457da4c99551b3479f9c1b99e623a9a11e2c923207fb42f24b6f2613ab8559ff

Analysis

max time kernel
149s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
25/09/2026, 18:28

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
inep.html
Size 11KB
Sample260925-w4babstdlc
SHA256 457da4c99551b3479f9c1b99e623a9a11e2c923207fb42f24b6f2613ab8559ff
MD5 e1b45b2b5f1d017c0107814686b782bf
SHA1 6974b4abf98ab62772a4b0ece688be84beb50635
SHA512 71319328bf832739d1af6bec9e4798914072cf7f574eca649d2a1bf14752387691d3f73070782ec154e2b65e34ab46be8892f2ad9e53be2fdc36f9f3e8825af2
SSDEEP 192:N72q6mE94jTZLox1JJx4pGUSR2zu70emiSZBKizLiTiT4BdlhwTXiN:NypR0emimKi3iTiT40TXk
TLSH
T18832C7627688143D62B3C2A931B5AB48FF36C117EF41056A34AD26970FFBE414977BC8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery

Malware Config

Signatures

Looks up external IP address via web service 1 TTPs 3 IoCs

Uses a legitimate IP lookup service to find the infected system's external IP.

discovery

Internet Connection Discovery

T1016.001

flow	ioc
49	api.ipify.org
50	api.ipify.org
53	api.ipify.org

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
6080	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2091445952-3649787497-104050984-1000\{17D564C8-E15A-40A2-A045-8C8A446EB578}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5144	msedge.exe
5144	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe

Suspicious use of WriteProcessMemory 24 IoCs

description	pid	Process	procid_target
PID 4904 wrote to memory of 5372	4904	msedge.exe	84
PID 4904 wrote to memory of 6080	4904	msedge.exe	86
PID 4904 wrote to memory of 3448	4904	msedge.exe	87
PID 4904 wrote to memory of 3448	4904	msedge.exe	87
PID 4904 wrote to memory of 3448	4904	msedge.exe	87
PID 4904 wrote to memory of 3536	4904	msedge.exe	88
PID 4904 wrote to memory of 3536	4904	msedge.exe	88
PID 4904 wrote to memory of 4440	4904	msedge.exe	89
PID 4904 wrote to memory of 1800	4904	msedge.exe	90
PID 4904 wrote to memory of 4440	4904	msedge.exe	89
PID 4904 wrote to memory of 4440	4904	msedge.exe	89
PID 4904 wrote to memory of 1800	4904	msedge.exe	90
PID 4904 wrote to memory of 1800	4904	msedge.exe	90
PID 4904 wrote to memory of 1288	4904	msedge.exe	93
PID 4904 wrote to memory of 1288	4904	msedge.exe	93
PID 4904 wrote to memory of 1548	4904	msedge.exe	94
PID 4904 wrote to memory of 1548	4904	msedge.exe	94
PID 4904 wrote to memory of 3724	4904	msedge.exe	96
PID 4904 wrote to memory of 5940	4904	msedge.exe	112
PID 4904 wrote to memory of 3752	4904	msedge.exe	113
PID 4904 wrote to memory of 6056	4904	msedge.exe	114
PID 4904 wrote to memory of 1128	4904	msedge.exe	124
PID 4904 wrote to memory of 1128	4904	msedge.exe	124
PID 4904 wrote to memory of 5144	4904	msedge.exe	126

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\inep.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x24c,0x7ffa453cc188,0x7ffa453cc194,0x7ffa453cc1a0
  2⤵
  PID:5372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1836,i,15886006753530610818,13777066648986965153,524288 --field-trial-handle=2304,i,13943818892150340366,15706519586983211136,262144 --variations-seed-version --mojo-platform-channel-handle=2332 /prefetch:3
  2⤵
  - System Time Discovery
  PID:6080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1692,i,6010661385736456303,16318758745061475023,262144 --field-trial-handle=2304,i,13943818892150340366,15706519586983211136,262144 --variations-seed-version --mojo-platform-channel-handle=2300 /prefetch:2
  2⤵
  PID:3448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2632,i,8785478395931973037,11910945906067383269,524288 --field-trial-handle=2304,i,13943818892150340366,15706519586983211136,262144 --variations-seed-version --mojo-platform-channel-handle=2768 /prefetch:8
  2⤵
  PID:3536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3480,i,1402407782390053399,15120593169811136428,2097152 --field-trial-handle=2304,i,13943818892150340366,15706519586983211136,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:4440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3484,i,12564996067005112209,3793004813164287050,2097152 --field-trial-handle=2304,i,13943818892150340366,15706519586983211136,262144 --variations-seed-version --mojo-platform-channel-handle=3544 /prefetch:1
  2⤵
  PID:1800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5000,i,13458106647565715551,3713729015856341651,524288 --field-trial-handle=2304,i,13943818892150340366,15706519586983211136,262144 --variations-seed-version --mojo-platform-channel-handle=5068 /prefetch:8
  2⤵
  PID:1288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5004,i,18105501228392544917,2944870195796315304,524288 --field-trial-handle=2304,i,13943818892150340366,15706519586983211136,262144 --variations-seed-version --mojo-platform-channel-handle=5024 /prefetch:8
  2⤵
  PID:1548
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5516,i,204965371519010837,12850710995537583866,524288 --field-trial-handle=2304,i,13943818892150340366,15706519586983211136,262144 --variations-seed-version --mojo-platform-channel-handle=5616 /prefetch:8
  2⤵
  PID:5048
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5516,i,204965371519010837,12850710995537583866,524288 --field-trial-handle=2304,i,13943818892150340366,15706519586983211136,262144 --variations-seed-version --mojo-platform-channel-handle=5616 /prefetch:8
  2⤵
  PID:3724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6092,i,7796570052403984166,2918234307912287912,524288 --field-trial-handle=2304,i,13943818892150340366,15706519586983211136,262144 --variations-seed-version --mojo-platform-channel-handle=4496 /prefetch:8
  2⤵
  PID:5940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6076,i,2822385957736370123,17881444560645515981,524288 --field-trial-handle=2304,i,13943818892150340366,15706519586983211136,262144 --variations-seed-version --mojo-platform-channel-handle=5768 /prefetch:8
  2⤵
  PID:3752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6048,i,5064525789055787985,8182543598828854316,524288 --field-trial-handle=2304,i,13943818892150340366,15706519586983211136,262144 --variations-seed-version --mojo-platform-channel-handle=6116 /prefetch:8
  2⤵
  PID:6056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3048,i,3026414185114064054,8110724954040900691,524288 --field-trial-handle=2304,i,13943818892150340366,15706519586983211136,262144 --variations-seed-version --mojo-platform-channel-handle=6188 /prefetch:8
  2⤵
  PID:1128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5984,i,563489496614225433,814449514189181363,262144 --field-trial-handle=2304,i,13943818892150340366,15706519586983211136,262144 --variations-seed-version --mojo-platform-channel-handle=4996 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5144

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5784

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4576

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3c1c88a1dc8e5439a1a520e9db930955bf4755654f664147c54e6cba8b43ed4c
MD5 22184503a294aa98846d9a4c3975971b
SHA1 44809070563819cceeff10eeef861544783faf98
SHA512 5d29c381872b72159a2d05366e0578c0ad56eb5ef51240db505660b787e0b3b88212c74bad2c16783f95846d95fdad86172cdc01a84d34426cca804e937a679d
TLSH
T1F4D02B24B2AC7654E01A343C0114428C30CE5970140BB400805413940FC261201C4069
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 649B
SHA256 e6e3cfb1059600a9d68f12e686bf729c63aa9d27105c417a549a2b946f870b80
MD5 a7afe7a690e092df64e8425249debdea
SHA1 dd7bf1473343b904677c3cc04876a1de2175594e
SHA512 cdd5a9db51984aa0a0305592a91d110aba1b6a066d377bfec166f4142c5ad60e9073ecdb69cae5122f23ca8f01da2c3cfa6998ab959797b66615939d1cda5916
TLSH
T145F028B9CC21EC3B18FD0B3920940B46F750236B2B41994F3B3D810D8FB1A3B468582C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 4ba1cf2f0098e92eeb03b5cc89e603c8a3ae1c1d2416ce7773487c5f41899c70
MD5 0078be2809d3dab77ba31f02f8ccb26b
SHA1 23fec573c8c402f921ed4429397d02cf69375fc9
SHA512 1940fe730b1eb41e0f82991c1baa1d63a486667202b1c0092d76bc229ea2731a4600be5c80aa7d892536c2390e62ea20e733a630f48194a6706f31b80cab50e6
TLSH
T1C2618FF7C3E8866E890156F0AB257E2ACD1D055A432C3C56C8F8AF5FA3E2471D24165F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 2a32b9eea04387c9d51bfefb5fffb171e733b3924a1a55dda576666cbb3b7017
MD5 b1e1541410ac1fefb2b63f8521ec8a1d
SHA1 4b66210a8b603d756a7cda91a2f87671545c614b
SHA512 1c7c7b5420b2f987d9cb8760957c2db88b6a9ae18d62c9d621cc04e56076f52592b05e5aa9ca488c9ceca86b95df559bb944ace46124447b40341c41f7fb265e
SSDEEP 192:sxZ1RMkz/fiscaQZLb8dzodpHoHW6+WNGYoWoSRGBKIgjtNJ:sxZ1hz/fisVOk2IHbG9SQBKjtX
TLSH
T1B942D819AD28A97B8CCBD619BB157F53E3F9103390900E48AAFC8A2C15E76DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 7a08a8664c6049bee447f25fcf393be361fba1a9f0428e6d5c0530e85cd9d521
MD5 2e5fdbe4d93f0596684055b936be805b
SHA1 6e2872504e3428ba8938328d9866f555409bf043
SHA512 5239e8a67dc4db43e88df955011cb90af7a945815cf4258e43aec7efa7be24f3ef143b08b530b77af55b98a787c066f2cbfd8773a67f5479905f2d1006b38d91
SSDEEP 192:sxZ1RMkz/fis+QZLb8dzodpHoHW6+WNGYoYloSRGBKIg5TtNJ:sxZ1hz/fis+Ok2IHbG6mSQBKJtX
TLSH
T1F042D719AD28A97B8CCBD619BB557F53D2F9103390911E84AAFC8A1C15E76DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 38f6a96f4e415e20b0c43b8568ed3fd8fc202e446980dd7a01cf71521bb3cfb7
MD5 427e9577ef546a59fe0fd3e877df73ee
SHA1 4e31b39a5ff732f45a5038490518ee2069dd3159
SHA512 821a7a1efed1d4fd4169d690bed50e382ffd6d382157a896959987a1a01872f3d668c2b487a6143315aaa6762f2d21373aded89462b8ce22130e3532458ce3e2
SSDEEP 192:sxZ1RMkz/fis4aQZLb8dzodpHoHW6+WNGYoWoSRGBKIg5TtNJ:sxZ1hz/fisxOk2IHbG9SQBKJtX
TLSH
T19C42D719AD28A97B8CCBD619BB557F53E3F9103390911E84AAFC8A2C15E76DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 b889e5382c9e415bcf4e5e68d2959c49597a0b5dcecea8a5067e3c14924f16f9
MD5 355b4edfda2a0287b0e92e6bb13bfc45
SHA1 654be442ee8176e74f3cbcc353b26ad58f0793b3
SHA512 d5ac6b4b1c43a1693926a1f4b0344b0e9c9c7b4f201b20fbb4e5c9a919e780eab5d79897f6e3aca7afe239b52cbfa08377837a95a157097e70915d91fefeb0cb
SSDEEP 768:Px6r8j+WviyUK8F1+UoAYDCx9Tuqh0VfUC9xbog/OVXpLlvVajYroorbgnov:Px6r8j+WviyUKu1jaqpLd4jjovgK
TLSH
T1D4C2E93B640CCB7E4FC41E9DDC1A6F972D9802C796588D408BFA954C02C77EA912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 abe8f18fc1ca2c0e73107756688b77d3f56c505c54476f79294cfd7865442fdc
MD5 15775cf007a7652bd5369e654c0899d4
SHA1 6e15869630d790d74d14550dfde187009faeb9d3
SHA512 ebe0d9f6de5c874ca725e74a39d55dce5869d5a2f2d59bb41f8cbe425e9cb24668eac6e406094673883702ad8ace83f842c42e7d1fa8690e35d6850b21911bd2
SSDEEP 96:KM8wKFqmq2sK3qsrWKIcKKsAKVK66QKTywO3aKoErbWKY0KGnuKc82DOhVLZZdg+:ST/2dXOJhJlpfnpp3tNXVrN3WRFZ
TLSH
T1A9B2111571BB421039FE391892B5872E064231B33119EA6B7FBD04B68E6BF085DFD8D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 aa59c3df1c689489c0f9de19fa64288525f0b43545f2af97e0c35025dcab71c0
MD5 59a3f78dbfb7dd40fe5a67301bc3c10f
SHA1 303cb102ee251f49afae544df5cd163f6f0d870d
SHA512 b05b79c364a012e5d9600235c91396332b254bb222ec1249d6b9a72e6135bbf52bd61f33ff31ff7250fa45dd62a1972ffe76438823477e2a4549592395041c2e
SSDEEP 384:nSiFiZcIX3sNT8TUNTUlI4naKMwA2w2fvBC50mvy1s2uvqirtgOIwZOysagL/7IC:ZFQX32wgxv6BCm68s2RirXsw8
TLSH
T159C23A36D8A8D9BBFCEB9B95B74A3A43EEF44113858C9AD4D9E81D1C00D75AD030BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 6c3dde14490a75210de29eab140f5a89aab213cb42f6e98006b9d4ae2ed9091b
MD5 b75cd64141f02054552c4c0174fe59a5
SHA1 57299c391c1e23bd053c2e707a69e0e15a767f7c
SHA512 194c85f1e404e25997d3fb2d73900c3c95900310e9eea3073b6389328ea9356113936db8855166dc80c6647809ff8d05d9cac6de27309e788e2d95a53df84fb7
SSDEEP 384:nQiFiZcI63sNr8TUNTUlIm2aKMij4w2fvBC50mvy1sqFlsa+VYBRgL/7IzWo4:rFQ63ywgc8QBCm68sqFlhgHP
TLSH
T1CEB23932EC98D9BBECEA8FD6AB4A7A03EEF4016385DC96C4D9D85D1D108759D0307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 56f527f29b90a9ad3ce675c639c3c2274fa6edf19f2c86a970e3c79a9c9d7cd4
MD5 3c621f4c787a5f714dc374a5af405b4f
SHA1 eb436c5c45b0f487afece1da51369acc6d4ad68e
SHA512 c260ddfcb0fba2261fe3e2fb57799034dfba3e70fcec17099fd330279de02ea1f9d61db38da5fc14425e546ff4f8246789ae7ec50876b02795449b3436fa9acb
SSDEEP 384:nQiFiZcIX3sNT8TUNTUlI4naKMlA2w2fvBC50mvy1s2uvqirtgOIwZOysagL/7IC:rFQX32wgxc6BCm68s2RirXsw8
TLSH
T101C23A36D8A8D9BBFCEB9B95B74A3643EEF44113898C9AD4D9E81D1C00D75AD030BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 854d9f97fcfbf97b0f85ee9a5c5cc340df28a9cd33e6c035e63eca8a7873834e
MD5 6cdc7a5e82997fe8a1b7b904bac3c5cc
SHA1 52fd5d714fbef78e250d965010baa153be7fb8c2
SHA512 b0a9541fbb7a0deb648108c32f9bab449749f1f3dcc56fa80d6ef412a71fcfb05512905fbd56698c741d09f1444c766bbaa22babc09643c1d04149c26e7564e2
SSDEEP 384:njiFiZcIvB3sNT8TUNTUlI4naKMwA2w2fvBC50mvy1s2uvCmrtgOIwZOysagL/7N:OFQJ32wgxv6BCm68s2vmrXsw8
TLSH
T111C23A36D8A8D9BBFCEB9B95B74A3A43EEE44113898C9AD4D9E81D1C00D759D030BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 9c65740ecc25f62f1e48e0250c2c637df88318f99307b60b17b6f290ba9e6463
MD5 11699fe896c77dc96d7076295ee344ec
SHA1 4dcc1b1a4c0ab45b95eefe8fde12ebdeedf212f5
SHA512 8b74bb95ed751ad059ce27ada57431c106c97f79d803dde4a401b69bda199e9b95a1e51e0140683ccacb54fe9de2bd88ccc1364aeca61e9719a20def06fe0c15
TLSH
T114410958B7E91144B3B76E5A9BF2686D887EBD772E06C59E10110E4F0632F44CCA1737
MD5 SHA1 SHA512 TLSH

Submit Download