6ba372357efa26a04e1c8eb59f29e9867b04ed241c4665f06e78d1ebe6ab8e5b

Analysis

max time kernel
148s
max time network
143s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/09/2026, 04:41

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
attachment20260930-1253-59j4qh.htm
Size 34KB
Sample260930-fbcdxsszdz
SHA256 6ba372357efa26a04e1c8eb59f29e9867b04ed241c4665f06e78d1ebe6ab8e5b
MD5 764f5df3b8d286714635f98cdaff2174
SHA1 6f65b07d81db9dcfdfe1482f1ba7a14977d87aa2
SHA512 323c8e03eabf4884fba35ca5253c79f370c09e0156bea23ca0e2c10d948e608a65b47dc8cca9450afb3a81a9c61ccb77d3ff7acd935d3658b61c415597cf2e13
SSDEEP 768:9srfAOHdia5Qe2E4rY0H1UeH+NypaNKiA9b:9QAOHdl5TkY0HeNVKJ
TLSH
T1DFF2D65356D19D37067396F4BCB8BE2C95CA8D0FC248AC04743CA90C5FE4EA06EA7679
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1636	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1846164713-4096795028-774071693-1000\{C8AFBBB6-CAFF-4F66-B7A6-8A961B07C275}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3384	msedge.exe
3384	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2776 wrote to memory of 2752	2776	msedge.exe	87
PID 2776 wrote to memory of 1636	2776	msedge.exe	88
PID 2776 wrote to memory of 4068	2776	msedge.exe	89
PID 2776 wrote to memory of 3896	2776	msedge.exe	90
PID 2776 wrote to memory of 4068	2776	msedge.exe	89
PID 2776 wrote to memory of 4068	2776	msedge.exe	89
PID 2776 wrote to memory of 3896	2776	msedge.exe	90
PID 2776 wrote to memory of 5104	2776	msedge.exe	91
PID 2776 wrote to memory of 5104	2776	msedge.exe	91
PID 2776 wrote to memory of 5104	2776	msedge.exe	91
PID 2776 wrote to memory of 1940	2776	msedge.exe	92
PID 2776 wrote to memory of 1940	2776	msedge.exe	92
PID 2776 wrote to memory of 1940	2776	msedge.exe	92
PID 2776 wrote to memory of 5044	2776	msedge.exe	94
PID 2776 wrote to memory of 2732	2776	msedge.exe	95
PID 2776 wrote to memory of 5044	2776	msedge.exe	94
PID 2776 wrote to memory of 5044	2776	msedge.exe	94
PID 2776 wrote to memory of 2732	2776	msedge.exe	95
PID 2776 wrote to memory of 2732	2776	msedge.exe	95
PID 2776 wrote to memory of 2936	2776	msedge.exe	103
PID 2776 wrote to memory of 2936	2776	msedge.exe	103
PID 2776 wrote to memory of 2104	2776	msedge.exe	104
PID 2776 wrote to memory of 2104	2776	msedge.exe	104
PID 2776 wrote to memory of 3688	2776	msedge.exe	106
PID 2776 wrote to memory of 1184	2776	msedge.exe	113
PID 2776 wrote to memory of 2588	2776	msedge.exe	114
PID 2776 wrote to memory of 3476	2776	msedge.exe	115
PID 2776 wrote to memory of 1132	2776	msedge.exe	124
PID 2776 wrote to memory of 1132	2776	msedge.exe	124
PID 2776 wrote to memory of 3384	2776	msedge.exe	128

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\attachment20260930-1253-59j4qh.htm
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x254,0x7ffe4499c188,0x7ffe4499c194,0x7ffe4499c1a0
  2⤵
  PID:2752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1828,i,15009368656105368621,9569681616376126331,524288 --field-trial-handle=2812,i,15327322558028527705,18132988954513981101,262144 --variations-seed-version --mojo-platform-channel-handle=2868 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1652,i,14669611095694114755,10841811867029954643,262144 --field-trial-handle=2812,i,15327322558028527705,18132988954513981101,262144 --variations-seed-version --mojo-platform-channel-handle=2808 /prefetch:2
  2⤵
  PID:4068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2340,i,16592801187975291423,15980469813928301965,524288 --field-trial-handle=2812,i,15327322558028527705,18132988954513981101,262144 --variations-seed-version --mojo-platform-channel-handle=2884 /prefetch:8
  2⤵
  PID:3896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3476,i,11587744439446613170,467552011952776571,2097152 --field-trial-handle=2812,i,15327322558028527705,18132988954513981101,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:1
  2⤵
  PID:5104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3496,i,4307420116418695356,139598715073946604,2097152 --field-trial-handle=2812,i,15327322558028527705,18132988954513981101,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
  2⤵
  PID:1940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4184,i,3202609648224372525,8484026512074926208,2097152 --field-trial-handle=2812,i,15327322558028527705,18132988954513981101,262144 --variations-seed-version --mojo-platform-channel-handle=4160 /prefetch:1
  2⤵
  PID:5044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4196,i,14999909883667267575,1995088328748245179,2097152 --field-trial-handle=2812,i,15327322558028527705,18132988954513981101,262144 --variations-seed-version --mojo-platform-channel-handle=4372 /prefetch:2
  2⤵
  PID:2732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4940,i,4491585927485806323,5843698397533191733,524288 --field-trial-handle=2812,i,15327322558028527705,18132988954513981101,262144 --variations-seed-version --mojo-platform-channel-handle=5140 /prefetch:8
  2⤵
  PID:2936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3664,i,8652863367779186207,9340728244457656078,524288 --field-trial-handle=2812,i,15327322558028527705,18132988954513981101,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:8
  2⤵
  PID:2104
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5900,i,595042708655237357,8546206727223925451,524288 --field-trial-handle=2812,i,15327322558028527705,18132988954513981101,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:8
  2⤵
  PID:3912
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5900,i,595042708655237357,8546206727223925451,524288 --field-trial-handle=2812,i,15327322558028527705,18132988954513981101,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:8
  2⤵
  PID:3688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5912,i,1648772780669655378,14692365289867574973,524288 --field-trial-handle=2812,i,15327322558028527705,18132988954513981101,262144 --variations-seed-version --mojo-platform-channel-handle=6252 /prefetch:8
  2⤵
  PID:1184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6248,i,11293758848534299594,10926850742977288848,524288 --field-trial-handle=2812,i,15327322558028527705,18132988954513981101,262144 --variations-seed-version --mojo-platform-channel-handle=4812 /prefetch:8
  2⤵
  PID:2588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6224,i,1107548912058769282,12377189623264145759,524288 --field-trial-handle=2812,i,15327322558028527705,18132988954513981101,262144 --variations-seed-version --mojo-platform-channel-handle=4784 /prefetch:8
  2⤵
  PID:3476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4024,i,5584233607632942994,16890233494195874196,524288 --field-trial-handle=2812,i,15327322558028527705,18132988954513981101,262144 --variations-seed-version --mojo-platform-channel-handle=4936 /prefetch:8
  2⤵
  PID:1132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=756,i,14845043062694882550,9848859733220621413,262144 --field-trial-handle=2812,i,15327322558028527705,18132988954513981101,262144 --variations-seed-version --mojo-platform-channel-handle=760 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3384

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3596

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d11bd63a3c8c3641d5bd4407fbf20115daee67c3050695788e54c8df9585c700
MD5 7aa846396cdcfea376b8811e8e19c8ac
SHA1 ec25e76211c784e758c9892460a28903222a2b23
SHA512 4816b3d9d1883ae78008726282d2a4c42f9b30d81ff004d60af22873868f3ccc332adb8973ee5a1ed3fdec5d56a832c2ead1cfe30616125d07466daec4eaf02f
TLSH
T17DD02203FF038A2CC8C00CB2002EC22C0F8AF8000A00B2C08030328BCC28B00B02EC88
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7481989667805f861819a64a3969aaaf46d409d3cc4fe4b19154b579a00c6e16
MD5 a70a868c80f3eeab924f0b5bd11ac679
SHA1 22ca93079bed2cfcd0fa02ef66751ff5288ac608
SHA512 380ff0ee96c6b0037a0ca6f886ef323cc451588842ad026ea5bd4a5e33587abc8a13aec63444eb9137cad40409498bf6e0730b0a623f020bfebec6de03bf7d19
TLSH
T1C8D01103FB828A2CC8C008B2002C822C0A8AF8000A00A2828030228A8C28A00A02EC88
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 d1b90f49698e96c66696efd02797e2dda40d4a3407d05572519f92920ae1cb50
MD5 31201d01098f53fead809bd9b9767afd
SHA1 15c85a412280b90ae6c936dc6c3c06ee5eb6d8ab
SHA512 8410cf21eaefe32ba852c281fa113c6e1697cd376fb46607f2cf9b8dfe9a69da12daa8e46313c499ec6095dc3d7e1b0ef09c4497cede8aff2a89217ba01a4529
TLSH
T13661A4C059A3B448FBA8427481E9389F3E38258F55AF1DC29DB7E8759CCAB5C60B3244
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe590110.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe590110.TMP
Size 3KB
SHA256 79c95244d9419e1c035a3ec9545b19be21d25f7a1e380d875809a4486badae44
MD5 baaa0538c13bfa29eb5a2927440907d6
SHA1 756fad01e4cfc8a7d245b0b355ebe45c0343b652
SHA512 bc3a1fcb1ab46089c63c6de5c24b625c01fdbf50d9301e6154b9cfa7be9349ddbd7fe0e5b66d718fb0babf0a1e30570fcb2670887ec5e490a62ef7f37422bdfd
TLSH
T1D661A4C05993B448FBA8427481E9399F3E38258F55AF1DC29DB7E8759CCAB5C60F3244
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 d5c2484c3276db91f1faec714319497387b034bff317105cb9474297b1c47f19
MD5 9df5b9d978964e3b395f4bdc244ca3fa
SHA1 6445dd12bd64adf6d70b2df3cec0cf46a2d3693f
SHA512 0bb830b690544eff9b940dff481b9835e33e1eabca55979f238d8a4c6e7b482eccd97595f7b84a2f60a71e194758d522dc5cbadd6f64647e3aabef3c856f4c88
TLSH
T1E8117AF3C3E585AE890116F05A24AE2BDE2D0606821C7C19D9D4EF2BD3F3475E10299B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 b45e9a67f5118eb99f44364e395474ba1e31c9d723eb67cfe49279680b914627
MD5 1a7423e10926efcff00cef32b5840c32
SHA1 96163307c2f60f28d6f30ba725f5656110e024e4
SHA512 00468001ac7bd168463888af96f009acc859077863e2292c9d84444301f845ed85064e3fa6875b5615533f52fa77ca43a1f1c09a834f8d9a63fe96ddf76490f2
SSDEEP 192:sxZpR3WA/f9sFkIdpdzHW6+WNGYYBai+GIgrJ:sxZpoA/f9sF9RHbGfDF9
TLSH
T1DB12B6116E28A97B8CC7E21DBB15BF53E5F9503261901E48EAFC961C05EA6CE220784F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 a20763bb9447a6facdc0e087fb5f9ede390f5cbef86c5094312b7f0f82fd9949
MD5 b7eb34bba1bc861bce6a377cafdfc27d
SHA1 42d17a5599b869882b7274941f0a056630902a82
SHA512 06c28e4de7045c455a201b0585df9466baea6c24a114a09c2e8199c80d19b510fa8593b80e47bb8fa72c36baf119c4804e587efe653a9e0b6c9ffe0d896dbb2b
SSDEEP 192:sxZpR3WA/f9swkIdpHzHW6+WNGYYB8i+GIg5mJ:sxZpoA/f9sw9THbGf9Fc
TLSH
T19822D8126E38697B8CC7E61DBB15BF53E6F9503251911E48AAFCC61C05EB6CE220784F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 8b00fcfc52fcd7f32993446387a7585813cf07aed1f337f0fdd9ce6c77002f88
MD5 35581db9f434272856d8093822c77e34
SHA1 94e6d9f760327f7356da7845b68af7a5d6abfdd5
SHA512 23a427514a582f3d02f8d2c8ee9d11c585c765bc2d59a8669d6f7088d89dbd6740696ce8d69d6146d64dfc01e1009162e1eec7fe8e45e3493c7a15e13c39eab2
SSDEEP 192:sxZpR3WA/f9swkIdpdzHW6+WNGYYBAi+GIg5mJ:sxZpoA/f9sw9RHbGfBFc
TLSH
T12022C7116E28697B8CC7E20DBB15BF53E6F9503251911E48AAFCD61C05EB6CE220784F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 4ca1ef7f6e657a9324e791af22e752340e59551fb093e50a1052357413713330
MD5 90ba58496429594648731ab66b90b815
SHA1 2b8e1e1ef7c0b6effd3a6d7a23612a3626cde478
SHA512 847eb5f531c5425addd8f87ad8b0b3c83e0f3622fcfcc20819857bdaa93df74a06f8cfa2d9fd4daa4023d9519bb39c7632bc0994baf34d0eb5a9a77b2ade53dc
SSDEEP 192:sxZpR3WA/f9smkIdpdzHW6+WNGYYBai+GIg5EJ:sxZpoA/f9sm9RHbGfDFu
TLSH
T16322B7116E38A97B8CC7E21DBB15BF53D6F9503251D11E48EAFC961C05EA6CE220784F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 d3988ee5089fee23f4e36156c2bdd2382e59abc4b157208e9e6b6d30bb3def32
MD5 68502e1ce33e1f9bb147305cc7d91c67
SHA1 d82d6f0fab1ee1a557f6a26eba9f4e6e58fb14c9
SHA512 5a81dac72e585639f44a8d1b533319ef0c4412fcddfa76897949c6c4fe83f27410fd4ab502f5ec805b8de4f58b6664f2051d1f71c005f4522c2db25b266125a3
SSDEEP 768:9OyYR7jWv3NpB8F1+UoAYDCx9Tuqh0VfUC9xbog/OViCLlGcvXaropD61:9OyYR7jWv3NpBu1ja/CL8OXR8
TLSH
T118C2E93B644DCB7E4FC01E9DDC5AAFDB2E9802C796548D4047FA984C02C77EA912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 a62c076963c950261ee5e345923000d37e016367f9084f40833a8f4311720ee2
MD5 2ac84175a409e32dbe2b630333a2f34f
SHA1 61204c73c3c53c8427067045914f6e70f528d242
SHA512 33ebef40c02fd3a52de46f8ae036ffcb5aa4aa6eb3ba45a3f8e632f77d61cb0747b686ae0e1735dd41caa7673746a0d78c9f3b17daa98120370eab800609647c
SSDEEP 48:KgRAthrvzMb/KXIS5MK9Z1zMxxcYKbRVyLeZ04WcMFbwX4ISQFK901GFx+VYvwsc:KAWEKXKKWdSK2gKKI4KBe+d
TLSH
T10A917140727B060539BE344D9169972F1A413577B028FA7BFBBD05A64E2BE049CFD8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe599b4c.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe599b4c.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 59dc1a5139e486395a9a62f4f676a56a8963eeee2f2bf1096bd2c1ae26c0bf66
MD5 76fd049604e8826b8e726abeb98850c0
SHA1 dbd30808b1a22c568412299fbbb23d377aa2479b
SHA512 fc97d8fca51412bb895ba0f77be1b63ac7f7d5386f138a02307c651ced7554c734fb7c050b4990a4dfcb6b1074d1685eeb43c3d9275f40543139c214ed75b7e5
SSDEEP 384:sZcIhsN0U/UxDoai4RHQX5+DtD8PXq+2hi6tgOIwZOy5LQo5:6hxoalAkDSqlhi6XsGs6
TLSH
T1E6827E32ACB89C775DFBA185F08A32035FB89527E6C46F80D5ED6B1D01DDA99130AC23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 7d918db1f65b79c693be876e4948be24780301b6e88aafe3c58d0e06b2520876
MD5 19c035c6db5d16fc08d91a64ee517616
SHA1 4a490a2beb0330b69c8d71d78611d61f2fe9023e
SHA512 1999d6c2f7fb2270d454c0fd250f7bfd9d45c9ab9d3b0feb29515dee2ca25bb2d85980e12c8750cb94f7a371bbb5c892ab144f2c08c9216fff92422041414ba0
SSDEEP 192:EONO6nnHRQmiUyWr1YcX5hQDP1Tjzor6s1mkXIx+2Tg3hq56U6:EONO6nPP1NX5+DtD8PXq+2Ii6U6
TLSH
T11C120B31E8A8AC675DE3A585B08732139FA55127DA897FC0D6EC2F1C01DFA5C634AC63
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 b8a5f8d75b35c02eaad85983d6ff205c451dc8f6d5a07329016c7b54f805fa07
MD5 bc32aa2ddbf8d1d8767744c4ed5996a8
SHA1 12bd59f170a18e3e568566a47b8c56935606bb22
SHA512 29acb1a88cf9869173f58e96d2ad31735b416c60cceb227c617d2a825b01868883bd9ddf6c24e4a2ead088045f16558b9125a42c74cb8c50e8d0247d84836ce1
SSDEEP 384:8iFiZcIZzsN18TUNTUlIl8UxDoai4RHQX5+DtD8PXq+2di6tgOIwZOy5LQo5:nFQZYwg5oalAkDSqldi6XsGs6
TLSH
T1C2A28F339CA8DC7BADFB9A84F54A32039FB45067D5C4EB90E6DD5B1C009A5D9130BC62
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 5ced5458da671c01daf850f2937a56cc6194f903a5d90ff788186801903a67ec
MD5 a015a647d782aa774fd6d6d8fa3d7ed1
SHA1 6cf3ba9345ed40dc89fe962d816885b668ad3b5d
SHA512 f01aa25059b1431d25ba47a5a37a071edc335074fcb5742b7eac85a6d86f7e808a593c51c3b9ea1dc6e4c36604ee23450dc5d60d14e0744fbdb83464bd73fe2d
SSDEEP 192:EON56nnHGQmiUyWrQYcX5hQDP1Tjzor6s1mmMcXlMU6:EON56nCpQNX5+DtD8Z1MU6
TLSH
T1AE02DC34ACA86CB78AF3AD49B48737139FA5216BA5942FC4DAE81B1C00D765C2306D73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 06337230e40c63c15e8e9f27430ff4596f38920c5edfea7814d074b91764a469
MD5 6a0cf0df990431519fdc3dd9e96e78b7
SHA1 8fbda5c2570232ef2a774504798133e41f533ac7
SHA512 cc56d08e65b57501517f5c2baceaf800dd68e4914de72277514c4845d122b5ff510533f54f3de26f5f28c5320bd08a6573c051a1fcab4660ef16d31d7368e6c6
SSDEEP 384:UZcIhsN0U8UxDoai4RHQX5+DtD8PXq+2hi6tgOIwZOy5LQo5:ShMoalAkDSqlhi6XsGs6
TLSH
T1A8828D32ACB89C775DFBA185B08A32035FB89527E6C46F80D5ED6B1D01DDA99130AC23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fe652355-b524-4a7b-bbbc-ebe6120ff512.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\fe652355-b524-4a7b-bbbc-ebe6120ff512.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 7f5d1aad541f1599d500ed1a13a291c7a94b6d8796d8042e6c77ad4bb3293dae
MD5 5436f0883ed42d46c2c6b4bd83cb8591
SHA1 d106a428a6d6d22b838a9d778087d6bf36214c26
SHA512 03474509d62a60502c6d439a39a8efd0cc7d51b70014999d1b356975b505393e31406a12ba249529e655d750414224fefb3065e0c2caaa10bf02627632f55698
TLSH
T135412B58A6EA1148B3776F169BF7A86E487F7C771E06D49D00010E4F0663E40D9A2B37
MD5 SHA1 SHA512 TLSH

Submit Download