3e10b452175f0acbfcda6bc2487e308e0c5f4913f1ca5b0ed77be7a462a066bc

Analysis

max time kernel
148s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/09/2026, 22:15

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
attachment20260930-527357-wsh93x.html
Size 171B
Sample260930-16fp2ssclb
SHA256 3e10b452175f0acbfcda6bc2487e308e0c5f4913f1ca5b0ed77be7a462a066bc
MD5 e082ebc14f6b24945336f6450b985e45
SHA1 df12ad35c265b0198582e2dc94e0a93048e4de82
SHA512 8dac8fb7101ee6a50ec58409a7d51009d9a3f6b1266377cad6f7f9001bc6f6734ffc067e7cfd0f17a1d0e288803fa8c8d37925590f6421772323ce99a4a9a1bf
TLSH
T1E4C08C7D10C13C150270A93C1DD3B397EC93198E01422B41308180232F35620CED32D0
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
984	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1696934516-3600988056-1840298893-1000\{179B6889-96B0-4814-81B0-5C660E4DD0EC}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1860	msedge.exe
1860	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4680 wrote to memory of 4308	4680	msedge.exe	88
PID 4680 wrote to memory of 984	4680	msedge.exe	89
PID 4680 wrote to memory of 1808	4680	msedge.exe	90
PID 4680 wrote to memory of 1808	4680	msedge.exe	90
PID 4680 wrote to memory of 1808	4680	msedge.exe	90
PID 4680 wrote to memory of 640	4680	msedge.exe	91
PID 4680 wrote to memory of 640	4680	msedge.exe	91
PID 4680 wrote to memory of 1616	4680	msedge.exe	92
PID 4680 wrote to memory of 1616	4680	msedge.exe	92
PID 4680 wrote to memory of 1616	4680	msedge.exe	92
PID 4680 wrote to memory of 1844	4680	msedge.exe	93
PID 4680 wrote to memory of 1844	4680	msedge.exe	93
PID 4680 wrote to memory of 1844	4680	msedge.exe	93
PID 4680 wrote to memory of 2380	4680	msedge.exe	94
PID 4680 wrote to memory of 1204	4680	msedge.exe	95
PID 4680 wrote to memory of 2380	4680	msedge.exe	94
PID 4680 wrote to memory of 2380	4680	msedge.exe	94
PID 4680 wrote to memory of 1204	4680	msedge.exe	95
PID 4680 wrote to memory of 1204	4680	msedge.exe	95
PID 4680 wrote to memory of 3060	4680	msedge.exe	104
PID 4680 wrote to memory of 3904	4680	msedge.exe	105
PID 4680 wrote to memory of 3060	4680	msedge.exe	104
PID 4680 wrote to memory of 3904	4680	msedge.exe	105
PID 4680 wrote to memory of 4800	4680	msedge.exe	107
PID 4680 wrote to memory of 4220	4680	msedge.exe	114
PID 4680 wrote to memory of 4596	4680	msedge.exe	115
PID 4680 wrote to memory of 4180	4680	msedge.exe	116
PID 4680 wrote to memory of 1364	4680	msedge.exe	125
PID 4680 wrote to memory of 1364	4680	msedge.exe	125
PID 4680 wrote to memory of 1860	4680	msedge.exe	129

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\attachment20260930-527357-wsh93x.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ffece9bc188,0x7ffece9bc194,0x7ffece9bc1a0
  2⤵
  PID:4308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1948,i,5723866754085500939,6923926365630440447,524288 --field-trial-handle=2312,i,8970234090236932060,2436011442070703558,262144 --variations-seed-version --mojo-platform-channel-handle=2340 /prefetch:3
  2⤵
  - System Time Discovery
  PID:984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1780,i,13560516087969628759,2583959062280600558,262144 --field-trial-handle=2312,i,8970234090236932060,2436011442070703558,262144 --variations-seed-version --mojo-platform-channel-handle=2308 /prefetch:2
  2⤵
  PID:1808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2608,i,9995965553404844605,6182510664833455514,524288 --field-trial-handle=2312,i,8970234090236932060,2436011442070703558,262144 --variations-seed-version --mojo-platform-channel-handle=2616 /prefetch:8
  2⤵
  PID:640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3460,i,13986908642453378123,5355613780817683670,2097152 --field-trial-handle=2312,i,8970234090236932060,2436011442070703558,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:1616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3468,i,983458800969866903,12516287755243110525,2097152 --field-trial-handle=2312,i,8970234090236932060,2436011442070703558,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:1844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4228,i,15094393906472694751,15771549128997058166,2097152 --field-trial-handle=2312,i,8970234090236932060,2436011442070703558,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:1
  2⤵
  PID:2380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4256,i,7452161075636090677,3109787113507994255,2097152 --field-trial-handle=2312,i,8970234090236932060,2436011442070703558,262144 --variations-seed-version --mojo-platform-channel-handle=4300 /prefetch:2
  2⤵
  PID:1204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5140,i,1320006794104350415,5522495781618116784,524288 --field-trial-handle=2312,i,8970234090236932060,2436011442070703558,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
  2⤵
  PID:3060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5144,i,16814431632424049371,11418484976442989099,524288 --field-trial-handle=2312,i,8970234090236932060,2436011442070703558,262144 --variations-seed-version --mojo-platform-channel-handle=5204 /prefetch:8
  2⤵
  PID:3904
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5776,i,11404252871843544029,593572470226016361,524288 --field-trial-handle=2312,i,8970234090236932060,2436011442070703558,262144 --variations-seed-version --mojo-platform-channel-handle=5832 /prefetch:8
  2⤵
  PID:4320
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5776,i,11404252871843544029,593572470226016361,524288 --field-trial-handle=2312,i,8970234090236932060,2436011442070703558,262144 --variations-seed-version --mojo-platform-channel-handle=5832 /prefetch:8
  2⤵
  PID:4800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4312,i,10075068586331102668,17808284702536366243,524288 --field-trial-handle=2312,i,8970234090236932060,2436011442070703558,262144 --variations-seed-version --mojo-platform-channel-handle=5104 /prefetch:8
  2⤵
  PID:4220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2620,i,301198261506899985,13042915684881919678,524288 --field-trial-handle=2312,i,8970234090236932060,2436011442070703558,262144 --variations-seed-version --mojo-platform-channel-handle=5776 /prefetch:8
  2⤵
  PID:4596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4528,i,16325503124066556650,11485936060204951471,524288 --field-trial-handle=2312,i,8970234090236932060,2436011442070703558,262144 --variations-seed-version --mojo-platform-channel-handle=4468 /prefetch:8
  2⤵
  PID:4180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4500,i,15254759528324295178,1219640656489218147,524288 --field-trial-handle=2312,i,8970234090236932060,2436011442070703558,262144 --variations-seed-version --mojo-platform-channel-handle=5420 /prefetch:8
  2⤵
  PID:1364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6364,i,5733873353634440658,5163255567953462734,262144 --field-trial-handle=2312,i,8970234090236932060,2436011442070703558,262144 --variations-seed-version --mojo-platform-channel-handle=6136 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1860

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1836

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 5421c8b0bf6e5f37422a05b412b233cde63f1db63aa71d65c91c5b31275595c0
MD5 07f616e3db8597d59ea940f94c1abb0b
SHA1 eedf28342bbff8c4cae798c2980ea6953992f1b2
SHA512 30782b7b7d8c6db47a40bc15f968f35fca7939aaa4b83a8a19c8f5a415c745b54c161abc0037d24bad8ebf15d5deb4134f24e357c1b5869f1598fa22619302be
TLSH
T163D0243C7F114D50D40041710530D50435D3CC1740D015050C354C074C101C11305CD0
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 daf8c1243ee20a2e95a6bd65ee87f94e97a213f1bc26473da181514314bf0e5e
MD5 22b29b46992ba3d1fd586e35207b402b
SHA1 03a007676fa49e6e9fbeffbbc2e943124c1b3d3d
SHA512 3634d483353d2e9fb49d846c71c6867053c6a8f1ead10608addea75574d5ce0e36c8de933f71d10bae9682752372e6f7925bbc3c9d982dfe840a9d664f859687
TLSH
T1BDD0243C3F514D50DC0041710530D50435D3CC1740D017070C354C074C101C11305CD0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 aee0c4b547cadde6602f67f851df2120a18be861122123fbf848f300def089f9
MD5 7f22fd175f5f11d5837f82c7bb57f046
SHA1 bf011227df40fe5a3a0beb9072fd45d960b6ff52
SHA512 80bd4cd9995bf012ecc337105c95a00df973db7920b2b49961d92ff709c28d3d0f720b07734de16cae24d6b2efe25915aef1758a6b217238234b91aef7af0d8b
TLSH
T19C612A81077054BACB68617895E509CEB6684CF5A583CF8223A6FC6FEF063744B640E2
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59048a.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59048a.TMP
Size 3KB
SHA256 d62381b149d1c158eb57e70a0ddd6dab731f170936725b31f5c7afc81807a173
MD5 d06103c6d6a3064c78d6f19b1b6b925c
SHA1 762fbd2610d3fdad7c9214a6887228fe2e6f1a6d
SHA512 af3ce445a5a0f82aef91d9a6e958ac64c6d89a5036febca643650598588f2b77cfae68038616a4d03a70d1b589ff1c994f4cf9fb760a3eea4e9402eea46ab5cd
TLSH
T1C1612B81077054BACB68A13895E509CEB6684CF5E583CF8223A6FC6FEF063744B640E2
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 7bb417cfe8e638baf349c361b7b69de7aa24e0cd9290b029b590b656c963a7ff
MD5 1630738afc3b53fa2466f57e5e4022c3
SHA1 90a5379f0da1cf4a2b5f14d31422725fd6908634
SHA512 d3d9ed09ceec241ee179f815eb817717a88f4e1b681f1089a62b751085e21c2fdcbaa74bf060ca15fa9c161cc00411e92d28002ac5694700ce8ee21c7d149770
TLSH
T1EC117AF3C7E5C5AE890156F06A24EE2BCE2D0A46821C7C19D9D4EF2B93E3075E10259F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 91a5efe7cf5295b2c7e89ef37ed5d380e0d20aae2494e4fa472ba653b45518ac
MD5 1e095a767b920a4a1d32939d0bc33b9a
SHA1 694316a9d3949913d43b14f9448db9cb064ceb51
SHA512 2c72762c29448bfc69258f2454382b9e0b5bbec176882f91e0ac4f63e33c3056979ca27c65eabda46048546a75f90f062f334e06e15715df16209e4cc3ec31ad
SSDEEP 192:sxZ3R6Wj/fUsieIdpduHW6+WNGY3R9DIgrJ:sxZ3bj/fUsiPEHbGA9
TLSH
T1F112A8126E28697B8CC7D21DBB257F53E6F9503261D41E58EAFCC61C05E66DE120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 0546ec2bc47dbd4375703e9382b19b8c860bebd1f751cdd0c6790c00d252fa14
MD5 bfd4da3dacd150f562a56fca20537598
SHA1 317aa06a46833ee165384535c30c47e55da9998c
SHA512 f9f73b792cf3b9ffcc1c998f2ea5b250b7023b4a0e0edcbe50ee82ee281f54975f846e9944ac516e73ae03ea3e691e06dd70db60e3c87af0f70110ed5642e2ee
SSDEEP 192:sxZ3R6Wj/fUsReIdpHuHW6+WNGY3o9DIg5eTJ:sxZ3bj/fUsRPOHbG5a
TLSH
T1E522A8526E78697B8CC7E21DBB25BF53E6F9503261D01E48A6FCC61C05E66DE120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 230e40c101affc6246b95537baee7a48fa197ecc27cc2f7f4166bfa214baf528
MD5 784dfd09d32cc21779741e0bd0f92c33
SHA1 710008cdff20ba47e0bf071472e38b9987697786
SHA512 58204f20be63bc2be4ea5a1fe3e728e6df8bc342f20b5808f14460424f4d88d269e9e1f849a03ffda32dbac49f59e47d4a57d1f7d9560a7b75bf7d9a4529edbf
SSDEEP 192:sxZ3R6Wj/fUsReIdpduHW6+WNGY3d9DIg5eTJ:sxZ3bj/fUsRPEHbGKa
TLSH
T19322B7526E68697B8CCBE21DBB25BF53E6F9503261D41E48E6FCC61C05E66CE120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 4e05bfce29e89abe6e8325064c3a3b2994838985d64cff050240a366e984f13f
MD5 6e3a5f16af76ed35ff68090ea9189417
SHA1 752a8d5ab146a132edb0005e44dcc257f737da1b
SHA512 b9bc56fe6655a749196f2aa1c77a6bf2e2ad0d84a9431f9a74c5dd22dd2084ee0ba56c51c29ed1d34370106d1c5d8eb0c70692dcf296fa5689c2d482d55812b9
SSDEEP 192:sxZ3R6Wj/fUsweIdpduHW6+WNGY3R9DIg5epJ:sxZ3bj/fUswPEHbGAA
TLSH
T13522B8126E38697B8CCBD21DBB25BF53E6F9503261D41E58E6FC861C05E66DE120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 84c3abc2d3d53cb857fffc152bfeb81cb942d46e6f2abefff5a9eed3807ffaa5
MD5 1ec22ed0a5b48104d05ada3f67cd86db
SHA1 15bf1705c9971fc5d2353f3aa8730ea8cf16186b
SHA512 d556f0e371cb168953459b7b5b1360de085cc54be89ae1cea3bd51d4030cb8fbb1044af356be78a431656db00882cf292efb8dc549f19184ab6e038c02dece2f
SSDEEP 768:xb30AbSWvS2l98F1+UoAYDCx9Tuqh0VfUC9xbog/OVGmLlLJ722rolZMd:xb30AbSWvS2l9u1jaLmLZ12NK
TLSH
T1FCC2D93B640CCB7E4FC01A9DDC6AAF9B6E9C02C796648D4447FA984C02C77EA51274DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 f2adf21bafae13e5bcb9a02af0c9584689cde1cb6a009d6f3ddd25b12feac520
MD5 a9655a56b55b34bba8caea8fdd7ebf90
SHA1 acb1dd7fc299be3505291cf633004e738583cb08
SHA512 a6b7b47ebb098d06a8980c4c1cafd8e22b0b8ec1a71d266e4045c94ea0983375e2d4decda9105ec963ed09d5a94d2ad82a5ebb438456c47403f104a159b623e6
SSDEEP 48:K0YdYcYRYtYfYLYPYwbYDY2YjISYlYwK9Yl1YHYwxY1YgYYmYnYdYdyL5IVpzhrH:KQN2K+g6TrqKkke2dWK2g/
TLSH
T157915410307B165078BD294985B4863E468272B33519EA3BBFB901A74F7BF140EFE8D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

caa6a9c2-3fa8-4ea8-813e-e32c58cd8200.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\caa6a9c2-3fa8-4ea8-813e-e32c58cd8200.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 59fd87b1fa6fb8d3468c862f3cb4762411d4711747783a9b1ae9761ea2f0dcda
MD5 5f7dbc48bb77f850ff95160af46669de
SHA1 4b1f288323b1e5cf2507af6d7423e9001cd9f4fc
SHA512 998ca8219349097d1dabb86cf7b89bb17d678df2e5d8fed51f7f206e9016c5e4bcb40576032b9ed2e9c0e2b17009a21277bf67fc55d9359f2455c43220590aa7
SSDEEP 384:JZcIhsNG2UWpuRi7J9iX5Frnr4tgOIwZOy4LFo9:BhiwYHa3r4XsrJO
TLSH
T1FC827D329CB89D7B9CE79151F14636035FB8812BEBC8AF94C8ED672D01DA6D5030BD22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 90238cd3ec1cfee9af2a8dedeadf1832360899cc0536f78553c1a19f25a63a19
MD5 987f06e86c4c10e10f94851d90803ed7
SHA1 f7740b9855f7a959875e5f07a5bd648722ea762f
SHA512 10c143c4117dfcc8054f26b878cc19dbd17cdd891ddb18005d8010eb123879bbbf44772aa630970e7501d0c221f3c91be598083ccabd10c824e848f781b567f1
SSDEEP 384:kiFiZcI4zsNG8TUNTUlIlrUWpuRi7J9iX5Frnr4tgOIwZOy4LFo9:/FQE/wgBwYHa3r4XsrJO
TLSH
T151A27D339CA8D97FADF69A84F54A32039FB58167DAC4EE94DADC6B1C01971D8030BD12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 f480fd0455b7e2d765ab6da81d79b53e4286817cc2eb1abe9c6c897cde1d8d38
MD5 032e14525b9adcde5adf7bdb1d242a05
SHA1 4480a1bca9aec3b057e05ef992be69dc5358e4b0
SHA512 9a0d020d2610a93d1fb734a49bc78ea2de6647d0d54d209b4bf7f41564c5e238aabd9a9c61c0304fc72fdcc60218452276a6961569a384d0dd4520db7e556559
SSDEEP 192:LONH6AmwprQmiUyCm6siX5FGyhaJi05BU6:LONH6ipdc6siX5FrR0fU6
TLSH
T1A102EA35AC786C7B8DF3AE15B58736136FA5112BEA942F44CEE82B2C01D769C1306836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 9f188b7e4541a6bc5787319f06bbcf724aca2a1ab6b76b919e9b22c3d82912a8
MD5 600798386c5a3e14a2ea37905cd1be15
SHA1 c3fbcf2478f84e49e2c86a03175b87d8d25a5e81
SHA512 7b9367af2b3b0c22c315751255056ece81b310ad0fa7f1e5cdf446fe0acbd17d15f6521736405216385445002649e6ac9326cb50e1fd408b6c4cb8cc240a87e7
SSDEEP 384:hZcIhsNGrUWpuRi7J9iX5Frnr4tgOIwZOy4LFo9:phhwYHa3r4XsrJO
TLSH
T19F827C329CB89D7B9CE79150F14636035FB8812BEBC8AF94C8ED672D01DA6D5030B922
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 29a095638e9d77aca6d1fc8b0fbd8e2ac64ca81f887d16910ad5865016fadf6c
MD5 cd52d697e96de236ab0dab9d66c1ea50
SHA1 1ed40a774b60899dbf4299097407777b0a08e8de
SHA512 07f44cf232fc307a459d4dfba8d82969cb039232cd271ac9edad3cce4415129476b3b32e423c863d6f75b2476eaf0b40687c7a00972cebe86ae789c6662ccf96
SSDEEP 192:LONf6Amwp8QmiUy8mrsiX5FGyhdglRtqVU6:LONf6ipMorsiX5Frna4U6
TLSH
T1A2122B35A8B8AC7F4DD3A455F04735135EB5422BEBC87F94C9DD2B2C01DB598530B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

817fcbb1-edae-40d0-9abe-589e9bae4b3b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\817fcbb1-edae-40d0-9abe-589e9bae4b3b.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 0d40ecf57a9fba3a08337e24ba85b3e33c4d24092e09ed692a61ff2ccbe3ef35
MD5 c401f7e2694d9b84a9cdcef2b77a5d86
SHA1 4126d7e7f1e1f894f78208fd5ebb4fff09105e88
SHA512 843a31760d93ace6e959e4611fcd0b200586de9e752abca7d4c1bf40f1ef202ba812bec0a3f64b105daca8db82c1414ac61f3caff816ce12dbbb8b3f75afaea3
TLSH
T198410B58A6F91148B3B76E4AAFF7A86D847FBC772E06D45D00110D4F0A27A00C8B1B37
MD5 SHA1 SHA512 TLSH

Submit Download