3e10b452175f0acbfcda6bc2487e308e0c5f4913f1ca5b0ed77be7a462a066bc

Analysis

max time kernel
148s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/09/2026, 02:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
attachment20260930-1092870-lng4ck.html
Size 171B
Sample260930-cs32eszdja
SHA256 3e10b452175f0acbfcda6bc2487e308e0c5f4913f1ca5b0ed77be7a462a066bc
MD5 e082ebc14f6b24945336f6450b985e45
SHA1 df12ad35c265b0198582e2dc94e0a93048e4de82
SHA512 8dac8fb7101ee6a50ec58409a7d51009d9a3f6b1266377cad6f7f9001bc6f6734ffc067e7cfd0f17a1d0e288803fa8c8d37925590f6421772323ce99a4a9a1bf
TLSH
T1E4C08C7D10C13C150270A93C1DD3B397EC93198E01422B41308180232F35620CED32D0
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3880	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-939655444-3071939294-1401108526-1000\{3F5B567E-3B0C-4038-A55C-1260B7057B32}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1636	msedge.exe
1636	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 4928 wrote to memory of 4316	4928	msedge.exe	86
PID 4928 wrote to memory of 3880	4928	msedge.exe	87
PID 4928 wrote to memory of 2504	4928	msedge.exe	88
PID 4928 wrote to memory of 2504	4928	msedge.exe	88
PID 4928 wrote to memory of 2504	4928	msedge.exe	88
PID 4928 wrote to memory of 3388	4928	msedge.exe	89
PID 4928 wrote to memory of 3388	4928	msedge.exe	89
PID 4928 wrote to memory of 2100	4928	msedge.exe	92
PID 4928 wrote to memory of 2100	4928	msedge.exe	92
PID 4928 wrote to memory of 2100	4928	msedge.exe	92
PID 4928 wrote to memory of 2352	4928	msedge.exe	91
PID 4928 wrote to memory of 2352	4928	msedge.exe	91
PID 4928 wrote to memory of 2352	4928	msedge.exe	91
PID 4928 wrote to memory of 3944	4928	msedge.exe	93
PID 4928 wrote to memory of 416	4928	msedge.exe	94
PID 4928 wrote to memory of 3944	4928	msedge.exe	93
PID 4928 wrote to memory of 3944	4928	msedge.exe	93
PID 4928 wrote to memory of 416	4928	msedge.exe	94
PID 4928 wrote to memory of 416	4928	msedge.exe	94
PID 4928 wrote to memory of 1480	4928	msedge.exe	99
PID 4928 wrote to memory of 1480	4928	msedge.exe	99
PID 4928 wrote to memory of 2876	4928	msedge.exe	98
PID 4928 wrote to memory of 2876	4928	msedge.exe	98
PID 4928 wrote to memory of 2008	4928	msedge.exe	103
PID 4928 wrote to memory of 2468	4928	msedge.exe	114
PID 4928 wrote to memory of 4276	4928	msedge.exe	115
PID 4928 wrote to memory of 4572	4928	msedge.exe	116
PID 4928 wrote to memory of 2452	4928	msedge.exe	124
PID 4928 wrote to memory of 2452	4928	msedge.exe	124
PID 4928 wrote to memory of 4352	4928	msedge.exe	125
PID 4928 wrote to memory of 4352	4928	msedge.exe	125
PID 4928 wrote to memory of 1636	4928	msedge.exe	130

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\attachment20260930-1092870-lng4ck.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffb0e76c188,0x7ffb0e76c194,0x7ffb0e76c1a0
  2⤵
  PID:4316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1880,i,16257701225695096067,17480678447278423288,524288 --field-trial-handle=2364,i,10255501337387857450,3596407198518361946,262144 --variations-seed-version --mojo-platform-channel-handle=2528 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1736,i,13216814547325588374,8020985580689101056,262144 --field-trial-handle=2364,i,10255501337387857450,3596407198518361946,262144 --variations-seed-version --mojo-platform-channel-handle=2360 /prefetch:2
  2⤵
  PID:2504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2200,i,7381928903925695074,7178654509663722636,524288 --field-trial-handle=2364,i,10255501337387857450,3596407198518361946,262144 --variations-seed-version --mojo-platform-channel-handle=3076 /prefetch:8
  2⤵
  PID:3388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3444,i,8076088436922884418,8243182117273853735,2097152 --field-trial-handle=2364,i,10255501337387857450,3596407198518361946,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
  2⤵
  PID:2352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3448,i,16215974119446819140,6981230078604930452,2097152 --field-trial-handle=2364,i,10255501337387857450,3596407198518361946,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:1
  2⤵
  PID:2100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4200,i,11195700742651109638,10467289203217273791,2097152 --field-trial-handle=2364,i,10255501337387857450,3596407198518361946,262144 --variations-seed-version --mojo-platform-channel-handle=4216 /prefetch:1
  2⤵
  PID:3944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4236,i,5950002107086304145,6824712900895383086,2097152 --field-trial-handle=2364,i,10255501337387857450,3596407198518361946,262144 --variations-seed-version --mojo-platform-channel-handle=3424 /prefetch:2
  2⤵
  PID:416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5140,i,16818604118154427646,15677161132781724127,524288 --field-trial-handle=2364,i,10255501337387857450,3596407198518361946,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:8
  2⤵
  PID:2876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5148,i,4920981718500028578,5508364885131122813,524288 --field-trial-handle=2364,i,10255501337387857450,3596407198518361946,262144 --variations-seed-version --mojo-platform-channel-handle=5212 /prefetch:8
  2⤵
  PID:1480
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5936,i,1870356234827707755,18308510824186224517,524288 --field-trial-handle=2364,i,10255501337387857450,3596407198518361946,262144 --variations-seed-version --mojo-platform-channel-handle=5968 /prefetch:8
  2⤵
  PID:2368
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5936,i,1870356234827707755,18308510824186224517,524288 --field-trial-handle=2364,i,10255501337387857450,3596407198518361946,262144 --variations-seed-version --mojo-platform-channel-handle=5968 /prefetch:8
  2⤵
  PID:2008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4300,i,10832945539622231670,12398723631986738949,524288 --field-trial-handle=2364,i,10255501337387857450,3596407198518361946,262144 --variations-seed-version --mojo-platform-channel-handle=4328 /prefetch:8
  2⤵
  PID:2468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4296,i,16579869332116357119,4519895988881168581,524288 --field-trial-handle=2364,i,10255501337387857450,3596407198518361946,262144 --variations-seed-version --mojo-platform-channel-handle=4288 /prefetch:8
  2⤵
  PID:4276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4304,i,15168825420226082301,7647239695302322536,524288 --field-trial-handle=2364,i,10255501337387857450,3596407198518361946,262144 --variations-seed-version --mojo-platform-channel-handle=4280 /prefetch:8
  2⤵
  PID:4572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6316,i,864228705117103337,5890918509924121811,524288 --field-trial-handle=2364,i,10255501337387857450,3596407198518361946,262144 --variations-seed-version --mojo-platform-channel-handle=5228 /prefetch:8
  2⤵
  PID:2452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5860,i,520596027887517108,14217235239517490929,524288 --field-trial-handle=2364,i,10255501337387857450,3596407198518361946,262144 --variations-seed-version --mojo-platform-channel-handle=5340 /prefetch:8
  2⤵
  PID:4352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=748,i,5433316266795745709,2230568411328684355,262144 --field-trial-handle=2364,i,10255501337387857450,3596407198518361946,262144 --variations-seed-version --mojo-platform-channel-handle=5476 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1636

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4468

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a82246f88da27a43b1718bd24e8cdfa3c17ae97a8d238e7befd5fac9a384a0a9
MD5 89669bdc21a8230bc30fb1b7dd97b74a
SHA1 2a5e6b394e76cb0c70b0bba2c18c74bbdd1a4cf6
SHA512 0c8eb5310ea11fffab4f6974f3ba27683ef8dd0cc87e73007e67d163fd017b83b6c0025e8e6b07401acc6ea67dcf75918453237e2f7dcf47044e2050973484b7
TLSH
T1C3D022F8FBE28020F0B23A3200BCC3C30008AB0820A803303C33200C2C880CAE22BE8C
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 7ad0c3ecdb59973717fef5d6e2e5c554429f3c9d56d70853ee1a8ac297329781
MD5 3cbdcd0ba2d5ee26dc193046fb0969f1
SHA1 9562cd03d44ac26195504d25ea05a26a4749bc8a
SHA512 68ab13f6c87a60423e6553c3d33b7027e47c97cad2b070de306766219fefc92cfc9fdf352a5b12cfc8bfd6be1f38be9dd1f2a86256b67c9e42020ab9adb6cdf1
TLSH
T1B9519986E66180B5C764BC71BCC11EC3BF34DAB856B34EF219E8D4B8AF86F526100364
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 6cb704ab68fcd6ee8453dce001616ffa84bebc3293bdd9e0f736afc75ad5bf52
MD5 0cc1ea89f88e126ba6fb3c294c59a1f2
SHA1 7444a257ee16660472bad5dba88030661ff93e59
SHA512 9969ff246bf48cb7f5111b106d6218f285af3a16dd59e0132e976602a3fbabb30944040fc7b5c52942fb78eda76912c88ec537b839c2a14c1420d1ccfdf652df
TLSH
T13A117DB3C3D585AE890116F0AA24AE2BCE1D0505431C7D19C9D4EF2B93E3075E10259F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 b90cd30e3d992752000c0ae48220ebfdd43492a21d0d18f91a5742bbf0c57e11
MD5 cd41a35ef75103a97882b7d5379a0e31
SHA1 bf2b19e51e40382b8d32d801e7fb51e6b6eb6dc9
SHA512 47c1cc3501e0bba00de7bddc09add1ecebbebfba1b6fa4057a0a8f5fb42e27da387cc8ad8610d1ca238ebf2ddd8073d3749dfa5f460f7ed024c7e6cd9b633e91
SSDEEP 192:sxZkRi3WN/fyseBhIdpd3yHW6+WNGYapYDOIgrJ:sxZk8mN/fyse8VyHbG/9
TLSH
T16722C8126E38A57B8CC7E20DBB25BF13E6F9503261941E48EAFC861C05E66DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 099e69569e277bbb4dae38c644ae66b972f42efbce427e9f686b1dba56ba6c2e
MD5 039cd9ed756db6077772efaf61919d4a
SHA1 b59ba4b80d3f5cb871b32debc9dd815446736cbc
SHA512 5badab86e5e3516e0e6ac697f8778be81f5db3be2086f6723e6516f56de8f68b68a4596ba5884fa42464b576476dedca88095e6b170b0e6c79ed381f0a80618a
SSDEEP 192:sxZkRi3WN/fysABhIdpH3yHW6+WNGYapQDOIg56J:sxZk8mN/fysA8XyHbGLo
TLSH
T12B22EA526E38697B8CC7E20DBB65BF13E6F9503261901E48A6FC861C05F76CD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 5e69f5b9bcf851cd009646e3c49ddaefac93aff62aae4a6987ee6f1a5175dd6a
MD5 45aa32854dd6033c0e8f98defce68804
SHA1 317f00c836947f56ba36cf9950483d0c11a869fc
SHA512 214ad965fca00a635a763eab7cfe207efbde154ebd1b1811995de650320be7955aedbcc83bd9a30fd7e3b3abfbda3df334a13af10fa151c0274b8105947d492d
SSDEEP 192:sxZkRi3WN/fysEBhIdpd3yHW6+WNGYapYDOIg5YJ:sxZk8mN/fysE8VyHbG/a
TLSH
T17622C7126E38A57B8CC7D21DBB65BF13E6F95032A1941E48AAFC862C05E76DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 b57e18d3aafdccbbfcd04744e778cbba93f9c84e6747aff97b5e45a98639433a
MD5 f094fa48e743414c05e11322887aa06f
SHA1 1f63020c9e227bd543d89aea5aad174943630475
SHA512 ae7886ec687703b4cb356a6c836f5e633107c519e6088fb747950167dcc02d60763b074343637ad12a7f3ca1a2c919310ec6eeb3d851984d817489de5cb94010
SSDEEP 192:sxZkRi3WN/fysABhIdpd3yHW6+WNGYapvDOIg56J:sxZk8mN/fysA8VyHbGso
TLSH
T18B22D9526E78A97B8CC7E20DBB65BF13E6F9503261951E48A6FC862C05F76CD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 742480adc12d58c7d6dfced38d07767e6e158b3fe460b7e9aefb482e2c2a6ebc
MD5 cc0147255522512eb20969224574bd4d
SHA1 331cc3b063a729c95a0ef6cb503d9fd0d414ca70
SHA512 e320fb44a488c42790e748eec72a1aa11848d3ae2ed1397b651d5437f48b509d9cb1433034825ca91996e08d7cd55ef86a447c6beaf87ce0f7f7c98d6f952a2b
SSDEEP 768:8AWPcLKWvKeEe8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjlLlACy73ro4cfeKmRB:8AWPcLKWvKeEeu1jaClLiF7k4cWKmRB
TLSH
T10DC2FB3B644CCB7E4FC01E9DDC5A6FA76E9802C79A548D4047FE984C02C77EA912A4CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 f50d2a21a03b9c0fe3a63949f064d08863f842a8a1ce9f17076fab051a02cf80
MD5 400dd10184bdf66a8dda679681c1bcb2
SHA1 6b307d33652987138a1628430a6cfc01c8c7aec0
SHA512 efd8999e475bf16186865030bee7699a8a04f4352c2b94859310246af78492ff1df1af654e245c3bf5ae784a695e9adf32d50a892ccecabc99d1bcacbf3a4620
SSDEEP 48:K0Nsh9P7/gbTmzIS1gK911XgxlwY23ttyLitwciAgxb8LsIS0xK941Cxx6hYj0s+:KkSIKHq2W1GKewZFWKGI6b
TLSH
T115913210307B5201387D386895B4CB2F568271B33459EA6BBBBD60A54F6BE08DCFE4C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5dac04c0-5ffb-4f90-baa2-9f65189391b5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\5dac04c0-5ffb-4f90-baa2-9f65189391b5.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 71674e27b3dc97d72fdcd77014c643a34c43a97cc59e9c44fd0ee4b6378e75be
MD5 32471d37a3f394a578ded647389763cf
SHA1 344de3b21370b69e4df4066f159f6872662a3b4a
SHA512 913e9dcf5cb8af0b0b470642b4fa4301577cae98a674c67d2f3949e7ca41db8c1dd5a11855939095f981c536d2ad8f1b038fb96d46c4fd659e04ca687a933d10
SSDEEP 384:gZcIhsN20z+tcY1aZHzIGmjs9X+bVciutgOIwZOy8Fon:ehHyTks9X4iiuXs7w
TLSH
T1A9827C729DB8ACB75DE79545F4873A239EB48127E2C46B94D4EC5B1C00EF298030BE1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 ac4ed4a7daf4c6525bd0dc8ae4e1d01fe223e5b322f1d3e3bda15002346409db
MD5 b517f885788da11babb7434ac0caa600
SHA1 148eb44cda5fa0604cc744f9e1f5ede896f1af84
SHA512 4e7f25a758d21e75a5824088189a22f844a985af9b1c680958a6a9470cfc51bca7dc6c2eab0fbc9cb46e1a9e14ef49b94bceb15bf9f64db33d3f94d27e7385d6
SSDEEP 384:1iFiZcI4zsN28TUNTUlIlzz+tcY1aZHzIGmjs9X+bVXJiutgOIwZOy8Fon:8FQE3wg+yTks9X41JiuXs7w
TLSH
T178A27D738DF89CBBAEFB9A44F54A36138EB44167D6C4BB94D6DC5A1C00EB198030BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 650a6d49045b936f2d157ff8250b751a3daa855111aeecc0faa4a642019bbccc
MD5 ed9c50ca00076a2c28bf86da44bdcd41
SHA1 d7850bea6793c2cf29f38e11cd651c8d56cfb2de
SHA512 122f0e50c2c986af472edc44f0e94520e8fc392bd1c2883e689b3dcaf1e544cfe885fe6374699e15a64c09356568893c0b820f2d296242eaf76ea403304bc982
SSDEEP 384:JZcIhsN2zz+tcY1aZHzIGmjs9X+bVciutgOIwZOy8Fon:BhmyTks9X4iiuXs7w
TLSH
T120827C729DB86CB75DE7A545F4473A239EB49127E2C46B94D4EC5B1C00EF298030BE17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 7c4f6dec710628d8afe0c04596ec517fe631824b93166444d73e04bba3c97255
MD5 ad1d596bc25b9b306ef21dc2d77753c8
SHA1 554a07436d703d68b5709a7d2d92fff3fe946486
SHA512 279168ecffa1397e15fc3b6eb92096f08fffb6b36e6349e9829d544e0c399aa025bd8f3435459da87b7e61d216635e47966a4a7a4250ced958b9e950bd8ecc81
SSDEEP 192:aONv6IELQmiUydqT1uIGmjs9X+8iVX27HIqUU6:aONv6D9x1uIGmjs9X+bVUHuU6
TLSH
T174120971ADBCB8675EE3A845F48739235EB58227E6887B94D5DC1A1C04EF25C130BA13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 f9c56d7db5f3eaa054191ed60da77547f7cfdf86da664186c365de7ae55ee656
MD5 89c9a1eb806703bd4d3f8c17fc8c743e
SHA1 a41a27e420f5eb7bfcb80115647854b532c1b7eb
SHA512 55cc5e6d747b1a1cb668eb55d6b126ce36cda26da6811f8550dcfa9c5666453830cec75e011de25a3d0c2b5f5816256810d07f6e3e26d6c55645d8ebf10f8fda
SSDEEP 192:aONx6IE7QmiUyrqTPuIGmjs9X+8DC7sTJU6:aONx6DtxPuIGmjs9X+Fs1U6
TLSH
T11502E835AD7C7CB78EF3AD09B0876A236FA5112BE5952F84DAE81A1D00DB24C1307927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

df55f0b8-69ad-435a-9284-7ae4806a0dfe.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\df55f0b8-69ad-435a-9284-7ae4806a0dfe.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 1a14b7eb1ab60c2f559f4f8abb632a243899093675febd10886c6779a415f48b
MD5 94d161bc3813331f29f96e2c79b1ba29
SHA1 6c9d0d0df9d10d2b68ea44291167ae23f658730c
SHA512 11f3e34b548a3eda6e302bc2b5a7b57dcd8df44895ed239b657220192ed010c42804aef6599dfaabe41619f3eee04e3f2798abe3a99a46320a8f62f814747e01
TLSH
T1FE410B4CA6E9104CB3B36E4AAFF6A86D487BB8772E0AD49D10010D4E0677B44D8B1733
MD5 SHA1 SHA512 TLSH

Submit Download