049771837eaf4ddbb94ecbb0b85c9d9eeea4709f360b700e9651fd74ea3880ad

Resubmissions

08/08/2026, 10:11

260808-l8a51svcmg

08/08/2026, 10:11

260808-l7zf8ach833

Analysis

max time kernel
149s
max time network
152s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
08/08/2026, 10:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Login.html
Size 87KB
Sample260808-l7zf8ach83
SHA256 049771837eaf4ddbb94ecbb0b85c9d9eeea4709f360b700e9651fd74ea3880ad
MD5 108c983f1224c13744d72c73813fdeb7
SHA1 43d1f1d89847c2119043f8f0ce4b3cb8a27b6293
SHA512 309889771cef7fe74627b9eb3f834a2365e8c41194ed0cc670a71a5d549d5f7d94b7b8ce73252ef2775c935d503ee813dbd561e94e47bc889cc8a57afe776053
SSDEEP 1536:MpFhjR4c/fMkeqB9Xv0C+Xx+qKjylaX6LsJBeC3PdXmG8hcHzZDeJdMfSwRf6KJt:eFNfeqB9Xv0C+Xx+qKjylaX6LsJBeC3l
TLSH
T1B49343A3BF14E476E94F9BF5E0109544C045AA668E1AC8C4F0ECB7B42F887E66F43953
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
472	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134306574957714991"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-552508041-2681165170-3229858294-1000\{7B947648-A074-4BE7-807D-4AF9C07E82AC}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5916	msedge.exe
5916	msedge.exe

Suspicious behavior: LoadsDriver 6 IoCs

pid
4
4
4
4
4
4

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4668	msedge.exe
4668	msedge.exe
4668	msedge.exe
4668	msedge.exe
4668	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4668	msedge.exe
4668	msedge.exe
4668	msedge.exe
4668	msedge.exe
4668	msedge.exe
4668	msedge.exe
4668	msedge.exe
4668	msedge.exe
4668	msedge.exe
4668	msedge.exe
4668	msedge.exe
4668	msedge.exe
4668	msedge.exe
4668	msedge.exe
4668	msedge.exe
4668	msedge.exe
4668	msedge.exe
4668	msedge.exe
4668	msedge.exe
4668	msedge.exe
4668	msedge.exe
4668	msedge.exe
4668	msedge.exe
4668	msedge.exe
4668	msedge.exe
4668	msedge.exe
4668	msedge.exe
4668	msedge.exe
4668	msedge.exe
4668	msedge.exe
4668	msedge.exe
4668	msedge.exe
4668	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4668	msedge.exe
4668	msedge.exe
4668	msedge.exe
4668	msedge.exe
4668	msedge.exe
4668	msedge.exe
4668	msedge.exe
4668	msedge.exe
4668	msedge.exe
4668	msedge.exe
4668	msedge.exe
4668	msedge.exe
4668	msedge.exe
4668	msedge.exe
4668	msedge.exe
4668	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4668 wrote to memory of 4248	4668	msedge.exe	88
PID 4668 wrote to memory of 1828	4668	msedge.exe	90
PID 4668 wrote to memory of 472	4668	msedge.exe	89
PID 4668 wrote to memory of 1828	4668	msedge.exe	90
PID 4668 wrote to memory of 1828	4668	msedge.exe	90
PID 4668 wrote to memory of 1992	4668	msedge.exe	91
PID 4668 wrote to memory of 1992	4668	msedge.exe	91
PID 4668 wrote to memory of 1872	4668	msedge.exe	93
PID 4668 wrote to memory of 1872	4668	msedge.exe	93
PID 4668 wrote to memory of 4344	4668	msedge.exe	94
PID 4668 wrote to memory of 1872	4668	msedge.exe	93
PID 4668 wrote to memory of 4344	4668	msedge.exe	94
PID 4668 wrote to memory of 4344	4668	msedge.exe	94
PID 4668 wrote to memory of 624	4668	msedge.exe	95
PID 4668 wrote to memory of 624	4668	msedge.exe	95
PID 4668 wrote to memory of 624	4668	msedge.exe	95
PID 4668 wrote to memory of 1248	4668	msedge.exe	96
PID 4668 wrote to memory of 1248	4668	msedge.exe	96
PID 4668 wrote to memory of 1248	4668	msedge.exe	96
PID 4668 wrote to memory of 2384	4668	msedge.exe	99
PID 4668 wrote to memory of 1228	4668	msedge.exe	100
PID 4668 wrote to memory of 2384	4668	msedge.exe	99
PID 4668 wrote to memory of 1228	4668	msedge.exe	100
PID 4668 wrote to memory of 3076	4668	msedge.exe	102
PID 4668 wrote to memory of 4412	4668	msedge.exe	106
PID 4668 wrote to memory of 4880	4668	msedge.exe	107
PID 4668 wrote to memory of 5648	4668	msedge.exe	108
PID 4668 wrote to memory of 2636	4668	msedge.exe	109
PID 4668 wrote to memory of 2636	4668	msedge.exe	109
PID 4668 wrote to memory of 5916	4668	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\Login.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ff8d062c188,0x7ff8d062c194,0x7ff8d062c1a0
  2⤵
  PID:4248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1864,i,14361525109562762684,5172011491898134732,524288 --field-trial-handle=2292,i,6747731614182815904,16823843106992610858,262144 --variations-seed-version --mojo-platform-channel-handle=2328 /prefetch:11
  2⤵
  - System Time Discovery
  PID:472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1620,i,1693238717815267298,16488766852187278179,262144 --field-trial-handle=2292,i,6747731614182815904,16823843106992610858,262144 --variations-seed-version --mojo-platform-channel-handle=2288 /prefetch:2
  2⤵
  PID:1828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2448,i,2761566974265194859,6500314570430005851,524288 --field-trial-handle=2292,i,6747731614182815904,16823843106992610858,262144 --variations-seed-version --mojo-platform-channel-handle=2908 /prefetch:13
  2⤵
  PID:1992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3588,i,18153922115643304864,17202840951073835603,2097152 --field-trial-handle=2292,i,6747731614182815904,16823843106992610858,262144 --variations-seed-version --mojo-platform-channel-handle=3632 /prefetch:1
  2⤵
  PID:1872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3596,i,7157577702868172850,9740829834790732206,2097152 --field-trial-handle=2292,i,6747731614182815904,16823843106992610858,262144 --variations-seed-version --mojo-platform-channel-handle=3640 /prefetch:1
  2⤵
  PID:4344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4380,i,12833295758310690649,16468046302909509723,2097152 --field-trial-handle=2292,i,6747731614182815904,16823843106992610858,262144 --variations-seed-version --mojo-platform-channel-handle=4608 /prefetch:1
  2⤵
  PID:624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4404,i,17160135348508371061,6119686066703253909,2097152 --field-trial-handle=2292,i,6747731614182815904,16823843106992610858,262144 --variations-seed-version --mojo-platform-channel-handle=5040 /prefetch:9
  2⤵
  PID:1248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3388,i,13958382904757217222,6146638678997229958,524288 --field-trial-handle=2292,i,6747731614182815904,16823843106992610858,262144 --variations-seed-version --mojo-platform-channel-handle=5396 /prefetch:14
  2⤵
  PID:2384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5380,i,9587989172522623986,2298786735076073428,524288 --field-trial-handle=2292,i,6747731614182815904,16823843106992610858,262144 --variations-seed-version --mojo-platform-channel-handle=5428 /prefetch:14
  2⤵
  PID:1228
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6044,i,17384022465988675170,6226541068059157848,524288 --field-trial-handle=2292,i,6747731614182815904,16823843106992610858,262144 --variations-seed-version --mojo-platform-channel-handle=6060 /prefetch:14
  2⤵
  PID:4676
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6044,i,17384022465988675170,6226541068059157848,524288 --field-trial-handle=2292,i,6747731614182815904,16823843106992610858,262144 --variations-seed-version --mojo-platform-channel-handle=6060 /prefetch:14
  2⤵
  PID:3076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5180,i,13960146837556766073,16823361160907637032,524288 --field-trial-handle=2292,i,6747731614182815904,16823843106992610858,262144 --variations-seed-version --mojo-platform-channel-handle=5192 /prefetch:14
  2⤵
  PID:4412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5184,i,348514298558902689,14784823119381283994,524288 --field-trial-handle=2292,i,6747731614182815904,16823843106992610858,262144 --variations-seed-version --mojo-platform-channel-handle=6056 /prefetch:14
  2⤵
  PID:4880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5168,i,5685628265669348213,10135536369345892305,524288 --field-trial-handle=2292,i,6747731614182815904,16823843106992610858,262144 --variations-seed-version --mojo-platform-channel-handle=6520 /prefetch:14
  2⤵
  PID:5648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4116,i,14423090678959453786,16572332014109057883,524288 --field-trial-handle=2292,i,6747731614182815904,16823843106992610858,262144 --variations-seed-version --mojo-platform-channel-handle=5164 /prefetch:14
  2⤵
  PID:2636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6380,i,17243382079677198812,16776257627185687586,262144 --field-trial-handle=2292,i,6747731614182815904,16823843106992610858,262144 --variations-seed-version --mojo-platform-channel-handle=6428 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5916

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4584

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5984

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f8dff5315a0bd3856381f405c1a16257337fd6ff2d8043dd8bea22404cd35129
MD5 5e53a2cd139f0cce4f8ceab3e015f7da
SHA1 1bd884dbaaa352a724c53bfb8f4bfad2623c93f5
SHA512 27cc4cb62f9aa4af6b521efd824b001f3b689bae2ffe57263da18e2bb22d0b13ba656141d7e6ea1d1c202d5f461a44243a00d604f78bd5b04fe6b8512e260ac1
TLSH
T178D02B1463108D04D441F13214D13311B1110833A80C96440050E1284CB634206738DD
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 1f3bc43c50f7d0fa02f98500baf5d78052a5560603459a9325b17de989d121f4
MD5 46a6445fd2c83830bb8c6e03f85bafc0
SHA1 46b07e35efbd47692fdc81ef0e82e2964da2831b
SHA512 800f82b05756fd6fab3fe29924147f0b86afeec21da661e646b431c6ca03903eb45bb09803f5cdaf3d2d1bb16f95d0f2e53a1f9ddde57505b0f3e1580c384ed1
TLSH
T188D02B1063208C04D441F13214D23311B1010833540C96440150E1384CB634206728CD
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 b701fcf9b89e02f14ef5513ea8350115a439f275083721213b491e00e208089d
MD5 a5f45c70c00b97e200c785f76bef490c
SHA1 ca6eee638c12731d5dafd76772868df3107f2a9d
SHA512 13d02a9b81e5798e515282f028cbca3ae563ba056b2c6f493ff162c837020746087a8cc2c077f245036820ba57af8dadf7c38614671999bcfbf5266eee4e56d3
TLSH
T10C51764063A73AC1F76F45F53AF1276936F6845E0A476E032240EDF25946F34E8EA123
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5985b1.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5985b1.TMP
Size 2KB
SHA256 ccc32350b748908300a19f298642d9ba6914c0a7e808932f655921323d0f9064
MD5 ee8f44702467bfa925dda8dad9bc438a
SHA1 1c3eef1f7c8e9c6267c75e7349fdf1fcbc8b1834
SHA512 c39a8a2f4757d4977ba35686b41ed66e4e54635dc3c5443f8e17978d427b439e96e0317229bfeae3900b612a8932e032c79b799af854d87ee7c02eb1e97b6a7f
TLSH
T1CA51764063A73AC1F76F45F13AF1276936F6845E0A476E032240EDF28946F34E8EA123
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 98389a63b260d6ff6435105dfd7848454004c3a3285ff743c1019432b49fee6b
MD5 23b0e8082a23e96d0a574ef29afbad73
SHA1 d7f6486be2726382e025e11bfd6631e4577fa986
SHA512 be55c5d25cf30bc26d44f7e19f7c4130af228b4265ba764f38862f9486f48213c52718cff7daf838861f7b7c6aac9dd93b282f1864adec4ddc35da2d9dbc4af2
TLSH
T11631ADF3C6E85A3D894146F877153E2BCE2D0814432C3E5AC5D4AF5FA7E1871D29099E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 33fd4ea11b29899db14404b128ffd91aafdfab4ad1004eaeb7b994a954d3fe58
MD5 86c693a260e544a59cff2a58ef1fd104
SHA1 be1b98abaf6ee7353447e584b086d2a1a2173fb6
SHA512 192512dc6d34f922e3b65148a51fd9cba595fcf2902c98502cef1c07aa16a9c13de4f226cd9ac685a082e670f9ad9eebcb9b284b1b741093b1eb3218f3bb25dd
TLSH
T10351B0F783F4467D9A1191F4EB196E2BCD1D0416432C7C6689F06E2B63F28B1E14169F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 3f0da9cd3efde283cc229a9b09a41d18e144dae59768a513ee23d6cb926352f4
MD5 838041291fd7ff35f044af1c21a95e17
SHA1 40a5d001e8ade9d97f61435ee41b27d9cc3086fa
SHA512 b27b8b92b06beba0286f5ebd7e7b69f17364693af47bdc895ed0ee937994926d4593daba7cdaa873988d0ca9e8105f79e7ad0a5707a62ea53b8904a1691ea712
TLSH
T13A31BEF3C6E85A3D894146F87B153E2BCE2D0814432C3E5AC5D4AF5FA7E1871D29098E
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 ecb9c844f9f16bd1599036abfa0c190ca8a5dbf40391553fc7a5864b5fd9a7af
MD5 55094cd96482f391a11f450e5e0d4f43
SHA1 8c656a8b8666681c0489ee544b65af9e962af03c
SHA512 78325ea2b9d39da1ee037c2552d373144f842ba926dea57b9b790c8e38846e0ec537f9f5b3822bcf6b561a8715bae2fe15b2342dcbd506975c9be73a5b3582d0
SSDEEP 192:sxRErb7/ffs1RDde5lShNzoD8p4r/g6+WNIYCpuOZGDIgDHJ:sxREP7/ffs1Rc5lCu/5IVc9
TLSH
T16042C7156E28A93B9CCBE20DBB55BF53E6F9513261901E08B7FC960C14EBBCD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 65788e35c5636363a50dae597d5a183596aedccd6f5ef4d5c2f0df05e993d867
MD5 22f0b93790cf43d0227d4492a766b3f7
SHA1 067a2974698058336d2d75e40c5808418c771a55
SHA512 cdee8781c23929dae33580933c62e108a32362ed1d16d3702aedca59128b158b03af41bbc37648f7394af9bb4000da6b6f2eb47cfbe81f2b0da36ce0ef4e72a7
SSDEEP 192:sxRErb7/ffs1HDde5lShNzoD8p4r/g6+WNIYCyuOZGDIgDxJ:sxREP7/ffs1Hc5lCu/5IQcP
TLSH
T11032D7166E28A93B8CCBD21DBB55BF53D6F95132A1901E08B7FC960C14EB7DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 46ab08478de77b4b69e74b0fcfe9f5dd2f331aa4daa095674be3e4803cd76399
MD5 5b2836851cbdf95f1924b116982658fb
SHA1 f2b62555a367eb028e09c43c7ce6d256e6d612f2
SHA512 600a6733d53bb484bc92309318d983e270bd3cf86c845e7e78d55e5d2c0c282724c857850c1bba31571a19f5007ca95c40e17788fc8a88cdc752f94eedcb99d2
SSDEEP 192:sxRPrb7/ffsgHDde5lShNzoD8p4r/g6+WNIYCyuOZGDIgIJ:sxRPP7/ffsgHc5lCu/5IQcs
TLSH
T14332D7156E28A93B8CC7E21DBB15BF53D6F95132A1901E08F7FC960C14E6BDD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 517aedb11fee1868fbcfdb5104e68231ebd6aaa2f946d6fb74e1ec300e6885a5
MD5 926bec0eb34114b7755af918f60d5fc6
SHA1 304c2011a081e9d58fc42e130f91df9a70a5a77c
SHA512 b3fe3d7d652a165cd5a31dde9eb9e2ae8ede9ce162fe85763b16291441a344972c03ec05019e5b53ab7e37298b0bdacf65dc865aaaafe727afa38390b2586560
SSDEEP 384:jjm+vhKfCtgQCFf4+KhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVmC9qyRvOroZS6:jC+vhQWgQ+f4+8F1+UoAYDCx9Tuqh0VG
TLSH
T186B2DA2B600DCB7F4F800AADAC197FD76DA802CB97589D4047FED94C02C77EA92194DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

edafe6b4-4292-4cdd-8fca-299e19a50aeb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\edafe6b4-4292-4cdd-8fca-299e19a50aeb.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d270835f-19e1-42ac-9c37-a236e3965f10.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\d270835f-19e1-42ac-9c37-a236e3965f10.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 13e1ff23adba184a10745c58aa0eacee56607fc7fd47e3732779ec2074173e51
MD5 aafb83233164ab4bef79c44c30f4056e
SHA1 87ee8f8502175ccbfaf9b1cf7bc00ea09ff10aca
SHA512 ac90b56d3b15e88a2133622cdc13d6ba0c90de8f1799522009e810d4eaf4966019b2b50762842ce3958f27c242a360b619ce0e136892889b5940bd34881670f8
SSDEEP 768:Mrv+4UNbdH3ezrdYCIp8+p3bd66j+4BRv86aLIWq2bwClP:Mbsb13efCCW8+p3Z6n4yQ0w6
TLSH
T15113CF72F8A899738CF6C68472467B437FF8529392C10AD4D5DC2B4E459A1AE230BD37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 57221bcdf181f72203cec5f833fb4184f2244b504b7f0707c7d3494643eb44bb
MD5 7e2c7c106f7215c209eb033970fc1465
SHA1 74266675ce8116dd1272e55940a540a2b6c7b899
SHA512 735c869a5d691c68c8df6097f5d4830e8591c664185fd33567e53c0a04b48a7693ce84a47acd021508459fc9d4d12b38654c8ec3ea357377b3497c84749e3889
SSDEEP 768:Irv+4UNbdH3VCrdYCzp8+p3bd66j+4BRv86aLIWq2bwClP:Ibsb13VICCF8+p3Z6n4yQ0w6
TLSH
T12F13CF72F8A899738CF6C68472467B437FF8529392C10AD4D5DC2B4E459A1AE230BD27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 43KB
SHA256 1851b7d15c816ca4e3bc5605aff75689e2d4f2ea8c796c071019447c6c15f55f
MD5 6d5c43a2723522e689b224d5ec148b9e
SHA1 da3f854ea2757f449598cf9cbb362ae0366c0549
SHA512 8478ad3f12be4d8950e795d183e1bcfd5c891311e8995851d6529b16c5abb50e5c21b6dc0e386c21174237216977ed8716132085b53c9f5f7b03ac5940e594d3
SSDEEP 768:MF0rv+4UNbdi35wggzrdYKp8+p3bd66j+4BRv86aLIWq2ewBKZO0:Jbsb834fC08+p3Z6n4yQ2evZv
TLSH
T14113BE73E898DA739DF6CB84B2473203AFF84293D5C019A4E6CD6B5D519B19D230BC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 c19d588fd8a6122b21be4a76e8c9cf060b175f422408c9bfd64242b953776e23
MD5 461bda0838abe1a2737859cba9ec9c94
SHA1 956ff21c42460989e7bb86b24c89dc8fd0508205
SHA512 655217a2db165a663aa9f4e9b63be2667f4905968b5eea286362504d9f206ed00518363eee643034322ca7c8a4555fed1b1cecba1a45ad0a582b9b950641c8a8
SSDEEP 768:MFQB35wguzrdYap8+p3bd66j+4BRv86aLIWq2ewBKZOm:/B3mfCE8+p3Z6n4yQ2evZl
TLSH
T1D403AE73EC98C9779DE6DB88B64633039EF442A3D5C069A8D6DCAF1D109719D130BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 e9f0a76c18a3ac1c94ca27748775c672059ebf68d3e4f9f2c8e662d85430060a
MD5 584d747e9c6ffdf185cb0544876be9f9
SHA1 f62fab992564d5e631e849ba74d01cda4445e210
SHA512 257c489a9ad622f43639bf4e4f55611582aa46117059ec3c719fcf79b29fef094bf1d590bc22409e12842ce599000b6d83c6278a5ce0a68a872f702029b150c3
SSDEEP 768:Irv+4UNbdD3lcYLNp8+p3bd66j+4BRv86aLIiZ2bwCl1:Ibsbp35LL8+p3Z6n4yD0ww
TLSH
T15303CE73F8A899739CE6C644B2467A433FF851A396C10AC4D5DD2B4E419B29E230BD27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8b206712-82f6-45b6-9018-217bb2f7ac42.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\8b206712-82f6-45b6-9018-217bb2f7ac42.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download