af6f2b66f13d44d2ec1a96fd2846b3339c52234b98d44fc0fc8d72eaf817bf20

Analysis

max time kernel
148s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/09/2026, 03:40

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
attachment20260930-1092870-tjhe5i.html
Size 214KB
Sample260930-d8ffqszvfw
SHA256 af6f2b66f13d44d2ec1a96fd2846b3339c52234b98d44fc0fc8d72eaf817bf20
MD5 ca2c96be8ad4c1b27afc858a639eb1f4
SHA1 34bcbb32e3946883cf26447531ab98af52bcab62
SHA512 3437202655e3eb3621e7f896424eace53f0c5f24acf844be2b9d563d88009e6cf5a37bcddba9c2cbaba921fa3f1b6b8b256eb36e35e548489e0a5a04be7cb99c
SSDEEP 3072:opm0WkXwgEweVFmk0RHyEoCmetxWnm6t6b9U9QfyA7cxGTdTbLayQsH:oglIYWRHyrCunm6t6i947gGTx3pQ4
TLSH
T13024023459202B0E3B9246B4B26575A40EF90CB3E95F96227BC801F5EFED1F29049CE7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5060	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-747854149-4118156852-591593384-1000\{D15B299F-4EB3-43CF-8676-85B821CC52E4}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5012	msedge.exe
5012	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3096 wrote to memory of 1980	3096	msedge.exe	86
PID 3096 wrote to memory of 4924	3096	msedge.exe	87
PID 3096 wrote to memory of 5060	3096	msedge.exe	88
PID 3096 wrote to memory of 4924	3096	msedge.exe	87
PID 3096 wrote to memory of 4924	3096	msedge.exe	87
PID 3096 wrote to memory of 3668	3096	msedge.exe	90
PID 3096 wrote to memory of 3668	3096	msedge.exe	90
PID 3096 wrote to memory of 4488	3096	msedge.exe	91
PID 3096 wrote to memory of 2328	3096	msedge.exe	92
PID 3096 wrote to memory of 4488	3096	msedge.exe	91
PID 3096 wrote to memory of 4488	3096	msedge.exe	91
PID 3096 wrote to memory of 2328	3096	msedge.exe	92
PID 3096 wrote to memory of 2328	3096	msedge.exe	92
PID 3096 wrote to memory of 3436	3096	msedge.exe	93
PID 3096 wrote to memory of 3436	3096	msedge.exe	93
PID 3096 wrote to memory of 3436	3096	msedge.exe	93
PID 3096 wrote to memory of 2800	3096	msedge.exe	94
PID 3096 wrote to memory of 2800	3096	msedge.exe	94
PID 3096 wrote to memory of 2800	3096	msedge.exe	94
PID 3096 wrote to memory of 964	3096	msedge.exe	102
PID 3096 wrote to memory of 1824	3096	msedge.exe	103
PID 3096 wrote to memory of 964	3096	msedge.exe	102
PID 3096 wrote to memory of 1824	3096	msedge.exe	103
PID 3096 wrote to memory of 2544	3096	msedge.exe	105
PID 3096 wrote to memory of 2916	3096	msedge.exe	112
PID 3096 wrote to memory of 4596	3096	msedge.exe	113
PID 3096 wrote to memory of 2168	3096	msedge.exe	114
PID 3096 wrote to memory of 5036	3096	msedge.exe	123
PID 3096 wrote to memory of 5036	3096	msedge.exe	123
PID 3096 wrote to memory of 5012	3096	msedge.exe	127

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\attachment20260930-1092870-tjhe5i.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x264,0x7ff9f6afc188,0x7ff9f6afc194,0x7ff9f6afc1a0
  2⤵
  PID:1980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1640,i,16414655143751717253,848349562790643618,262144 --field-trial-handle=2268,i,6701613597368248237,13491209825991672663,262144 --variations-seed-version --mojo-platform-channel-handle=2264 /prefetch:2
  2⤵
  PID:4924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1968,i,8315039389093997042,13534033676402867985,524288 --field-trial-handle=2268,i,6701613597368248237,13491209825991672663,262144 --variations-seed-version --mojo-platform-channel-handle=2328 /prefetch:3
  2⤵
  - System Time Discovery
  PID:5060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2564,i,11080420603331154346,2151512349800497101,524288 --field-trial-handle=2268,i,6701613597368248237,13491209825991672663,262144 --variations-seed-version --mojo-platform-channel-handle=2572 /prefetch:8
  2⤵
  PID:3668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3416,i,17147740104199605727,10756814844626270933,2097152 --field-trial-handle=2268,i,6701613597368248237,13491209825991672663,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:4488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3420,i,5461423434793011330,8393669916575914335,2097152 --field-trial-handle=2268,i,6701613597368248237,13491209825991672663,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:2328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4212,i,16620941676384702568,16208454496256432595,2097152 --field-trial-handle=2268,i,6701613597368248237,13491209825991672663,262144 --variations-seed-version --mojo-platform-channel-handle=4220 /prefetch:1
  2⤵
  PID:3436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4288,i,6550255834020886180,2743620473065606655,2097152 --field-trial-handle=2268,i,6701613597368248237,13491209825991672663,262144 --variations-seed-version --mojo-platform-channel-handle=4352 /prefetch:2
  2⤵
  PID:2800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,9207097151502118646,11715563530198509919,524288 --field-trial-handle=2268,i,6701613597368248237,13491209825991672663,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:8
  2⤵
  PID:964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5136,i,11938840577437550777,14620652118713421350,524288 --field-trial-handle=2268,i,6701613597368248237,13491209825991672663,262144 --variations-seed-version --mojo-platform-channel-handle=5212 /prefetch:8
  2⤵
  PID:1824
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5812,i,9697543272439179755,11982890616124001012,524288 --field-trial-handle=2268,i,6701613597368248237,13491209825991672663,262144 --variations-seed-version --mojo-platform-channel-handle=5836 /prefetch:8
  2⤵
  PID:4364
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5812,i,9697543272439179755,11982890616124001012,524288 --field-trial-handle=2268,i,6701613597368248237,13491209825991672663,262144 --variations-seed-version --mojo-platform-channel-handle=5836 /prefetch:8
  2⤵
  PID:2544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5840,i,7314094912152418677,1771520324351769613,524288 --field-trial-handle=2268,i,6701613597368248237,13491209825991672663,262144 --variations-seed-version --mojo-platform-channel-handle=4392 /prefetch:8
  2⤵
  PID:2916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5876,i,3473226611425519315,16057539610097969664,524288 --field-trial-handle=2268,i,6701613597368248237,13491209825991672663,262144 --variations-seed-version --mojo-platform-channel-handle=4440 /prefetch:8
  2⤵
  PID:4596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5884,i,4078851155010751619,14303653798932083712,524288 --field-trial-handle=2268,i,6701613597368248237,13491209825991672663,262144 --variations-seed-version --mojo-platform-channel-handle=6192 /prefetch:8
  2⤵
  PID:2168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1028,i,7972195265031073528,6701247974951985473,524288 --field-trial-handle=2268,i,6701613597368248237,13491209825991672663,262144 --variations-seed-version --mojo-platform-channel-handle=1248 /prefetch:8
  2⤵
  PID:5036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=760,i,9037558630498880485,14060731217676570061,262144 --field-trial-handle=2268,i,6701613597368248237,13491209825991672663,262144 --variations-seed-version --mojo-platform-channel-handle=6116 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5012

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4916

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a62a1faeaaa56a5f5375b4d4921e6b263c0bc10a5ecc1f991894c66c32a88aef
MD5 64fcd85513a139bcf5844ab49aea8206
SHA1 3c834eccb77da48c4abac17c440971305fd9b653
SHA512 cd1b39ff43d56158fbb01c5408a5bf247d5bd82279b205a914ab4cdccfece77a5399e430bb26db6f7d10e70dc3503c3bf37c5de59e23cb8f62d6337066c4114f
TLSH
T15DD02232EBF00E82C00B0032082282880F08C03C08003222A23C20AE3A80CEC2E23000
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 3072e41a42828b7807d73061730199bcd2e25e4eb5f20f0f4a645b3ab97d1b39
MD5 07431e71596bf598757518e19cd6b104
SHA1 d5f6d4aaefa171a422626a8b31457836d2209db1
SHA512 ee900945bd8ed7d0076bd935afc7985d078d633962a14b2d59a748b15fd39e902f9ad9cbe665841b1a07ce484f738b892559ab202d8a4597427ed2363769c352
TLSH
T155615C814BB088B3FBA451F8C6F498D7BA32838D58839E210AE4F56D9C5332741F720B
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 3f35e923c36f460d00a5235a3e8ac5ab87bb2bae970bdb79ae54fd47eca13b9d
MD5 52613b0602d6306e8e439efffa284e9e
SHA1 c350d7f32b11dc468a29a917deb75d8014a73548
SHA512 77725fd8467edabb7ed4ef3821a5768c82afd9050909077403c139a03ba0168bd59124047618ddf20bc9ccbf3d0ef2ec72b8b901cee6743e76cc62d6994dcf15
TLSH
T18A117DB3C7D595AE8D0156F06A28AE2BCE1D0A05421C7D19C9D4EF27D3E3479D10299F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 d7400f95d2a1ca397bed08b1d9dabb7f90d8674597222a7f1e2f5b5c032ec91a
MD5 730f6d13e48a35540f3bd19bf14fb62f
SHA1 1e49191347a70afab269bfe166aa20e005f5631d
SHA512 6ca838797d9692adba5dfea5ce81ca60255fb96c33dd87652fa38def9cce30f0b89a43503e9f230ed789661c2d6184ede6121827a95bb1769de26a1ab69bb0a1
SSDEEP 192:sxZtRwWJ/fCs4t0IdpdRHW6+WNGYgUXwIgrJ:sxZtFJ/fCs4t3HbGx9
TLSH
T18B22A8116E68A97B8CC7E20DBB55BF53E5F9503261951E48EAFCC61C04E7ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 cd9075e415a41bbed3e1e6a779d79f0aa866c1e07517bd1fc21201bf06bf3b7f
MD5 8ee982b5877c8bd7bbdf88c465b1011f
SHA1 67a0c00f5538cdac848e7ccc0840adc71ddb36d8
SHA512 a46cc3f6e1d87a5b967d9d04ae6fa613922dd0faae623bc1406672486aa4a74566fd630a20a0412a01f3abec68d2d3a927cf5a424fcb99d5c08423ede8b82f4c
SSDEEP 192:sxZtRwWJ/fCs4z0IdpHRHW6+WNGYglXwIg55J:sxZtFJ/fCsCtxHbGI5
TLSH
T1CA22C9526D68697B8CC7E20DBB55BF53E2F9503261941E48AAFCC61C05E7BCD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 c468a9586c5409664b3068e282f82b471637c08dbd05cbe2c62766a2ab40fdee
MD5 93a2fc66b2d3179b0f08db97a93a1fe4
SHA1 ce15442db53610ec41572c4787706385d1c93ce6
SHA512 191a5275460173ec4e169437cf2a65db6ff31d187b25a86225bc6ac38b4b3237a76818f8dd81a943b55d895fc283c433ff1c1a23cee714941a6a4c3136874f69
SSDEEP 192:sxZtRwWJ/fCs4z0IdpdRHW6+WNGYg2XwIg55J:sxZtFJ/fCsCt3HbGT5
TLSH
T1CD22D9116E6869BB8CC7E20DBB55BF53E2F9503261951E48AAFCC61C05E7BCD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 771746b4f1ec5f6dcddcbef53d314118c0790f8d133f3eea4cbbb10bcf4af23e
MD5 153ecc601e10f3d340f3712ba49dd98c
SHA1 da00e2c3c0034410d2c8ea1622548cef8cdb014a
SHA512 6844403438cff04a5a6a8bba1839e99e34c065df181825b71910002126a2c04365a4f71bf9648cecf6d49226c9cf22eef3a3c93b86a6d731d82d16b0df091051
SSDEEP 192:sxZtRwWJ/fCs4t0IdpdRHW6+WNGYgUXwIg5bJ:sxZtFJ/fCs4t3HbGxH
TLSH
T1BE22C8126E78697B8CC7E20DBB55BF53D5F9503261941E48AAFC861C04E7ACD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 e1020d1442cc9e169eff94092babf04aae31801b52bf1042994895ae7e248274
MD5 efd9346d2f3271bd81f18123f4bdb526
SHA1 c3165cc55e1bdea8751a0508daf0582c55457dcc
SHA512 cbfcdd51ab55cffea3675c8fe267dda19b3467e17df156666927d4a9ea18dac2d4ad2f58c3dc7ce7521baed2b6449306bee9775299a47e33357d26cb00743d06
SSDEEP 768:pOichfPWvPZpl8F1+UoAYDCx9Tuqh0VfUC9xbog/OVu+LlEKXzWroKbeS:pOichfPWvPZplu1jan+LKgztpS
TLSH
T14DC2EA7B640CCB7E4FC01A9DDD1A6F977E9802C796588D4047FA984C02C77EE91264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 b1c3dbfcb36334a3547effe04c2640dbd5e77d2208984e3e44c078ea6074ff54
MD5 2bd407149fa4c00b5a49f4234fa41b1a
SHA1 73773d4b78b5ba20bd17c3c875c3fa7caef60726
SHA512 24b787bfa0304cd650010360a6e18d53f19eda09c4cabb6ac373462b3d18a480dd3c22a4408577d490d732d72b9477a5a551bf77bda187feb012dbb8e07f8d71
SSDEEP 96:KAdOKOY6VAr8QuC+giapzIIgKQ1IWgsYIZ2/bKKYwS8:URVAr8QuC+1ap8IU1IWdYIZ2uB8
TLSH
T14791061435BF078039FDA84981B4C62E158371A73258FA3B7F7840A24E9BE049EFD5C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6acd0310-cf63-43ea-8b9a-e4dac7cc2a3e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\6acd0310-cf63-43ea-8b9a-e4dac7cc2a3e.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 3435d477afb75ef640687e82477dccf5aeecc8a888cb4bb2ede5dac65bf81114
MD5 011c67aee713aff5c5b4be1ebf53e15c
SHA1 98df254e7229dd7c1068f8448cd8a40e0ad64860
SHA512 387532e95a778ef7d3a22a9165d3f7e4f0b089eb5781887837fa2a66ede81a9ac01077e8ac3655225cd7898de528ce06e88cbc1de56a8a3f6d938480e6ab091f
SSDEEP 384:VZcIhsNjqU35EbENBGYX5EzyOi6QJmvVZh6DKhHRtod:thM3ZvGYuzyO3QJIfYGHRtG
TLSH
T100827E739C78AC7B5CF6B181F54A36139FF49053A6C96F90D1DC6B1C01DA6982317C2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 e88a577cfe0529f3030b4628ebfc3b4cfe00829ab275b3b750039b9a0e2ae7cb
MD5 5cff0828ad78c3a2520010e7c275d386
SHA1 71ae67c7c8d7aa3f37ebb2ad39230c6eb8b5fa20
SHA512 a97df5c31a63328644dbb4dc2d8cd44eb758e8fa9ab167e994d074fedb9e6ac4cbe80203a5e7cdc48ddecd155948806b3695361474b83deb68adae868e2cafd4
SSDEEP 384:/iFiZcIzzsN98TUNTUlIldU35EbENBGYX5EzyOi6Q5mvVZh6DKhHRtod:KFQXowgE3ZvGYuzyO3Q5IfYGHRtG
TLSH
T190A26C738CB4DC7B6CF6BA81F54A36139FF48163D685AB90D2CCAA1C009B1982307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 3d791fac9abda181aad8289df735b90d12d7100007d05ef60ec87301ef9605e0
MD5 a4724df198028646da5014f4efa1173f
SHA1 2651e1e4d450e40c1179d8bca5bf724f23d06a27
SHA512 5a3a5791af245fdd4dac6dc23480084e434bd5151b892862c262070fc185acc36cdb4e3ffb79c81b1ee0959c4ea67861867aecba4c21ad9f3d63d688f3664661
SSDEEP 384:4ZcIhsNjdU35EbENBGYX5EzyOi6QJmvVZh6DKhHRtod:GhV3ZvGYuzyO3QJIfYGHRtG
TLSH
T1BD827D729C78AC7B5CF6B181F54A36139FF49053A6C85F90D1DCAB1D01DA6982317C2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 55cee62992f9f1bfcff1b0913bc1970c936378521bb82f208441f562bda65034
MD5 2afd8db9bdb372dde401acb42e664f52
SHA1 3f244a0ac330282e79cb3a84a97443555964a7d3
SHA512 fcec7057901f77f463182e90cf403e8f99a8e9e5b423f610fb96b8e079558a9d7d40d4f278711b2345c6c7f9bcea78dd3dde187ad2875c51d9e883c947caa5ca
SSDEEP 192:LJONf6DphmqQmiUyBYq8wGYX59ez6CyORMWkk7ZyU6:lONf619BRwGYX5EzyOiwQU6
TLSH
T11A02E935AD78BCBB8DE26E45F58B37236FE4112BAA942F54D6D82A1C01D764C2306837
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 2da55d8640d5460a8724c88b8ebf32c2baee0bc4a6e8c11273cc0f2b0ee6e6cd
MD5 5a66ba47f163db32b686bd0753acb4ce
SHA1 90e6faf63cb98bcb955ad99593d133937ca41cb6
SHA512 2956cd0166b70cc7f7422e79e9db154a7df6cb17b9784e7cafa6a710c9545692f1598704e9158f601c661e63f9fa4fbf7df7a6ed22da870bf91d581cc02fb2dc
SSDEEP 192:LJONe6DphzqQmiUyBYPwGYX59ez6CyORM6Q3kIImoq5/U6:lONe614/PwGYX5EzyOi6QgmvU6
TLSH
T1CD121B32ADB8AC7B1CE26591F48736139FB45127EA846F54D5DC2B2C01DF65C230AC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 bac85207cf30154aa90c136bb95cb5cc7f51ce7fa16869a0121b122dda8aad68
MD5 e1028f6073c6f251a0186d33f76cd059
SHA1 df6f5f85e7654e0db56908740e78807e96a537ac
SHA512 a2a65f9ff591c93299607796219dbbfe0fbb3554a8725f887085902b4a4bf91097f9d6605d797baac71118f8a28db56f56b23e9430766c01733091cb9301218f
TLSH
T1F0410598B7EA1148B3B77E55ABF6A86D487E7D372A06D45D00010D4F0A76A44C9A1B33
MD5 SHA1 SHA512 TLSH

Submit Download