ccde54317343ebacd6da2afde0b4007f766b637b1ba34510c74de49797553d77

Analysis

max time kernel
148s
max time network
138s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/09/2026, 00:29

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
attachment20260930-1092870-yt8u3s.html
Size 116B
Sample260930-atcjratcla
SHA256 ccde54317343ebacd6da2afde0b4007f766b637b1ba34510c74de49797553d77
MD5 0e2f15dcf7166552e959f0ddb363e706
SHA1 642e84dc85171feae5dbbb9727736ee1424a232c
SHA512 2a659912d4f25102f996a71566eca6840ac2b3271147c266d9836f2fc5785b4b514e248b396d62b7504556f50046f7610023adc8c55c2c9b9a8ec715c29ce525
TLSH
T122B0125F120702053D601D527DD3375714174B9E01A969E01267C9FECCCB9B2EE4739C
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5048	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-895009113-1202185046-1686627690-1000\{F4C496E9-72C9-4C85-9546-AF6ECD36FAD1}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2152	msedge.exe
2152	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2840	msedge.exe
2840	msedge.exe
2840	msedge.exe
2840	msedge.exe
2840	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2840	msedge.exe
2840	msedge.exe
2840	msedge.exe
2840	msedge.exe
2840	msedge.exe
2840	msedge.exe
2840	msedge.exe
2840	msedge.exe
2840	msedge.exe
2840	msedge.exe
2840	msedge.exe
2840	msedge.exe
2840	msedge.exe
2840	msedge.exe
2840	msedge.exe
2840	msedge.exe
2840	msedge.exe
2840	msedge.exe
2840	msedge.exe
2840	msedge.exe
2840	msedge.exe
2840	msedge.exe
2840	msedge.exe
2840	msedge.exe
2840	msedge.exe
2840	msedge.exe
2840	msedge.exe
2840	msedge.exe
2840	msedge.exe
2840	msedge.exe
2840	msedge.exe
2840	msedge.exe
2840	msedge.exe
2840	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2840	msedge.exe
2840	msedge.exe
2840	msedge.exe
2840	msedge.exe
2840	msedge.exe
2840	msedge.exe
2840	msedge.exe
2840	msedge.exe
2840	msedge.exe
2840	msedge.exe
2840	msedge.exe
2840	msedge.exe
2840	msedge.exe
2840	msedge.exe
2840	msedge.exe
2840	msedge.exe
2840	msedge.exe
2840	msedge.exe
2840	msedge.exe
2840	msedge.exe
2840	msedge.exe
2840	msedge.exe
2840	msedge.exe
2840	msedge.exe
2840	msedge.exe
2840	msedge.exe
2840	msedge.exe
2840	msedge.exe
2840	msedge.exe
2840	msedge.exe
2840	msedge.exe
2840	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 2840 wrote to memory of 464	2840	msedge.exe	87
PID 2840 wrote to memory of 5048	2840	msedge.exe	88
PID 2840 wrote to memory of 4372	2840	msedge.exe	89
PID 2840 wrote to memory of 4372	2840	msedge.exe	89
PID 2840 wrote to memory of 4372	2840	msedge.exe	89
PID 2840 wrote to memory of 4564	2840	msedge.exe	90
PID 2840 wrote to memory of 4564	2840	msedge.exe	90
PID 2840 wrote to memory of 2376	2840	msedge.exe	91
PID 2840 wrote to memory of 2376	2840	msedge.exe	91
PID 2840 wrote to memory of 2376	2840	msedge.exe	91
PID 2840 wrote to memory of 4580	2840	msedge.exe	92
PID 2840 wrote to memory of 4580	2840	msedge.exe	92
PID 2840 wrote to memory of 4580	2840	msedge.exe	92
PID 2840 wrote to memory of 3772	2840	msedge.exe	94
PID 2840 wrote to memory of 1088	2840	msedge.exe	95
PID 2840 wrote to memory of 3772	2840	msedge.exe	94
PID 2840 wrote to memory of 3772	2840	msedge.exe	94
PID 2840 wrote to memory of 1088	2840	msedge.exe	95
PID 2840 wrote to memory of 1088	2840	msedge.exe	95
PID 2840 wrote to memory of 2436	2840	msedge.exe	103
PID 2840 wrote to memory of 1660	2840	msedge.exe	104
PID 2840 wrote to memory of 2436	2840	msedge.exe	103
PID 2840 wrote to memory of 1660	2840	msedge.exe	104
PID 2840 wrote to memory of 4620	2840	msedge.exe	106
PID 2840 wrote to memory of 3016	2840	msedge.exe	113
PID 2840 wrote to memory of 1396	2840	msedge.exe	114
PID 2840 wrote to memory of 684	2840	msedge.exe	115
PID 2840 wrote to memory of 1144	2840	msedge.exe	117
PID 2840 wrote to memory of 1144	2840	msedge.exe	117
PID 2840 wrote to memory of 3076	2840	msedge.exe	125
PID 2840 wrote to memory of 3076	2840	msedge.exe	125
PID 2840 wrote to memory of 2152	2840	msedge.exe	127

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\attachment20260930-1092870-yt8u3s.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7fff7337c188,0x7fff7337c194,0x7fff7337c1a0
  2⤵
  PID:464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1852,i,2047496315301284735,13955452203350087311,524288 --field-trial-handle=2268,i,10673445528431830533,12997607220918405949,262144 --variations-seed-version --mojo-platform-channel-handle=2360 /prefetch:3
  2⤵
  - System Time Discovery
  PID:5048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1744,i,18398381653444542079,14312736200703455962,262144 --field-trial-handle=2268,i,10673445528431830533,12997607220918405949,262144 --variations-seed-version --mojo-platform-channel-handle=2264 /prefetch:2
  2⤵
  PID:4372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2392,i,4390820076359288688,5605828134510139039,524288 --field-trial-handle=2268,i,10673445528431830533,12997607220918405949,262144 --variations-seed-version --mojo-platform-channel-handle=2372 /prefetch:8
  2⤵
  PID:4564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3464,i,10298322357056912436,11208559251787231710,2097152 --field-trial-handle=2268,i,10673445528431830533,12997607220918405949,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:2376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3476,i,37748441688963716,14205418106558288317,2097152 --field-trial-handle=2268,i,10673445528431830533,12997607220918405949,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  PID:4580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4236,i,9782562877254628808,15051431343165928094,2097152 --field-trial-handle=2268,i,10673445528431830533,12997607220918405949,262144 --variations-seed-version --mojo-platform-channel-handle=4308 /prefetch:1
  2⤵
  PID:3772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4248,i,1097319132645959607,16433123953923087236,2097152 --field-trial-handle=2268,i,10673445528431830533,12997607220918405949,262144 --variations-seed-version --mojo-platform-channel-handle=4352 /prefetch:2
  2⤵
  PID:1088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3636,i,15823584512592479862,17578933633596146415,524288 --field-trial-handle=2268,i,10673445528431830533,12997607220918405949,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:8
  2⤵
  PID:2436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,5718017733706312781,11215935680385483065,524288 --field-trial-handle=2268,i,10673445528431830533,12997607220918405949,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:8
  2⤵
  PID:1660
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5876,i,328934483632489853,13551512547452362263,524288 --field-trial-handle=2268,i,10673445528431830533,12997607220918405949,262144 --variations-seed-version --mojo-platform-channel-handle=5880 /prefetch:8
  2⤵
  PID:1700
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5876,i,328934483632489853,13551512547452362263,524288 --field-trial-handle=2268,i,10673445528431830533,12997607220918405949,262144 --variations-seed-version --mojo-platform-channel-handle=5880 /prefetch:8
  2⤵
  PID:4620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4540,i,7909608724222047835,17394746937186362536,524288 --field-trial-handle=2268,i,10673445528431830533,12997607220918405949,262144 --variations-seed-version --mojo-platform-channel-handle=3644 /prefetch:8
  2⤵
  PID:3016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4544,i,18346493788231259698,3586576200966937971,524288 --field-trial-handle=2268,i,10673445528431830533,12997607220918405949,262144 --variations-seed-version --mojo-platform-channel-handle=4516 /prefetch:8
  2⤵
  PID:1396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4528,i,7333337175514407999,5097974002852900958,524288 --field-trial-handle=2268,i,10673445528431830533,12997607220918405949,262144 --variations-seed-version --mojo-platform-channel-handle=6316 /prefetch:8
  2⤵
  PID:684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2832,i,14960393670948379136,11318194548565948562,524288 --field-trial-handle=2268,i,10673445528431830533,12997607220918405949,262144 --variations-seed-version --mojo-platform-channel-handle=2884 /prefetch:8
  2⤵
  PID:1144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5316,i,9911146382547220933,12765766010091926925,524288 --field-trial-handle=2268,i,10673445528431830533,12997607220918405949,262144 --variations-seed-version --mojo-platform-channel-handle=5312 /prefetch:8
  2⤵
  PID:3076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5328,i,17940018159665690013,12119058419679923926,262144 --field-trial-handle=2268,i,10673445528431830533,12997607220918405949,262144 --variations-seed-version --mojo-platform-channel-handle=6208 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2152

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4132

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 928eda824fe964cd23927cf06086d7d24e20a3a5092daf1acee5b632c76c962a
MD5 4ac43ee6512ba8635b7ba6bd015c291b
SHA1 5f9e2474b00ec0e2a9472c049fbea550e26309aa
SHA512 e5ebf9e92458f66e31e080121135313e828b8ebade0bc0e085221ae0d4f5afe0d2035c566590cbfb5902d96f17befe7b24310b4fb9e647b999113175af800ebc
TLSH
T17BD022B2B3A038CFE300083302A083BA2C0A80F300FAE2208C30E08C0BCC02AC283880
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 93c2ca3ce74eca17f27aa90cc3323bb8d6aea5c365862a01a512ce14b9f825b4
MD5 e8a3239e6b22580d77fb537c7bea1fab
SHA1 a99ffe9234c27e560f1c607d3b6c6507928368a3
SHA512 17b0e6f99943a02540148a685b91c62eafca3ef65d9a628bfb59d3b69a93b27c7d3ac42bdc808c52b5b1eac9bf4466a1099df17cd3f5df0bbd5b5282ca8b904e
TLSH
T170D0247133D03CCFD7000433015043751C0540F300F5D3104C30D04C07CD055C143440
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 a0fb2ba0070d542cd0eb2bf2c6cda1b312c34adaf52f7ad41c28cd27e846e740
MD5 4faa011ae255b09fb9bac60a1f3fc73c
SHA1 9b495c0f0ce3de7b968a2e8dbce7082c04d56589
SHA512 12e21944aab55af0cd8b5aae0ef5edb43926f9e35e1cfdd24286cefd1b18eedf0fa584862f44cc0297420663d5c32a893d24223163f3dc053e8246cab678f93e
TLSH
T1A3510FCE67D44462FBEBA17C81DD3E87363755C1249FAEC234A8C8BB940BBA04118464
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 6220451f9ba338c8bb817efe72d519014e3eb702eaa870d4cb77e76e0ac902fc
MD5 d2affde3e5211868d450ed715a68ba97
SHA1 f0d35a7832d7db0d9730ab7c5eefe6d997e8ad7d
SHA512 89de1f97f86cce49b56dc3d96fbb04bd839a689fb9e41f23c66f647e0cedfbf8c2046c09a8bb2151cf284ff263efc3cf013b0de69b9fc3daa728107ec9e9e1c9
TLSH
T183117DB3C3E585AE890156F05A24EE2BCE1D0506421C7C59C9D4EF2B93E3075D10199B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 c534e18dca0c35435843022d0fd835e85f95f2d1851d899fe645661cc93686a4
MD5 3f4101aa3ce61aa741795d5c5e8cac82
SHA1 baff71ab8af2205d94c6025daca11f328e9961cf
SHA512 586dd40a7b5d6e50013b7be0bcf1cc979338ea0fb98c9ea627279ac2a3f627172089a99f3daed48a920a891c546682f8a06080d0767aab35de942dc4f385f518
SSDEEP 192:sxZtRCWB/fmsNEIdpdGHW6+WNGY36aUCMIgrJ:sxZt/B/fmsNdQHbGX1H9
TLSH
T1C622C8116E38A97B8CCBD20DBA25BF13D6FA503251D11E58EAFC862C05E66DD130B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 e649f7ff46138b5c2b4e2038e987521a4bef0a9bfa0671a22d17eff5743ec2de
MD5 ce1349d7a884362cfa9a482ace2a08c1
SHA1 3ffc878fbd22c5ce65ad94212b0fcdcba129c5e6
SHA512 c158f4e8a080e3a569871eaadd4bd726fa8b39aa6a2391c53bcb42a7a6bbd736f3d5482924ccbd6b2e11eb299d0ed6bd8c7f467b733ff6b52a7d89b7faaad226
SSDEEP 192:sxZtRCWB/fmsU5EIdpHGHW6+WNGY36kUCMIg5SJ:sxZt/B/fmsU5dmHbGXLH8
TLSH
T10322DA516E78A97B8CCBD20DBA55BF53E2FA503251911E48A6FCCA2C05E7BDD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 196541cf9f1b52f121d92592359105ec1d14a551648e1a394d0edc185fa5e673
MD5 a25e89a27a0751cdcf492a61cadda372
SHA1 8899b326f618ddcfb8a32fb6f8dbe47d7a526544
SHA512 796fb8f0700d55ee2953f7153c5e2628efe63400f464695db7d1c01f9c19a3a58e30579e45db3630aa7c6e1c001d8073f64c31911f4c0fa2ae48162506ebe6d9
SSDEEP 192:sxZtRCWB/fmsU5EIdpdGHW6+WNGY36cUCMIg5SJ:sxZt/B/fmsU5dQHbGXjH8
TLSH
T1F822C8516E78A97B8CCBD20DBA55BF53E2FA503250911E48A6FCCA2C05E7BDD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 610bcf5d2923278f20333af9e10949f6eaa243d35e20be17bf3df27cce05dad0
MD5 a74a8eee7d5da490a5fc269d03c1c78f
SHA1 dc48cf95b326d40821dd0af91fb904312f3349c2
SHA512 32bdb4b28937050df1721ecb68b95a72dd0c8cdf949a4f7f1217e84434ed3fed39660a54fed0cacd9497db7653c358c498519b776d1db28f3215ea6f4e1491f3
SSDEEP 192:sxZtRCWB/fmsLEIdpdGHW6+WNGY36aUCMIg5gJ:sxZt/B/fmsLdQHbGX1HO
TLSH
T1E422D8116E38A97B8CCBD20DBA25BF53D2FA503251D11E58EAFC862C05E67DD120B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 ff62394e3cb988f0c10ef860005a8e6a35a8e51ae37074bf4f8c1b9d31582126
MD5 55f1897584e7d3f162111b84d0805e7b
SHA1 d073b7f488023c45cc3dbaca98a99cfbdc6106ff
SHA512 fc1e7b68f164d73d2779a499fa07ccdf1f2f6e835193180ca188c3d812b8e29acfa6edf3e2a1525b2e30d7e1280fec352297691558c9c135025b789c820dc5ec
SSDEEP 768:iUKlm7QWvUYe08F1+UoAYDCx9Tuqh0VfUC9xbog/OVh/LlpPs/Broxd:iUKlm7QWvUYe0u1ja8/L/E/6xd
TLSH
T131C2FA3B640CCB7E4FC05A9DDC5A6F976EA802C7A6588D4047FA984C02C77EA512A4DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 f4c31253a7d70a5c640f33bf4b8a9c30141f7b7e19ce76c0ab1905c3238b5959
MD5 ce46dff4e5cd5a4a38f0824dcdafe081
SHA1 84337b89baf0fbae5476f3e2e2a2ea793edf2a7b
SHA512 cf4b8456daab0e40efd00694361d6527ebcfab3fcedcea2003711c2b4fe73d2915368b4e56f10516ff709f7c871cac115f86672c408f8f492b8641ce6d154296
SSDEEP 48:K0q1YEqo4pb0TkIS8pK9g1apxS5YrMYayLo3uyYCmnb+l+ISKnK9m1cnxw3YNuWJ:KIZCK6QK2/eKgIvkAK52iq9
TLSH
T12591F60530BA135038BD294C92B4866F964232E33058ED6B7BBC54D24F6EE149EFD8D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59b462.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59b462.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 50e63397066a3df0228cc4ddb16feb7d5a4946d7fe85fc00573e366cf3a2b498
MD5 2026005358114bbc08fb5c0a4ffc4c15
SHA1 19f167e78f0cb7eec6e2fac83d2354b89ef27a12
SHA512 99b12491f44294acfcb5d4c62a3f4f6a1b8aad03496368cef84ea26f1706aedc3f1242f8ddfb909c11fcbfad84b544f450e1ede00131feeb7fed8614cccb29e2
SSDEEP 384:9ZcIhsNyaOgbZdPh//WIC1ZmtgOIwZOym8ol:lhjeZ/omXsoO
TLSH
T15D828D3258B8ACBB5DE7D144F08736039F78446BA7C95F9499EDAB2D02EA4E4130BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 591f3935c12d545f9630bb3bb540664d721c7e0ab01ab66b6b34dee79d70396b
MD5 73f07369a1e34dcbaa31b080c1ad8fce
SHA1 bd9016a25636da0a5b32db221fc9fef687008acf
SHA512 82001344fe179b0e2e9ee1d609fd2559eeae5ead4ee45e3d209765984eee63fb51386326fa3b5974e24a0382638bc3f8ec08bab8281a378fd50dd035e3d76814
SSDEEP 384:viFiZcIXzsNK8TUNTUlIlXOgbZdPh//WIC1DmtgOIwZOym8ol:6FQDbwgceZ/UmXsoO
TLSH
T1D8A25C7348A4DCBFADF79A44F58732139FB440A7D6C5AF94E6DDAA2D019A0D80307C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 a48708fbaf0be2cd74d9739338a7873c0b7d5590c92510d0907b568e60363ee1
MD5 413ffd5d83029586c80cf383fcbf7ac3
SHA1 19d2b081b7bfbfa312e7dbfd4bc58f0329d21185
SHA512 dc41b85534f904a517cffd0cef8c423b597823660abf5fdc2f61daddf7d8eec7f71e529b0cc4b10e1078f52db3be3f4bbb50ebd3e831e24804252fc379d8df0e
SSDEEP 96:KqONkLQsjpfbUmjH5ih/cIPURHl8h4otop5oKaD7BKP4v+Y1xf//ojdhxlDeYu77:BONz6JUm0QmiUy2Fso//WA7MBCjPU6
TLSH
T12C02D739AC68BCBB8EF39E45F04777239FA4107BA6951F44DAE86E2D01D759C1303826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 b3233444993133166e3349e03d84a0e2c81ffed011c3f311095cdc487f43adfd
MD5 01ba8026376d8f00a5328e687e9f64ca
SHA1 524315d9b1ee05cc3959fe351e922b0c31f47370
SHA512 1b544188b6db09a01024c1b385bb7c285c1d4f2de5661d1863b6e36908770ba6323de25adc1395cbe389a35c53b763b253ef59e90c2b58b6121a4d5fa7250410
SSDEEP 384:KZcIhsNyXOgbZdPh//WIC1ZmtgOIwZOym8ol:ohAeZ/omXsoO
TLSH
T19E828D3258B4ACBB5DF7E144F08736039F78446BA7C85F9499EDAB2D02DA4A41307C17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 1cdbbfe429fd3e97473a8a540918d280cdd6c51d53ceeeabf818394fc97f54d0
MD5 df60ec2582ab9aac370e9c71991ef63b
SHA1 c4ae8c720426b219fc2eaab06d7ae7f9b4911000
SHA512 344b742a1c660c62dc1c30f3577f48138e466d2c1e48e2c6cab63550a5367267cd9cef485cdebc002c56fd0b07b7286209b3af28e8126f164b4e60a51a203346
SSDEEP 192:BONb6JUHQmiUytFNo//WA7C1Gez3NxGqKU6:BONb6+pQNo//WIC1lmU6
TLSH
T13B120A36A874AC7B9DE39955F04336139E744167DB896F50D9DC6B2C02DB49C530BC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a5efb818-9090-4743-9e20-88ac0861e057.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\a5efb818-9090-4743-9e20-88ac0861e057.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 11bccce248d2ffa322945b51c73af5eca3e4c05d2c29b4848378ebaeb340ce29
MD5 7c84a1e447cc10da27a55636e610ca65
SHA1 16a7c31b82955cd7c6fb47eab0dcaf55b19987ce
SHA512 6a9fcdf18d21a831a8bc409aac338319c1d329ef5c062a22ece94faaa4a2ea37e051b013c8a70a49411467117bc2d71a4368f2788925df5beb6ff7c9da3bc443
TLSH
T198412948A6F91008B3776E56ABF7A86D487FB8372E0AD45D10010E4F0A72B00D9B2737
MD5 SHA1 SHA512 TLSH

Submit Download