5dfa57bf10f02106e404ffb38bc5b2da62eb96b9b02b74d10f1b472a89e6ee5b

Analysis

max time kernel
149s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/09/2026, 22:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
attachment20260930-527357-5e1ahx.htm
Size 194B
Sample260930-2f3mkabg85
SHA256 5dfa57bf10f02106e404ffb38bc5b2da62eb96b9b02b74d10f1b472a89e6ee5b
MD5 0fe53cf75ee2569670f22b4df68cfdff
SHA1 c8ce77fbd6e13476239c598378c612a8b57685c0
SHA512 ee321ac4703144eafd3d4db7deefe08d8aef572e3c67fc9d4203f5349646173caadf91608fd10220a16ea91099657c4a8460e3ca09a781af646cb3a5282db660
TLSH
T121C0C0B7E400620CDB3078D500F172CC00F8819C9C82CA003D8018E8B39696AC9031D1
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2184	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1696934516-3600988056-1840298893-1000\{EB432F7D-E20E-463C-A9E1-56B44596FF4C}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1244	msedge.exe
1244	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe
3744	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 3744 wrote to memory of 2564	3744	msedge.exe	86
PID 3744 wrote to memory of 2184	3744	msedge.exe	87
PID 3744 wrote to memory of 4472	3744	msedge.exe	88
PID 3744 wrote to memory of 4472	3744	msedge.exe	88
PID 3744 wrote to memory of 4472	3744	msedge.exe	88
PID 3744 wrote to memory of 1184	3744	msedge.exe	89
PID 3744 wrote to memory of 1184	3744	msedge.exe	89
PID 3744 wrote to memory of 4352	3744	msedge.exe	91
PID 3744 wrote to memory of 4352	3744	msedge.exe	91
PID 3744 wrote to memory of 4352	3744	msedge.exe	91
PID 3744 wrote to memory of 4168	3744	msedge.exe	92
PID 3744 wrote to memory of 4168	3744	msedge.exe	92
PID 3744 wrote to memory of 4168	3744	msedge.exe	92
PID 3744 wrote to memory of 5100	3744	msedge.exe	93
PID 3744 wrote to memory of 1244	3744	msedge.exe	94
PID 3744 wrote to memory of 5100	3744	msedge.exe	93
PID 3744 wrote to memory of 5100	3744	msedge.exe	93
PID 3744 wrote to memory of 1244	3744	msedge.exe	94
PID 3744 wrote to memory of 1244	3744	msedge.exe	94
PID 3744 wrote to memory of 4104	3744	msedge.exe	100
PID 3744 wrote to memory of 5040	3744	msedge.exe	101
PID 3744 wrote to memory of 4104	3744	msedge.exe	100
PID 3744 wrote to memory of 5040	3744	msedge.exe	101
PID 3744 wrote to memory of 1568	3744	msedge.exe	106
PID 3744 wrote to memory of 3576	3744	msedge.exe	113
PID 3744 wrote to memory of 4704	3744	msedge.exe	114
PID 3744 wrote to memory of 4732	3744	msedge.exe	115
PID 3744 wrote to memory of 3520	3744	msedge.exe	124
PID 3744 wrote to memory of 3520	3744	msedge.exe	124
PID 3744 wrote to memory of 3120	3744	msedge.exe	127
PID 3744 wrote to memory of 3120	3744	msedge.exe	127
PID 3744 wrote to memory of 1244	3744	msedge.exe	129

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\attachment20260930-527357-5e1ahx.htm
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x238,0x24c,0x7ffbe641c188,0x7ffbe641c194,0x7ffbe641c1a0
  2⤵
  PID:2564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1968,i,1920151746885563896,9691373410205222162,524288 --field-trial-handle=2180,i,10785824381884263989,9158716255774037657,262144 --variations-seed-version --mojo-platform-channel-handle=2256 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1668,i,2851915628128715240,12774574367330042949,262144 --field-trial-handle=2180,i,10785824381884263989,9158716255774037657,262144 --variations-seed-version --mojo-platform-channel-handle=2176 /prefetch:2
  2⤵
  PID:4472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2524,i,11720944054015794491,13556172256525129229,524288 --field-trial-handle=2180,i,10785824381884263989,9158716255774037657,262144 --variations-seed-version --mojo-platform-channel-handle=2504 /prefetch:8
  2⤵
  PID:1184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3432,i,14998776618924459113,15578949703773727973,2097152 --field-trial-handle=2180,i,10785824381884263989,9158716255774037657,262144 --variations-seed-version --mojo-platform-channel-handle=3440 /prefetch:1
  2⤵
  PID:4352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3444,i,14550997669275789946,7950875791327371643,2097152 --field-trial-handle=2180,i,10785824381884263989,9158716255774037657,262144 --variations-seed-version --mojo-platform-channel-handle=3596 /prefetch:1
  2⤵
  PID:4168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4188,i,5453948143692696905,15464620805642368645,2097152 --field-trial-handle=2180,i,10785824381884263989,9158716255774037657,262144 --variations-seed-version --mojo-platform-channel-handle=4220 /prefetch:1
  2⤵
  PID:5100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4236,i,6825411573900613398,8046544962470834668,2097152 --field-trial-handle=2180,i,10785824381884263989,9158716255774037657,262144 --variations-seed-version --mojo-platform-channel-handle=4284 /prefetch:2
  2⤵
  PID:1244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,16192523236489151553,8914577888446339730,524288 --field-trial-handle=2180,i,10785824381884263989,9158716255774037657,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:8
  2⤵
  PID:4104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,16874344642446247621,18275472302794437793,524288 --field-trial-handle=2180,i,10785824381884263989,9158716255774037657,262144 --variations-seed-version --mojo-platform-channel-handle=5220 /prefetch:8
  2⤵
  PID:5040
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5920,i,3490834823122189830,9641221936012062130,524288 --field-trial-handle=2180,i,10785824381884263989,9158716255774037657,262144 --variations-seed-version --mojo-platform-channel-handle=5936 /prefetch:8
  2⤵
  PID:212
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5920,i,3490834823122189830,9641221936012062130,524288 --field-trial-handle=2180,i,10785824381884263989,9158716255774037657,262144 --variations-seed-version --mojo-platform-channel-handle=5936 /prefetch:8
  2⤵
  PID:1568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4264,i,2884108145825164069,14281895095335561410,524288 --field-trial-handle=2180,i,10785824381884263989,9158716255774037657,262144 --variations-seed-version --mojo-platform-channel-handle=4492 /prefetch:8
  2⤵
  PID:3576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4276,i,12012232875064654533,14885637524878016008,524288 --field-trial-handle=2180,i,10785824381884263989,9158716255774037657,262144 --variations-seed-version --mojo-platform-channel-handle=4480 /prefetch:8
  2⤵
  PID:4704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4284,i,16825116282142628817,3713009617363785461,524288 --field-trial-handle=2180,i,10785824381884263989,9158716255774037657,262144 --variations-seed-version --mojo-platform-channel-handle=6280 /prefetch:8
  2⤵
  PID:4732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5372,i,15748245511036858461,3925116444518128130,524288 --field-trial-handle=2180,i,10785824381884263989,9158716255774037657,262144 --variations-seed-version --mojo-platform-channel-handle=6316 /prefetch:8
  2⤵
  PID:3520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=760,i,453164033109779069,8723525501726483358,524288 --field-trial-handle=2180,i,10785824381884263989,9158716255774037657,262144 --variations-seed-version --mojo-platform-channel-handle=5888 /prefetch:8
  2⤵
  PID:3120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6208,i,14260375561682487566,3612051913043396678,262144 --field-trial-handle=2180,i,10785824381884263989,9158716255774037657,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1244

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3064

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 5421c8b0bf6e5f37422a05b412b233cde63f1db63aa71d65c91c5b31275595c0
MD5 07f616e3db8597d59ea940f94c1abb0b
SHA1 eedf28342bbff8c4cae798c2980ea6953992f1b2
SHA512 30782b7b7d8c6db47a40bc15f968f35fca7939aaa4b83a8a19c8f5a415c745b54c161abc0037d24bad8ebf15d5deb4134f24e357c1b5869f1598fa22619302be
TLSH
T163D0243C7F114D50D40041710530D50435D3CC1740D015050C354C074C101C11305CD0
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 daf8c1243ee20a2e95a6bd65ee87f94e97a213f1bc26473da181514314bf0e5e
MD5 22b29b46992ba3d1fd586e35207b402b
SHA1 03a007676fa49e6e9fbeffbbc2e943124c1b3d3d
SHA512 3634d483353d2e9fb49d846c71c6867053c6a8f1ead10608addea75574d5ce0e36c8de933f71d10bae9682752372e6f7925bbc3c9d982dfe840a9d664f859687
TLSH
T1BDD0243C3F514D50DC0041710530D50435D3CC1740D017070C354C074C101C11305CD0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 fd4c999a0a626671399b501df8ae4c56ced404050012cf8f65cf11603cbed89c
MD5 e644bf1a3b8c2114bb3a885f3f63f33b
SHA1 4c769d2c819f3dd4b8263888382d17f870b1fb70
SHA512 588696a516f19766f399f9079f0b46c32eace86477c6e3445daba55c566cce0aeb214b9ce45334ee90f13b2bbe982a358cebf1b55f2abf39dddb466dd6ceab32
TLSH
T19161418AA8005861FF7F4279A6D5368FB63C55607D431D032E73DDBE6C06724891C26F
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58d31a.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58d31a.TMP
Size 3KB
SHA256 67f68ce20c901cd8ffdee91f43e3c5913a792f4f60afdf5d270a372708a652cd
MD5 faceecef80da8ebfe2ac742c3d266ef2
SHA1 bf6806317c818fdfbd8adbef3ff4392e93c13a41
SHA512 773c33be87e3d3a644dbd1d7cd0e83861a078baf14d5c0a0c3bb511ccb7bd43bd3935d670b3b8dcce42127bb30ba8408f5c60f4c02c94af71996989193dbe807
TLSH
T12C61518AA8004861FF7F4279A6D4328FB63C95A03C431D032E73DDBE6C06724891C26F
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 ce19bacc097519bb0845c11e10923e3b89a32b2c35b6d2f4a93bfcb884f18a27
MD5 f5f91dcfc421a66b5429220103b33028
SHA1 bf4127bbfb1224b8a41d5ca487423bca6bd52a23
SHA512 8f0669f308cfaacd48d263aaf859c4935bd7e3e51c33c7bff27d8407ebfeb600378e3efe3e4c8deb46fcb50b7938e87f53ea5babb819f26284dcf3ae83a2cda9
TLSH
T1451197F3C3D595AE890116F06A28AE2BDE2D0606421C3C1A89D4EF2B87F3475E0025AB
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 a921615604fc05a2ffd30a2d35d772b5256a47bd9d75125a364a1caf6bb9dede
MD5 c53527e3ef802a361ced48f71ecf65d9
SHA1 b2c1054f7b8f842ca585b7ec27e735f81f9637b7
SHA512 1fca38077cfcc6fd2fe8c6c0546b353c0752a21846911430bcf7afa3fd098bffe9400ef437e22bbe71b8e8c6c8dfbdd9e3a3e2c188a70975e93921b1811be031
SSDEEP 192:sxZo7R0Ws/f/XsaGQIdpd9HW6+WNGY3RI8IgrJ:sxZo7Js/fvsaGxjHbGM9
TLSH
T18E12B7526E28A57B8CC7E21DBB25BF13E6F9503251D41E48EAFCC61C04E6ADE120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 4d5bf2bb298d839fcbfaff84451a4db58e5ac0eeb9e0b83524c1e7acb33452a4
MD5 8b494c1708a866446fa3b84d03fd68ab
SHA1 1d72cad8aa602d9e04f4c26b47bebfa05c51245f
SHA512 8a377e5df8f9c52c5ca0cbd8829f995f9e11588ee1e13e6a6858fb4f1279f5f8b4bc5fa9d4e048a51cdc6400355bda89181092c3597be1bfc9fb5eb19eb33053
SSDEEP 192:sxZo7R0Ws/f/Xs1LQIdpH9HW6+WNGY3vI8Ig5IJ:sxZo7Js/fvs1LxdHbGcy
TLSH
T1AF22C9526E68A97B8CC7E25DBB15BF53E6F9503251901E48AAFCC61C05E7ACE120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 0bf04b10f9a7ca137a5915230b00758da73c5dcae45e629c32dd08648a28b441
MD5 7bd44a42406d2f6c546fa30e2ce21af0
SHA1 15517f2d93a65bb30274ce4159e8bbbe57503f74
SHA512 019b3ec1b1a39b719486925fa1bdfbcc1e421eb2807f7f597ade49b6a615b414be67a936b9392394f8b01cd554055c890d42787b7fb33b155c690b171c6e428b
SSDEEP 192:sxZo7R0Ws/f/Xs1LQIdpd9HW6+WNGY3pI8Ig5IJ:sxZo7Js/fvs1LxjHbGiy
TLSH
T14C22D9526E68A97B8CC7E24DBB15BF13E6F9503251911E48EAFCC61C05E7ACE120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 1579671846dd269b3312ca5dd80a5b4eddd956bac087d6f4adc033bb73c421bd
MD5 e28258eebd91193110564b2cda4a4f50
SHA1 9db7f71e9db2e68bae903187fda47580b2baa5ab
SHA512 851b78a792556975c611b55977160555d5abe954d32dd5e8cd95d8c50a6372836d6082f37bccbb76b78a43796504dafa174b244e041c38e1fc52ddfd98351bb3
SSDEEP 192:sxZo7R0Ws/f/Xs1GQIdpd9HW6+WNGY3RI8Ig5iJ:sxZo7Js/fvs1GxjHbGMI
TLSH
T1B122B7526E78A57B8CC7D25DBB25BF53E6F9503291D41E48EAFC861C04E6ACE120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 7e2b1640e10ae2b29ac7e766f2a9c15434839b36049a4261e0eadb3b6df67152
MD5 1e74f8477df59ef5fd25cdef7ff4cf5a
SHA1 41358fd883588480dd13bc40977c5ac77f960628
SHA512 f90a35b9612ed90ebbfc8a6a49135c612edb4523f85bdc4f9082e3858ed10281fcf2f47c3fe4a8641c54742ed0cb634c3e708262387cce69c2d4b09e5359950a
SSDEEP 768:S+30AbSWvS2l98F1+UoAYDCx9Tuqh0VfUC9xbog/OVGmLlLJ72VrolZM5q:S+30AbSWvS2l9u1jaLmLZ12ur
TLSH
T1E8C2DB3B640CCB7E4FC05A9DDC6AAF9B6E9C02C796648D4047FA984C02C77EA51174DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 1KB
SHA256 ea14c37ae8f1b9b7d44a62de2eafea2256c63b74fcfeed419ec8734f7c4666b1
MD5 791fc2cd7301854c934999d51f8f11e9
SHA1 e2cc7d6d0b7f28274115fb00fa0391e7f7135722
SHA512 bd75d09fd963350af7ff064bac71c66d43c49803c0a4a0f01b26f5c099a3accaf1fa43f06400d6f7eecf708ce9abe205837644ac3e5803c10f9bdde0dedae2b0
TLSH
T110214E11793746F0787F2508827AB55E8A85B2633024E92A777800D50B76E4C9DFE4DD
MD5 SHA1 SHA512 TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe596e41.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe596e41.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 771f51cfc9e706d898a727cab7f28ac96cfb9c2c15a13c1ee0054772f2d2d3fe
MD5 53e32e390d51123fb3b8620c8950566e
SHA1 349b65a2900e8f8f3d7c026d0addd725a3e05867
SHA512 704032b78ab7cd820f41e9ae3a9b31aaa40c31a32f77e8a9f13ece7c3101732c5b5940b7be5c3bb0b86c084fc2ff44beb9d36d07de5f93a30d6cba4ec6465515
SSDEEP 384:2ZcIhsNbI/puCrD9iX5FDg4tgOIwZOyZozAoO:khn1BaY4Xs7sB
TLSH
T1D7828D32A8789C7F5DE2E685F5473A035F79456BD7C8AF94D8EC632D02DA194030B912
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 dc9f1cdcfd964321cdeda705a327b8cbec7fc4702d9d4281ab5f3b2a58d3623d
MD5 e5bd1323da126285310be7b9a028daa7
SHA1 84667c0905e9b7bd05dd5eeb79f9930009315910
SHA512 7e7d2aa4898c84bbf4aa767e718cdfebe2bccbbc485170d867fe6e4ff49d3025fd880d670c7845fac66516ca4875616825e11a66a2f451ed19d672599d2fc10b
SSDEEP 384:0iFiZcISzsNl8TUNTUlIll/puCrD9iX5FD14tgOIwZOyZozAoO:PFQ6MwgL1BaN4Xs7sB
TLSH
T1D5A26B3398A8DD7FADF69B84F64A36038FB9416BC685EE94E6DC572C01DA1D8030BD11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 f1400f2875c47b3c40a170da9d8b11e12671d357f9ff01c47a95fbc3e42adcfb
MD5 5f3bc3eae91826190364c08e7d30826d
SHA1 4471d8008600bf2aa25a4630e38ff794b3e05476
SHA512 683439444d41c9e5380bbc7afff483ee9acb1c2cb42be3c30a4f22a62e7a56cc1b25b4f797d1d03bff457750e229f6f208d9d0de6f00ba5107045d4020f38bfd
SSDEEP 192:LONa6AmwprQmiUydl6siX5FXmEPJi3cU6:LONa6ipdc6siX5FKMU6
TLSH
T12302FB35AC687C7B8DF2AE45B1873B13AFA9116BD7942F84CAE8172C01D769C1307832
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 3449cc1ef910b6ffcf9a7b5f94adac61c56700a49d93d28ea18fe300107528a9
MD5 6533dfbb901c4e6a907e7871a9f3eacb
SHA1 d46b0bf8cc90651bb0fd1d292f94bf828ccf30ea
SHA512 f18dd5fc66b82d98c9e3437269be1cf04262a388c0df7a8e0d01ffce64b05070e7fda8c3efd6ee02dd919ecc7a00be63ca5ae81fb4a96021181089209b3bef89
SSDEEP 384:eZcIhsNbl/puCrD9iX5FDg4tgOIwZOyZozAoO:che1BaY4Xs7sB
TLSH
T18C828E32A8789C7F5DE3E685F1473A035F79856BD7C8AF94D8EC632D01DA198030B912
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 b27a07cba9d3ec28fda743a992562b01e5fe4ac064cddc88466b9c7216a6492e
MD5 59508b0b43450601ee6ad2a2d818e7e7
SHA1 61f2da6f84a5669c7c8df117e5dc3033af1860c1
SHA512 85d5df20b5d89f070afaa0f1ed72edcc0bdac789600f4635929e838203f082e54fd587318bec7e99ae264f63f09d923ca2c907275f5566d6742e8969f6ee3697
SSDEEP 192:LONW6AmwpqQmiUy0lRsiX5FXmEVr6wlRTqVJU6:LONW6ipmfRsiX5FDx4U6
TLSH
T14E120A36A878AC7F4DD2E951F08735135E69526BDB887F84C9EC272C06DF19C870B922
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1b37d520-092f-46a0-9778-82aab0c20614.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\1b37d520-092f-46a0-9778-82aab0c20614.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 8f15b530d183119ab7d87a3bd96a14889cec50de095729d5c01dd67324a852c5
MD5 f93ad702f7f22501c42981f60a08fb5e
SHA1 4f3582a365c726dbab2251bde0086515eb7b4c56
SHA512 3146c18574411c06d96f9d71331ef23339f57801e7d7f900072383b63ebc4fdf6afb83a7c6aa0897ef4fa27a7737ac0560a2b36ff7d573b92a3ad52e951f78a3
TLSH
T1C4414B59B6FE1108B3B36E59ABF6A86D487BB8372E4BD45D00210D4F0663A80CDA1733
MD5 SHA1 SHA512 TLSH

Submit Download