hxxps://portail[.]net-entreprises[.]fr/priv/GestionDeclarants/acteurAttente/show

Analysis

user interaction
yes
max time kernel
149s
max time network
142s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
29/09/2026, 16:06

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://portail.net-entreprises.fr/priv/GestionDeclarants/acteurAttente/show
Sample260929-tkfdtsweje

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1116	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-895009113-1202185046-1686627690-1000\{A991A636-1F2C-4E65-9B08-3F0D70A7AF51}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1136	msedge.exe
1136	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 540 wrote to memory of 3760	540	msedge.exe	86
PID 540 wrote to memory of 1116	540	msedge.exe	87
PID 540 wrote to memory of 4524	540	msedge.exe	88
PID 540 wrote to memory of 4524	540	msedge.exe	88
PID 540 wrote to memory of 4524	540	msedge.exe	88
PID 540 wrote to memory of 2592	540	msedge.exe	89
PID 540 wrote to memory of 2592	540	msedge.exe	89
PID 540 wrote to memory of 1112	540	msedge.exe	90
PID 540 wrote to memory of 4112	540	msedge.exe	91
PID 540 wrote to memory of 1112	540	msedge.exe	90
PID 540 wrote to memory of 1112	540	msedge.exe	90
PID 540 wrote to memory of 4112	540	msedge.exe	91
PID 540 wrote to memory of 4112	540	msedge.exe	91
PID 540 wrote to memory of 1768	540	msedge.exe	93
PID 540 wrote to memory of 1768	540	msedge.exe	93
PID 540 wrote to memory of 1768	540	msedge.exe	93
PID 540 wrote to memory of 2456	540	msedge.exe	94
PID 540 wrote to memory of 2456	540	msedge.exe	94
PID 540 wrote to memory of 2456	540	msedge.exe	94
PID 540 wrote to memory of 2796	540	msedge.exe	98
PID 540 wrote to memory of 688	540	msedge.exe	99
PID 540 wrote to memory of 2796	540	msedge.exe	98
PID 540 wrote to memory of 688	540	msedge.exe	99
PID 540 wrote to memory of 240	540	msedge.exe	103
PID 540 wrote to memory of 240	540	msedge.exe	114
PID 540 wrote to memory of 4756	540	msedge.exe	115
PID 540 wrote to memory of 2484	540	msedge.exe	116
PID 540 wrote to memory of 5052	540	msedge.exe	123
PID 540 wrote to memory of 5052	540	msedge.exe	123
PID 540 wrote to memory of 3592	540	msedge.exe	125
PID 540 wrote to memory of 3592	540	msedge.exe	125
PID 540 wrote to memory of 1136	540	msedge.exe	126

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://portail.net-entreprises.fr/priv/GestionDeclarants/acteurAttente/show
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ff9e5fbc188,0x7ff9e5fbc194,0x7ff9e5fbc1a0
  2⤵
  PID:3760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1956,i,3491262148942736432,16773303887586929660,524288 --field-trial-handle=2416,i,14052228939737729508,1389929053646812766,262144 --variations-seed-version --mojo-platform-channel-handle=2512 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1716,i,5554068788860326430,17406533814085110711,262144 --field-trial-handle=2416,i,14052228939737729508,1389929053646812766,262144 --variations-seed-version --mojo-platform-channel-handle=2412 /prefetch:2
  2⤵
  PID:4524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2340,i,12445424182623531312,15936872254968094155,524288 --field-trial-handle=2416,i,14052228939737729508,1389929053646812766,262144 --variations-seed-version --mojo-platform-channel-handle=2644 /prefetch:8
  2⤵
  PID:2592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3444,i,6248649111069118847,2958783196522854623,2097152 --field-trial-handle=2416,i,14052228939737729508,1389929053646812766,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:1112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3452,i,11160802843801116930,8307618744007499056,2097152 --field-trial-handle=2416,i,14052228939737729508,1389929053646812766,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:4112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4228,i,9939531432533607859,3338374416600665970,2097152 --field-trial-handle=2416,i,14052228939737729508,1389929053646812766,262144 --variations-seed-version --mojo-platform-channel-handle=4260 /prefetch:1
  2⤵
  PID:1768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4256,i,5845485957856618072,14956992640092555690,2097152 --field-trial-handle=2416,i,14052228939737729508,1389929053646812766,262144 --variations-seed-version --mojo-platform-channel-handle=4328 /prefetch:2
  2⤵
  PID:2456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5136,i,9002014460401183053,17431572341751440599,524288 --field-trial-handle=2416,i,14052228939737729508,1389929053646812766,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  PID:2796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,1246495580001452369,3131500674670360119,524288 --field-trial-handle=2416,i,14052228939737729508,1389929053646812766,262144 --variations-seed-version --mojo-platform-channel-handle=5224 /prefetch:8
  2⤵
  PID:688
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,16840985188157474676,14209276198540144485,524288 --field-trial-handle=2416,i,14052228939737729508,1389929053646812766,262144 --variations-seed-version --mojo-platform-channel-handle=5920 /prefetch:8
  2⤵
  PID:1480
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,16840985188157474676,14209276198540144485,524288 --field-trial-handle=2416,i,14052228939737729508,1389929053646812766,262144 --variations-seed-version --mojo-platform-channel-handle=5920 /prefetch:8
  2⤵
  PID:240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4240,i,12183072797155282046,5506380949342900733,524288 --field-trial-handle=2416,i,14052228939737729508,1389929053646812766,262144 --variations-seed-version --mojo-platform-channel-handle=4728 /prefetch:8
  2⤵
  PID:240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4340,i,13485713704880624373,5632871913359399257,524288 --field-trial-handle=2416,i,14052228939737729508,1389929053646812766,262144 --variations-seed-version --mojo-platform-channel-handle=5956 /prefetch:8
  2⤵
  PID:4756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4444,i,3794859413247357948,16935151317031121245,524288 --field-trial-handle=2416,i,14052228939737729508,1389929053646812766,262144 --variations-seed-version --mojo-platform-channel-handle=4504 /prefetch:8
  2⤵
  PID:2484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4728,i,9768025504746779587,5229729512304868655,524288 --field-trial-handle=2416,i,14052228939737729508,1389929053646812766,262144 --variations-seed-version --mojo-platform-channel-handle=5440 /prefetch:8
  2⤵
  PID:5052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=752,i,15105918957833842825,12345362762423405089,524288 --field-trial-handle=2416,i,14052228939737729508,1389929053646812766,262144 --variations-seed-version --mojo-platform-channel-handle=5164 /prefetch:8
  2⤵
  PID:3592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6592,i,17465859833543422446,16440079718746610301,262144 --field-trial-handle=2416,i,14052228939737729508,1389929053646812766,262144 --variations-seed-version --mojo-platform-channel-handle=6128 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1136

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3212

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 928eda824fe964cd23927cf06086d7d24e20a3a5092daf1acee5b632c76c962a
MD5 4ac43ee6512ba8635b7ba6bd015c291b
SHA1 5f9e2474b00ec0e2a9472c049fbea550e26309aa
SHA512 e5ebf9e92458f66e31e080121135313e828b8ebade0bc0e085221ae0d4f5afe0d2035c566590cbfb5902d96f17befe7b24310b4fb9e647b999113175af800ebc
TLSH
T17BD022B2B3A038CFE300083302A083BA2C0A80F300FAE2208C30E08C0BCC02AC283880
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 93c2ca3ce74eca17f27aa90cc3323bb8d6aea5c365862a01a512ce14b9f825b4
MD5 e8a3239e6b22580d77fb537c7bea1fab
SHA1 a99ffe9234c27e560f1c607d3b6c6507928368a3
SHA512 17b0e6f99943a02540148a685b91c62eafca3ef65d9a628bfb59d3b69a93b27c7d3ac42bdc808c52b5b1eac9bf4466a1099df17cd3f5df0bbd5b5282ca8b904e
TLSH
T170D0247133D03CCFD7000433015043751C0540F300F5D3104C30D04C07CD055C143440
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 b87d4b98187c7ec4888a0dead32f7970599ef8929d6b7f60ff35fff5daf67f9d
MD5 b20d6e8cc1b00026ceac0087bc6dc429
SHA1 893e1e184baea0bed771b4f305c5ebc26e1463d0
SHA512 d8f98e3c36b24220c220caea31d7aa4269869d125982e7f2ae7b3bad26c381af2430a06161aa5487e1d0bcbfdeaae9cde429002c2c40f742e50ec0ea77888e18
TLSH
T1E271BF40CC80C0D9F7E5637362DA2C6BB57A50802D6B0EB296BEECFD5C46F564684E61
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58c5bc.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58c5bc.TMP
Size 3KB
SHA256 afb62c8bb9a5b09e1b2b7fae6a10fb6367536d6b0f1d247a493f3ac1c371ba96
MD5 087b532d103e9f1f152cf0e8d835e563
SHA1 a902da7305cd02c36e1248d7b129c05f4f91c547
SHA512 f665defec54e40f9421bfd8eb5aa22020243d6202a63a0890223279aa372f83c3dfffcab74c810f1e8278ad208054f7ba841b832f5db12ea6ecbc0097e3842dd
TLSH
T1606196808D80C1D9F3E16373A1D72CABB5BA50C11DAB0EA1597EEDFD884AF1656C4E34
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 15fb26c18910aff9da591942db8dfeaa5d75d7cbfd74a3819af43041c7385251
MD5 967a968b673a81ee487d1bfff3d67232
SHA1 f0ecc98c5142b039978f9df02eda7b041b8a780a
SHA512 c305637e3a95856935ac147d24693be40e7b63eabd348b1f5fbef341637ea13f7036b4161fbb65be7993b0b02e00995d8fbcd21b007321e1ed9bdb8914d130e7
TLSH
T16F2179F383E585AEDE1156F09A14AE2BCE2C0506435C7C59C9E4EF2B93F3475E002A9B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 c171bab3d6be954a536537089bfc9e54b9e84112b27e3e7bf96d967ebc3143a7
MD5 4772238051dcf0fe3709bb702738bdf8
SHA1 8af1b845845f4074133b70de76012b26a034475b
SHA512 a1517e22bb81d9d318bab225b098e92a890afd71fb76b2efd0e6e9142908670033c1d220294d77699069da71bd24f400fb8c312397522bcd5153ba4e369e9a99
SSDEEP 192:sxZXSR2Wx/fNsYVIdpF+HW6+WNdrH/Y36dRMIgrJ:sxZizx/fNsYm0Hb9/XU9
TLSH
T14F22A852AE28A57B8CC7E21DBA15BF13D6F9103251D11E48E6FC861C05E7ADD120B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 c59b35b355283d5b411679f51b08d943ce853c5b628e53e89f57d2988d3c279f
MD5 b3ca590859836b1b5ee66b1b0b26bf7a
SHA1 e56c6ed905d20a902997a1271dcdcd349416e28e
SHA512 5f809156869a256391a43daed67d01af279ccebe4bbe95e74f234a3e7f6a472290a935310ebfb84f409f7f9f0b7d6c87999c9f3b2f171e7b67e5f6f064c63ae4
SSDEEP 192:sxZXSR2Wx/fNsIVIdpL+HW6+WNdrH/Y36ORMIg5rJ:sxZizx/fNsImCHb9/XPv
TLSH
T12B22A752AE28A97B8CC7E21DFA15BF13E6F9503251D11E48AAFCC61C05E7ACD120B40F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 e35d687954e7ffa7dca07df492d3023d999aebdefef106bc0941a8cf775f7b19
MD5 b701832ee77590bf3f09ee1703d4fd61
SHA1 e6559dc7f90194b65ce278ed900c979cde30c55b
SHA512 6e49207f535d2e3ea003f9c365bef753aafcb1593e7b438d45a81779f3e02d8f99ba4777426756fa422bce3648f97cb0a18c908d868647ae606a2c8b367ec200
SSDEEP 192:sxZXSR2Wx/fNsIVIdpF+HW6+WNdrH/Y36WRMIg5rJ:sxZizx/fNsIm0Hb9/XHv
TLSH
T129229752AE28A97B8CC7E21DFA15BF53E6F9503251D11E48A6FCC61C05E7ACD120B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 dedd67546c1e6e14dd6ba81cff672047eb9579aaf8514e22d9276f2d752632e4
MD5 9f82373439cd05ed64508c3d5033c1e2
SHA1 e55f687ecbc2b932b6736cbe3ea91d0c9157ad88
SHA512 f5b88d57f0bd6bd53e29f9778437e19017655ac0f3cd7a47a63eed2052d512fa36932fa73c592d884838a56d7b39111e5a0344c1d5a681cfb4994e14d17ee46a
SSDEEP 192:sxZXSR2Wx/fNsIVIdpF+HW6+WNdrH/Y36dRMIg5xJ:sxZizx/fNsIm0Hb9/XUZ
TLSH
T128229752AE38A97B8CC7D21DFA15BF53D6F9503291D11E48EAFC861C05E6ADD120B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 2ddaf094630292249f6ac2212d60b4afca526f70d8451c8744e2016c4c000f2c
MD5 62c5ad83a4e0e8fe4a10e13b854f35dc
SHA1 2cf7d10c8c4028920c4141902a8c4dcb1d5b8311
SHA512 7165a1617d7cde2b26215de4372c16540aa9b4df87c1f72a53fe69dc784106e372200b5b960dad0b9d9078176e0ee78337a6065988152121c9e150601ff8015d
SSDEEP 768:sWKlm7QWvUYe08F1+UoAYDCx9Tuqh0VfUC9xbog/OVh/LlpPs/zro4S:sWKlm7QWvUYe0u1ja8/L/E/A4S
TLSH
T1A1C2FB3B640CCB7E4FC05A9DDC5A6F976EA802C7A6588D4047FA984C02C77EA512B4DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

586db635-7444-4854-9b3f-fcc070857373.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\586db635-7444-4854-9b3f-fcc070857373.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 080f856f55ea7752a0671cf4cf285fece194708614d894e819d0e7dc2fecbc74
MD5 13465ed667131e5aed66ee0c823b4e5e
SHA1 fa62e592c5d92a31b51a8256f6ee02ea321c5904
SHA512 330db0694da205b52e7c16064370a049c501c4030e6dd924c6758fe8dfbeadc7b5d7a09dd8284dfb009be2b698118c6af278a715563132f522877e081b2efc2d
SSDEEP 384:WiZcIhsN89N/beavh//YhyA3tgOIwZOytuol:Dhn5/QsA3XsVO
TLSH
T1A9827C329C78ACBB5CE7E145F487B2038FB480A796C55F94D9DEAB1C02D65A8030BD27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 1e0548af96271bda898ac221676890528abed6f270dbc91dc3ac122f6b7edc84
MD5 5e538084792c5af28e7f25404a3555ae
SHA1 36c9b7818f07497a09453e7f3b561798b706a1ff
SHA512 ae3849dd2787a0aecad462e582d87c16215c05428afaf329aefa449c21a54532b1f43bb8ced8d62c4da37f5281d637800132f8fc480700336a3938a5c06fae85
SSDEEP 384:nYiFiZcIDzsN08TUNTUlIl0N/beFvh//Yh+A3tgOIwZOytuol:jFQHhwgx5/QsA3XsVO
TLSH
T1B2C219F248D7887AD8AE9747B77E2D028EBCC067B5809A54B7C9561CCD960BFC306C15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 9f62fee11d6ea78b1f1ede57df89aca61fa88c956b6004859a36d8db26f62d67
MD5 1efa7c4c8e30c6fb3b5b646ccb102f2a
SHA1 4387891a0725198f1e112fb1c7f396290bd7c33c
SHA512 877444d2446186d06958d828bd9859f83e5cfbb67c7c291f3fa8389c82352ccb0bacd6a0274bc8f4dade9d18a6dd33adbbce8e1eced86bc69fef7f54c27bb2cf
SSDEEP 96:KqONkrQsjpfbUmjH5ih/cIPURHl8h4otop5taD9BKP4v+Y1xf//ojdoxTeYzqso0:BON/6JUm0QmiUyujso//YpBCA61EYU6
TLSH
T1C702D739BC78ACBB9EE3AE45F48777239FA4106B96915F44DAD82A2C01D725C1307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 6b5dee6025f86d33ce5b3733a55129b0e9617a68c67dd13c85b046cbe0bcdb04
MD5 ca52199aee11f6948f656fb70a877866
SHA1 fdfb770dcf783a1a24fe5d9e0ed26d5b60718b78
SHA512 91821488f028181f0e8e615c3e9adadbaaf86b14b0fd8d4a479157684dff3a762e8ef9416cfe41f765a2641f7e023f0f71e45373462d4341fa82be8f20e3fae3
SSDEEP 384:PiZcIhsN80N/beavh//YhyA3tgOIwZOytuol:4h85/QsA3XsVO
TLSH
T114827C329C78ACBB5CE7E145F08772139FB4806796C55F94DAEEAB1C02D65A8030BD27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 2f5e1e831f574123fef273bc1d7363ab30d345bf7a51bf21e24d80b5827a9b2f
MD5 98c953701232f22c5d9d80cae6743a93
SHA1 e462829618b7d82f468f5213f4409271c4c1823e
SHA512 6b3c88ccd5ea6221956b7d7bb8f4944afecdb1bd508eb73fa67f2fff339dc32aeddead58aaa9c9fd7d3f1db26a70e050c9d102c4e6858adff7281744a37d3bf2
SSDEEP 96:KqONkJQsjpfbUaH5ih/cIPURHl8h4otop5tfD9BtP4v+Y1xf//ojdoxTeYzqsoVf:BONN6JU5QmiUyJjto//YhoNxAEqVU6
TLSH
T154121835B878EC779DD3A584F08776138EB4416BDB856F84D6DD2A2C06DB1AC930BC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2db51a1d-e2c4-451d-b091-7578578ce54e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\2db51a1d-e2c4-451d-b091-7578578ce54e.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 276c69329768833d93d6392a071ba6a0a4f7b5aed42f6d967d77a1f43ebd1dd2
MD5 e86e24405b5f973236e536f0dec184aa
SHA1 aaf2e03806e5aee9d54496c46b9eaf5050215a02
SHA512 8a774a52f4b7ab2f91d1db6879bf3acdcaee03e31e7ce66cb9fd5c089e03e3ac849f30fb69dea89ec830e503eff0ce2620bb01993578f6db51758921142a83fb
TLSH
T102414C58A6FA1148B3776F5A9BF6A87D887F79372E0A915E00110E8F0626A00CC61737
MD5 SHA1 SHA512 TLSH

Submit Download