b079749021abca387bc8963045b748a7b4769fd65907aac5a9d9b00dad91e752

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
25/09/2026, 18:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
index.html
Size 45KB
Sample260925-w6vfzsteme
SHA256 b079749021abca387bc8963045b748a7b4769fd65907aac5a9d9b00dad91e752
MD5 8c17034b18b69c965e28a8d52d308d01
SHA1 9b0ed7bdfff2729b10d0f7d373553f947242b2da
SHA512 557beab25e9530eb1237d5ee396bedfa43b425998e63a62738c63fc2c52164425fbee360bb844a07c5b66c2fd7891892805fb9165a5d99c56cc72c7db52c5b8f
SSDEEP 768:0PWO5/xXiK8FZFUkT2rv5PkTqEA1pfub0RWQ0FlukrBrUZRBxbJXLIQmOK4ROK:yRzGIh0LTK
TLSH
T1B423D673658C20392237835354E0B76DF965C602CB33495AF6BCBBAA8FE3D525933224
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4752	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2101206053-1414382737-268919432-1000\{D7CC8D76-D9EE-4A18-BB23-7011C6151FFA}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4316	msedge.exe
4316	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3532	msedge.exe
3532	msedge.exe
3532	msedge.exe
3532	msedge.exe
3532	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3532	msedge.exe
3532	msedge.exe
3532	msedge.exe
3532	msedge.exe
3532	msedge.exe
3532	msedge.exe
3532	msedge.exe
3532	msedge.exe
3532	msedge.exe
3532	msedge.exe
3532	msedge.exe
3532	msedge.exe
3532	msedge.exe
3532	msedge.exe
3532	msedge.exe
3532	msedge.exe
3532	msedge.exe
3532	msedge.exe
3532	msedge.exe
3532	msedge.exe
3532	msedge.exe
3532	msedge.exe
3532	msedge.exe
3532	msedge.exe
3532	msedge.exe
3532	msedge.exe
3532	msedge.exe
3532	msedge.exe
3532	msedge.exe
3532	msedge.exe
3532	msedge.exe
3532	msedge.exe
3532	msedge.exe
3532	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3532	msedge.exe
3532	msedge.exe
3532	msedge.exe
3532	msedge.exe
3532	msedge.exe
3532	msedge.exe
3532	msedge.exe
3532	msedge.exe
3532	msedge.exe
3532	msedge.exe
3532	msedge.exe
3532	msedge.exe
3532	msedge.exe
3532	msedge.exe
3532	msedge.exe
3532	msedge.exe
3532	msedge.exe
3532	msedge.exe
3532	msedge.exe
3532	msedge.exe
3532	msedge.exe
3532	msedge.exe
3532	msedge.exe
3532	msedge.exe
3532	msedge.exe
3532	msedge.exe
3532	msedge.exe
3532	msedge.exe
3532	msedge.exe
3532	msedge.exe
3532	msedge.exe
3532	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3532 wrote to memory of 1640	3532	msedge.exe	85
PID 3532 wrote to memory of 4044	3532	msedge.exe	86
PID 3532 wrote to memory of 4752	3532	msedge.exe	87
PID 3532 wrote to memory of 4044	3532	msedge.exe	86
PID 3532 wrote to memory of 4044	3532	msedge.exe	86
PID 3532 wrote to memory of 2068	3532	msedge.exe	88
PID 3532 wrote to memory of 2068	3532	msedge.exe	88
PID 3532 wrote to memory of 4732	3532	msedge.exe	89
PID 3532 wrote to memory of 4732	3532	msedge.exe	89
PID 3532 wrote to memory of 4732	3532	msedge.exe	89
PID 3532 wrote to memory of 5000	3532	msedge.exe	90
PID 3532 wrote to memory of 5000	3532	msedge.exe	90
PID 3532 wrote to memory of 5000	3532	msedge.exe	90
PID 3532 wrote to memory of 4432	3532	msedge.exe	92
PID 3532 wrote to memory of 4432	3532	msedge.exe	92
PID 3532 wrote to memory of 4432	3532	msedge.exe	92
PID 3532 wrote to memory of 4960	3532	msedge.exe	93
PID 3532 wrote to memory of 4960	3532	msedge.exe	93
PID 3532 wrote to memory of 4960	3532	msedge.exe	93
PID 3532 wrote to memory of 404	3532	msedge.exe	97
PID 3532 wrote to memory of 2632	3532	msedge.exe	98
PID 3532 wrote to memory of 404	3532	msedge.exe	97
PID 3532 wrote to memory of 2632	3532	msedge.exe	98
PID 3532 wrote to memory of 2820	3532	msedge.exe	100
PID 3532 wrote to memory of 3688	3532	msedge.exe	114
PID 3532 wrote to memory of 2812	3532	msedge.exe	115
PID 3532 wrote to memory of 1992	3532	msedge.exe	116
PID 3532 wrote to memory of 3744	3532	msedge.exe	119
PID 3532 wrote to memory of 3744	3532	msedge.exe	119
PID 3532 wrote to memory of 4316	3532	msedge.exe	123

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\index.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffaf180c188,0x7ffaf180c194,0x7ffaf180c1a0
  2⤵
  PID:1640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1776,i,1408097010524641249,6755422220554067941,262144 --field-trial-handle=2704,i,17899650589772644822,15411442698164510142,262144 --variations-seed-version --mojo-platform-channel-handle=2692 /prefetch:2
  2⤵
  PID:4044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1996,i,6934697969930834457,17156593512048074739,524288 --field-trial-handle=2704,i,17899650589772644822,15411442698164510142,262144 --variations-seed-version --mojo-platform-channel-handle=2732 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2304,i,723958374856753488,974311443581233947,524288 --field-trial-handle=2704,i,17899650589772644822,15411442698164510142,262144 --variations-seed-version --mojo-platform-channel-handle=2876 /prefetch:8
  2⤵
  PID:2068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3488,i,15252569148461382367,13183485568376725280,2097152 --field-trial-handle=2704,i,17899650589772644822,15411442698164510142,262144 --variations-seed-version --mojo-platform-channel-handle=3560 /prefetch:1
  2⤵
  PID:4732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3492,i,353843342400513551,6818603887473879816,2097152 --field-trial-handle=2704,i,17899650589772644822,15411442698164510142,262144 --variations-seed-version --mojo-platform-channel-handle=3564 /prefetch:1
  2⤵
  PID:5000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4180,i,9050889670757043859,16118132015330343118,2097152 --field-trial-handle=2704,i,17899650589772644822,15411442698164510142,262144 --variations-seed-version --mojo-platform-channel-handle=4192 /prefetch:1
  2⤵
  PID:4432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4252,i,10153288057503980086,2466778221079466830,2097152 --field-trial-handle=2704,i,17899650589772644822,15411442698164510142,262144 --variations-seed-version --mojo-platform-channel-handle=4324 /prefetch:2
  2⤵
  PID:4960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5100,i,10723518765804805266,16771047911992632193,524288 --field-trial-handle=2704,i,17899650589772644822,15411442698164510142,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:8
  2⤵
  PID:404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5116,i,13466352821080770747,7786251673695852399,524288 --field-trial-handle=2704,i,17899650589772644822,15411442698164510142,262144 --variations-seed-version --mojo-platform-channel-handle=5212 /prefetch:8
  2⤵
  PID:2632
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5928,i,4243428142347549857,5595955684886198289,524288 --field-trial-handle=2704,i,17899650589772644822,15411442698164510142,262144 --variations-seed-version --mojo-platform-channel-handle=5936 /prefetch:8
  2⤵
  PID:64
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5928,i,4243428142347549857,5595955684886198289,524288 --field-trial-handle=2704,i,17899650589772644822,15411442698164510142,262144 --variations-seed-version --mojo-platform-channel-handle=5936 /prefetch:8
  2⤵
  PID:2820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5040,i,14255404749916440310,9742627466941240005,524288 --field-trial-handle=2704,i,17899650589772644822,15411442698164510142,262144 --variations-seed-version --mojo-platform-channel-handle=6252 /prefetch:8
  2⤵
  PID:3688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5936,i,8751076597795111914,14315166018356267842,524288 --field-trial-handle=2704,i,17899650589772644822,15411442698164510142,262144 --variations-seed-version --mojo-platform-channel-handle=4560 /prefetch:8
  2⤵
  PID:2812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5880,i,7046097172456716869,17159823514406824479,524288 --field-trial-handle=2704,i,17899650589772644822,15411442698164510142,262144 --variations-seed-version --mojo-platform-channel-handle=4564 /prefetch:8
  2⤵
  PID:1992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5216,i,15814510039284569394,8967952493941192323,524288 --field-trial-handle=2704,i,17899650589772644822,15411442698164510142,262144 --variations-seed-version --mojo-platform-channel-handle=5480 /prefetch:8
  2⤵
  PID:3744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6192,i,10992278759652023441,17175906942389190029,262144 --field-trial-handle=2704,i,17899650589772644822,15411442698164510142,262144 --variations-seed-version --mojo-platform-channel-handle=5892 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4316

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3888

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 61a97be736e0441d45644d31b38bd9bef6c1bd260fa1ecbb5d099fa493fee6b4
MD5 99bbd8400adc948f85ebd87cb24b3fcb
SHA1 c8fb9564ede7ecb06cef446bdb527025127a796e
SHA512 75b3ee70eca487cbbfb3d5b4b25bae158ff99188ab36d55f391e9f80c51ce9fa433897d79a0ae37ad64698bc3eb5aa9a10a49116fb8f7f35ed0a6e98aa8321b7
TLSH
T109D022C8F2A0300CE00C3233A02BCE022B88CEA8F0032BCA000E8C80E8800C80CF2C8E
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 87a6b56b3a47cfd9f58f49b21d0040033c8cfd80b50e49b434794cefa7e29583
MD5 74ef2da89fa243ea7d0030317efca192
SHA1 ceb38f6fe8b62f80d617114db8b4617467417ae3
SHA512 285847f78095225db6f446ab877593c3e8e9c642b3beec1b15e7b1eec59d6b2f61ada0e2fb96cf36a3046dbd5102c274473cea5f978ee83b010039a4dc00d05d
TLSH
T10DD024C471D0340CD40C31335015CD011744CD54F00317C7000D4C40C4400C40CF1C4D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 de119bf88cbe5bf7a9094a73a69282acbc248df4d38bae7171ffece8d1602da1
MD5 5f6f342e9394f7626ddd08a18f0100e9
SHA1 880b51cb3d86d255f765e45c28ee71a1e2ef919d
SHA512 2f4ca76a0e0bdaed553649f8a9e25ba4a81afe022ed4c37ceae6875c64a475ffc997d7f558b4bbe02627b210ae858ea32b1f0db1d5f5147ffc12c20cc23108ba
TLSH
T1B261A5A34E40A0DDFBAAE573B7C925873E30C580A1431DE10B58D0F758C67FB228A870
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe591f17.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe591f17.TMP
Size 3KB
SHA256 b5427c97267caea003f166cefe0595b2185ef8b240457cedab396b1d95c58d8f
MD5 a1fa49d199228dcebe6a90de1942b284
SHA1 65229c893b46daac024664f89df25aa1cd8ea8b0
SHA512 239e1195183ac4901625039694175b1e32b3c9a6dce79e6d853feaed1530f27e2957547321c14b208c2224130efad05f4003f01a7372f1d043fef58434bf20a4
TLSH
T17961A5A34F40A0DDFBAAE573B7C921873E30C580A1431DE10A58D0F758C67FB228A8B0
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 ec50af0847d791d115388123436ead886d15775a3096236a84dfcde435081e99
MD5 211af4b2b189653eed689911e8f636dd
SHA1 8d9f20c84203f5a08fa0e2f1623e79dbfff3162f
SHA512 4593eda5fa736e2fc32f063cf12a5fbdb7bd58928c9145a1c9525fac06da1f0bb3c8a5ed74bbec3a1afe7ee97471782984a64471ff309e31e49eeaf44e435be4
TLSH
T16131A1F7C3D4876EC90156F09624BE26DE2D0956822C3C1AC9E4EF1FA3E24B5E10169F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 aa10bf07b0d265bed28f2a475f3564d8ddb5e4d4ffee0ab6f3a0cc564907b631
MD5 807419ca9a4734feaf8d8563a003b048
SHA1 a723c7d60a65886ffa068711f1e900ccc85922a6
SHA512 f10d496ae75db5ba412bd9f17bf0c7da7632db92a3fabf7f24071e40f5759c6a875ad8f3a72bad149da58b3da3b816077df125d0d9f3544adba68c66353d206c
TLSH
T18DB01269E5507CFF074A83A41428B463C3FF0047421C8ABEEA3873AD42A21FE0828C57
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 c6ba9bd8e4c079e39ac31bc3f4d152114777fdbb0de267ed5c5afacbf917df0b
MD5 a2afc63027f84534dd6b6062c72d457c
SHA1 68800fc6055fbb28227656b609a414555584b18a
SHA512 193c55466b91645567d0236eac63488be3090e1afd73d8d5a32ccfdf1dc207d31aaf0a51dff78b1cf5ff567b74f8d78f7ae2153a781b85aa56efe525b7d53f62
SSDEEP 192:sxZ0RNWW/f7si+7IdpdyHW6+WNGYaQ6sIgrJ:sxZ02W/f7si+ksHbGO9
TLSH
T18D12C9556E28A97B8CCBD21DBB25BF53D6F9503291D41E88EAFC861C05E76CD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 e2e33bed232f03d83d68ec4f60d84cafdabc3631e18ad72514c54fd244e20533
MD5 60779f0152b8d3294340ae3862f958f6
SHA1 192f70452e20974be8f590a2b078141b53d06621
SHA512 a88f3c57aa6753cd7610fd3dbabb64ac51a1a04a980fc3666a28c61e3ab2286037fa3329c17682bdfdeff5417daa7d52aa29f684d1881123b75514fb16e04eda
SSDEEP 192:sxZ0RNWW/f7s2+7IdpHyHW6+WNGYabX6sIg50J:sxZ02W/f7s2+kSHbGjvy
TLSH
T1A022C859AE28697B8CCBD21DBB15BF53E6F9503291D41E88A6FCC61C05E7ACD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 05045851de39ff454a6f579cc25e614cb22318998e8a0ce48c0fa7a0582937e8
MD5 1f0eb34bbd4a14804e1d29a750313a3f
SHA1 ac9e49a462a34450c496d02a133909518d43f0de
SHA512 b4e192e72b64cb5ddc302e736ac464718a17af5964dd806ef115542cd9eec2963873dd1e51f8274eb4c65e911e136ee506f4a14b5e69d38c4fe33e1f648e7468
SSDEEP 192:sxZ0RNWW/f7su+7IdpdyHW6+WNGYaQ6sIg5eJ:sxZ02W/f7su+ksHbGOI
TLSH
T1B822B8596E28A97B8CCBD21DBB25BF53D6F9503291D41E88E6FC861C05E76CD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 995607eab38f3c2fa0eb15784a515e3871c6101686e17d00de6e2f8d54124186
MD5 f896e6c8efcb89e12e351d00a7da1807
SHA1 8c3b22e1db37878e98eafbd074410af7989ba27a
SHA512 505432ed213335b28d1f71dc3463f2bc57871b057bc740ea3e22451ca83938b0246ac22567b168438daa40d74089f9a0dde73387dcb7cc7ae6939420cbc86979
SSDEEP 192:sxZ0RNWW/f7s2+7IdpdyHW6+WNGYaA6sIg50J:sxZ02W/f7s2+ksHbGey
TLSH
T12E22C759AE28697B8CCBD20DBB15BF53E6F9503291D51E88A6FCC71C05E7ACD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 a46fe94420da7a591660a155f5fd28e7c6e17c043364953625075ae6ff6929d0
MD5 9f16d2b63deb6a04efd9193e8412958f
SHA1 20e0d6c8f2f3ef548af862c75191819a8f90fcea
SHA512 15c69e07bb4f3fb9fe8f2de05f4c6fb1d8104479d690ea7b1e39cffdd826fdc13517e0c6cf3343817259b54c112bc1bbbb04fca4d2200b71762824bf0ef52ec4
SSDEEP 768:z4yQRbrWvvlpZ8F1+UoAYDCx9Tuqh0VfUC9xbog/OVaKLlRXH3MroVZ58:z4yQRbrWvvlpZu1jaXKLf33XVZ58
TLSH
T1CCC2E92F640CCB7E4FC01E9DDC6A6F976EA802C766588D4047FA994C02C77EE512A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59b992.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59b992.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 4c248ec5e91addf5e57f0b4818349ba055ba539881e710cbefb2c5ee7a9fb1dc
MD5 b695d5bfa4e2476137da7f821c57f901
SHA1 d9520e125e524ea370da0c959849241068ab89c2
SHA512 795765acfb426961636505e440d69de6136948bd4af08ce87bec8e0670e5e49d38e71e086005e9853ba9fe3de4e8099e1b7f1bc5a1c4ec42de49d09523aa2ab4
SSDEEP 384:FZcIhsNK2tSWDz7p5u8iRwKHYoW33KtgOIwZOySuoD:9hhujkRNeHKXsGE
TLSH
T1C8828D3A58786C7B6CEAA151F58B36035FB8806BD7C8ABC4D4ED572D01EA1D81307A27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 00f750a672584b490eb9e6eaaad6cce5f896079432282472495e1ee927812852
MD5 6baabd30fc1f438ec7e095e32a0ed986
SHA1 85efa1fa87e0886b2a0449963038c020a6e84066
SHA512 7464ba5ad114043d04d1a06cca08edea75cf28314fb05162dff83a631450894afa460542f208b12e50f1292ec9015856e6a450293ae23c66937e801cc8960a66
SSDEEP 384:diFiZcIZzsNS8TUNTUlIlRtSWDz7p5u8iRwKHYov33KtgOIwZOySuoD:UFQZLwgEujkRNnHKXsGE
TLSH
T109A26C3748A89C7FBDEA9A50F54A36039EB840ABC7C4EBD4E6DD561D01E71D80307D12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 2cb8efdd0fa3b7d34d6bd402a74deaaa3492c4f2ce91e6be598092b65e7872d5
MD5 3e51daa42dd63c83c88fa989fe233161
SHA1 86d1ed5ce3852e888fa0c5d96e2987391aac9836
SHA512 d8c8ae58a52f8789b3d56d11c40226ff49d715d0f1fae607af67294ba6adb0f26f94ddc3bf9b0e734689d71e73d9812f5caa5474e9416dd04a8c966099be73c4
SSDEEP 384:QZcIhsNKRtSWDz7p5u8iRwKHYoW33KtgOIwZOySuoD:uhYujkRNeHKXsGE
TLSH
T168828D3A58786C7B6CEAA151F58736039FB8806BD7C8AFC4D4ED572D01EA5D81307A23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 890d3191084ffb693cf00058d402aa195d31f274a337609c4df20d7ab261d052
MD5 ad6efd3c06ebc67fb4e399959fcd5ea6
SHA1 747d006d1e74719b35d673eef906dde5b231dc8c
SHA512 1675dab849b7443e8c53280840c56669a1f1ac3a4c566127a7964854c693c6451042f9f9a66bee4c54dbd924834cbf3a520f69af176b165aba5289bf1aa1c745
SSDEEP 96:PqONkgQsjpfwDISp5ih/cIPURHl8h4otop5qmDxBfPGxvw45RxmJm78lFdx0Y++4:SONI6iDCQmiUy9HHq5u88PRw7SqSoxU6
TLSH
T17002E8386C787CABADE26E15B5873B179FA5112FE6942F84C9E8162C01E769C1307922
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 256104ddb17d25db6c60ddc140ff2c07c38d0a525b71daae53c38d8f1559824b
MD5 fe8f84933f72440951ae453bfa448f6f
SHA1 82077624b31f542688438f8fa03f13141deb4216
SHA512 652332297f7f4ed0dad84638da524620070c589f34154218902afad686d3698bbfcf38fb9aefe616cd6baaec6ecdc8f15b113c44873a60fed2ecfbc4c274e9a6
SSDEEP 192:SOND6iDbQmiUysfHZq5u88PRwKHPwo0uZ5/l3KU6:SOND6UVZq5u8iRwKHYor33KU6
TLSH
T11F123A396878BC6B6DD26861F48736139EA8412FDB886FC5C9DC172C05EF19C5307A23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

69f3bd2e-e576-4706-a511-fd03f12fb438.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\69f3bd2e-e576-4706-a511-fd03f12fb438.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 b271452b45d953cfbdc7f6157c1fbd9de3687032c23d8859697f79070da9c43a
MD5 5f1e338f2e8ee65eda44ae9cc25ec597
SHA1 2fc5e2ddcc3c8d12d37382867a6deab3627d2cfc
SHA512 388f3fe205c369e774ad044e6b1fde5e993afcce5589d6d23d23940807519b1ab1fb9cd6fb0636850e093826cd3c8c1d06ddf0d097b2fc44149b8cd5e7bbb1c7
TLSH
T10E414858A6F91148B3B37F5AAFF6A56D887BBD372E07C49D00160D4F0A22B40C562B37
MD5 SHA1 SHA512 TLSH

Submit Download