576f2f1ff323f9504b4508bd4240da989ef085ef9fd097dddd9b833a8f00ba22

Analysis

max time kernel
148s
max time network
137s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/09/2026, 12:03

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
l.html
Size 1KB
Sample260930-n8b4ess16p
SHA256 576f2f1ff323f9504b4508bd4240da989ef085ef9fd097dddd9b833a8f00ba22
MD5 3b7c34d5163387b102db59a4efab9104
SHA1 4839430b07ba1e795f822ded2b02dfdf3ecb3ded
SHA512 fcbf8d0d1b272bf877a4687bae2696e846eb9dec1d67727480492d0cb6b039606bee7fb081c723b481607b816884fba91241239ad82645488c1bd0f5520435e2
TLSH
T13231741E6214202DA53324B4FE33635AD2594D0313075EE03C4E1C71EFC1965CDA92E8
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5528	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-4280978039-528710165-233981602-1000\{23E56CA6-F9EB-4553-AEB8-E14ABCD5EB8C}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
6028	msedge.exe
6028	msedge.exe

Suspicious behavior: LoadsDriver 1 IoCs

pid
4

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2152 wrote to memory of 4400	2152	msedge.exe	89
PID 2152 wrote to memory of 5528	2152	msedge.exe	90
PID 2152 wrote to memory of 1820	2152	msedge.exe	91
PID 2152 wrote to memory of 4420	2152	msedge.exe	92
PID 2152 wrote to memory of 1820	2152	msedge.exe	91
PID 2152 wrote to memory of 4420	2152	msedge.exe	92
PID 2152 wrote to memory of 4420	2152	msedge.exe	92
PID 2152 wrote to memory of 1336	2152	msedge.exe	94
PID 2152 wrote to memory of 1336	2152	msedge.exe	94
PID 2152 wrote to memory of 1336	2152	msedge.exe	94
PID 2152 wrote to memory of 6044	2152	msedge.exe	95
PID 2152 wrote to memory of 6044	2152	msedge.exe	95
PID 2152 wrote to memory of 6044	2152	msedge.exe	95
PID 2152 wrote to memory of 352	2152	msedge.exe	96
PID 2152 wrote to memory of 352	2152	msedge.exe	96
PID 2152 wrote to memory of 352	2152	msedge.exe	96
PID 2152 wrote to memory of 292	2152	msedge.exe	97
PID 2152 wrote to memory of 292	2152	msedge.exe	97
PID 2152 wrote to memory of 292	2152	msedge.exe	97
PID 2152 wrote to memory of 5364	2152	msedge.exe	99
PID 2152 wrote to memory of 576	2152	msedge.exe	100
PID 2152 wrote to memory of 5364	2152	msedge.exe	99
PID 2152 wrote to memory of 576	2152	msedge.exe	100
PID 2152 wrote to memory of 5440	2152	msedge.exe	102
PID 2152 wrote to memory of 4768	2152	msedge.exe	106
PID 2152 wrote to memory of 4632	2152	msedge.exe	107
PID 2152 wrote to memory of 4264	2152	msedge.exe	108
PID 2152 wrote to memory of 2504	2152	msedge.exe	109
PID 2152 wrote to memory of 2504	2152	msedge.exe	109
PID 2152 wrote to memory of 6028	2152	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\l.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2ac,0x7ffd18d8c188,0x7ffd18d8c194,0x7ffd18d8c1a0
  2⤵
  PID:4400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1752,i,10970599724790117200,14807060198730467574,524288 --field-trial-handle=2468,i,4010091783173819220,14956019552852111900,262144 --variations-seed-version --mojo-platform-channel-handle=2512 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2204,i,3870761728310726535,2528790262813019333,524288 --field-trial-handle=2468,i,4010091783173819220,14956019552852111900,262144 --variations-seed-version --mojo-platform-channel-handle=2616 /prefetch:13
  2⤵
  PID:1820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1584,i,8404840512408026260,14459396909190045190,262144 --field-trial-handle=2468,i,4010091783173819220,14956019552852111900,262144 --variations-seed-version --mojo-platform-channel-handle=2464 /prefetch:2
  2⤵
  PID:4420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3596,i,11088481993879126763,6576408458559649268,2097152 --field-trial-handle=2468,i,4010091783173819220,14956019552852111900,262144 --variations-seed-version --mojo-platform-channel-handle=3616 /prefetch:1
  2⤵
  PID:1336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3588,i,17528191741441599744,12573487424583236709,2097152 --field-trial-handle=2468,i,4010091783173819220,14956019552852111900,262144 --variations-seed-version --mojo-platform-channel-handle=3600 /prefetch:1
  2⤵
  PID:6044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4392,i,11975525686082016401,9138687526083052040,2097152 --field-trial-handle=2468,i,4010091783173819220,14956019552852111900,262144 --variations-seed-version --mojo-platform-channel-handle=4640 /prefetch:1
  2⤵
  PID:352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4404,i,1199110012608119311,7849820123469465362,2097152 --field-trial-handle=2468,i,4010091783173819220,14956019552852111900,262144 --variations-seed-version --mojo-platform-channel-handle=4720 /prefetch:9
  2⤵
  PID:292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5368,i,8462633379803975909,4136547994755825261,524288 --field-trial-handle=2468,i,4010091783173819220,14956019552852111900,262144 --variations-seed-version --mojo-platform-channel-handle=5400 /prefetch:14
  2⤵
  PID:5364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5376,i,5576911051425718339,3626697114738495346,524288 --field-trial-handle=2468,i,4010091783173819220,14956019552852111900,262144 --variations-seed-version --mojo-platform-channel-handle=5448 /prefetch:14
  2⤵
  PID:576
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6036,i,4051094122315159383,11142535060276460020,524288 --field-trial-handle=2468,i,4010091783173819220,14956019552852111900,262144 --variations-seed-version --mojo-platform-channel-handle=6028 /prefetch:14
  2⤵
  PID:4284
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6036,i,4051094122315159383,11142535060276460020,524288 --field-trial-handle=2468,i,4010091783173819220,14956019552852111900,262144 --variations-seed-version --mojo-platform-channel-handle=6028 /prefetch:14
  2⤵
  PID:5440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4396,i,13525458025271599708,9302242334493653017,524288 --field-trial-handle=2468,i,4010091783173819220,14956019552852111900,262144 --variations-seed-version --mojo-platform-channel-handle=4716 /prefetch:14
  2⤵
  PID:4768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5148,i,3982259975738796858,14250428253883014992,524288 --field-trial-handle=2468,i,4010091783173819220,14956019552852111900,262144 --variations-seed-version --mojo-platform-channel-handle=6052 /prefetch:14
  2⤵
  PID:4632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5156,i,1786966601301643448,17759241898759617109,524288 --field-trial-handle=2468,i,4010091783173819220,14956019552852111900,262144 --variations-seed-version --mojo-platform-channel-handle=4720 /prefetch:14
  2⤵
  PID:4264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5696,i,10108062094703489593,12917711894444291933,524288 --field-trial-handle=2468,i,4010091783173819220,14956019552852111900,262144 --variations-seed-version --mojo-platform-channel-handle=5492 /prefetch:14
  2⤵
  PID:2504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5356,i,1125813175003896297,10321203797096228856,262144 --field-trial-handle=2468,i,4010091783173819220,14956019552852111900,262144 --variations-seed-version --mojo-platform-channel-handle=6524 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:6028

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3664

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3884

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 08b551008bdcc4de6c80e8d8ffe37c1b7477ababb9604ca97c52b81aed70fdae
MD5 4cd8e5e902146ba19eacbbf4f2e5586c
SHA1 94f807b68c16fd008173350beb37c8686810bcbd
SHA512 6381a86b9ddf9099cf403e36e8c774a996a2a9e547c95e0b2070ef6e2e5e94028cf8284c9fb284f5f80b523066ed68d34895e768192628c20598a4e881c034ca
TLSH
T1D5D02BF4B7DCD543C084507400F11574113571306918C2F02311E18805042810512329
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ec6a4f25194d7df920f023b94035789770d82b866f099f5b5c173cc54b917115
MD5 3f1c1794ec8ced524804973bbce2d4ac
SHA1 6590c89953e8a722e5a484b9a6cf54a706728368
SHA512 4d64e702748a9bdaaf0d9e615e1a53c00d60b36678bc7c8cbf081669c63c3b8c23886cf0b3633e50e54853f273a2e585b73bb1a35f53ef1493bf40ac357ee359
TLSH
T1F1D02BF0B7ECD443C084507800F21574112571301518C2F02311E18805042810511315
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 1fa9b0a2f6895495756f13060b7d76328d903e71727e17f49635f529337ab631
MD5 50cd4ec81752af44a88b3b050425a274
SHA1 1408aa56ef24222f5943474e5e1f5f6127ca9b11
SHA512 9ce9a000ffe629623c5141143a3d3e01857851bc4e6fc62a5c95099421883e9aaf9799625ad663a8328a48006b85e87ae54515fa50cbc262deda0317812977f6
TLSH
T17D613B85139F9098FFAC12F4C2F312D77638B9B6D5B7BED107A0D3A4680A3270244388
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5959af.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5959af.TMP
Size 3KB
SHA256 6878562c902ef44792613cc67766126b43f097ddcaa87b6c1cf4775aefa20bf8
MD5 a04fc5ad8b2e63b1b4f1d32afe3e1fd6
SHA1 6968157ed1ed35f1cee2a311b6fd72576ee00d6b
SHA512 47e631c1c62df7a5605cb4ee23947c5c481b875e6606461ee2525eb55f25f1b709a21eb5d687091a271d4e592a7ecac4ff41ecd11e145f0a50abf5a52d3cedc7
TLSH
T1FA612B85039F9098FFAC12F1D2F312D77638B9B6D5B7BED207A0D7A468063270184388
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 2da885733712c999c0f9933d3e9f47308c61995c9f7deb2fa2c7dee6f4f25200
MD5 adee5ae7342f832e0f5fe4ca9ec5894e
SHA1 ca0fc765cd22db15aa2a862c4df32f4516e9c9b4
SHA512 1276ce8613fa4186e55815dd8e7f66419c452694db51d85c10eb33855977a1cf42531cdce142a54e705e5045a272025d4b11cb8e84f8cdf5024f720fbb45f1d1
TLSH
T1D3418DF7C3E4966E890156F0AA186E1BCE1D0915932C3C5AC9D4EF1B93E34B1E14195F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 3988b58a81bf718fc38ed3217171e62cec2993d44e458f4c60716d5b1b9a8ee0
MD5 503e3232e1b0459c2f6212c4a9a0d6d4
SHA1 33897d59ec780f2ca5922e6699b21626bc06d884
SHA512 741cdfb1c1bcb16a204ab6ce6ec11eb2db608d0f6fd45c8a7af8ae9e46c844086dc6cc6e4ced75e07f7e297ffa8d3aaef6076bd2d100ace6ebf8572c0354b526
SSDEEP 192:sxRLRzbi/fIsAqmqzoA8p4u/g6+WNIYRLp3jCGlwIgDYJ:sxRLVi/fIsAHP/5Iw0A
TLSH
T11A32E855AD68A97B8CCBE20DFB56BF53E6F9503360D51E08A6FC861C00E76DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 cb4e8e48cdacbed3d527398ce4e3cd3b7b1ae66d029f409b15961cf8a6bafa49
MD5 df3d81f121e1ac2bc92926478ff9a857
SHA1 0db33a56c33bf88ee564fc22b338ae3502cde993
SHA512 090ac5ea8daf3822553cf4adbf16240657fe9a0c27115e215c69f130f15026378bef543e15431bd2d5742b8b73aad9532adad0f58c9f0d560778c9235481cd26
SSDEEP 192:sxRLRzbi/fIsNqmqzoA8p4u/g6+WNIYRLf3jCGlwIgDiJ:sxRLVi/fIsNHP/5IE0S
TLSH
T1D832D715AD68A97B8CCBE21DFB66BF53D6F9503260D51E08A6FC861C04E76DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 eecf2f2295fc153ca234d9c7cf950d74be34c5aa58ebb0b9803f98ae44fbe3c5
MD5 8ad2773b6b06529ec5e821128b65bc09
SHA1 a54a8884ef71004e09fe6b9c460bd4d7c68de910
SHA512 5bd199fcad197245545af23d7e14dfa92bf05a92a7d02e46d39a33e4a5e30ef6b86c958068f2ef7b4e42033a50a44440252fefdede931e167a11c0afd2a102d5
SSDEEP 192:sxRARzbi/fIsSqmqzoA8p4u/g6+WNIYRLf3jCGlwIgIJ:sxRAVi/fIsSHP/5IE0s
TLSH
T10932B715AD68A97B8CCBE21DFB66BF53D6F9503260D51E08E6FC861C04E76DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 c9fa5574ac2f077beef52c2e0b402fb8aabcdedef0270e5f9f3df4562fa467c4
MD5 24d5ccbee108c9dbf2a1a0c2eb398f50
SHA1 eedd16c6abe7c1ffabbd797b9b37500e6ad76acd
SHA512 9c6c9de4a176cf593b146d57a6de33100772a0ffc4e92a100ba99de7fd1365d695106d757a5982af410249ece536a3e05185cb022967133ef5539dff93d35a14
SSDEEP 384:Ua5g+TcfCtgflFfXHKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVwE9tTRk3roqYC:UEg+TuWgf/fXH8F1+UoAYDCx9Tuqh0VT
TLSH
T152B2EB2F644CCB7E5FC10AAD9C1AAFD76D9802C797548E4047FE994C02C77FA921A4CA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 3e57221c54877c52c52798c01ca57f93527927566b520eb53733dc3e260da7c5
MD5 6ed41d29cb845ca7438ad1f055f40937
SHA1 c12931af8b5abd9d0455977ee2657cbacb4a8787
SHA512 2b9034ea2745e74cdb3d2780ca4ee93e37009a53eeaaa1425c9db5b71c310afef88fa38fadec100069a7bee9639cbbabe0ea5cff8a497f69b1829db7373849da
SSDEEP 48:KkaIfK/6UPykav2qQ0ggUcdzIhygKq1yogmCwzNITQI7K1y8bym:KkaYK/6WeFyKO4hQQK1yKV
TLSH
T1AC910431717553D0387F265D84D5B62F8A8232937029EA2B7BFA44A64E27E044EBD8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 024341f73f35e5f8aa605f575e66478ba7f5348af0befaa4df203f10ac72d1c7
MD5 cfdf59a60e5c2536269fee35bbb83715
SHA1 62f4bc54528a7918b10a2b5a4ddf21efa81bee45
SHA512 b2035f4bae3228e3ced16d59dfae0e7a872085d0460bbc2aed2d7fe0716924be818c621a1c5bb45329cee3b275da2c406aeb62a16295c9a4a989fe5ad9a48536
SSDEEP 768:cW3+T2gwOCqwYnY5fgGM1TnXMqOaI2sVRu:cW3CopY2fgt1TnxOv2svu
TLSH
T1A7F2B032ADA589B35CF3D381F206E6412EF18567D5C92A98D8ED7A1E01976AE030FC13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 f28595d11d9d05cb100c9a596de1f01538e5d7ed0832ff4717a75380f2478983
MD5 11d464eddfda77a5700cc0b67cb8fd61
SHA1 08e6925fb5eb1852dd2cfd0496ffea633eeaf7c9
SHA512 852b33750fa9b1c64f4574b662bd9b818cadc50baa915bbaeade317121a310a5945ec54b7e684cbb721d2b8ecc32815f85f25439a1eb5ed8b52ff34dda36163a
SSDEEP 768:/W3tT8gwOCqwYnk5fgGM1TnXMqOaI2sVRu:/W3xSpYKfgt1TnxOv2svu
TLSH
T1D1F2BF32ADA549B35CF3D381F206E6422EF18567D5C92A98D8ED7A1E01976AE030FC13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 a4f02996ef4ce69c2352ef60c954c1c2ce29dbbb8e11f6bada6ebe65b3676329
MD5 e7f701c3715299e27ad1d7770137c2fa
SHA1 932402d3d24457ce9b81cdfcf7d7bdf8349676c9
SHA512 1f1e512209d7e435f968d11963ba6272ee488090aa7ec18ba6b5694467131ac6f4bd9afbb27847b7ee084241d9184a8360b6483db86db42174545f9cc3b3792b
SSDEEP 768:2FQg3nwgVT8gwOCqwYn5fgGM1TnXMqOaI2sVRu:9g3XSpofgt1TnxOv2svu
TLSH
T141F2BF739D9489B7ACF7D780F20AB6416EF181A7C5C96AA8E5DD790D00975AE030FC13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 b6723f152a36c1da9da0e562bd178ddf63a9744f5bf5c1112b2ee6682c7dcc0c
MD5 a5b7dfbbc601c776b9c7eaa0a69c0b5d
SHA1 98886f34808fda2cd49e199efe5c178d4bc4c44d
SHA512 02ed323819b4a0913afdb35354f448d4d06b23fb016ca59a63cf490715fef243399d608232e8802e371a025887e286a9db2404d60acff185322c9a924c031a13
SSDEEP 768:5/UxvxjgC+93IBwOCqMu5fgGM1TnXMqOebAaP8:sZj3+93PVcfgt1TnxO8AG8
TLSH
T15A03C036AC9568779CF3D384B30AA296AEF184A395C51EA889EC3E0E019735D530BC53
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

069ad59e-33a1-4638-8f02-7e61783ae19a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\069ad59e-33a1-4638-8f02-7e61783ae19a.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download