5d6004c82e2d7244aad68bb00365d03353aa2ac2d87ec93b28b59b029543fde2

Analysis

max time kernel
148s
max time network
138s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/09/2026, 03:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
attachment20260930-1092870-nh0exz.htm
Size 1KB
Sample260930-dwvd5adf44
SHA256 5d6004c82e2d7244aad68bb00365d03353aa2ac2d87ec93b28b59b029543fde2
MD5 3a134f40128e3382caf68c7037564ce6
SHA1 d53f727b1b15ed1d2286e65613578331cb2a01f7
SHA512 7dc021062e3dd4f2601fa8291c6c7370bcb1b579bc09aac01ed304c2dfe255c0a67248a2e7b90940563d9c914749f0488d85f55208a5f48bf413f651b735d21e
TLSH
T1FD11CCDB03E23DA45493333764434B8EDF380175E7724F753475211A138A29AD4239F4
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2304	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-747854149-4118156852-591593384-1000\{966BC5D6-97A0-4534-A16C-50A047150DEE}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2984	msedge.exe
2984	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 740 wrote to memory of 3060	740	msedge.exe	86
PID 740 wrote to memory of 2304	740	msedge.exe	87
PID 740 wrote to memory of 1580	740	msedge.exe	88
PID 740 wrote to memory of 1580	740	msedge.exe	88
PID 740 wrote to memory of 1580	740	msedge.exe	88
PID 740 wrote to memory of 4508	740	msedge.exe	89
PID 740 wrote to memory of 4508	740	msedge.exe	89
PID 740 wrote to memory of 4668	740	msedge.exe	90
PID 740 wrote to memory of 4668	740	msedge.exe	90
PID 740 wrote to memory of 4668	740	msedge.exe	90
PID 740 wrote to memory of 2076	740	msedge.exe	91
PID 740 wrote to memory of 2076	740	msedge.exe	91
PID 740 wrote to memory of 2076	740	msedge.exe	91
PID 740 wrote to memory of 3352	740	msedge.exe	93
PID 740 wrote to memory of 3684	740	msedge.exe	94
PID 740 wrote to memory of 3352	740	msedge.exe	93
PID 740 wrote to memory of 3352	740	msedge.exe	93
PID 740 wrote to memory of 3684	740	msedge.exe	94
PID 740 wrote to memory of 3684	740	msedge.exe	94
PID 740 wrote to memory of 3136	740	msedge.exe	102
PID 740 wrote to memory of 3136	740	msedge.exe	102
PID 740 wrote to memory of 5020	740	msedge.exe	103
PID 740 wrote to memory of 5020	740	msedge.exe	103
PID 740 wrote to memory of 3120	740	msedge.exe	106
PID 740 wrote to memory of 1592	740	msedge.exe	113
PID 740 wrote to memory of 4044	740	msedge.exe	114
PID 740 wrote to memory of 4000	740	msedge.exe	115
PID 740 wrote to memory of 3816	740	msedge.exe	123
PID 740 wrote to memory of 3816	740	msedge.exe	123
PID 740 wrote to memory of 2984	740	msedge.exe	127

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\attachment20260930-1092870-nh0exz.htm
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x288,0x7fff1e38c188,0x7fff1e38c194,0x7fff1e38c1a0
  2⤵
  PID:3060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1832,i,3759672181721112194,13673262894471042213,524288 --field-trial-handle=2340,i,8621120005114938981,8820085821087403922,262144 --variations-seed-version --mojo-platform-channel-handle=2448 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1672,i,13510817588121380786,9204815889950488041,262144 --field-trial-handle=2340,i,8621120005114938981,8820085821087403922,262144 --variations-seed-version --mojo-platform-channel-handle=2336 /prefetch:2
  2⤵
  PID:1580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2312,i,9128073020388090793,5460588576399002572,524288 --field-trial-handle=2340,i,8621120005114938981,8820085821087403922,262144 --variations-seed-version --mojo-platform-channel-handle=3088 /prefetch:8
  2⤵
  PID:4508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3420,i,10417052671633375958,1674294802918355741,2097152 --field-trial-handle=2340,i,8621120005114938981,8820085821087403922,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:4668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3424,i,10658593496132251797,672815175067914250,2097152 --field-trial-handle=2340,i,8621120005114938981,8820085821087403922,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:2076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4140,i,9457790327898792468,2433607847767138505,2097152 --field-trial-handle=2340,i,8621120005114938981,8820085821087403922,262144 --variations-seed-version --mojo-platform-channel-handle=4156 /prefetch:1
  2⤵
  PID:3352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4180,i,17734334070001473521,17859810522748118501,2097152 --field-trial-handle=2340,i,8621120005114938981,8820085821087403922,262144 --variations-seed-version --mojo-platform-channel-handle=4176 /prefetch:2
  2⤵
  PID:3684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3628,i,17685599700162332623,18099172071302482638,524288 --field-trial-handle=2340,i,8621120005114938981,8820085821087403922,262144 --variations-seed-version --mojo-platform-channel-handle=5140 /prefetch:8
  2⤵
  PID:3136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5048,i,3577325052809083010,7893734938072596422,524288 --field-trial-handle=2340,i,8621120005114938981,8820085821087403922,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:8
  2⤵
  PID:5020
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5700,i,380708227765880411,4585358571606851098,524288 --field-trial-handle=2340,i,8621120005114938981,8820085821087403922,262144 --variations-seed-version --mojo-platform-channel-handle=5920 /prefetch:8
  2⤵
  PID:1332
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5700,i,380708227765880411,4585358571606851098,524288 --field-trial-handle=2340,i,8621120005114938981,8820085821087403922,262144 --variations-seed-version --mojo-platform-channel-handle=5920 /prefetch:8
  2⤵
  PID:3120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4204,i,11430415331717263370,7583727080569259016,524288 --field-trial-handle=2340,i,8621120005114938981,8820085821087403922,262144 --variations-seed-version --mojo-platform-channel-handle=4992 /prefetch:8
  2⤵
  PID:1592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4196,i,11499007473005807460,3861142894085193590,524288 --field-trial-handle=2340,i,8621120005114938981,8820085821087403922,262144 --variations-seed-version --mojo-platform-channel-handle=4236 /prefetch:8
  2⤵
  PID:4044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4244,i,11719512968358271248,4403738588562810671,524288 --field-trial-handle=2340,i,8621120005114938981,8820085821087403922,262144 --variations-seed-version --mojo-platform-channel-handle=4336 /prefetch:8
  2⤵
  PID:4000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5940,i,2540556559447842307,15068138871296476819,524288 --field-trial-handle=2340,i,8621120005114938981,8820085821087403922,262144 --variations-seed-version --mojo-platform-channel-handle=5356 /prefetch:8
  2⤵
  PID:3816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5768,i,12485386908525793936,13483177664453500731,262144 --field-trial-handle=2340,i,8621120005114938981,8820085821087403922,262144 --variations-seed-version --mojo-platform-channel-handle=6132 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2984

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4084

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a62a1faeaaa56a5f5375b4d4921e6b263c0bc10a5ecc1f991894c66c32a88aef
MD5 64fcd85513a139bcf5844ab49aea8206
SHA1 3c834eccb77da48c4abac17c440971305fd9b653
SHA512 cd1b39ff43d56158fbb01c5408a5bf247d5bd82279b205a914ab4cdccfece77a5399e430bb26db6f7d10e70dc3503c3bf37c5de59e23cb8f62d6337066c4114f
TLSH
T15DD02232EBF00E82C00B0032082282880F08C03C08003222A23C20AE3A80CEC2E23000
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d1cc89f8f1c9f75d127814445edc4d6d9314209d3b11e5a2b4cc826747683f30
MD5 3bc9cc32c2de3150dc7916bb61984962
SHA1 d75ba9bc7ad74cb95dcb4ec6de6e6b18f5813a04
SHA512 fd090e624e91a98337689ed57390fc5813fab21acd3af426c9de6566ea4d92a7875c4f92a1b64d547eaf9ce40cad3d8a85472a30cf521aea6198cf74b69805ac
TLSH
T12ED02232ABF00E82C80B0032082082880F08C03C0800B323A23C20AE2A82CEC2E23000
MD5 SHA1 SHA512 TLSH

Submit Download

9bbd316b-625f-492a-833f-ffd7039415cd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9bbd316b-625f-492a-833f-ffd7039415cd.tmp
Size 27KB
SHA256 0bde28d3174af57eaaa548a24bc4d73cc926a7280a61298c2d6b5c11697054d3
MD5 5ae0928ab3d32036b4edda5233e0f727
SHA1 8f172add8e3d7862291e8446fd71678960d386fe
SHA512 b7a242abec0f21bfa5e49b382139957629f0bdeaf9256d4a6eeef0129c2d944144766a61b197a455fd01f3fb7afe085d9bafe726eae51c45410e1e0aa347c867
SSDEEP 768:0ZichfPWvPZpl8F1+UoAYDCx9Tuqh0VfUC9xbog/OVu+LlEKXz7roaV8:0ZichfPWvPZplu1jan+LKgzIW8
TLSH
T102C2FA3B644CCA7E4FC01A9DDD1A6FD77E9802C7A6588D4047FA984C02C77EE61264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 d0dda12aadbf0562980a320b4b77508fd5cb5ba703a0f89d6bced8cf8ed3c5e5
MD5 1d7f71e8665526b3269f5bfac9b41ed7
SHA1 c642d1fccadd0aaff501bd86dbced76739436237
SHA512 5634be12795b97f80ca4fe1e6a5832dfab75f85358354adda0881ac619447e6651535bc8a6fe7883415ddec57ed160174779276e5c4695cc85d886b7e5b71d14
TLSH
T1EA61C6CD454180AFFF9480789DDD70CB37365D827A4F0DF38198D4B6A896BD4C38A890
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58e0c6.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58e0c6.TMP
Size 3KB
SHA256 073634b4af78c00b588ad6bdc5ef21178a1b26879893f045e5be6d6eaaf5a471
MD5 e840d6f8a5d45299f88e5540fa6953b4
SHA1 74646a1a034ea7648c5d0e8df5a211274a00e5e7
SHA512 cda8f1d581d5878c3cde29a2cfc34d7c136ae20c2a52e8cfcb18bbd83ea23ed619e62483fa70d611042b6f2c0a444758aa2eba802f33c36a0e73913b6ede278f
TLSH
T1E061B5CC454180AFFF9480789DDD70CB37365D867A4F4DF380A8D4B6A886BD4C289890
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3c9a8753-3f18-4bdd-a2b6-ba221ecb1925.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\3c9a8753-3f18-4bdd-a2b6-ba221ecb1925.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 d0cb083c7cd30a964474997ecceb519ac02480744221c7b75252f24f9b514126
MD5 b96786ccf0a016b18addfce46a233083
SHA1 e655a6c3be2a492e67ea72f8b28405d143d2c04d
SHA512 42fede1dc87c934f7e745bd4c89aac0d04757dbb3ce68d11c858b25eff58fdaecff086ab61e9bd6bb0071e5096487010378b2681992210b1f17132f9242ecd05
TLSH
T18F117AF3C3D585AE890116F0AA24AE2BDE2D0616421C7C19C9D4EF2B93F3075E10299B
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 3fa45b9f053425eac25d8495b9ef930965303e99458d8e3abb1e626cbc78a2e5
MD5 24c091aa505371bed0cc9c288efb16a5
SHA1 98d044d0cbf34fdbc33b35ca79ee1edd43531b20
SHA512 8f84c2076364c624ba58f12ea880f49b289c24674bc8f3133c18fc9a2d99921c2696380f38feb9dc58860f30f897b1e67fc2d347f3f69df2db9c682e1978b3c0
SSDEEP 192:sxZFRiWD/fQsCjIdpdwHW6+WNGYgUDy2IgrJ:sxZFbD/fQsC8eHbGM9
TLSH
T15D12A6526E28A97B8CC7E20EBB15BF53D6F9503251D51E48ABFC861C05E6ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 709316ce9c60be7030a6253342f1e852496905f1cdfaa8df488fe79b14e71f44
MD5 a774a4438bc08d7ade21bd1d9c471342
SHA1 5e75c8c014e172577d595e8de3cb1e31659a8452
SHA512 97aada1fac54f5421ac6594383ce2f71480017890476c4ea2fb6abd84b7dc213ccec57c9f546a3a637dcb40a26f77d0ac200fd836447a27050d84d884f89282b
SSDEEP 192:sxZFRiWD/fQsSjIdpHwHW6+WNGYgyDy2Ig55hJ:sxZFbD/fQsS8QHbGaPr
TLSH
T15722A6526E68A97B8CC7E20DBB15BF53E6F9503251D11E48ABFC861C05E7ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 c4c10bded404731647fa266edc206b4cd37351ea05da9dc76bf111b97c40f641
MD5 fb7799c03bcbe3fb537e2d0e41235b82
SHA1 777b44b215d15e9509da3214f0c81b0172296906
SHA512 7a65c48c1da4e443cc9965e0213b8a4cbbdff849f08985733a19b0ef4480efa4dd2434bc0461cff24caf842c0e6f7dbde646156bfb48708d84bbf4fa09f85904
SSDEEP 192:sxZFRiWD/fQsSjIdpdwHW6+WNGYgIDy2Ig55hJ:sxZFbD/fQsS8eHbG4Pr
TLSH
T1CB22A7526E68A97B8CC7E20DBB15BF53E6F9503251951E48ABFCC61C05E7ACD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 872d50f7744d365ed202cb67c1d21e3cf52a2523e55f0d30849e45cc87b3d475
MD5 c6f645747e32cac6c142d9f66e168bfa
SHA1 c976ef82029c2cb366559ca0cc4f7815d77f107d
SHA512 2280f435f0703e74c4af48b74f0f481d5066c979c67b04f1c59085278431102a0fff6616b3d296ed05fbc169ac75de7a412b6e26a36d66d367b3cd01ab223d40
SSDEEP 192:sxZFRiWD/fQsfjIdpdwHW6+WNGYgUDy2Ig55TJ:sxZFbD/fQsf8eHbGMPF
TLSH
T17822B6526E38A97B8CCBE20EBB15BF53D6F9503251D11E48ABFC861C05E66DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6e2c39c6-3e56-43fa-b148-82b3accb0582.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\6e2c39c6-3e56-43fa-b148-82b3accb0582.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 fa54d962f5aebac56f6a0fc61cfbdb62d62d858cbd44c6db7665e31706eff6f5
MD5 3931b752ce5d76ccbb9641358b43bf86
SHA1 f27bb84eb769ef031cf1315252645536c9a0658e
SHA512 879f449df3002bda21a638ed23820dc285567c2dc044d74507ed0e7338c8f2ea685a73f6fb40f3ec397514c5497f04f51fcdf23394af72899252f23c34217890
SSDEEP 384:/ZcIhsNEKxBQw5hyJBGYX5ECm9TDh2VZh6DKhHn1oZ:XhuCwSrGYuCwHh2fYGHn1y
TLSH
T1EE828E729CB86C7A5DE7F182F8472A038FF89113E7856F8485DD6B1C01DA6982317D2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 94b36c6a47b248cd5982f1a5751d977ffd36bb9dae4e308fa97be7b864c092b5
MD5 c02757db149ff678c5c9c2b879d91b9b
SHA1 79bd2d6f13107c47307a07d6c6b1ec0b2a851538
SHA512 47c6260c5846ce42577a1d7cbc0f740708d813511cdf234a94643fea369275740bdbc988cabcf6e8dc3fc3c1bad18115e882e131bb5356f4f1b5f50a49c00bcd
SSDEEP 384:ziFiZcIhzsNM8TUNTUlIl3xBQw5hyJBGYX5ECm9TDl2VZh6DKhHn1oZ:eFQRhwgLCwSrGYuCwHl2fYGHn1y
TLSH
T1E5A27D738CA4987BADF7AA82F94A36038FF45163D685AB94D3CD5A1C01DB1D82307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 5467c6b03d310b0d8e6cbe6579d32c297a978e84e79db0ab3096b698cbd3e74d
MD5 f49f287a225840c5ddf125cc1b46d3e5
SHA1 36dc18b9e7ffd6cb49c1e3140cc0849bca60c495
SHA512 a22d1b75573f9da5a2f9624609d60b10d9482856993b0c15732f0d94d28c5a3271b7aae4b3c117bf282c4719045f9b4838e3d2a17ddc45f24c3b61fd52237fb7
SSDEEP 384:JZcIhsNE3xBQw5hyJBGYX5ECm9TDh2VZh6DKhHn1oZ:BhZCwSrGYuCwHh2fYGHn1y
TLSH
T184829E729CB86C7A5DE7F182F8463A038FF89113E7856F8486DD5B1C01DA6982317D2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 bb059db7fb988528f1146381e2b7e28a175e3049940d95bf5d34ebcd560e4c7f
MD5 924581120c43a84725464fe64543c2c7
SHA1 3d601c2faaf4dc7f5333f97265a49b826074cc83
SHA512 021004d5a774b315227d7b280402cbf5014f9cdee1cc40920536ca5938f219c458b386528d90db50bca67f93cc39499bafeb2dfad659c28d28ede525edf52561
SSDEEP 192:LJONk6DphmqQmiUyUnq8wGYX59ezbCMmIXkk7zUU6:lONk6193RwGYX5ECm/oU6
TLSH
T1D002EA35E8787C7B8EE3AE45F4472B175FD8112BAA906F84D6E81A1D01D768C2307937
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 dff941654d5887a2479bf63d09c666b5807c5fe955e4f5001d636e41726f2195
MD5 1c7c58eaf8e296453232c46f616804b1
SHA1 ee52e604694fa5a004755dec739c6eb125f6d0ff
SHA512 e7a5dd8a28fdfbe1cd4f033d5d357f525901f1b4c9d1a8bcdc7f929c03d8e2fc5123ab477475ecc7c4c257a5c91f47b511b166b0beec64b096df4e7584412f37
SSDEEP 192:LJONN6Dph2qQmiUyFnrwGYX59ezbCMmI9TDrFkIIKq5AU6:lONN611orwGYX5ECm9TDa2U6
TLSH
T19012F935A8B8BC6B5DD3A491F48739034FE85217EB857F8496DD1A1C01DF29C230B827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4dfe5a2b-6f92-4cd5-b97c-95b7c69bfccc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\4dfe5a2b-6f92-4cd5-b97c-95b7c69bfccc.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 da4b24c328905a8c74dc0aa2de88c4a03b32d59e3245114ae4dbb3fe6bdcef08
MD5 b0c1f4782869c48f5e31e5ed2fa5ce80
SHA1 cbfad5b1c889bd5a7249d06a53f7a0fa3f6e0c15
SHA512 02c217345dec12b059712a7cd6fa7dba0a8d83494a89fe7c651ba585f8ce7405f974fb3f6b2ea65290a1c02d685c210aaf11a836f7eca5e91760829a9889630f
TLSH
T1BB41F458A6EE1148B7777F5A9BF7686D487BB8672F0B909E10110E4F0A63E00C961B37
MD5 SHA1 SHA512 TLSH

Submit Download