hxxp://di-il[.]com/Ubz3XrGU9SAtxbNm7

Resubmissions

12/09/2026, 22:32

260912-2f6dfsbb483

12/09/2026, 22:28

260912-2d36bagn513

Analysis

max time kernel
148s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/09/2026, 22:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://di-il.com/Ubz3XrGU9SAtxbNm7
Sample260912-2f6dfsbb48

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3088	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134337916706116639"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1846164713-4096795028-774071693-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1846164713-4096795028-774071693-1000\{C50793F7-ADBD-4B3F-9A9B-4BC5E82AA782}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
412	msedge.exe
412	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 4536 wrote to memory of 1368	4536	msedge.exe	87
PID 4536 wrote to memory of 3088	4536	msedge.exe	89
PID 4536 wrote to memory of 4352	4536	msedge.exe	90
PID 4536 wrote to memory of 4352	4536	msedge.exe	90
PID 4536 wrote to memory of 4352	4536	msedge.exe	90
PID 4536 wrote to memory of 2488	4536	msedge.exe	92
PID 4536 wrote to memory of 2488	4536	msedge.exe	92
PID 4536 wrote to memory of 32	4536	msedge.exe	93
PID 4536 wrote to memory of 32	4536	msedge.exe	93
PID 4536 wrote to memory of 32	4536	msedge.exe	93
PID 4536 wrote to memory of 4004	4536	msedge.exe	94
PID 4536 wrote to memory of 4004	4536	msedge.exe	94
PID 4536 wrote to memory of 4004	4536	msedge.exe	94
PID 4536 wrote to memory of 1204	4536	msedge.exe	95
PID 4536 wrote to memory of 3044	4536	msedge.exe	96
PID 4536 wrote to memory of 1204	4536	msedge.exe	95
PID 4536 wrote to memory of 1204	4536	msedge.exe	95
PID 4536 wrote to memory of 3044	4536	msedge.exe	96
PID 4536 wrote to memory of 3044	4536	msedge.exe	96
PID 4536 wrote to memory of 2452	4536	msedge.exe	99
PID 4536 wrote to memory of 4632	4536	msedge.exe	100
PID 4536 wrote to memory of 2452	4536	msedge.exe	99
PID 4536 wrote to memory of 4632	4536	msedge.exe	100
PID 4536 wrote to memory of 4732	4536	msedge.exe	102
PID 4536 wrote to memory of 3780	4536	msedge.exe	107
PID 4536 wrote to memory of 4916	4536	msedge.exe	108
PID 4536 wrote to memory of 2364	4536	msedge.exe	109
PID 4536 wrote to memory of 4844	4536	msedge.exe	111
PID 4536 wrote to memory of 4844	4536	msedge.exe	111
PID 4536 wrote to memory of 4088	4536	msedge.exe	112
PID 4536 wrote to memory of 4088	4536	msedge.exe	112
PID 4536 wrote to memory of 412	4536	msedge.exe	113

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://di-il.com/Ubz3XrGU9SAtxbNm7
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x218,0x240,0x238,0x260,0x7ff82b3fc188,0x7ff82b3fc194,0x7ff82b3fc1a0
  2⤵
  PID:1368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1832,i,9515664859563930422,17074898602254978393,524288 --field-trial-handle=2284,i,11297504423669187387,6909757812378927997,262144 --variations-seed-version --mojo-platform-channel-handle=2312 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1692,i,12204621474503502276,13552856588471778933,262144 --field-trial-handle=2284,i,11297504423669187387,6909757812378927997,262144 --variations-seed-version --mojo-platform-channel-handle=2280 /prefetch:2
  2⤵
  PID:4352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2588,i,7555170864442552807,16366480215930908929,524288 --field-trial-handle=2284,i,11297504423669187387,6909757812378927997,262144 --variations-seed-version --mojo-platform-channel-handle=2760 /prefetch:8
  2⤵
  PID:2488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3432,i,10424149065742027618,15547525836580507862,2097152 --field-trial-handle=2284,i,11297504423669187387,6909757812378927997,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:32
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3436,i,11756963043595833489,7080342921352958407,2097152 --field-trial-handle=2284,i,11297504423669187387,6909757812378927997,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:4004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4244,i,16348787046125000965,2887923694867656177,2097152 --field-trial-handle=2284,i,11297504423669187387,6909757812378927997,262144 --variations-seed-version --mojo-platform-channel-handle=4332 /prefetch:1
  2⤵
  PID:1204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4240,i,7510402120884033713,3496001626156752028,2097152 --field-trial-handle=2284,i,11297504423669187387,6909757812378927997,262144 --variations-seed-version --mojo-platform-channel-handle=4364 /prefetch:2
  2⤵
  PID:3044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5088,i,3302059837449930234,9463357614400330254,524288 --field-trial-handle=2284,i,11297504423669187387,6909757812378927997,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:8
  2⤵
  PID:2452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5168,i,17483496218973284111,9977204810785466490,524288 --field-trial-handle=2284,i,11297504423669187387,6909757812378927997,262144 --variations-seed-version --mojo-platform-channel-handle=5220 /prefetch:8
  2⤵
  PID:4632
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5832,i,7316122159882913697,15663156403302186027,524288 --field-trial-handle=2284,i,11297504423669187387,6909757812378927997,262144 --variations-seed-version --mojo-platform-channel-handle=5852 /prefetch:8
  2⤵
  PID:3784
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5832,i,7316122159882913697,15663156403302186027,524288 --field-trial-handle=2284,i,11297504423669187387,6909757812378927997,262144 --variations-seed-version --mojo-platform-channel-handle=5852 /prefetch:8
  2⤵
  PID:4732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4412,i,12534262440950509825,7669686190153585689,524288 --field-trial-handle=2284,i,11297504423669187387,6909757812378927997,262144 --variations-seed-version --mojo-platform-channel-handle=4240 /prefetch:8
  2⤵
  PID:3780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4492,i,315926066576998227,113578355577443783,524288 --field-trial-handle=2284,i,11297504423669187387,6909757812378927997,262144 --variations-seed-version --mojo-platform-channel-handle=4556 /prefetch:8
  2⤵
  PID:4916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4568,i,11255022127893717489,251253289125482201,524288 --field-trial-handle=2284,i,11297504423669187387,6909757812378927997,262144 --variations-seed-version --mojo-platform-channel-handle=6484 /prefetch:8
  2⤵
  PID:2364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6436,i,2279140046996288406,6160799583506636139,524288 --field-trial-handle=2284,i,11297504423669187387,6909757812378927997,262144 --variations-seed-version --mojo-platform-channel-handle=6404 /prefetch:8
  2⤵
  PID:4844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5196,i,3440068311273842684,6897982317788257392,524288 --field-trial-handle=2284,i,11297504423669187387,6909757812378927997,262144 --variations-seed-version --mojo-platform-channel-handle=5212 /prefetch:8
  2⤵
  PID:4088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1224,i,12048158148104075605,601460671678558938,262144 --field-trial-handle=2284,i,11297504423669187387,6909757812378927997,262144 --variations-seed-version --mojo-platform-channel-handle=5692 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:412

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2304

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:640

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

72f8d0e7-c8f6-4fd1-b934-e544b724d263.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\72f8d0e7-c8f6-4fd1-b934-e544b724d263.tmp
Size 8KB
SHA256 78dff7aab327ba62e2c7800d6d91eaf96faa2f5809386268f65b83fcef2cf3d0
MD5 eaa6d683c41624fe4e8e1ab7891b20c2
SHA1 d0ea0a48dd8cfc02afc51c41d78ba6539e8e6782
SHA512 575e7f2d264e1f2b2fa89b0b90a8d95961c9b81b0d9bd6fcaf88b22c4369e07c7dcde1d159510181e3e9bd79866752b9a984fb66b3ed42a661cf75d144554ec4
SSDEEP 192:EONs6nnHGQmiUyNLQYcX5hQDP1yOO/FMc1WU6:EONs6nCKQNX5+DtyOO/FUU6
TLSH
T1F602C934BC786C778EF7AD49B58A37139FA5216BE5956FC0DAE81E1C00D7A5C2306822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d11bd63a3c8c3641d5bd4407fbf20115daee67c3050695788e54c8df9585c700
MD5 7aa846396cdcfea376b8811e8e19c8ac
SHA1 ec25e76211c784e758c9892460a28903222a2b23
SHA512 4816b3d9d1883ae78008726282d2a4c42f9b30d81ff004d60af22873868f3ccc332adb8973ee5a1ed3fdec5d56a832c2ead1cfe30616125d07466daec4eaf02f
TLSH
T17DD02203FF038A2CC8C00CB2002EC22C0F8AF8000A00B2C08030328BCC28B00B02EC88
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7481989667805f861819a64a3969aaaf46d409d3cc4fe4b19154b579a00c6e16
MD5 a70a868c80f3eeab924f0b5bd11ac679
SHA1 22ca93079bed2cfcd0fa02ef66751ff5288ac608
SHA512 380ff0ee96c6b0037a0ca6f886ef323cc451588842ad026ea5bd4a5e33587abc8a13aec63444eb9137cad40409498bf6e0730b0a623f020bfebec6de03bf7d19
TLSH
T1C8D01103FB828A2CC8C008B2002C822C0A8AF8000A00A2828030228A8C28A00A02EC88
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 b7f3b4fe848f8262619a2ff586a7b74e40af8f28e48ee019f2c1a9f9bcbb6f0e
MD5 250b189a216c41c56ae7d3007f5ec25c
SHA1 484f23906e3308f5941c2c2543805204d2738fa4
SHA512 2d7b2405feaebff3d29fcc16769eb601835830099e98b7a8dfa96772b655cd7d6a958d62d39776a2de63f2c82bc0baa6d830f0fccb207fa6d7ad7492fd223ffc
TLSH
T1A2E07DC446C8CF2EF24CA88B42785F0CC281370AE3CC6A5E2F0CC8C870414A8F3C2690
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 ff79ac7ea689d9bac158c6213ff5e97d0d8a632ee2dd0e95159c159e99ea85b7
MD5 6717e75f6c464a50f1a2749acb8e9e0c
SHA1 282e773e259390383f8a03bde766d7d2827d8033
SHA512 af070b29000559b1b1b91608cab34c505a7babbfeef8eab899bc96b36daefdba6c4b61a70750598c937ee65ef27d54e7195b820506354eb708d04c501e443a90
TLSH
T1B961B68E6951F4D4EB64E1B88DEE18BBB63A65F0504B5D32125CE8BD3F0E3CCB208061
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59388b.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59388b.TMP
Size 3KB
SHA256 23b83e6807714b4b3da57e1e7bca0d130972576a06bdbaf69a182edd9a165daa
MD5 ad6ebe181281485cd7d4e98d51bc5d29
SHA1 3bd2119dc17e27b185f4102bd3954a43eeb5c523
SHA512 15c5bcc0884be3c9a268bc89e9dc57c2a9bf56577ba0acb758b0be557f04bf0050965fc0dfae6d437d7292c41a625cba344e4c4ced724751507f4f96556b38b3
TLSH
T11C61B88E6950F4D5EB64E1B88DEE18BBB63A65F4508B5D32125CE8BD7F0E7CCB204061
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 898b62ab9e5cae8473fd64688e8df451d9981936582a680fb719d8b0a655b0e5
MD5 99257c253c51364cd90b17d0743e085b
SHA1 8c27e04f6c08c2a97290897d08ac0ae791ea7563
SHA512 eb0b53208644599f13abef2d47c9237c5863a95c00beafeb427b6c728f7896d66c3479bf02d9091104c73da3b31dc98e86aad4e9697e549e15a0a4e3a4802c00
TLSH
T1F31190F3C3D596AE890556F05A28AE2BCE2D0506431C7D19C9D4EF2BD3E3476D00195F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 0f7680eca6975237b4ddb448689c00e552a1f6e3fddcc6da5f3eda28a259c4cc
MD5 b8dc488968b5570f4aee2e38627aa824
SHA1 a60f29059c75677c3e102c589e64a7fe6aac3fb2
SHA512 c8e8608ee88444c9614da4e775463ecbadb27bb6af7a3e2483a221a6d1bea2835c5d7691b3b49512ead49da7f7905a78868e7fa190fe3246f25c966325c3fb92
SSDEEP 192:sxZ/RDWL/f4sw+KIdp4CHov6+WNQdC/YYBLV+3IgrJ:sxZ/8L/f4sFDnHrz/fJU9
TLSH
T1E122C852AE28A57B8CC7D21DBB15BF53E6F9503295D41E58E6FC861C04E7ACE230780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 c02ba3119d1dea976e4088f3a3e522c9d7c0bcf505b94fa9f623b427bf22979a
MD5 c82ac1c78ba44b45849a2d4e671678cc
SHA1 8e22b4836dada53dd9f82fb0a7196d9fc616ebc4
SHA512 7a262c239abb0d8e81447e388850e0be883f24d49aa18d6a4119eb2e3acb264de41ab0b4601188b5b63c96feb221694eab933f94508ae0ff88c11d239ecf8eea
SSDEEP 192:sxZ/RDWL/f4sL+KIdp4CHov6+WNQdC/YYBLV+3Ig5FJ:sxZ/8L/f4s6DnHrz/fJUp
TLSH
T11F22D951AE28697B8CC7E21DBB15BF13E6F9503295D41E58A6FCC61C04E76CE230780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 581ae67e70f176c146c207352bcb87f62033ee3b1cc4a0cf881d1b254e49daa7
MD5 7ca5fb4250b9f1c019e54191a7cffb97
SHA1 0426794d14c30b0a16d84e374499e64b396e26cc
SHA512 fb49a35345bde55b6bb33e0c9cbe0d177856b4b6228ce31d1eb86847ca4ac240c9e4f9f2c5bfa3adf83e91d2c8c5ce4e65c23a1090ba791c0aabcf07af229292
SSDEEP 192:sxZ/RDWL/f4sX+KIdp4CHov6+WNQdC/YYBLV+3Ig53J:sxZ/8L/f4suDnHrz/fJU3
TLSH
T10D22C851AE28A57B4CCBD21DBB15BF53E6F9503295D41E58E6FC861C04EB6CE230780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 ca3b4a0c0292e441387cebf378a5fb713672093c7014ab22adc709e2d3b98f7f
MD5 78e9bb15db1e694331337097102d04b6
SHA1 11548a065582c04e01ca756befb0ca61d75fb6f1
SHA512 085041c9b39cc0a97c9af2f27bea782354610864c04165328d19e9b359a6eab203c4d3dd740f8933d735c49526a6161268b952fae50a9892868c2b15573d8cfc
SSDEEP 192:sxZ/RDWL/f4sL+KIdpCCHov6+WNQdC/YYBTV+3Ig5FJ:sxZ/8L/f4s6DJHrz/fhUp
TLSH
T1BB22D952AD2869778CC7E21DBB15BF13E2F9503295D41E58A6FCC61C04EB6CE230780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 53c50e6c070e1a80924c437aa73bce30dcda71225ff6fb7b84f079e2f8ac82fa
MD5 b6ee7436d60b2cb23a14d06eed5cc523
SHA1 a3168f529f878195289a0fe6e65d200328882eda
SHA512 ec8381d14cf07bdabbd19cba9c8e39db40dbca2259d2d5a38da36fde6a432f42295a019797803bf807a0887ec268041f9c1c7bc17821e02c09b6eb6c8384567d
SSDEEP 768:PMyYR7jWv3NpB8F1+UoAYDCx9Tuqh0VfUC9xbog/OViCLlGcvXQrop+Ct:PMyYR7jWv3NpBu1ja/CL8OX7r
TLSH
T199C2E83B640DCB7E4FC01E9DDC5A6FDB6E9802C7A6548D4047FA984C02C77EA912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

favorites_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\favorites_diagnostic.log
Size 1KB
SHA256 d00fe96a89cfcc66120591bae34ac96d262ad26396c75f5d38c2a14f9c479cb9
MD5 057f4c72f82c8afb8f10bb3b792b6487
SHA1 94a3e06f249ca0ae076266bececc3f609f639171
SHA512 e949c162694a775313bea6ff2f432688530c4ced0ff7756a9fd58a2f59e3084c16f03be7ab2e5851d579f9caa87ad4424c5cf3b4c7f0cfc3311aa200b6804440
TLSH
T1B1213280B3AE10967ED9B981D10A570354E13B7A362E9E35275D48F68F8C81A4FAF921
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 14KB
SHA256 52afe74789c7f6336f41f01418de5fb6ae0e4d4f42feb45dd6b7ad4752d95be9
MD5 0aaa8748460c76c0ff50a4ebd3f4f02a
SHA1 67c0501233f0034daab3bd8000bc295c2e94f108
SHA512 dcebf0ae99eaa3c3bf17cdac8b2173d36a3e823cf887aa994f32692cce7f0afa4a96de4f50848e6b468ca98f0d6044be91fdb04d1fd38febedc39e3315be3116
SSDEEP 384:BsNfUjAx2iOyYQX5+DtyOO/Hq899pw7O6R2Feo1h7Ud:BBILkDIOUF99pw7TRUU
TLSH
T177624C31B878AC375EE7A585B44A36139FF510A795892FC0E6ED2F1D01DEAAC130BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 73e503a6ed6228958c17177e2ca697c3935dcf21eb1ba5325308bc79d0376638
MD5 8a53f98fc6e6adc7b2fd90257944c59c
SHA1 e7c9a147e5cb73d6a34dbd7ddad02931026887c8
SHA512 a9a525bbc058dc2d5f91461443a0bac69d18d8c2fe63c1d66b252c659d90033f82f4bd0a24b222f43cf54dca397def5f6a6ef2bd7f69ef68c5c71c41a3ebbfaa
SSDEEP 384:FFiZcIqOsNU8TUNTUlIlYAx2iOrYQX5+DtyOO/Hq89ppw7O6R2Feo1h7URoj:FFQHtwgwlLkDIOUF9ppw7TRUMg
TLSH
T18EC22AF258E78836D9AE9747B77D2E138EBCD063B4845A80B3985A1DCC865BFD306C11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 14KB
SHA256 597974a53f354b3723282329485b0127288077a3ea565d9d9fabe1ca5c752e82
MD5 efeaf72b68e4fcf7652ba3694d567ac0
SHA1 f5166f281741018ee6f0d2cdb2edc2f3e860011b
SHA512 17f08bfd175ad6274e36fe8de8511dfe93ab2746c1d7f76ce01867dc2b742d8d4ac212a7830becb1d2ced407cddf5b9b9a9a4c1e2a3cde06444f22b8fd102d86
SSDEEP 384:BsNfUjAx2iVqYQX5+DtyOO/Hq89spw7O6R2Feo1h7U4:BBZLkDIOUF9spw7TRUp
TLSH
T13D624C31B8B8AC375EE7A585B44A36139FF5106795892FC0E6ED2F1D01DEAAC130BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 ee0266ac44b63a79c5764835c7292adeef8f35fb06379d4ad429390ec0cfbd6d
MD5 588f3b4424395f66b2d964af629479d4
SHA1 0fc72fcfc3a435594def8dd6a551df9822ccefea
SHA512 8f0d5a16a7222cf39a178f06bb9059730260663383557e129d9497b98e2a42e0e354b50c1ca86b7295724ca5f0d263c4bb5c9d05cc91215fba510137ee02626e
SSDEEP 384:FZcIAsNfUYAx2iOyYQX5+DtyOO/Hq899pw7O6R2Feo1h7URoj:9AyILkDIOUF99pw7TRUMg
TLSH
T114828E71AC78AC375DEAE185B44A36139FF8506796C86FC0D5EC6F1D00DEAA8131BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 ae8c3153ca2c86ed61be056436a15a7546b5122e1f923d83fda1cf01a3f16553
MD5 f647bd5a7ef7c8b5b83aacc4e71defa1
SHA1 073e61ecb3b8b02e9703d2c045b1cbc33e0dde4e
SHA512 9fb9c8d57ae335220196a67a163c24753b2127417d7c8260ad2a816a5e9b127939d68c76bd6a15edfcf715572cd0169d89491531231285b2bf4e15ccbff63857
SSDEEP 192:EONt6nnHMQmiUylLoYcX5hQDP1yOO/HGFfE9jg3//5wU6:EONt6n8MoNX5+DtyOO/Hq89YpwU6
TLSH
T1EA120B31B8A8AC775EE2A595F48732139FA51127E9497FC0D5DC3E1C01DFAAC230AC66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a491ccbc-8122-491e-b94f-a2f908daecd3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\a491ccbc-8122-491e-b94f-a2f908daecd3.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 778288d1d9c45ca215caf2f4c23562871f78b1c68bb78ed1c4da33209a64afdc
MD5 295b863f705931f0b7849f2c0c492a47
SHA1 58bbdce29ae896dbe09a5b9e51c74382e0ad21bd
SHA512 983cbcbbcf0838b4b57b386dbb42321cb9f74e033474746e28e02932ee357f450ff54ef9e221e3afd2f4d3a5d8f6885f45cca0d58af75ceeac249753b78e4b00
TLSH
T19141184CA6FE1108B3B77F5A6BF6A86E487AB9772F06946E00100D4F0A26E40C971733
MD5 SHA1 SHA512 TLSH

Submit Download