af6f2b66f13d44d2ec1a96fd2846b3339c52234b98d44fc0fc8d72eaf817bf20

Analysis

max time kernel
149s
max time network
144s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/09/2026, 23:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
attachment20260930-527357-dnbp4h.html
Size 214KB
Sample260930-3e33dace72
SHA256 af6f2b66f13d44d2ec1a96fd2846b3339c52234b98d44fc0fc8d72eaf817bf20
MD5 ca2c96be8ad4c1b27afc858a639eb1f4
SHA1 34bcbb32e3946883cf26447531ab98af52bcab62
SHA512 3437202655e3eb3621e7f896424eace53f0c5f24acf844be2b9d563d88009e6cf5a37bcddba9c2cbaba921fa3f1b6b8b256eb36e35e548489e0a5a04be7cb99c
SSDEEP 3072:opm0WkXwgEweVFmk0RHyEoCmetxWnm6t6b9U9QfyA7cxGTdTbLayQsH:oglIYWRHyrCunm6t6i947gGTx3pQ4
TLSH
T13024023459202B0E3B9246B4B26575A40EF90CB3E95F96227BC801F5EFED1F29049CE7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4696	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-747854149-4118156852-591593384-1000\{32E378CE-480E-4491-88F8-8A5D64F4EFDB}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3168	msedge.exe
3168	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2928 wrote to memory of 688	2928	msedge.exe	86
PID 2928 wrote to memory of 4696	2928	msedge.exe	87
PID 2928 wrote to memory of 3892	2928	msedge.exe	88
PID 2928 wrote to memory of 3892	2928	msedge.exe	88
PID 2928 wrote to memory of 3892	2928	msedge.exe	88
PID 2928 wrote to memory of 3776	2928	msedge.exe	89
PID 2928 wrote to memory of 3776	2928	msedge.exe	89
PID 2928 wrote to memory of 5032	2928	msedge.exe	90
PID 2928 wrote to memory of 5032	2928	msedge.exe	90
PID 2928 wrote to memory of 5032	2928	msedge.exe	90
PID 2928 wrote to memory of 3872	2928	msedge.exe	91
PID 2928 wrote to memory of 3872	2928	msedge.exe	91
PID 2928 wrote to memory of 3872	2928	msedge.exe	91
PID 2928 wrote to memory of 5116	2928	msedge.exe	93
PID 2928 wrote to memory of 5116	2928	msedge.exe	93
PID 2928 wrote to memory of 5116	2928	msedge.exe	93
PID 2928 wrote to memory of 4808	2928	msedge.exe	94
PID 2928 wrote to memory of 4808	2928	msedge.exe	94
PID 2928 wrote to memory of 4808	2928	msedge.exe	94
PID 2928 wrote to memory of 2332	2928	msedge.exe	99
PID 2928 wrote to memory of 4196	2928	msedge.exe	100
PID 2928 wrote to memory of 2332	2928	msedge.exe	99
PID 2928 wrote to memory of 4196	2928	msedge.exe	100
PID 2928 wrote to memory of 1484	2928	msedge.exe	102
PID 2928 wrote to memory of 3220	2928	msedge.exe	112
PID 2928 wrote to memory of 840	2928	msedge.exe	113
PID 2928 wrote to memory of 3224	2928	msedge.exe	114
PID 2928 wrote to memory of 3332	2928	msedge.exe	123
PID 2928 wrote to memory of 3332	2928	msedge.exe	123
PID 2928 wrote to memory of 3168	2928	msedge.exe	127

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\attachment20260930-527357-dnbp4h.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ff9f6afc188,0x7ff9f6afc194,0x7ff9f6afc1a0
  2⤵
  PID:688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1976,i,13279447444233839671,11915660198058443049,524288 --field-trial-handle=2300,i,12246286069564067646,6392105055426170705,262144 --variations-seed-version --mojo-platform-channel-handle=2328 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1632,i,3056597011013369097,8731628213709790151,262144 --field-trial-handle=2300,i,12246286069564067646,6392105055426170705,262144 --variations-seed-version --mojo-platform-channel-handle=2296 /prefetch:2
  2⤵
  PID:3892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2036,i,2860685379433844635,5156249949518380345,524288 --field-trial-handle=2300,i,12246286069564067646,6392105055426170705,262144 --variations-seed-version --mojo-platform-channel-handle=2644 /prefetch:8
  2⤵
  PID:3776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3452,i,2253423346819797458,14369628303481694275,2097152 --field-trial-handle=2300,i,12246286069564067646,6392105055426170705,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  PID:5032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3456,i,15651335547773463877,13753586340809754947,2097152 --field-trial-handle=2300,i,12246286069564067646,6392105055426170705,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:3872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4216,i,4785371639030027823,2347511018146907880,2097152 --field-trial-handle=2300,i,12246286069564067646,6392105055426170705,262144 --variations-seed-version --mojo-platform-channel-handle=3432 /prefetch:1
  2⤵
  PID:5116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4240,i,17209035143283347432,17767836764698457099,2097152 --field-trial-handle=2300,i,12246286069564067646,6392105055426170705,262144 --variations-seed-version --mojo-platform-channel-handle=4304 /prefetch:2
  2⤵
  PID:4808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5112,i,4245307117164817186,4084866342156454470,524288 --field-trial-handle=2300,i,12246286069564067646,6392105055426170705,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:8
  2⤵
  PID:2332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5116,i,5123726264318063830,14506659540915752069,524288 --field-trial-handle=2300,i,12246286069564067646,6392105055426170705,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:8
  2⤵
  PID:4196
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5836,i,14724062695501641016,6178394802990362375,524288 --field-trial-handle=2300,i,12246286069564067646,6392105055426170705,262144 --variations-seed-version --mojo-platform-channel-handle=5840 /prefetch:8
  2⤵
  PID:5052
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5836,i,14724062695501641016,6178394802990362375,524288 --field-trial-handle=2300,i,12246286069564067646,6392105055426170705,262144 --variations-seed-version --mojo-platform-channel-handle=5840 /prefetch:8
  2⤵
  PID:1484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4624,i,8767139218349046694,3823554103549233042,524288 --field-trial-handle=2300,i,12246286069564067646,6392105055426170705,262144 --variations-seed-version --mojo-platform-channel-handle=4336 /prefetch:8
  2⤵
  PID:3220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6268,i,14096584503124341362,2515842978355156761,524288 --field-trial-handle=2300,i,12246286069564067646,6392105055426170705,262144 --variations-seed-version --mojo-platform-channel-handle=4476 /prefetch:8
  2⤵
  PID:840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6348,i,8194344360880512580,5001390207296374784,524288 --field-trial-handle=2300,i,12246286069564067646,6392105055426170705,262144 --variations-seed-version --mojo-platform-channel-handle=6356 /prefetch:8
  2⤵
  PID:3224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3000,i,3496071772513331955,2093752109957904960,524288 --field-trial-handle=2300,i,12246286069564067646,6392105055426170705,262144 --variations-seed-version --mojo-platform-channel-handle=5476 /prefetch:8
  2⤵
  PID:3332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5712,i,7608207534585534983,14294834952646823140,262144 --field-trial-handle=2300,i,12246286069564067646,6392105055426170705,262144 --variations-seed-version --mojo-platform-channel-handle=6024 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3168

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4132

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a62a1faeaaa56a5f5375b4d4921e6b263c0bc10a5ecc1f991894c66c32a88aef
MD5 64fcd85513a139bcf5844ab49aea8206
SHA1 3c834eccb77da48c4abac17c440971305fd9b653
SHA512 cd1b39ff43d56158fbb01c5408a5bf247d5bd82279b205a914ab4cdccfece77a5399e430bb26db6f7d10e70dc3503c3bf37c5de59e23cb8f62d6337066c4114f
TLSH
T15DD02232EBF00E82C00B0032082282880F08C03C08003222A23C20AE3A80CEC2E23000
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 87fd08d177d30e757a374eb7fca83f40767783f2f2fe4c2f4b5b6e7cd421f0f6
MD5 aa28b0af8adbde88217055b749eb8f95
SHA1 26288ad0f8a152ced8d76510091ea10037384ff6
SHA512 abd0e44e972ef1ea594370d10a5ee2abf2ae3a63cf8e5d905023084f9234ed457f41deda1ef8ebea00df40205344f585fed1f88336f6a959a323bb91b4cf6171
TLSH
T1CA615D810BB088B3FBA451F8C6F498D7BA32838D54839D110AE4F56D5C5332741F720B
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

67ec277b-ddb1-42a5-8ff0-dbed3fbe9a37.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\67ec277b-ddb1-42a5-8ff0-dbed3fbe9a37.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 fa447a9494cf59116c87b8cf7688da4906b2feaf048d9911932e970dbe2e1afb
MD5 33a4bb5be996d5a59f182b8f3ff2dcf4
SHA1 66381d7ad703123470423b4bfd3506626ebe4185
SHA512 c71b0d0542eb906778bf10460590dc6ca06582a8afeeb6575ef0392c2e7d3a9cae0420e11b1a0065acfc8929ae7b353a249ebcb83a59af3cc8cc9802fa9da3b0
TLSH
T10F117DB3C3D585AE891156F05A24EE2BCE1D0606421C7D1989D4EF6793E3475E00299F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 3c1b965da1e96367b3ca864add6434bf701e6ee2e9d23212506589d72b2b1fdd
MD5 4a9275352ccfc8b9ba67560e7dddb18d
SHA1 6a87a7075ced58b866082a02b7fc32a9220912e3
SHA512 296e1e14ae235dae27187491b330dae29a6206ea05e180430daf7338f1badc89503b4ef056e917e870b5ebe276e5d48ad1eb1062ccb2d20c6bf7ce65a8749f99
SSDEEP 192:sxZBRtWZ/fws6c1IdpdKHW6+WNGYgUKPIgrJ:sxZBaZ/fws/GsHbGZ9
TLSH
T1A622A7126E28A97B8CC7D20DBB25BF53D6F9503265D41E58AAFC861C04E66DE230780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 fde62a0312ca8b3b98f5dfb46658d4ce0aa3c3e38fa0e48f61bc1b360cca0f32
MD5 e24423eadaaca13815bafaa33160064c
SHA1 b745581d6cb1c8e9d91cfbd2e0a37c024a5bdfb6
SHA512 6789e519c272211fceafcd31e6d292d389e4afcd3e26fc8aadd3b12030a5efdab7b1968beb539281b24abfeef76eb07b4f6e6b42f86141f587dd2520fede8f2e
SSDEEP 192:sxZBRtWZ/fws5c1IdpHKHW6+WNGYgDKPIg5MJ:sxZBaZ/fwsCGqHbGCa
TLSH
T1F622B6526E68A97B8CC7D20DBB15BF53E6F9503255D01E48AAFC861C05E6BCE230780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 1961129c2103647e12ca2967f35691e2d78342b7358bfa9d6834d999bc74b6f4
MD5 47f9a5a638f3ab9a5714640327f6e644
SHA1 781ce776d0fb113f48af642fea10ad44fa16e89c
SHA512 ea4787aa60a980f994c904a95d7ab8c18db641badca5d3763cc9325eeff5e89d84a9e4a2e701b1486c396e9db84b8311b0bf5a0dea3333aff0e3af3bd163fc18
SSDEEP 192:sxZBRtWZ/fws5c1IdpdKHW6+WNGYgMKPIg5MJ:sxZBaZ/fwsCGsHbGpa
TLSH
T1A822B7126E28A97B8CC7D20DBB55BF53E6F9503255951E48AAFCC61C05E6BCE230780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 e3b3277dd5ab81fc7952a11218793eb85423ec78e5b286749171bd2b3014d7d9
MD5 1ac4e83fe974d9082ae8e9f93b820792
SHA1 2e2c31afabf54da6e8dc276134e548fab4d227a4
SHA512 5da1916b02345cf40a5a0ee8476dcb2a2df2777a46cbed07648503858b14c6ce6db59c1e77f147a5cb4d380a12adcbbe2e673400546ce0ff824054b0ce3bfb38
SSDEEP 192:sxZBRtWZ/fwsZc1IdpdKHW6+WNGYgUKPIg5mJ:sxZBaZ/fwsiGsHbGZA
TLSH
T12422A6126E38A97B8CC7D21DBB55BF53D6FA503265D41E48AAFC861C04E67CE220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 e84596748bf5364a40658a030fa2e3eeaeddf60594afd5a9ad6365d2b823cefc
MD5 6aeb5f8b239c13bcce92b0a525e4eea2
SHA1 e812eef1131a8d19271a865961b213ddc7ec0947
SHA512 16c5c3217b4457690085c317b15723e2e982c0e8547b76ef8a137c117ad267313e2b1798dc509b885da0d58465162e875bab3fc9b5a9df22f4060e864cfa754e
SSDEEP 768:RSichfPWvPZpl8F1+UoAYDCx9Tuqh0VfUC9xbog/OVu+LlEKXzarox/0:RSichfPWvPZplu1jan+LKgzRB0
TLSH
T144C2EA7B640CCA7E4FC01E9DDD1A6F967E9802C79A588D4047FA984C02C77EE51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 36cfb063b9d87498c43403c3f62567d24b23b09d311d212629225ae4cce4879b
MD5 dd24a68f3677e770879f22be25113729
SHA1 618e0cea1593a39722361f8934aab3ae33ed6657
SHA512 ebd130564a2f66418323219569f6213849f418e75f390cfc77e40850aaaad2c9a23b8ab4bd72c6d9b48f20177f9fe32a843a53eb576dd7da2f1226460ef9699f
SSDEEP 96:KAdOKOY6VAr8QuC+giapzIIgKQ1IWgsYIZ27KkKrCy4:URVAr8QuC+1ap8IU1IWdYIZ2Un4
TLSH
T1DC913701357F028139FD6C4885B4862E458131EB33A8F97B7F7C40A74A9AE045EFE9D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

42084622-77ad-4373-895d-cdb1a72eb8c7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\42084622-77ad-4373-895d-cdb1a72eb8c7.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 f8d2a0cb46a9a0cd6baf7b6a6f664490d01f46574b14f74976c980a7fe52edd4
MD5 b509549dd4feda6e4f6291d8812004b0
SHA1 cad8717b8bc0365614354ce38f8abe1f5ea778db
SHA512 c2b0c98bb1288fd27fb4db54c2b5d1b724a4de4377dea7e6ea1f631ea709c50c703fc5c1bef4fd5a2851ce9b1460ed4cee15e80bb09947ce5bf0f7d5991d9d30
SSDEEP 384:WZcIhsNaGqZ56BWBGYX5EzyOi6Qbgt0jVZh6DKhHSuoW:EhNMQGYuzyO3Qbe0jfYGHSul
TLSH
T1BA828F329DB89C771DF6E181F8463A039FB49017AAC86F44D1DD2B1D01EE659231BC2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 ca79c0fad47755bfed1d5158c72a05e361e1a917b2c6dbc9c8984dcec5298eee
MD5 9ea72e315b0e62dd10ca2945cf03fc27
SHA1 9162133f12985b6e3b5deb2cb51c0fc6f39cf3e2
SHA512 43d38146f57a3558232ad7140c1e9d257a55f80bafd7d1b921947857464ee67cd1550a2cb3e7086440932101638ee63323abbe188b1154e29a0af0a92e72c120
SSDEEP 384:niFiZcIBzsNi8TUNTUlIlXqZ56BWBGYX5EzyOi6Qlgt0jVZh6DKhHSuoW:iFQxbwgUMQGYuzyO3Qle0jfYGHSul
TLSH
T140A27E339DE8DC7B6DF6AB81F9463603DFB49067D985AB50E2C85A1D01AB198230BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 1c7151e8574f0f4bf89765359eaddc2e19e7b4a87077be486a957b1f0cf6f8e6
MD5 b8d32fa402d35823c408761e97929a08
SHA1 935b95b75c0b674e30918fbc16d7b1772b6edcfe
SHA512 d063652eab557b5b59d35f9918a548a15301285c0c5ea8b1bc9bb4399893037293891926d0bf5b2e68d68790a8a45e2d1ccb6dcf11ae72dc5e11092011f97d4e
SSDEEP 192:LJONj6DphSqQmiUyghCwGYX59ez6CyORM6QAkIIgoq590jU6:lONj61pfCwGYX5EzyOi6QJgt0jU6
TLSH
T15A120A32ADB8AC7B1DE2A591F48735139FA5512BEE846F54D2DC3A1C01EF65C230BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 a733db24875f65b65fcef126d81f46be784224923dc83631f9aabbeb2f810bd2
MD5 ff465b8e1fb3aa0747a689a836dbf410
SHA1 a7f3415af17e40c363e1e13c0ab290525c19962e
SHA512 520dd5a63dc3db4c6d246c4259bcb929554c5f98ef2f6afa4efa82fe624675846b7d5adb3e8385db9ff24f81e6bc7dda6e25fe07853cf0a366625eda82ebe57c
SSDEEP 384:hZcIhsNaXqZ56BWBGYX5EzyOi6Qbgt0jVZh6DKhHSuoW:phgMQGYuzyO3Qbe0jfYGHSul
TLSH
T1E9828F329DB89C771CF6E182F8463A039FB49017AAC86F44D1DD6B1D01EE659231BC2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 913b67248986e86b4a94c3bbe17bef662cd9e33304529f52aeda71b23eeb46f8
MD5 d3b24ba651338ccfef219b6219a62414
SHA1 7f60eb80d03c7aa04886e5afba253d71068edb14
SHA512 65543d67d632fce3a10fdd0361613581df27acf72e00b893abb3f453ac1adb7463b1c2b9f7cc1993d691dd5625e28fa5fcb4fa7eb2ab0a41ec497792259b382b
SSDEEP 192:LJONf6DphmqQmiUy6hq8wGYX59ez6CyORMWkk7jyU6:lONf619bRwGYX5EzyOiwWU6
TLSH
T1AD02E835ED78BCBB8DE26E45F48B37136FE4112BAA942F54D6E82A1C01D764C2306837
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e8539564-db0b-479e-8b1b-57100b7a81a7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\e8539564-db0b-479e-8b1b-57100b7a81a7.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 56c099332976df34dba3b8734d6a8e63a648b794b22a3848ca26c49f056e2a35
MD5 3930508d4d4478195fe76496023b4000
SHA1 a0c168185ffb54263e8dbe2bc363a7e0e53b9bbe
SHA512 9a5e81cd56869be8f197b6848779e61e3d4cabc166b04b3196bbdf04c12242e659c9315c26102f5815b38d69e5309d0213f9e8110df4811215fc43a6190b7d1d
TLSH
T14341079CA6ED1148B3B7AF569BF7A86D447BB9772F06D49D00110E4F0A26E40D871B33
MD5 SHA1 SHA512 TLSH

Submit Download