3bc0d6997803d0756ad26bab9ff87f1361188f8140c60a82c802c4c13955be58

Analysis

max time kernel
150s
max time network
144s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/09/2026, 06:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
index/index.html
Size 53KB
Sample260930-g243asgd78
SHA256 3bc0d6997803d0756ad26bab9ff87f1361188f8140c60a82c802c4c13955be58
MD5 c16220565c333abd6688c80dc0ea04e0
SHA1 60f42524aa087d3bdbec093a1880448387a22a5c
SHA512 2df119d1bf9a4f7d404ae5fc62184b093c362f79737608955683b9180b12b5be876d64f8891c62f25dae2e7518088ebeb5636226754d6728b9408139a5fffe1d
SSDEEP 768:PSLhfKplbqkWMjk8YAlzwrOIcqPcyJ9xS1cyQrGaMeeBElwcyZ:KLhfKplXWxA1wvcyJ9xS1cyQiaNVacyZ
TLSH
T11233062062641127C937A2A92F970688EE3451877D43DA9CBF9C81491FF3920E6BFDDD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4572	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1404337215-1550464601-2805570857-1000\{4A6A7934-A594-4549-B0FB-EB490961C716}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4564	msedge.exe
4564	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3452 wrote to memory of 3296	3452	msedge.exe	88
PID 3452 wrote to memory of 1692	3452	msedge.exe	90
PID 3452 wrote to memory of 4572	3452	msedge.exe	91
PID 3452 wrote to memory of 1692	3452	msedge.exe	90
PID 3452 wrote to memory of 1692	3452	msedge.exe	90
PID 3452 wrote to memory of 3540	3452	msedge.exe	92
PID 3452 wrote to memory of 3540	3452	msedge.exe	92
PID 3452 wrote to memory of 4128	3452	msedge.exe	94
PID 3452 wrote to memory of 4712	3452	msedge.exe	95
PID 3452 wrote to memory of 4128	3452	msedge.exe	94
PID 3452 wrote to memory of 4128	3452	msedge.exe	94
PID 3452 wrote to memory of 4712	3452	msedge.exe	95
PID 3452 wrote to memory of 4712	3452	msedge.exe	95
PID 3452 wrote to memory of 2756	3452	msedge.exe	96
PID 3452 wrote to memory of 2756	3452	msedge.exe	96
PID 3452 wrote to memory of 2756	3452	msedge.exe	96
PID 3452 wrote to memory of 1420	3452	msedge.exe	97
PID 3452 wrote to memory of 1420	3452	msedge.exe	97
PID 3452 wrote to memory of 1420	3452	msedge.exe	97
PID 3452 wrote to memory of 2332	3452	msedge.exe	99
PID 3452 wrote to memory of 2332	3452	msedge.exe	99
PID 3452 wrote to memory of 1708	3452	msedge.exe	100
PID 3452 wrote to memory of 1708	3452	msedge.exe	100
PID 3452 wrote to memory of 2452	3452	msedge.exe	102
PID 3452 wrote to memory of 3672	3452	msedge.exe	106
PID 3452 wrote to memory of 4708	3452	msedge.exe	107
PID 3452 wrote to memory of 1296	3452	msedge.exe	108
PID 3452 wrote to memory of 5784	3452	msedge.exe	109
PID 3452 wrote to memory of 5784	3452	msedge.exe	109
PID 3452 wrote to memory of 4564	3452	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\index\index.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x284,0x7ffd9fc5c188,0x7ffd9fc5c194,0x7ffd9fc5c1a0
  2⤵
  PID:3296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1544,i,1467100464316597295,8345889348646037735,262144 --field-trial-handle=2308,i,14606187115416813819,14103960646295257758,262144 --variations-seed-version --mojo-platform-channel-handle=2304 /prefetch:2
  2⤵
  PID:1692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1892,i,8228533680444342724,12470210669423662040,524288 --field-trial-handle=2308,i,14606187115416813819,14103960646295257758,262144 --variations-seed-version --mojo-platform-channel-handle=3000 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2364,i,9252414023891990625,6826403053083722188,524288 --field-trial-handle=2308,i,14606187115416813819,14103960646295257758,262144 --variations-seed-version --mojo-platform-channel-handle=3008 /prefetch:13
  2⤵
  PID:3540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3556,i,70297173337680734,16850194969722788728,2097152 --field-trial-handle=2308,i,14606187115416813819,14103960646295257758,262144 --variations-seed-version --mojo-platform-channel-handle=3624 /prefetch:1
  2⤵
  PID:4128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3560,i,8132169077162639955,7572995974229428822,2097152 --field-trial-handle=2308,i,14606187115416813819,14103960646295257758,262144 --variations-seed-version --mojo-platform-channel-handle=3628 /prefetch:1
  2⤵
  PID:4712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4308,i,15131913408988601829,4157373178932080441,2097152 --field-trial-handle=2308,i,14606187115416813819,14103960646295257758,262144 --variations-seed-version --mojo-platform-channel-handle=4292 /prefetch:1
  2⤵
  PID:2756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4360,i,14800449791560188441,1767651024301547820,2097152 --field-trial-handle=2308,i,14606187115416813819,14103960646295257758,262144 --variations-seed-version --mojo-platform-channel-handle=4364 /prefetch:9
  2⤵
  PID:1420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5340,i,6355609022932827551,7984194402793100413,524288 --field-trial-handle=2308,i,14606187115416813819,14103960646295257758,262144 --variations-seed-version --mojo-platform-channel-handle=5424 /prefetch:14
  2⤵
  PID:2332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5352,i,13004807000661885649,15188814961817896044,524288 --field-trial-handle=2308,i,14606187115416813819,14103960646295257758,262144 --variations-seed-version --mojo-platform-channel-handle=5444 /prefetch:14
  2⤵
  PID:1708
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6388,i,6090761926688774437,14226548337974990635,524288 --field-trial-handle=2308,i,14606187115416813819,14103960646295257758,262144 --variations-seed-version --mojo-platform-channel-handle=6400 /prefetch:14
  2⤵
  PID:544
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6388,i,6090761926688774437,14226548337974990635,524288 --field-trial-handle=2308,i,14606187115416813819,14103960646295257758,262144 --variations-seed-version --mojo-platform-channel-handle=6400 /prefetch:14
  2⤵
  PID:2452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5028,i,1535018707842429013,8840783931926136818,524288 --field-trial-handle=2308,i,14606187115416813819,14103960646295257758,262144 --variations-seed-version --mojo-platform-channel-handle=4380 /prefetch:14
  2⤵
  PID:3672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6320,i,3317491905784832132,17746654831089072857,524288 --field-trial-handle=2308,i,14606187115416813819,14103960646295257758,262144 --variations-seed-version --mojo-platform-channel-handle=6720 /prefetch:14
  2⤵
  PID:4708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6340,i,7184461905883180797,13804823979893589365,524288 --field-trial-handle=2308,i,14606187115416813819,14103960646295257758,262144 --variations-seed-version --mojo-platform-channel-handle=6692 /prefetch:14
  2⤵
  PID:1296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2588,i,10721186015218886780,12851492627350973987,524288 --field-trial-handle=2308,i,14606187115416813819,14103960646295257758,262144 --variations-seed-version --mojo-platform-channel-handle=6060 /prefetch:14
  2⤵
  PID:5784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5856,i,4232803313195223197,2084303296855797460,262144 --field-trial-handle=2308,i,14606187115416813819,14103960646295257758,262144 --variations-seed-version --mojo-platform-channel-handle=6672 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4564

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3224

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4396

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 932f01682de6215b2c3b5faeb96a07b886e28db2ff6f8242a36da556c4292464
MD5 667b54168424526a7188593696f59ace
SHA1 deeb9f5ad1bccaabad57a386f08ba0c0740b2f81
SHA512 698f5a88d262c546b9bf21ead67e8dbe00ce6bd13f196761a5910f59ff69ca7532cacdf03c070f8d3b9f5d4fb8990b358e9b60ace9e48a0848e4a9da1d92b3ed
TLSH
T1D4D02B79F95ECD23E85204F540D1420832A77581DC04418125018C080A603850001182
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a0b193400a27c0cdf94ac11f5fb5b0747828b5b461169cefeffb96191b9e4834
MD5 edaab58c014c1abbfa900853b2ab2696
SHA1 e35eb02c0343d109af1ddd7dbd39dee3b989aea3
SHA512 b3cca7ed39fd4708b9c01cbefd67aab972f585372e01b5fa39d4a0840a7f579725d1202ab2916cda4e7635fb16dbc74178888461c7b6a2b3ea91d273ce2909ea
TLSH
T1BBD02B75F96ECC23E85204F940D24208329775818C0441812601CC080A603850000182
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 a4f29c3255446fb5cb7680c0c7d717c0aecb2248e94fb1bf46577946b89c5e0a
MD5 768feb52d6f248b8b6818c3c42bb5346
SHA1 1fbe80bc0b8fd6a86095f583ba298a5e590ea26c
SHA512 90daa596f0998f7a275ce722e7d1ae7a7316b308d3f3d4c1406976cdb782b092573012a16c54699c045c5e6832e1cb570844f242476d16ae3829cebdd68389b5
TLSH
T16D517FC35508C13ECF78567AAAEBA8873537457852433E3208D6F8FF674AB68D18B054
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a0967.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5a0967.TMP
Size 3KB
SHA256 28f9f80622fb29ba6855599d85e4ff1b5d243b23851f6eedb21c524a90cea0f8
MD5 b228d2495ddc39f305378a6b76b319f0
SHA1 0ba457caab75d43d3fd12296f0c1582dfebfa31d
SHA512 32f06fcc6be70b78843b46843343ba767a284321d5d7c6f09dd777b2d7f425279285942aed9af5e65037e37a0393d51cb1478d3e0da97cdca4d4ea607426b6a2
TLSH
T19C5170C35508C13DCF78567AAAEBA8873533417951433E3204D6F8FF674AB68D18B054
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 991812bc4bc4ab0712e19c154fdaafa45c27db2da32a2d35178514f76d9e6176
MD5 56d1787762229b17fd0d15fcc96295db
SHA1 c96606998c3557f7963106fd45582dff29d4b014
SHA512 35528e508cc36560a1d301434ee146a70c27b7397d39c50e9b7f7d085519c70807180e0c72d2f42129cf79b97f1c19f9e1b9e46e7674f2e09f9e57dd8ed47f1a
TLSH
T1725192F7C3E8867D890156F4AB146E1BCE2D0955432C3C56C9E4AF2FA3E28B1E14199F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 3169cf51a48a0b20c7615eb0571a15bf65a2e9851931e9d51a24cdf3f521fde3
MD5 ec7c6fafc7dd85be58c0a2483f612f2f
SHA1 6024690c0f0943880559fca9042ed6678e103d00
SHA512 d9bd45a890c1bb5ea16b2b8c047ca30a0b33d420f9358a7cc1f4aca636678e0b5a175a85ce8faa70ded015f91fb3e718ba9f796c19c2b2d09f4bc4c163acc130
SSDEEP 192:sxR1Rcbu/ffs88HRemzoA8p4n/g6+WNIYEHsG+IgDNJ:sxR14u/ffsLyW/5IST
TLSH
T1F332B715A968A97B8CCBD21DBA65BF53D7F9103261D11E48F6FC861C04E76DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 74b7926d2f090aad960062669818bdc514b71133721f8ef6564fb90e207d36ff
MD5 ae3462112e2a0d3be70c98d20f154977
SHA1 c062cd5c442619c11098d3b4194b1b4855600f14
SHA512 cc147bfffe9660bc02fdb04030d3d3914c95781ebf6ddc18f1d936e97069f8c65e0c4ca60342e12bf6f3614fabe430a473c3469accd569aca21fdd6089cc1f73
SSDEEP 192:sxR6Rcbu/ffs38HRemzoA8p4n/g6+WNIYEIsG+IgQJ:sxR64u/ffssyW/5I/0
TLSH
T1B232B615A968A97B8CCBD21DBB65BF53D7F91032A1D11E48FAFC861C04E76DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 7ab897344c00e9b5ca0adb29e040eacc0e265a310e85f444296dc83ea468a141
MD5 d8383cbc78174da9ae1da3d256c24821
SHA1 be5b54ced9f69464d319ae44a16a1f04801c2975
SHA512 159b97f504a0eea1f106e559e8074bdbb0f3b80461bbdd2e1858315aa692ccb1135cd113ac5644fb13fb85c7f12a3296ee80d8435fd3f253967fd8e93e291a86
SSDEEP 192:sxR1Rcbu/ffs8UHRemzoA8p4n/g6+WNIYEzsG+IgDjJ:sxR14u/ffsnyW/5IOR
TLSH
T11442C819A968AD7B8CCBD21DBB65BF53E7F9103260911E48B6FC861C04E76DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 697564c4c5e09080d47166bb3a9f35f4a41666c10f31653719ade07f3f14f0f5
MD5 229aac45534c4135e6a629bd78a15e14
SHA1 1df32bc25be1116d72baf4a0d26f28a279f7159a
SHA512 ac5e2432c0f5670f9a6af6d86917beb2f4ee6051ede2b1633bca8178d8d0410b85067ccb5b35d050edbf425e1419d713d9555370f01253d21dee11147c406fd4
SSDEEP 384:USupCD0fCtg82FfrLKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVQc9hnRX8roJev:U/pCDmWg8KfrL8F1+UoAYDCx9Tuqh0VX
TLSH
T131B2D92B640CCB7F4FC04A9EAC196FD77D9802C79A588D4047FE995C02C77EA911A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

ce3c0a2a-86f8-4a10-941d-004107be4a79.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\ce3c0a2a-86f8-4a10-941d-004107be4a79.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 647b0e6886a439859bc994de44911758f920e2cb254ec3302995484df33001fb
MD5 384283c3d2def36992d62202b21a2e15
SHA1 7419fe490349d0796153b7cea00610e565061136
SHA512 6602f77d853414cfb702dc85e12e29774e2c65d0c502e15858431ea4bde7f3c08923bb331668244e16f0c0a8c50616617c6a7e5c18689c0807dbc1637f23ac38
SSDEEP 768:CXs3UnBmMc7fZrK3e0p5XSwQs88uBkiT254YGHD1:CXs3EB+trkeaILNBc4YUD1
TLSH
T131F2BF39EC949CB39CF69386765727066FF09143D4C80A9485EDB61E028B76E2707CAB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 92391f7af6dbe1797ff25ca48f34827f9ca9209692c7d7d3b871b109c35ef7a0
MD5 5a578b72230d895fb5411825b5f4cb85
SHA1 9a4ca44ecbc0d9b37208190327bebd202eebd196
SHA512 1861ae73e834eccd3125bd72f69b0d77966e4878d1b53b58631d8d0416646edb62cc978f3c05e134420a1385938c4ab440185a246e19f570352732db8b3c67f6
SSDEEP 768:9/UxvxjgC+4s3kn/8Mc7fZrK3emp5XSwQs88uBkiT25EBm:gZj3+4s3U/ItrkeYILNBcEBm
TLSH
T18F03C039EC949C635CF2A385375A2747AFF06543D4C40AA84AEDA90E03CB36D674BC97
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 f89e8c5ee2ed417b8394bca5fa3b9465eba8cedf95e022a823f3d079c1bea6e1
MD5 33bb78fe017b69fc28973412a7c99f94
SHA1 ac5931e9e0b2fdfcc4fa740970ce0403865dd973
SHA512 55e158d3eac53ec60c74c5c1a84c160caa7d401c0c01b478a60118e6e923b5a06a0abe68e04494a9f34ed4586cbfae89da2d09c5ba4383d4e067d97959f78443
SSDEEP 768:3FHps3/wgtnBmMc7fZrK3etGp5XSwQs88uBkiT254YGHD1:Zps3vB+trket4ILNBc4YUD1
TLSH
T1FAF2BF3ADCD4C9B7ACF697C6BA5637026FF09143C4C80AD4D6DDA91E02872AD2707C96
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 1dcf211815d0e662fbe64f3eb4c6786cd014d44695f93def0f05544be5cee5dd
MD5 d22ea461f0d07384dc1fdb08b596cce6
SHA1 9327ad57c2c0a21ec835989639809f4f17c6416f
SHA512 1eb4cc702b65273e950dcf0ff8a2ecf3b7703586aeec08cdc052be1e19ceee0410cf662bf74fed655168db3a9f23906153ff1ecdca8fd3a03d4319a95827be30
SSDEEP 768:wXs3NnBmMc7fZrK3e0p5XSwQs88uBkiT254YGHD1:wXs3NB+trkeaILNBc4YUD1
TLSH
T142F2BF39EC949CB39CF69386765737066FF09143D4C80A9485EDB61E028B76E2707CAB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 d81e75c20bb4eadf9aa14173530985a5b79eb2286c169b8e1a96acebaeb9ead7
MD5 d066e269e61ba67879aede6a431d3038
SHA1 30e4e93292dde2eb3cc04a792cd9ec7d3e1a7d95
SHA512 65fe2de24d3d3877f792f438892d66dc651390e82f904b10cfce3e613f11269d26c388206e2113538b702ddcb9b4b8ded82ddc1b00bb84c208cb7e4faa695c63
SSDEEP 768:R/UxvxjgC+W31DGc7fZrK3Ap5XSwQs88uBkiTCv/P84g:kZj3+W31JtrkeILNBWHg
TLSH
T1C603C039E8945C63ACF39385365B275BAFF06153C4C40BA849EE7A0E028B36D6747C97
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 5af98800c44c26400382d11fb8ac9d159b9bdecbe532acaa73f50c4bd9c26b22
MD5 9ff9bbb2b8901c166801eec5dca573dc
SHA1 b7a400f41b49221fdbfa7437292b9cc30a04bc4d
SHA512 decde5b75f755ef021c6b2d4749001c3d107fed13d93e82d7979b8f0c38fd53768ea95372fcff4b2e28e6a6e343172410867573a4d48c783ff1ddf43f428b4cb
SSDEEP 768:F/UxvxjgC+4s3Tn/8Mc7fZrK3emp5XSwQs88uBkiT25EBm:oZj3+4s3r/ItrkeYILNBcEBm
TLSH
T1C403C039EC945C639CF2A385375A2707AFF05553D4C40AA84AEDA90E03CB36D674BC97
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

aa5575ba-fa3e-4de3-84a6-7ac75959a91f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\aa5575ba-fa3e-4de3-84a6-7ac75959a91f.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download