af6f2b66f13d44d2ec1a96fd2846b3339c52234b98d44fc0fc8d72eaf817bf20

Analysis

max time kernel
148s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/09/2026, 03:46

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
attachment20260930-1092870-5g7kwt.html
Size 214KB
Sample260930-ebtsjazybz
SHA256 af6f2b66f13d44d2ec1a96fd2846b3339c52234b98d44fc0fc8d72eaf817bf20
MD5 ca2c96be8ad4c1b27afc858a639eb1f4
SHA1 34bcbb32e3946883cf26447531ab98af52bcab62
SHA512 3437202655e3eb3621e7f896424eace53f0c5f24acf844be2b9d563d88009e6cf5a37bcddba9c2cbaba921fa3f1b6b8b256eb36e35e548489e0a5a04be7cb99c
SSDEEP 3072:opm0WkXwgEweVFmk0RHyEoCmetxWnm6t6b9U9QfyA7cxGTdTbLayQsH:oglIYWRHyrCunm6t6i947gGTx3pQ4
TLSH
T13024023459202B0E3B9246B4B26575A40EF90CB3E95F96227BC801F5EFED1F29049CE7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3200	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1696934516-3600988056-1840298893-1000\{234882F3-620F-4CC8-9DC1-0A085718C3A2}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4588	msedge.exe
4588	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2228 wrote to memory of 4908	2228	msedge.exe	86
PID 2228 wrote to memory of 3200	2228	msedge.exe	87
PID 2228 wrote to memory of 3060	2228	msedge.exe	88
PID 2228 wrote to memory of 3060	2228	msedge.exe	88
PID 2228 wrote to memory of 3060	2228	msedge.exe	88
PID 2228 wrote to memory of 4812	2228	msedge.exe	90
PID 2228 wrote to memory of 4812	2228	msedge.exe	90
PID 2228 wrote to memory of 4644	2228	msedge.exe	91
PID 2228 wrote to memory of 4644	2228	msedge.exe	91
PID 2228 wrote to memory of 4644	2228	msedge.exe	91
PID 2228 wrote to memory of 604	2228	msedge.exe	92
PID 2228 wrote to memory of 604	2228	msedge.exe	92
PID 2228 wrote to memory of 604	2228	msedge.exe	92
PID 2228 wrote to memory of 1184	2228	msedge.exe	93
PID 2228 wrote to memory of 4372	2228	msedge.exe	94
PID 2228 wrote to memory of 1184	2228	msedge.exe	93
PID 2228 wrote to memory of 1184	2228	msedge.exe	93
PID 2228 wrote to memory of 4372	2228	msedge.exe	94
PID 2228 wrote to memory of 4372	2228	msedge.exe	94
PID 2228 wrote to memory of 1744	2228	msedge.exe	98
PID 2228 wrote to memory of 1800	2228	msedge.exe	99
PID 2228 wrote to memory of 1744	2228	msedge.exe	98
PID 2228 wrote to memory of 1800	2228	msedge.exe	99
PID 2228 wrote to memory of 4764	2228	msedge.exe	103
PID 2228 wrote to memory of 980	2228	msedge.exe	113
PID 2228 wrote to memory of 1632	2228	msedge.exe	114
PID 2228 wrote to memory of 1900	2228	msedge.exe	115
PID 2228 wrote to memory of 224	2228	msedge.exe	122
PID 2228 wrote to memory of 224	2228	msedge.exe	122
PID 2228 wrote to memory of 4588	2228	msedge.exe	126

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\attachment20260930-1092870-5g7kwt.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x24c,0x7ffbacf6c188,0x7ffbacf6c194,0x7ffbacf6c1a0
  2⤵
  PID:4908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1964,i,14624848732072249065,16552686467239869378,524288 --field-trial-handle=2248,i,5683133269518876620,2776077514327191948,262144 --variations-seed-version --mojo-platform-channel-handle=2424 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1820,i,5711417119298478894,10542932095871546393,262144 --field-trial-handle=2248,i,5683133269518876620,2776077514327191948,262144 --variations-seed-version --mojo-platform-channel-handle=2244 /prefetch:2
  2⤵
  PID:3060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2576,i,7842925362059009019,14410578704878697989,524288 --field-trial-handle=2248,i,5683133269518876620,2776077514327191948,262144 --variations-seed-version --mojo-platform-channel-handle=2604 /prefetch:8
  2⤵
  PID:4812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3424,i,5481043992445186261,11771088468483346461,2097152 --field-trial-handle=2248,i,5683133269518876620,2776077514327191948,262144 --variations-seed-version --mojo-platform-channel-handle=3440 /prefetch:1
  2⤵
  PID:4644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3436,i,5543757208961764716,6449316400329494707,2097152 --field-trial-handle=2248,i,5683133269518876620,2776077514327191948,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4156,i,8246564544045689390,3367598318764426928,2097152 --field-trial-handle=2248,i,5683133269518876620,2776077514327191948,262144 --variations-seed-version --mojo-platform-channel-handle=4292 /prefetch:1
  2⤵
  PID:1184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4192,i,17431870958809076448,7911399002685473156,2097152 --field-trial-handle=2248,i,5683133269518876620,2776077514327191948,262144 --variations-seed-version --mojo-platform-channel-handle=4344 /prefetch:2
  2⤵
  PID:4372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3596,i,3082069748439831800,12685085402624990748,524288 --field-trial-handle=2248,i,5683133269518876620,2776077514327191948,262144 --variations-seed-version --mojo-platform-channel-handle=5136 /prefetch:8
  2⤵
  PID:1744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3440,i,228805374204772328,7080407771828374522,524288 --field-trial-handle=2248,i,5683133269518876620,2776077514327191948,262144 --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:8
  2⤵
  PID:1800
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5872,i,982552758460001790,16780512166793254434,524288 --field-trial-handle=2248,i,5683133269518876620,2776077514327191948,262144 --variations-seed-version --mojo-platform-channel-handle=5888 /prefetch:8
  2⤵
  PID:3332
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5872,i,982552758460001790,16780512166793254434,524288 --field-trial-handle=2248,i,5683133269518876620,2776077514327191948,262144 --variations-seed-version --mojo-platform-channel-handle=5888 /prefetch:8
  2⤵
  PID:4764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4312,i,14171279017630345564,4989672009493630986,524288 --field-trial-handle=2248,i,5683133269518876620,2776077514327191948,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:8
  2⤵
  PID:980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3396,i,13133841092700686201,13483696074585642946,524288 --field-trial-handle=2248,i,5683133269518876620,2776077514327191948,262144 --variations-seed-version --mojo-platform-channel-handle=4800 /prefetch:8
  2⤵
  PID:1632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5076,i,17122642848991752326,14297202654978731749,524288 --field-trial-handle=2248,i,5683133269518876620,2776077514327191948,262144 --variations-seed-version --mojo-platform-channel-handle=6440 /prefetch:8
  2⤵
  PID:1900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5396,i,9611016104646042294,3845912263393794469,524288 --field-trial-handle=2248,i,5683133269518876620,2776077514327191948,262144 --variations-seed-version --mojo-platform-channel-handle=5404 /prefetch:8
  2⤵
  PID:224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6052,i,9138836126746046082,10464718745222212365,262144 --field-trial-handle=2248,i,5683133269518876620,2776077514327191948,262144 --variations-seed-version --mojo-platform-channel-handle=5544 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4588

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4912

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 5421c8b0bf6e5f37422a05b412b233cde63f1db63aa71d65c91c5b31275595c0
MD5 07f616e3db8597d59ea940f94c1abb0b
SHA1 eedf28342bbff8c4cae798c2980ea6953992f1b2
SHA512 30782b7b7d8c6db47a40bc15f968f35fca7939aaa4b83a8a19c8f5a415c745b54c161abc0037d24bad8ebf15d5deb4134f24e357c1b5869f1598fa22619302be
TLSH
T163D0243C7F114D50D40041710530D50435D3CC1740D015050C354C074C101C11305CD0
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 daf8c1243ee20a2e95a6bd65ee87f94e97a213f1bc26473da181514314bf0e5e
MD5 22b29b46992ba3d1fd586e35207b402b
SHA1 03a007676fa49e6e9fbeffbbc2e943124c1b3d3d
SHA512 3634d483353d2e9fb49d846c71c6867053c6a8f1ead10608addea75574d5ce0e36c8de933f71d10bae9682752372e6f7925bbc3c9d982dfe840a9d664f859687
TLSH
T1BDD0243C3F514D50DC0041710530D50435D3CC1740D017070C354C074C101C11305CD0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 2c89486456789b34d1d296faa5a7ed018075092a59cd3b9eab36e40f28f6802b
MD5 2d75d2ea8f7ab96c726521c3a081d3a9
SHA1 7e910f26860452b0db33dc04ba577d2d3ddee968
SHA512 cad42fe5559535b5cfdccb9c643287e89575cd23d256d89fecf484ca371606ea269c443a734aa93913a44844b6f8c8bb9996e00f8f5d67e0b638f15130b32c05
TLSH
T1B661858E516A4AB5FF9F9278A9D220CF3A7056E07F436D223D7ACC7870263818338354
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58b7c2.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58b7c2.TMP
Size 3KB
SHA256 ad5418d4da27e84a7af0e746366264fdde09b60128a85f48bdbb0e9822c4354a
MD5 5374e2d718609662996485c992ec952a
SHA1 f31113692d9348a0e1d2cf618bf4d97b5a490ee6
SHA512 c8a8aeb0c0ea5959b1b4b29ef62786ca68c3cdf63521287546e066269d19b612dfd0abef487ab8b199d87286c7047fbbbe2369710a988c2f8ec212f04e81dc0e
TLSH
T14861858E516A4AB5FF9F9278A9E120CF3A7056E07F436D223D7ACC7870263818338354
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 54ef6304ba250df0cf082da3e4467ea69b2e636bde7a843e8212d501b114ac73
MD5 b21e7d11d13b1b1f193cdede450257bc
SHA1 33087cdb3872b73c490225d56bb4f47bf5039681
SHA512 5e236e7a6da21099358b85bea590a99163c7c08230f0fd7d94814c62d31592734682b8c937e5be6c71a73ac5e3620e61d1706f81bb2cd697b67f8a710b5d5973
TLSH
T121117DB3C3D586AE890116F05A28EE2BCE2D0505421C7D5985D4FF27D3E3579D10199B
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 6543b7fc1629353e8051bfffd879a48871b9d7802c9873117b5b53b7bb373199
MD5 1c3bcdb8403f8253671a17baa6d6d818
SHA1 64f3d0ef9324ffce97ba5d760eab738b7bf6c8eb
SHA512 3ee15b22f50893ffa338311b9edc002f701e19563d10ea73c1a7b983e23b12330b19280cb1b6182fe0720ddf45aa033360a8bb4a02a1be7a661c11f20735aee8
SSDEEP 192:sxZJR0W2/f4sBguIdpd2HW6+WNGY3RkCeIgrJ:sxZJF2/f4sBeEHbGz9
TLSH
T1E012C8126E38A57B8CC7E21DBA25BF13E6F9507261D41E48AAFCD61C05E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 060333afab753dd635e77182e66c5afb8165aa41980925a78a34fc0ad62f132b
MD5 758542fe2ef8dd8daab802e8fe8378c4
SHA1 8cd72fec542d7e40a512cc0d7d4d2cd6fa42427f
SHA512 38ccc1324ff512bf1484a2621d628347306d1f2b3187a16875af8ced61fd141d11a2f1a41e76236a4a717f325f9be8487b2c8496ead96ed55df571bfc24eccb2
SSDEEP 192:sxZJR0W2/f4sWyguIdpH2HW6+WNGY3tikCeIg5cJ:sxZJF2/f4sreWHbGo56
TLSH
T1D322C8126E68697B8CC7E21DBB15BF53E6F9507261D01E48AAFCC61C05E7ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 4c771137544d073850081bd0afbcf2ea94a1dd58545d76e526107ed82c9821ec
MD5 c84decdf618d068358987d0d3256f24e
SHA1 82841432e7fa2394202c9a8f1f00276059e4bfad
SHA512 733a7d8a8e2b2ffa4f1cd12c8c9c92807762076745e33a7310a714d0e1e5a863804c4ed77fb016042d304d3653f8bc9a2725f09a398f817cd1dbddd6ba079dfe
SSDEEP 192:sxZJR0W2/f4sWyguIdpd2HW6+WNGY3FkCeIg5cJ:sxZJF2/f4sreEHbGF6
TLSH
T18022C8126E28697B8CC7E21DBB15BF53E6F9507261D01E48A6FCC61C05E7ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 e22728dafea1473c17e305f75334c5649181872b096b5f842add005d376373bd
MD5 5a9a80de03531f1a73ff45d0c151e086
SHA1 c8e4b9ecd17e7c32e03c36bd90e71c718b91cdb0
SHA512 36cfdcc8169c4f4af89697f8ed92f8efeec67a376f2d82f14eed1b06d8232fa15150a24ffc92eb854c401a80d99a7abaa3c8deccf4d7062a8ae0b37260fd1d6d
SSDEEP 192:sxZJR0W2/f4s7guIdpd2HW6+WNGY3RkCeIg52J:sxZJF2/f4s7eEHbGzg
TLSH
T15F22C8126E38A97B8CC7E21DBB25BF53E6F9407251D01E48AAFC961C05E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 957666208e15518284056f75809102d603953555fbc1789ef80a624e1a8ec08e
MD5 bdec9a3affc19c2df52c3ca284b1205c
SHA1 652917395f2336cb44df0a7ae6608f063eb8b32b
SHA512 5762ad56e5d6038f9eb67be382d1d0d361ddea7b3a4f876faa5c40aa782f1feef6eb49a2f07aaed75b34e41d8eae1ee35372066f84e3ca7407a83fde0d9048dc
SSDEEP 768:2230AbSWvS2l98F1+UoAYDCx9Tuqh0VfUC9xbog/OVGmLlLJ720rolZM8:2230AbSWvS2l9u1jaLmLZ12fH
TLSH
T1CAC2DA3B640CCB7E4FC01A9DDC6AAF9B6E9C02C796648D4447FA944C02C77EA91274DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f1bfb2ed-b78f-4c29-926b-710fae058a96.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\f1bfb2ed-b78f-4c29-926b-710fae058a96.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 a547404c1e9a366b94980236c791691cfa7bfb1ae7af37894be21a0733c0dbb9
MD5 26818b8dd76db7bde45280008d9844db
SHA1 489294f171ab9729b88d975fd1656bdce3649c7d
SHA512 6e412984b99e9b9da5b2530b94ce9f258ecf6c643329b31e1ebf5a79f509df786dcaedc3c79b32fff24b6f125fdf4990f1bb6d506bd00050bd59f16da0727b8e
SSDEEP 384:tZcIhsNgvKbpum0Yu9iX5FbzOVRtgOIwZOy8o0og:1hiWfaSVRXsQ0r
TLSH
T1C8829D3298B85DBB58F7A544F14736035FB885ABE7D4AF84C8ED6B2C02D6198130BC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 6b665d9592f01121938be6f869023ceabb1b7d60c6770e0febba0131411155b5
MD5 55ba9a212638a932725b0ed964fd46e7
SHA1 f643751e8eb2d5e758545d16fe95b7263b3ae984
SHA512 e29de2b4eda83167b9a2913d29f9bbda6806818db4dab71041dd25ecf08b752f65072e30ab59aa4fd516f8896c4a9932938b8b46b6bc8a522a144ceb69607e2d
SSDEEP 384:OiFiZcIbzsNg8TUNTUlIliKbpum0Yu9iX5FbzXVRtgOIwZOy8o0og:lFQP9wgfWfazVRXsQ0r
TLSH
T146A27D3358A88DBFADF7AA84F54A32039FB541B7DAD4EB94D6DD5B2C01960D8130BC21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 48c573ae861e5f2504d5c2d3930a9d9fc22aab65a359ac80b8dd9fb3edef008e
MD5 5a2fa3b9f2d5809ccff05054d0e4efce
SHA1 e8d3f545a998716f802772dee3c0c123bb44e007
SHA512 0de1c2e9fdfe96fdc27c0c7db80ac5274ab69fb1ebb2d23ddfdeb0e98262682654efab3ed48bde42eab59a23c93ed0f6ff3f7140f35aaaf6378e23153e617753
SSDEEP 192:LONM6AmwprQmiUygags6siX5FbeJibhNNU6:LONM6ipdc6siX5FbLVDU6
TLSH
T18A02E935BC686C7B8EF3AE59B54737236FA5116BEA902F84C9E81B2C01D765C1307832
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 cae27eb962c4a8381a0bf513eac08f92cd50cc56b805cc3470970cae96ce1469
MD5 e2e031fd9aae9eff2db1906edd8af59c
SHA1 6405f4e104ca8b41a9cac5ef3050ea8f8e6b5414
SHA512 2b291579654b099a8408c625a29374d4ff7bf41bfa063188e93e75340a5e6ee94ebaa43ba43b71c41644f190aa49ec1ec156bf2ad6e24039047a8830d2a16155
SSDEEP 384:pZcIhsNgiKbpum0Yu9iX5FbzOVRtgOIwZOy8o0og:hh1WfaSVRXsQ0r
TLSH
T1E4829D32A8B85DBB58F7B544F14736035FB8956BE7D4AF84D8ED6B2C02D6198130BC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 590915bbe5c49b02697aff81d11bfe1917db7c94371377f1a3d3cbe60c186bbc
MD5 0fb1ccd9f621f4aec744f7960df95d4a
SHA1 9b8930bfe43e4ab84b65923b60d28d78683c7bb0
SHA512 028ebade027a4c5acf79ce7b538c7953d564926a2e1350a2427b42340cb3b538cf3a7aa5be3d303d7ed8e0f46c456150f9d6ae4e507c633da725eddee520e9ae
SSDEEP 192:LONO26Amwp4rQmiUyglgs6CsiX5FbzQe1lRbhtq4U6:LONh6ipMbzsiX5FbzBVRU6
TLSH
T1C8122B36A8B86C7B4DD3A594F04736135FB55267DB887F84D9EC2B2C02EB598530B822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

02604383-8c16-4561-b8d2-b3b888ff29ac.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\02604383-8c16-4561-b8d2-b3b888ff29ac.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 96ce75df1fe5fed42b639e789ff511fecc964ae7f44f3cca3e770a6795e4497d
MD5 fed786d4be61ddb72efe93fa712902c4
SHA1 7c7e2566dcbd46f78f784fbf286debe561271637
SHA512 b2e774a666ebba12c562a842cb43ef0889a5a600ec0f70cbed957bac3a9b30e3656b212c162e801b9e20056270ff10008e70f08af2c84b9b399a8551b78ecb9c
TLSH
T1E0411A58B6EA1108F3B76E5A9FF6AC6E487FB9732E0A955E10110E4F0623E41C861737
MD5 SHA1 SHA512 TLSH

Submit Download