af6f2b66f13d44d2ec1a96fd2846b3339c52234b98d44fc0fc8d72eaf817bf20

Analysis

max time kernel
148s
max time network
135s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/09/2026, 22:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
attachment20260930-527357-mw828.html
Size 214KB
Sample260930-2cs9qashlf
SHA256 af6f2b66f13d44d2ec1a96fd2846b3339c52234b98d44fc0fc8d72eaf817bf20
MD5 ca2c96be8ad4c1b27afc858a639eb1f4
SHA1 34bcbb32e3946883cf26447531ab98af52bcab62
SHA512 3437202655e3eb3621e7f896424eace53f0c5f24acf844be2b9d563d88009e6cf5a37bcddba9c2cbaba921fa3f1b6b8b256eb36e35e548489e0a5a04be7cb99c
SSDEEP 3072:opm0WkXwgEweVFmk0RHyEoCmetxWnm6t6b9U9QfyA7cxGTdTbLayQsH:oglIYWRHyrCunm6t6i947gGTx3pQ4
TLSH
T13024023459202B0E3B9246B4B26575A40EF90CB3E95F96227BC801F5EFED1F29049CE7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2104	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2251218687-1689653882-3767565116-1000\{0558B75C-D1F6-43AC-B4E6-46E6A2C0951D}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2464	msedge.exe
2464	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 1332 wrote to memory of 5488	1332	msedge.exe	88
PID 1332 wrote to memory of 2844	1332	msedge.exe	90
PID 1332 wrote to memory of 2104	1332	msedge.exe	91
PID 1332 wrote to memory of 2844	1332	msedge.exe	90
PID 1332 wrote to memory of 2844	1332	msedge.exe	90
PID 1332 wrote to memory of 2372	1332	msedge.exe	92
PID 1332 wrote to memory of 2372	1332	msedge.exe	92
PID 1332 wrote to memory of 2884	1332	msedge.exe	93
PID 1332 wrote to memory of 2884	1332	msedge.exe	93
PID 1332 wrote to memory of 2884	1332	msedge.exe	93
PID 1332 wrote to memory of 4376	1332	msedge.exe	94
PID 1332 wrote to memory of 4376	1332	msedge.exe	94
PID 1332 wrote to memory of 4376	1332	msedge.exe	94
PID 1332 wrote to memory of 3828	1332	msedge.exe	96
PID 1332 wrote to memory of 3828	1332	msedge.exe	96
PID 1332 wrote to memory of 3636	1332	msedge.exe	97
PID 1332 wrote to memory of 3828	1332	msedge.exe	96
PID 1332 wrote to memory of 3636	1332	msedge.exe	97
PID 1332 wrote to memory of 3636	1332	msedge.exe	97
PID 1332 wrote to memory of 3644	1332	msedge.exe	99
PID 1332 wrote to memory of 3644	1332	msedge.exe	99
PID 1332 wrote to memory of 4888	1332	msedge.exe	100
PID 1332 wrote to memory of 4888	1332	msedge.exe	100
PID 1332 wrote to memory of 4940	1332	msedge.exe	102
PID 1332 wrote to memory of 4712	1332	msedge.exe	106
PID 1332 wrote to memory of 2424	1332	msedge.exe	107
PID 1332 wrote to memory of 2860	1332	msedge.exe	108
PID 1332 wrote to memory of 5904	1332	msedge.exe	109
PID 1332 wrote to memory of 5904	1332	msedge.exe	109
PID 1332 wrote to memory of 2464	1332	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\attachment20260930-527357-mw828.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x264,0x268,0x26c,0x260,0x288,0x7ffdb78dc188,0x7ffdb78dc194,0x7ffdb78dc1a0
  2⤵
  PID:5488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1540,i,3638801614265615053,4917650861283586787,262144 --field-trial-handle=2420,i,16915851578969266027,12118281533175788590,262144 --variations-seed-version --mojo-platform-channel-handle=2416 /prefetch:2
  2⤵
  PID:2844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1768,i,16196192780339340164,11768926072148548036,524288 --field-trial-handle=2420,i,16915851578969266027,12118281533175788590,262144 --variations-seed-version --mojo-platform-channel-handle=2812 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2264,i,9868683716923233705,3251066330940322875,524288 --field-trial-handle=2420,i,16915851578969266027,12118281533175788590,262144 --variations-seed-version --mojo-platform-channel-handle=3040 /prefetch:13
  2⤵
  PID:2372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3604,i,473755735212323758,3900247026741950558,2097152 --field-trial-handle=2420,i,16915851578969266027,12118281533175788590,262144 --variations-seed-version --mojo-platform-channel-handle=3632 /prefetch:1
  2⤵
  PID:2884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3608,i,7694528194690600759,7415628576644360705,2097152 --field-trial-handle=2420,i,16915851578969266027,12118281533175788590,262144 --variations-seed-version --mojo-platform-channel-handle=3644 /prefetch:1
  2⤵
  PID:4376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4336,i,6900559798375467609,10422846182502331415,2097152 --field-trial-handle=2420,i,16915851578969266027,12118281533175788590,262144 --variations-seed-version --mojo-platform-channel-handle=4368 /prefetch:1
  2⤵
  PID:3828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4356,i,11449411795764853820,7076879729719899819,2097152 --field-trial-handle=2420,i,16915851578969266027,12118281533175788590,262144 --variations-seed-version --mojo-platform-channel-handle=4608 /prefetch:9
  2⤵
  PID:3636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5352,i,8441096817426737794,18325830856781230400,524288 --field-trial-handle=2420,i,16915851578969266027,12118281533175788590,262144 --variations-seed-version --mojo-platform-channel-handle=5432 /prefetch:14
  2⤵
  PID:3644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3628,i,6768856068015976560,6629218904937931711,524288 --field-trial-handle=2420,i,16915851578969266027,12118281533175788590,262144 --variations-seed-version --mojo-platform-channel-handle=5408 /prefetch:14
  2⤵
  PID:4888
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6136,i,7403597653025546836,8709989586113360075,524288 --field-trial-handle=2420,i,16915851578969266027,12118281533175788590,262144 --variations-seed-version --mojo-platform-channel-handle=6160 /prefetch:14
  2⤵
  PID:5352
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6136,i,7403597653025546836,8709989586113360075,524288 --field-trial-handle=2420,i,16915851578969266027,12118281533175788590,262144 --variations-seed-version --mojo-platform-channel-handle=6160 /prefetch:14
  2⤵
  PID:4940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4620,i,11379603471782347713,356808849385228388,524288 --field-trial-handle=2420,i,16915851578969266027,12118281533175788590,262144 --variations-seed-version --mojo-platform-channel-handle=5028 /prefetch:14
  2⤵
  PID:4712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5020,i,12095324810791607273,6071572649935824114,524288 --field-trial-handle=2420,i,16915851578969266027,12118281533175788590,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:14
  2⤵
  PID:2424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4652,i,2552522387620535692,14831893526005787772,524288 --field-trial-handle=2420,i,16915851578969266027,12118281533175788590,262144 --variations-seed-version --mojo-platform-channel-handle=4356 /prefetch:14
  2⤵
  PID:2860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6260,i,2397083386736875026,12849303216944036938,524288 --field-trial-handle=2420,i,16915851578969266027,12118281533175788590,262144 --variations-seed-version --mojo-platform-channel-handle=5540 /prefetch:14
  2⤵
  PID:5904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6124,i,5903374942598460974,9945059014385261111,262144 --field-trial-handle=2420,i,16915851578969266027,12118281533175788590,262144 --variations-seed-version --mojo-platform-channel-handle=6080 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2464

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:124

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2992

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ae4519203ea4a71f8bb5a86dffca3b288f02f1bf4cb8d6f78e8a591b676414b1
MD5 1293a304484c7d4be275f1eb20c69a28
SHA1 b568174debe43e00bc9d8880e0c5166dc6720312
SHA512 ffd84ca0277d7fb25239662676bdc1988ee3267dfd6a7a17da4c4ab32edd7fa146f36c8d8b2c5f1b06efedf5cf636eaa55943e5f89902c62e6a914ebbc3ae1b7
TLSH
T143D02BB1E0DD8473C0503078000581815215F842BEC555801F25D07C091014C234B10C
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a23025f4d05b749cd64019222483e40f71e2bd4380052e2b64a234eb0323dd12
MD5 f2999f57642ce17248d9900b8034961f
SHA1 5a92b97bdc3c0e5222e917e766218a9ee7568f1f
SHA512 001c4dde433f6d4b3121bd2e5736ab1443818c9c8ef22f8298c411039f23f15532e8510ef806e0f54b26c4ef31db9b77ed6c750a42b27167e98f8b691edafe8f
TLSH
T1F4D02BB1E0ED8473C050307C000681815205F8426AC555801F25D07C091014C234B108
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 95ab15caedf8d82c73f59e98da16459ee588a5e6a46fb65f8c70eb99b0eca4af
MD5 f510d5c7bc3c42e9215915296c46b315
SHA1 72bda352386d5380d290aa13e5071df77dfe14fb
SHA512 11fc5cce599ff6fe2be9b2dd6af6d69a2ab0ef70e1def087f98a420d28504610b80c095b6946a9545010be5c6072513d43c7cc494726e11f5343f5752190c39b
TLSH
T1F761738495E08355FF7BECB19ED432AF3678C5C28A472E1182BCDEB6B40EB525316094
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe596dd3.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe596dd3.TMP
Size 3KB
SHA256 8e1859fde58aa1f7efedd13b44d658892bfa50e68d2c219cdc923b8e40d19201
MD5 53e5aee9f78370c061c82762b9fb3b99
SHA1 5eb8e070fc65116f90a2b6ec0978292b980fffb0
SHA512 5afc7229423609230b56ae26a0529cc70c3adc6757a0490ddb7f2fd7c409c88a8c8122b872a215a3b3faf56d98103a01bc075475ff5b40ab6a471354a8e00b36
TLSH
T18E61848495E08355FF7BECB19ED432BF3678D5C289472E1182BCDE76B40EB166316094
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 0e6349dc573c4ac725e9724970a234dd7b2b9846c9c3539fbabe2259c34e273e
MD5 f4c66750b000583b694b2e99cd859168
SHA1 6b7bf326659ac4554aa9f3578ec0838d61c120b1
SHA512 9f2f1faf0790d85fa96273f9a1848ff5ecbd43596ff249d03c65149d16d4640501a1d89daaa0d6a8bbb1e8bdd02e5238e800fc0d89481236130b56ddb98727fc
TLSH
T1A5419EF3C3E8867E890156F0AA186E2BCE1D0915431C3C5AC9E4AF2B93E2472E14195F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 979485e18c7969a0cc52ecba0dd750356aa4f15ced3151e754a42664ae634355
MD5 ad1ca45f476a2e4e53aad34d53d05bb2
SHA1 5116a734be7314a5b4982f804fd24ce6cead39ce
SHA512 e2a48fcf552b7ac07f6831238b6f992e6921cb00a47ff4d3215f74ed051890f77b7feefc0758be050bcb4d9da58e30db34a0030449e6f551302699c409e9e480
SSDEEP 192:sxRCRPbO/fPsPxcQ7R7IjzoA8p4aB/g6+WNIYlacZkG0IgDJJ:sxRCdO/fPsPiy7ISTB/5IN/
TLSH
T1E232A815AE28A97B8CDBD21DBB65BF53D6F9503360941E48B6FC861C05E7BDD120380B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 7678781bd533d7b580218e65ce9b28b65c8edca4934a1b38a9f21ee2e043f359
MD5 5df14d4434beb1bf1f8e067c4cd9ac2d
SHA1 e4e2ec0d40f6b9e44b6feb7db09751a356a17d5c
SHA512 1ad0d63d6d4b51c47e9b2803740ff77b16b895d5d751b4b57f48625fcaf3ed5a6ed1b171946f952c165a4ed648ff2a505044d2f42edf468fb5539501fba172b4
SSDEEP 192:sxRCRPbO/fPsPxMQ7R7IjzoA8p4aB/g6+WNIYlac+kG0IgD3J:sxRCdO/fPsPmy7ISTB/5ICF
TLSH
T1B632A615AE28A97B8CDBD21DBB65BF53D6FD5033A0941E48B6FC861C04E7ADD121380B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 56f82bc3954d8b5897caa487b06588f2fbc647d60da5a3c994a41c495964a491
MD5 a315768cea6d696fce6d3f1ee14935d5
SHA1 550aa5f321fe03ba5d8d0ebc2d3f5ac8e84b41c0
SHA512 afdb2f12621ab47afea326cd53d92cda72b112dd907fc4c2c71cae3a307ce3c157b4d7f0eb2823a8bc985a47aa55aac231347d172bba2f3529c1bf5e76256620
SSDEEP 192:sxRlRPbO/fPstxMQ7R7IjzoA8p4aB/g6+WNIYlac+kG0IgIJ:sxRldO/fPstmy7ISTB/5ICs
TLSH
T19032A615AE28A97B8CDBD21DBB65BF53D6F91033A0941E58B6FC861C04E7ADD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 8b1ad243619921f3d7e437208428423cacdfbb4b854ad77f5d2fc7a4c0754f97
MD5 21a2762d638c2207afcd67d1dec34a9d
SHA1 3d1da596db136703274ad17688f653c9ef17ff2f
SHA512 0249b643aa36d0f61bd0bf3df01c1cdec61a739c76f44205f5fdff9f70117bea5a69db6ee304092a4b8410bdc64f0e4225736a592fa9393deb0c5eb51012f2f1
SSDEEP 384:kWdRdcVfCtgSQFffTKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OV4A9+mRf4Croev:ksRdcJWgSwffT8F1+UoAYDCx9Tuqh0VW
TLSH
T148B2E92B640CCB7F4F814AED9C196F976E9C02C796588D8047FE994C02C77EA911A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

2bced46e-b546-4dde-94f4-11b3d74883c1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\2bced46e-b546-4dde-94f4-11b3d74883c1.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 c592d4f37ec4dd0e01dde6f94a60c386d3881ca1616995536f640a753e81cc67
MD5 c37486c506252b19fe900b33cec6b6ad
SHA1 9c67533de5e58614f4eddb74042c1732d1e9a38d
SHA512 35b44707490f72fad14abbc378b776c505f3adaeaa967e7d82033189745060d8ac7c7663302696a5a245916be947283d0d9daa1eb7e8c42576694e187e111b8b
SSDEEP 768:133neEgnSFaj4HtdnqMwQi5BgK5/CwYcZB2sQol:133neEss/VmBg8/db2shl
TLSH
T1C0F2BF31DCB58EBB5CFA9244F2877706AFF49213D998095494EE5B0E02979FE130BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 98a035b222311ee72aa1c681a84ca433bdb3e14c512e97efcc122e9ba30d12d9
MD5 979619c5fc18d1e4119769a409172095
SHA1 09c3aa12db39c1b07ad67c7bfea10fec1992a23a
SHA512 7c93e18cd4f328768fe0a86d220c9219c0468230cbee32fb49d445f57a230cb7b8bce0a65ca8cc5885778d90e8af803917209660cc1f96cc3408713912b16201
SSDEEP 768:i33CeEhnSFaj4HtSnqMwQi5BgK5/CwYcZB2sQol:i33CeEDsMVmBg8/db2shl
TLSH
T120F2BF31ECB58EFB5CFA9244E2877706AFF49213D998095494EE5B0E02979FE034BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 138c510b73c3ff5316ba640d38cdd723bbe33f69914ba3bd91aeedbd6b31638e
MD5 e9ff3a430a9b6a83ae78c85c25fec774
SHA1 8946cc661f801d3ed968ba4efd02a78168d0d964
SHA512 e55b696a0cd32063f647d40a94dda49e093f565381d4df01a971ca8abcd6d06785ae4d7cd5a5dc6daea8505575580988ccf67ae4285cee9e7008cc43cdc33466
SSDEEP 768:HFQb3BwgZeEgnSFaj4HtlknqMwQi5BgK5/CwYcZB2sQol:ab3ZeEssvkVmBg8/db2shl
TLSH
T1FEF2BF32DCF48ABB9CFA8784F6877702AFF04253C999455496DE9A0D01979ED030BC12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 233d27e7526127eca47754ea2992ce9d4bb5ce91a59df7d57e93b18c4df114bd
MD5 5783d29a225f61139efeed5395512e53
SHA1 19d0bd256c914073d97e27002b8fc553bdf02f60
SHA512 45cde4d0da1625ad9eb4c4f68b53aa5a161c200d8df6ae02e5086d1801bd5f95bfd7039ecc0e3a9e7b15a4e69aef991cee04d29298ca1fe9c25000ade6ca32a7
SSDEEP 768:O/UxvxjgC+Ft32KpSFaj4inqMwQi5BgK5/CwYclvA8Dea:DZj3+Ft32MsiVmBg8/dtA8Sa
TLSH
T15903D036ECB59DB78CF69240768A638BEFF45253D58009A449EE1E0E03C7AED5307C56
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

078f5f1f-32e9-4238-a095-1b88c4dded17.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\078f5f1f-32e9-4238-a095-1b88c4dded17.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download