ccde54317343ebacd6da2afde0b4007f766b637b1ba34510c74de49797553d77

Analysis

max time kernel
148s
max time network
144s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
29/09/2026, 23:53

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
attachment20260929-1092870-xh12b7.html
Size 116B
Sample260929-3xtaws1ejb
SHA256 ccde54317343ebacd6da2afde0b4007f766b637b1ba34510c74de49797553d77
MD5 0e2f15dcf7166552e959f0ddb363e706
SHA1 642e84dc85171feae5dbbb9727736ee1424a232c
SHA512 2a659912d4f25102f996a71566eca6840ac2b3271147c266d9836f2fc5785b4b514e248b396d62b7504556f50046f7610023adc8c55c2c9b9a8ec715c29ce525
TLSH
T122B0125F120702053D601D527DD3375714174B9E01A969E01267C9FECCCB9B2EE4739C
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3432	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-524788801-3318743092-4051225893-1000\{24C359F6-C193-4DD6-9E57-4B2E91D8E69E}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4416	msedge.exe
4416	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2876	msedge.exe
2876	msedge.exe
2876	msedge.exe
2876	msedge.exe
2876	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2876	msedge.exe
2876	msedge.exe
2876	msedge.exe
2876	msedge.exe
2876	msedge.exe
2876	msedge.exe
2876	msedge.exe
2876	msedge.exe
2876	msedge.exe
2876	msedge.exe
2876	msedge.exe
2876	msedge.exe
2876	msedge.exe
2876	msedge.exe
2876	msedge.exe
2876	msedge.exe
2876	msedge.exe
2876	msedge.exe
2876	msedge.exe
2876	msedge.exe
2876	msedge.exe
2876	msedge.exe
2876	msedge.exe
2876	msedge.exe
2876	msedge.exe
2876	msedge.exe
2876	msedge.exe
2876	msedge.exe
2876	msedge.exe
2876	msedge.exe
2876	msedge.exe
2876	msedge.exe
2876	msedge.exe
2876	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2876	msedge.exe
2876	msedge.exe
2876	msedge.exe
2876	msedge.exe
2876	msedge.exe
2876	msedge.exe
2876	msedge.exe
2876	msedge.exe
2876	msedge.exe
2876	msedge.exe
2876	msedge.exe
2876	msedge.exe
2876	msedge.exe
2876	msedge.exe
2876	msedge.exe
2876	msedge.exe
2876	msedge.exe
2876	msedge.exe
2876	msedge.exe
2876	msedge.exe
2876	msedge.exe
2876	msedge.exe
2876	msedge.exe
2876	msedge.exe
2876	msedge.exe
2876	msedge.exe
2876	msedge.exe
2876	msedge.exe
2876	msedge.exe
2876	msedge.exe
2876	msedge.exe
2876	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 2876 wrote to memory of 1504	2876	msedge.exe	85
PID 2876 wrote to memory of 3432	2876	msedge.exe	86
PID 2876 wrote to memory of 3492	2876	msedge.exe	87
PID 2876 wrote to memory of 3492	2876	msedge.exe	87
PID 2876 wrote to memory of 3492	2876	msedge.exe	87
PID 2876 wrote to memory of 1116	2876	msedge.exe	89
PID 2876 wrote to memory of 1116	2876	msedge.exe	89
PID 2876 wrote to memory of 3900	2876	msedge.exe	91
PID 2876 wrote to memory of 4872	2876	msedge.exe	90
PID 2876 wrote to memory of 3900	2876	msedge.exe	91
PID 2876 wrote to memory of 3900	2876	msedge.exe	91
PID 2876 wrote to memory of 4872	2876	msedge.exe	90
PID 2876 wrote to memory of 4872	2876	msedge.exe	90
PID 2876 wrote to memory of 796	2876	msedge.exe	92
PID 2876 wrote to memory of 796	2876	msedge.exe	92
PID 2876 wrote to memory of 796	2876	msedge.exe	92
PID 2876 wrote to memory of 1588	2876	msedge.exe	93
PID 2876 wrote to memory of 1588	2876	msedge.exe	93
PID 2876 wrote to memory of 1588	2876	msedge.exe	93
PID 2876 wrote to memory of 3488	2876	msedge.exe	97
PID 2876 wrote to memory of 1452	2876	msedge.exe	98
PID 2876 wrote to memory of 3488	2876	msedge.exe	97
PID 2876 wrote to memory of 1452	2876	msedge.exe	98
PID 2876 wrote to memory of 732	2876	msedge.exe	100
PID 2876 wrote to memory of 1800	2876	msedge.exe	115
PID 2876 wrote to memory of 4744	2876	msedge.exe	116
PID 2876 wrote to memory of 3980	2876	msedge.exe	117
PID 2876 wrote to memory of 4160	2876	msedge.exe	125
PID 2876 wrote to memory of 4160	2876	msedge.exe	125
PID 2876 wrote to memory of 1908	2876	msedge.exe	128
PID 2876 wrote to memory of 1908	2876	msedge.exe	128
PID 2876 wrote to memory of 4416	2876	msedge.exe	130

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\attachment20260929-1092870-xh12b7.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x288,0x7ffd2d63c188,0x7ffd2d63c194,0x7ffd2d63c1a0
  2⤵
  PID:1504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1972,i,6819397777851934895,180617447962575334,524288 --field-trial-handle=2292,i,14687841558787023212,8537736919347341497,262144 --variations-seed-version --mojo-platform-channel-handle=2328 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1740,i,9189517661458692983,15016921569056546109,262144 --field-trial-handle=2292,i,14687841558787023212,8537736919347341497,262144 --variations-seed-version --mojo-platform-channel-handle=2288 /prefetch:2
  2⤵
  PID:3492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2532,i,5498350058779670212,15374223989268407532,524288 --field-trial-handle=2292,i,14687841558787023212,8537736919347341497,262144 --variations-seed-version --mojo-platform-channel-handle=2176 /prefetch:8
  2⤵
  PID:1116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3452,i,2336541362534490418,8657509897317886466,2097152 --field-trial-handle=2292,i,14687841558787023212,8537736919347341497,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:4872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3456,i,14357830014517546405,15488750020915798144,2097152 --field-trial-handle=2292,i,14687841558787023212,8537736919347341497,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  PID:3900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4208,i,16865441737536718539,17579515567030692245,2097152 --field-trial-handle=2292,i,14687841558787023212,8537736919347341497,262144 --variations-seed-version --mojo-platform-channel-handle=4264 /prefetch:1
  2⤵
  PID:796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4236,i,15935733275647094224,17848775218143356786,2097152 --field-trial-handle=2292,i,14687841558787023212,8537736919347341497,262144 --variations-seed-version --mojo-platform-channel-handle=4292 /prefetch:2
  2⤵
  PID:1588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4828,i,10974014922466143101,9526573294354869425,524288 --field-trial-handle=2292,i,14687841558787023212,8537736919347341497,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:8
  2⤵
  PID:3488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,17874400578054411907,4089414691328186617,524288 --field-trial-handle=2292,i,14687841558787023212,8537736919347341497,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:8
  2⤵
  PID:1452
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5812,i,11803498239407573332,17329361954349001848,524288 --field-trial-handle=2292,i,14687841558787023212,8537736919347341497,262144 --variations-seed-version --mojo-platform-channel-handle=5804 /prefetch:8
  2⤵
  PID:5028
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5812,i,11803498239407573332,17329361954349001848,524288 --field-trial-handle=2292,i,14687841558787023212,8537736919347341497,262144 --variations-seed-version --mojo-platform-channel-handle=5804 /prefetch:8
  2⤵
  PID:732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4492,i,10663795032740373511,10538738069577431434,524288 --field-trial-handle=2292,i,14687841558787023212,8537736919347341497,262144 --variations-seed-version --mojo-platform-channel-handle=4256 /prefetch:8
  2⤵
  PID:1800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4496,i,18203451450390641772,15536038442015876425,524288 --field-trial-handle=2292,i,14687841558787023212,8537736919347341497,262144 --variations-seed-version --mojo-platform-channel-handle=4444 /prefetch:8
  2⤵
  PID:4744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4480,i,1083273004604052377,16613120102368068342,524288 --field-trial-handle=2292,i,14687841558787023212,8537736919347341497,262144 --variations-seed-version --mojo-platform-channel-handle=5904 /prefetch:8
  2⤵
  PID:3980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2040,i,17534322600471621667,13050549585999758756,524288 --field-trial-handle=2292,i,14687841558787023212,8537736919347341497,262144 --variations-seed-version --mojo-platform-channel-handle=6252 /prefetch:8
  2⤵
  PID:4160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=780,i,3218987180066409995,10491308167700700621,524288 --field-trial-handle=2292,i,14687841558787023212,8537736919347341497,262144 --variations-seed-version --mojo-platform-channel-handle=6404 /prefetch:8
  2⤵
  PID:1908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6528,i,16027916667024385512,9923933391220284301,262144 --field-trial-handle=2292,i,14687841558787023212,8537736919347341497,262144 --variations-seed-version --mojo-platform-channel-handle=6524 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4416

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4268

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c904cde2439d0f658b6928376273908e18874923ffb5ab0253d91ef97d247274
MD5 71592819d06ab9dfd94505cef3db0b85
SHA1 fa4c610ce7419e5f934db322abc11ec563259b9b
SHA512 f0dccb656458e10495c6728811a1fad970a69f8abb5ce8e9bcba9e93f496cd66fb3ce8ce1065b946203d7912789774c609787e85dd5139479b2562b6f05cfae0
TLSH
T16BD002F8BB950515C5C970F7713BDB8143B6EB218246265D64F21E082D747B23606895
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 bbb1d16d86afc880e16a1ddef1c1cdf7d7ba1060d5d80a626e6552bb61d4870e
MD5 8a528bf26cbb5bf668434d9187775d98
SHA1 75f474e53c04897d4087ebdaa12c5280f5e4aad0
SHA512 e3c640580b2f25529c0a1dc46573f6cb5debac0bca8e6d59b7f05d30c5b132ffbb9e575960a3e1d6218cfe37613721d62ead1ca4b66339c7966172300f911cbd
TLSH
T1DE512CB08B6F8F54EB940DFD829400C73A2757F35C96AEF20494F1B98BCA7153203046
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 2853761da7cf207678811109a936d4a18dfc156ec42db2891605ee47a064b78f
MD5 2a4304f171101984b8a3482d0fa7be75
SHA1 81cd890c066281e2fb7dc0122484a271883f8657
SHA512 4ffda7d8b5ebe24f876abd94a7fa87a36c296354f7729cf60164c48899b2ef06841b14f9f84dd6dcf56c4fd7f981ff45a25d47eadecc4fb560db91e77f30d867
TLSH
T1BC11BDB3C3D585AE890116F05A24AE1BCE1D0606421C3C1989D4EF2B97E3475E00199F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 41d6904fdac8ed3496c40ec5c7e5e2421d29a2e031d52c2b0da6ed374bad5bb3
MD5 735a85a408708c2e4882144e740a0469
SHA1 f01d7f747fa0dba9725c83b96cf95daf17055a07
SHA512 43a0d560538263184c943c98b29204d37250c1388dbaba8ceec7f6574ea961cbfb3c785ca855b744497e2302c153f4417fdb7687a2423263a9e640dc5e982be5
SSDEEP 192:sxZDRGWE/fcsH1IdpdHHW6+WNGYRPRHlIgrJ:sxZDnE/fcsHGNHbGmz9
TLSH
T16122B8116E38A97B8CCBD21DBA257F53E6F9503291D51E48AAFC861C09E66CD220B40F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 b3bdc2eb082bc82572a066ba59b939b1894998b9b420a3824ae9c2a4f2673c70
MD5 8ac45d087ffcf7cc7e5a5064c41ad2bd
SHA1 9084f7b6098a11258b785e0466d1acfe4425840e
SHA512 02132dc83e62cb5bbe0709e038ce303e3e65fe0f89463b1c8532f5f07d65a90943ab25df65cc280acf45d9f2d251f335276bda75182113a86cb499633931fa0d
SSDEEP 192:sxZDRGWE/fcs61IdpHHHW6+WNGYRPTHlIg5dJ:sxZDnE/fcs6GnHbGm9N
TLSH
T11622C9526E38A9778CCBD21DBA157F53E7F9503291911E48A6FCC61C09E66CE220B44F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 d37f0e31f1f7e52d70db089de5936ba34ad7f85716207ecb654edeb4ee8cc3cd
MD5 aace8569e76243dcdbacf02efa0fe103
SHA1 68ee784cdae3f5a797eda39c7f7f03426f64a364
SHA512 122eca9e685abece09ee3edf76d25067c0e8ed4affb3738e531dc918190487b4ad12f3e155a175f1af68d7f1e374c9c9d83add38399b7d87290958321731dcab
SSDEEP 192:sxZDRGWE/fcs61IdpdHHW6+WNGYRPKHlIg5dJ:sxZDnE/fcs6GNHbGmAN
TLSH
T14B22C9516E38A97B8CCBD21DBB157F53E7F9503291911E48A6FCC61C05E66CD220B44F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 d6b83b782fe8edf37d361fe2abd81fcd6b3244c4cd00533931f4538a64266352
MD5 086002538e346cf0cfaf53ba53a92666
SHA1 7eec1311d2211c9d2230de1447e885bbb715703e
SHA512 a20d227a903373a43e101a2c3f0f71913ebe164b4e19391a5ce85ac46b3928d6fdfa13db5efcbdc89f95d87f6fbd1a971987f6197ca0216bcb866cba83be18c2
SSDEEP 192:sxZDRGWE/fcsY1IdpdHHW6+WNGYRPRHlIg5/J:sxZDnE/fcsYGNHbGmzL
TLSH
T1A922C9116E38A97B8CCBD21DBB157F53E6F9503291D51E48A6FC861C09E66CD220B44F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 8b4a5b2f1920aa31531a8ae0d39b3d5b5a1f4ed3ee9ca36f989294f5b0bf84b6
MD5 4f48865639132e610c3298089dbad1f2
SHA1 c410024f3401479b8b3186f5b9f41689ec4aa026
SHA512 44d27acbcaaa25c907b7012400252335fee946ec2fa297e8ffe5ca4d5feef14eec2f1e7f68647dde7f217c340d846baf7d5be7e6238927f67dea5f411d867d0b
SSDEEP 768:GQK9uzYWvcQWs8F1+UoAYDCx9Tuqh0VfUC9xbog/OVpHLlh7k3NroK+TV:GQK9uzYWvcQWsu1ja0HL7Q3mK+TV
TLSH
T159C2093F640DCB7E4FC01A9DDC5A6F973E9802D7A6588D4047FA984C02C77EA522A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 b19d1b5142b009eba75520604a0a5b7f4f7569a097606682eaa82c3801bfaaaa
MD5 f384134f6236cf5798b37968c680ae8f
SHA1 4039c5055b8e8732ca40de1a7bf8ca594824d4fa
SHA512 e15173c1d5af3ef6e24be45244ec1650ff2ea81938ad0c1720a42e6d571e21a41b338ab12df6a7f311706143174bacb0c0d3f28094d2cc7cd2345f7b1b1aa353
SSDEEP 48:K0mImvmvBGh8g+kkdbofQIS4dK9c1edx2NY3IkmyLDmHjNl12blo9ISj2K9T1B2H:K0mrKTFqK24K6cAKNWKzOKK
TLSH
T15991661530BB128139BE385C91B4975E064136B3306AE62BBFBC4565CE6BE054EFDCC9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe594ba5.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe594ba5.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 5b7fcbe6720a79c273ffad6e489ae593d0b8d686db57bbf3161f6bd5e2847a53
MD5 164a1eec42844291163e0c466d2a908b
SHA1 0417bb0fb5656a8e323d979a9a97b5d0f55982ca
SHA512 5e32de7e7462cf54080929952d4babdd62d08c4e2fdc15b6dc222fd68897c42364bbe1a564c536673fd69c3ee55fedbdbcc37549ef75c10d0e9c7734a40d3f93
SSDEEP 384:HZcIhsNZmwJQGtdyJOjTVakOrlajb+2mMeVZh6DKhHFo3:vhm+kntOsjblmMefYGHFA
TLSH
T151827E32AC785C779DF6A185F44736079FB88067E6866BC0D4DCAF1D01DA6A8230BD27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 d45220773c203af8adc2194186d1dd051387ab805ffc6b03ec527f32c63244f5
MD5 7bbb92d2034a90c1215bb6ae04d270ce
SHA1 396bce9c45be6b02136a1c49cd4ae080c4095f76
SHA512 b62478ebbf45082926fecb6abb95204d32002c72a6cd1708fece74d44560a32544a4e6f268cc73a6a044dc14d816a691813511ad48f802d157e2a79a08b55f5a
SSDEEP 384:6iFiZcImzsN78TUNTUlIlDwJQGtdyJOjTVakOrlajb+2EMeVZh6DKhHFo3:xFQWSwgI+kntOsjblEMefYGHFA
TLSH
T195A27E339C688C7BEDF69B85F54A32038FB440A7D596AA90E2CC9F1D01D759C230BD56
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 c169676283f9af10181fc66dd64396de92fccbcb9b066f4f9c11a270e1bdae18
MD5 1409e04e8d9a8dd52df043ba29c94c79
SHA1 323439187217742689090e7f1eb93124ac1b0f3d
SHA512 500e3732c05244d20746bb0139e29523a81c30d3fe7c027ad88a7ec66ad7452d88893375d3e9088151c133ca9b2f6aa633de7c21d7c25ed3824d1a0c8d7fb865
SSDEEP 192:SONI6ygpQmiUyGRtOCTVgMEkOrf7zPMj4U6:SONI6lHttOCTVakOrXMMU6
TLSH
T1D402D638BC786CB78EA26E45F58B37179FA4107BE9552B80D9E85E1C01D76AC2307D32
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 1b6831b6a181b358fe786d7cde958c11b3ef8d77070e2e6593027802523a3c08
MD5 ac546c9d3a73cd9c79910b1c8988a50c
SHA1 fea74e26a7ed2e2c910d239d6bc014c5613c7c89
SHA512 5ebad1489c2885d1aaf9a7c94fdf8919b4edbc90a3dd8467abc96e84af2675c8402aba1d7f413a13a107a6a42069c835b0edd2eed6fa2bb2f74ecbbb2da37274
SSDEEP 384:vZcIhsNZDwJQGtdyJOjTVakOrlajb+2mMeVZh6DKhHFo3:nhz+kntOsjblmMefYGHFA
TLSH
T1C9827E32AC785C779DF6A185F44736079FB88067E6866BC0D4DCAF1D01DA6A8230BD27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 1c76a3c4edbd157043103011b6f407d6556dcd9845818ae21eee520271dded25
MD5 2cb7fe7d1a22531b44f82209265a21e7
SHA1 5ad3bcd8407fa61cc9ac2b8b7a01e189b2445b78
SHA512 08ad985cb0b81918e29d5aff88468f220225f62b35c78381ccdb54b1cfa9e4606c9e9fff504618b77ad8ea56c7c6f868d5ede767d4ab482e6f4ce7bfc5be521d
SSDEEP 192:SON06ytyQmiUy3RtROCTVgMEkOrftajb+203UM+q+02U6:SON06rurOCTVakOrlajb+25MeU6
TLSH
T18E121936BC786C779EE26580F48732139FA8416BDA467B80D4DC2F1C01DB6AC230BC66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cc426298-0c7a-45aa-be1b-230f6f6a6aa7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\cc426298-0c7a-45aa-be1b-230f6f6a6aa7.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 cda5fee6589b0dda634a7dab1f391430366b83906802627605c487a98c0f34e6
MD5 6a142b296dd5d27c6f13cc24e6a9a2bd
SHA1 38a021815e81fbc155f7f0d0dc1be8119e3c9966
SHA512 5e335b6e489c265648e75b55cb324e326daeda703184debbb25fe5899b1bd6a2103b6cae6d3c7442ad102a56818b083eb53185584e65e5ae85bb1ae8467fe577
TLSH
T12A411858BAEA1158B3B76F169FF3A4AD447A7D772F06C45D10110D4E0A23B40C9B1B33
MD5 SHA1 SHA512 TLSH

Submit Download