge.exe
5192	msedge.exe
5192	msedge.exe
5192	msedge.exe
5192	msedge.exe
5192	msedge.exe
5192	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5192	msedge.exe
5192	msedge.exe
5192	msedge.exe
5192	msedge.exe
5192	msedge.exe
5192	msedge.exe
5192	msedge.exe
5192	msedge.exe
5192	msedge.exe
5192	msedge.exe
5192	msedge.exe
5192	msedge.exe
5192	msedge.exe
5192	msedge.exe
5192	msedge.exe
5192	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 5192 wrote to memory of 1580	5192	msedge.exe	88
PID 5192 wrote to memory of 2088	5192	msedge.exe	89
PID 5192 wrote to memory of 52	5192	msedge.exe	90
PID 5192 wrote to memory of 2088	5192	msedge.exe	89
PID 5192 wrote to memory of 2088	5192	msedge.exe	89
PID 5192 wrote to memory of 696	5192	msedge.exe	91
PID 5192 wrote to memory of 696	5192	msedge.exe	91
PID 5192 wrote to memory of 2604	5192	msedge.exe	93
PID 5192 wrote to memory of 2604	5192	msedge.exe	93
PID 5192 wrote to memory of 2604	5192	msedge.exe	93
PID 5192 wrote to memory of 4256	5192	msedge.exe	94
PID 5192 wrote to memory of 4256	5192	msedge.exe	94
PID 5192 wrote to memory of 4256	5192	msedge.exe	94
PID 5192 wrote to memory of 6112	5192	msedge.exe	95
PID 5192 wrote to memory of 6112	5192	msedge.exe	95
PID 5192 wrote to memory of 6112	5192	msedge.exe	95
PID 5192 wrote to memory of 2012	5192	msedge.exe	96
PID 5192 wrote to memory of 2012	5192	msedge.exe	96
PID 5192 wrote to memory of 2012	5192	msedge.exe	96
PID 5192 wrote to memory of 1748	5192	msedge.exe	98
PID 5192 wrote to memory of 3868	5192	msedge.exe	99
PID 5192 wrote to memory of 1748	5192	msedge.exe	98
PID 5192 wrote to memory of 3868	5192	msedge.exe	99
PID 5192 wrote to memory of 2400	5192	msedge.exe	101
PID 5192 wrote to memory of 4324	5192	msedge.exe	105
PID 5192 wrote to memory of 6056	5192	msedge.exe	106
PID 5192 wrote to memory of 2156	5192	msedge.exe	107
PID 5192 wrote to memory of 1032	5192	msedge.exe	108
PID 5192 wrote to memory of 1032	5192	msedge.exe	108
PID 5192 wrote to memory of 1532	5192	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\65cdb4bd749bcc714b35e48fa386080c4c95cb4b1fae508d64973d84ced9ee65.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x290,0x7ffa484ec188,0x7ffa484ec194,0x7ffa484ec1a0
  2⤵
  PID:1580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1572,i,4861353628116317637,7700065469878480827,262144 --field-trial-handle=2296,i,14169801296263983317,14337948488593060707,262144 --variations-seed-version --mojo-platform-channel-handle=2292 /prefetch:2
  2⤵
  PID:2088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1880,i,2347234216182714061,663816549419633215,524288 --field-trial-handle=2296,i,14169801296263983317,14337948488593060707,262144 --variations-seed-version --mojo-platform-channel-handle=2324 /prefetch:11
  2⤵
  - System Time Discovery
  PID:52
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2360,i,1036625508705587091,16936608809101975594,524288 --field-trial-handle=2296,i,14169801296263983317,14337948488593060707,262144 --variations-seed-version --mojo-platform-channel-handle=2984 /prefetch:13
  2⤵
  PID:696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3640,i,2097930505382165213,11384848491384622130,2097152 --field-trial-handle=2296,i,14169801296263983317,14337948488593060707,262144 --variations-seed-version --mojo-platform-channel-handle=3664 /prefetch:1
  2⤵
  PID:2604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3672,i,11588491754901616978,10330575528312208418,2097152 --field-trial-handle=2296,i,14169801296263983317,14337948488593060707,262144 --variations-seed-version --mojo-platform-channel-handle=3696 /prefetch:1
  2⤵
  PID:4256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4312,i,18119482838525007980,221636366429861133,2097152 --field-trial-handle=2296,i,14169801296263983317,14337948488593060707,262144 --variations-seed-version --mojo-platform-channel-handle=4852 /prefetch:1
  2⤵
  PID:6112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4352,i,1152722278923849439,6452977409276466518,2097152 --field-trial-handle=2296,i,14169801296263983317,14337948488593060707,262144 --variations-seed-version --mojo-platform-channel-handle=4856 /prefetch:9
  2⤵
  PID:2012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5404,i,1535546037216812472,18012783385326300976,524288 --field-trial-handle=2296,i,14169801296263983317,14337948488593060707,262144 --variations-seed-version --mojo-platform-channel-handle=5420 /prefetch:14
  2⤵
  PID:1748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3776,i,7392961309809376584,4475960017095118629,524288 --field-trial-handle=2296,i,14169801296263983317,14337948488593060707,262144 --variations-seed-version --mojo-platform-channel-handle=5440 /prefetch:14
  2⤵
  PID:3868
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6140,i,8514757153488727634,10366256757863692230,524288 --field-trial-handle=2296,i,14169801296263983317,14337948488593060707,262144 --variations-seed-version --mojo-platform-channel-handle=6152 /prefetch:14
  2⤵
  PID:5796
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6140,i,8514757153488727634,10366256757863692230,524288 --field-trial-handle=2296,i,14169801296263983317,14337948488593060707,262144 --variations-seed-version --mojo-platform-channel-handle=6152 /prefetch:14
  2⤵
  PID:2400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5068,i,13982120725873571922,14940060591899451212,524288 --field-trial-handle=2296,i,14169801296263983317,14337948488593060707,262144 --variations-seed-version --mojo-platform-channel-handle=4844 /prefetch:14
  2⤵
  PID:4324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5164,i,5339376664243998585,3279817433479533349,524288 --field-trial-handle=2296,i,14169801296263983317,14337948488593060707,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:14
  2⤵
  PID:6056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5168,i,9787012062566154880,7381738648028631555,524288 --field-trial-handle=2296,i,14169801296263983317,14337948488593060707,262144 --variations-seed-version --mojo-platform-channel-handle=5064 /prefetch:14
  2⤵
  PID:2156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5388,i,9304685609404582149,14750671729657927749,524288 --field-trial-handle=2296,i,14169801296263983317,14337948488593060707,262144 --variations-seed-version --mojo-platform-channel-handle=5560 /prefetch:14
  2⤵
  PID:1032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=816,i,10909053829362800738,7678956565798337633,262144 --field-trial-handle=2296,i,14169801296263983317,14337948488593060707,262144 --variations-seed-version --mojo-platform-channel-handle=812 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1532

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2564

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5112

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

7de1861d-4cb2-4e5e-8a29-847d9c3a29b1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\7de1861d-4cb2-4e5e-8a29-847d9c3a29b1.tmp
Size 38KB
SHA256 cbc7309d030959d7b4894537e1528df73e8b388a20cd63a5487d8b629ff703cb
MD5 a5cf77ef260641e19e79b88e53b0d70b
SHA1 bcbe5dd45d024acc7d5add528779b22b014ffe55
SHA512 9fdc83c46626830ecafa4530a30a0a29fa0264211fee5a616dce6bdcfbe8a4605d1c7135ce4f6f647c3427ed2e9b8f4f9765f6f35dd6bf067a14326e45ceec3a
SSDEEP 768:hrv+4UNbdz3Iz/TBOWCutsONXyer1IRCzniBfeVH1SK7:hbsbV34ySIqnQEH1l
TLSH
T12203CF36A4A89E338DE2A3C6B14773437FB86057C6840790EDEE1F4E069B99D130B957
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ac1b1f93ff87eb876027f4166d705375c0f5d3d22dcb03f6a66f6100e88dd10f
MD5 b99f03c5cfe71b03836f8b5fcf09425b
SHA1 8a5078499c0b5ea40183efb77f9c1028c196409c
SHA512 6b9feec4ead7bf05f67d0d480907e21a3b770d8d12dedd2b0d785904186eac7448583e61abacb23582948de55c8ea2043bfd6908efd7faecdd82cee91404cfe6
TLSH
T16DD02BE037909D18C440353163D0122091006C30880923090100A02C8D3E2C3054F0BE
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c95a47aec5edba88214fad580cb869417b6620a91d8ee97e2d0b7801d3372be5
MD5 aad5f2ca0dd16bb2ea6c7757ea569c50
SHA1 5228b0b132542be004ea1bb32f3748964d065af5
SHA512 9d59c0291d741bd9d6cf50c22972d4baef00e7c1a48d6a3311a6cc82c04ceeba6e2be9458334cb954878915cc9eb91a8fd8bc4a47c966d57a2a05d6ee8211640
TLSH
T1D4D09BE177A19D18C545353567D1522591416D31451927194241E13D9D7E2C3455F0AA
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 a12505d9cfd32a715a3a04e9a030a712e5898fb7a73ebdacf022a0054eb95706
MD5 8db915abbf054be52dfa938a728d829a
SHA1 e8a5c9ad9d9a7b8efe473ece05337ab52c97c6e1
SHA512 faf146c47e9f94a64ecdfbad27a7551a4e09781d7195897d3c6f15bcfd9b1a6679602b7b419bb39f023152f47abbaa271c54dfbbe349dd6f7bc2205d746684f7
TLSH
T1414193125BB2CAD6DBA244F693D367A9F2F4C4080E27AE30C25CAC306582FE771C001B
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 8e427932a9161c1c803c8ded4b720f0e958bf34edc96c9f22c08a0c38d7daf4e
MD5 c8d42cf219c04cb7f23e5cd7dcb4176a
SHA1 d808ebcf7dddf17cff8e556d12b00922c5115616
SHA512 9d2df01d5c701d29c8d306155860f37d2c86acc9309ed1663e87d67ee5d8081f1f4a4c8eecfecae419dbab4e2c35bf8416b17a213b6f46574d93572553009759
TLSH
T11951ADF7C3E4866E890156F0AB187E2FCE2D0915832C3D5A89E4AE1BA3E2871E14155F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 eccd0699a0dc5aedbb0b8130cce3248a11758a533ed64db7cbe3e98b2f1a129b
MD5 c832bc52b75ac2a8651d43fe4b0db7a2
SHA1 59ca276e5a24ce522f7370a26a839602afb86519
SHA512 9169b978b21714b92ece0ad24d087bee722be0d270ca2be73567b340190870ffa1724235944d1812356203fdd005ac18f29d8598245be796897d3c3ebae1eea9
SSDEEP 192:sxR8ROyM/jK1Ml8wbO/fAsNz2wG9zoA8p4k/g6+WNIYoXCY3G8IgIJ:sxR8QlO/fAsh2pwF/5IySs
TLSH
T11352D9156A245D7BCCD7D20DFA557F93D6F81573A2901E44AAFCCA0C00E6AED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 c5f81e1ebf9f40ccfaedf395e097042a71609607ab493ced3c92ae874b081ff1
MD5 6dce84e8484e4f5d21df9bfa3d140be4
SHA1 66d29dabc42854ae5894d0d98f7b415df1ea786f
SHA512 62ba537f4f1350b4642cf74ac7d162e92aa644bf43aae2019cb29ebc1bac2c623d04743ea304f7e0d5748698724def170c7792e0f3812ddcf65f59c44a71300e
SSDEEP 192:sxRbROyM/jK1Ml8UQ0bO/fAswz0wG9zoA8pek/g6+WNIYooCY3G8IgDZJ:sxRbQqyO/fAs20pwL/5IvSf
TLSH
T1D062C8166A285D77DCD7D219FA51BF93D6F81473A2901E44AAFCCB0C00E6ADD621382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 8e27151a1760bf899e073ce5c2bca9ed4a8c50344f1afd9357e01cf6d9b2d76f
MD5 2d40ac2df3a1c1240ccc50574aec1eda
SHA1 f5b838dc894560a349daf5a190b8e78aa2ec008f
SHA512 d545ed9bf449b84d1f8e8e38ab12df9156071f76ac3a5fcfb5582279bb3d90d75a8f53be4bbb075fb2e5bc6e293ff5b4cd6b163a53872c0df0aa98edd13c592b
SSDEEP 192:sxRbROyM/jK1Ml8wbO/fAswz2wG9zoA8p4k/g6+WNIYoXCY3G8IgDHJ:sxRbQlO/fAs22pwF/5IySl
TLSH
T14C52C9156A245D7BCCD7D219FA557F93D6F81473A2901E44AAFCCA0C00E6BDD221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 6bf36e3fee32d833f80226856241ced529b5747666b4ba4fe6ec46d395fba9b6
MD5 41a20f823c18e454e4a4af7e6a489ef6
SHA1 4ecdcf504fd91b33bafb0d0f7cd40bb09f4485e2
SHA512 6f3bc56ee9e6b9bc992b63facb1067a497ce226c9eb6cac1ba1fadec4922d29e42129001511a143492b56246d68a483b489ffe1ed99b515077edf8cb2c16c443
SSDEEP 768:jXwHSRWgs2fJ28F1+UoAYDCx9Tuqh0VfUC9xbog/OVbVuGjrockwe0Urk:jXwHSRWgs2fJ2u1jaO4GQdpk
TLSH
T170C2EB2B640CCBBE4F844A9DEC25AED76DD801CB9B984D5447FA890C03C77EB521B4DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 3c2e034fec6af2f9dc1d188014cf982bc883074190c15508529a28ac7c4d3afb
MD5 6863934e29fbdf4d22135f0a5c221f03
SHA1 233171ddd47a4255b18b593464e94fc33ca423eb
SHA512 40288e61f586d2c1c5e65153149628343de53273623511f301c7822cc9939333e9e40d23c700a54af3ad14d7ed520c269e22d9e8cff206eddcb35d8a9a333458
SSDEEP 96:KREEEFEwE0EOEyE2EUWESE/EfgE8EUK4ERgE2EUcE0E0E/EuEUEJHGbqGAoouWY9:C3gFB31lERe1JDggH2vHG5FaHGbqGAoX
TLSH
T18F913700717A4280387D664D85B5DA5F93C2F4933415A92B3BE942BA4FABE134DFD8CA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

bd7a6b94-3c42-4c50-afdf-d23a9cd346c2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\bd7a6b94-3c42-4c50-afdf-d23a9cd346c2.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 d7475d12408a3b124cd884636db6158ee390b610ff4432d84259dcf1c3e668cc
MD5 cecd1f1969c8baf9473c464bc7a071f9
SHA1 2b08f534a073092537ccacfec2b6259fc9e26725
SHA512 b1f5f2c32f49301bcfb54178495760acf39f6e62b1cb0d6e62d6fd38d7a625b8bd903f1ca1159b2296d6ea3bca7da9e9b148c8e13b7f35e1a5884a099a24653b
SSDEEP 768:kj+9h3Q83/TBOWCutttONXyer1IRCzni9Nb9MU:z9h3QYxSIqnWb+U
TLSH
T1EDF2BF36E4559E238CE2A3E6B2073753BFF8516BC6C41B44EADD2F0E06D796D030A416
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 e7ef042e94d551ee47dca1a9d47196ce329bebe79c4e42b053797529f2d83255
MD5 658bbaf6ee16f34c6b42ecca4affc7a1
SHA1 1dbda4c5da2ad6d7c7ffa45d9c9c7d335cd572f1
SHA512 4a50de63a9a4a0a1bd7a9c9ca0fa027898356aaad932a817a2e00b2f3f21957ac697f609b8e590b6af835bd0f4a556133570419cd1cb482d103cc9058659a64c
SSDEEP 768:Vrv+4UNbdr39M3/TBOWCutttONXyer1IRCzni9Nb9M8:Vbsb939oxSIqnWb+8
TLSH
T18E13C032E458DE338DE2A3A6B14B77537FF85057C6C40790EADA2B4D069B8AD130B917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 44e1fb9671f63ad52dfa90302831e6aefc7b136d4c2a55791ca5e8a6be22ee05
MD5 f9908a840bf7b399c93d5899912c9b67
SHA1 ced071c6fb5f81543e3f9b31727507a358ea61ac
SHA512 4bec7a8cea5c6fff16632d7d73ee2b1c234f0b68d93caa185b9be10045d445ccd40b10a1dfff5282421abb167ea4037705569e8d298a5024a90d1c408ce1205f
SSDEEP 768:Wj+9h3983/TBOWCutttONXyer1IRCzni9Nb9MU:F9h39YxSIqnWb+U
TLSH
T192F2BF36D4559E238CE293E6B20B3757BFF8516BC6C41B84EADD2F0E06D796D030A416
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 6c9be3990a4b2f2e30613fa0ae434cc54b9e7010238ade2087e0ab9c51b8a1f9
MD5 f8383fd2640f2cf9585bf1517ed737c9
SHA1 0d3b04e110d60a4d611b150430c29f27fa28fce2
SHA512 12bbcb111f5d0279ab4eccdcb834951dec7ed069ab3ac6bff9db341bdc12092f12d5c9b40326d1d2365e2b14e39d4d2618c14eb4107595a5739731d00b07a813
SSDEEP 768:RF1j+933Uwgb83/TBOWCutttONXyer1IRCzni9Nb9MU:w933KYRSIqnWb+U
TLSH
T13003BE339884DE279DE297D6B60A3353AFF4516BC6C45A90EBDD6F0D02975AC030B816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f141915a-2863-4a60-93ed-db5edcca1571.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\f141915a-2863-4a60-93ed-db5edcca1571.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download