ccde54317343ebacd6da2afde0b4007f766b637b1ba34510c74de49797553d77

Analysis

max time kernel
148s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/09/2026, 08:51

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
attachment20260930-1253-ddlvjj.html
Size 116B
Sample260930-kr93ca1shw
SHA256 ccde54317343ebacd6da2afde0b4007f766b637b1ba34510c74de49797553d77
MD5 0e2f15dcf7166552e959f0ddb363e706
SHA1 642e84dc85171feae5dbbb9727736ee1424a232c
SHA512 2a659912d4f25102f996a71566eca6840ac2b3271147c266d9836f2fc5785b4b514e248b396d62b7504556f50046f7610023adc8c55c2c9b9a8ec715c29ce525
TLSH
T122B0125F120702053D601D527DD3375714174B9E01A969E01267C9FECCCB9B2EE4739C
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3572	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1846164713-4096795028-774071693-1000\{D5E64C25-A5E3-4004-8ED4-556339D74295}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4936	msedge.exe
4936	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2180 wrote to memory of 4196	2180	msedge.exe	84
PID 2180 wrote to memory of 3572	2180	msedge.exe	85
PID 2180 wrote to memory of 4364	2180	msedge.exe	86
PID 2180 wrote to memory of 4364	2180	msedge.exe	86
PID 2180 wrote to memory of 4364	2180	msedge.exe	86
PID 2180 wrote to memory of 4328	2180	msedge.exe	87
PID 2180 wrote to memory of 4328	2180	msedge.exe	87
PID 2180 wrote to memory of 4600	2180	msedge.exe	90
PID 2180 wrote to memory of 4512	2180	msedge.exe	89
PID 2180 wrote to memory of 4600	2180	msedge.exe	90
PID 2180 wrote to memory of 4600	2180	msedge.exe	90
PID 2180 wrote to memory of 4512	2180	msedge.exe	89
PID 2180 wrote to memory of 4512	2180	msedge.exe	89
PID 2180 wrote to memory of 4780	2180	msedge.exe	91
PID 2180 wrote to memory of 4780	2180	msedge.exe	91
PID 2180 wrote to memory of 4780	2180	msedge.exe	91
PID 2180 wrote to memory of 5008	2180	msedge.exe	92
PID 2180 wrote to memory of 5008	2180	msedge.exe	92
PID 2180 wrote to memory of 5008	2180	msedge.exe	92
PID 2180 wrote to memory of 1936	2180	msedge.exe	97
PID 2180 wrote to memory of 1936	2180	msedge.exe	97
PID 2180 wrote to memory of 3736	2180	msedge.exe	98
PID 2180 wrote to memory of 3736	2180	msedge.exe	98
PID 2180 wrote to memory of 2776	2180	msedge.exe	101
PID 2180 wrote to memory of 1804	2180	msedge.exe	118
PID 2180 wrote to memory of 3896	2180	msedge.exe	119
PID 2180 wrote to memory of 3220	2180	msedge.exe	120
PID 2180 wrote to memory of 720	2180	msedge.exe	123
PID 2180 wrote to memory of 720	2180	msedge.exe	123
PID 2180 wrote to memory of 4936	2180	msedge.exe	127

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\attachment20260930-1253-ddlvjj.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x240,0x244,0x248,0x23c,0x234,0x7ffd0b68c188,0x7ffd0b68c194,0x7ffd0b68c1a0
  2⤵
  PID:4196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1876,i,710690433344084930,2989580836267421346,524288 --field-trial-handle=2380,i,739638238601768444,7470452878603339416,262144 --variations-seed-version --mojo-platform-channel-handle=2412 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1720,i,18436666832131077712,12339642082954846738,262144 --field-trial-handle=2380,i,739638238601768444,7470452878603339416,262144 --variations-seed-version --mojo-platform-channel-handle=2376 /prefetch:2
  2⤵
  PID:4364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2648,i,12374978892260650524,6396612573655337057,524288 --field-trial-handle=2380,i,739638238601768444,7470452878603339416,262144 --variations-seed-version --mojo-platform-channel-handle=2632 /prefetch:8
  2⤵
  PID:4328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3456,i,18409661202244627215,12545313979842063904,2097152 --field-trial-handle=2380,i,739638238601768444,7470452878603339416,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:4512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3476,i,892200551781270211,16023996772182358476,2097152 --field-trial-handle=2380,i,739638238601768444,7470452878603339416,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:4600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4248,i,12182640967512184578,5455422276648748899,2097152 --field-trial-handle=2380,i,739638238601768444,7470452878603339416,262144 --variations-seed-version --mojo-platform-channel-handle=4304 /prefetch:1
  2⤵
  PID:4780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4132,i,455984441709942438,5849521652433269880,2097152 --field-trial-handle=2380,i,739638238601768444,7470452878603339416,262144 --variations-seed-version --mojo-platform-channel-handle=4324 /prefetch:2
  2⤵
  PID:5008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,2639805081319423203,8604426604468503939,524288 --field-trial-handle=2380,i,739638238601768444,7470452878603339416,262144 --variations-seed-version --mojo-platform-channel-handle=5168 /prefetch:8
  2⤵
  PID:1936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5104,i,1721162953533229217,15535963912821233400,524288 --field-trial-handle=2380,i,739638238601768444,7470452878603339416,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:8
  2⤵
  PID:3736
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5844,i,722593579934844226,13962170571049154183,524288 --field-trial-handle=2380,i,739638238601768444,7470452878603339416,262144 --variations-seed-version --mojo-platform-channel-handle=5708 /prefetch:8
  2⤵
  PID:4480
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5844,i,722593579934844226,13962170571049154183,524288 --field-trial-handle=2380,i,739638238601768444,7470452878603339416,262144 --variations-seed-version --mojo-platform-channel-handle=5708 /prefetch:8
  2⤵
  PID:2776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4356,i,12631292401215910950,13671701409830677615,524288 --field-trial-handle=2380,i,739638238601768444,7470452878603339416,262144 --variations-seed-version --mojo-platform-channel-handle=4132 /prefetch:8
  2⤵
  PID:1804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4108,i,11910369993360354965,10904197262275983795,524288 --field-trial-handle=2380,i,739638238601768444,7470452878603339416,262144 --variations-seed-version --mojo-platform-channel-handle=4536 /prefetch:8
  2⤵
  PID:3896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4848,i,2496554017988228757,3935761002539963051,524288 --field-trial-handle=2380,i,739638238601768444,7470452878603339416,262144 --variations-seed-version --mojo-platform-channel-handle=6356 /prefetch:8
  2⤵
  PID:3220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5612,i,13416624304583193171,15298195791846205954,524288 --field-trial-handle=2380,i,739638238601768444,7470452878603339416,262144 --variations-seed-version --mojo-platform-channel-handle=5424 /prefetch:8
  2⤵
  PID:720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5892,i,15004013301297733224,8648970065550441100,262144 --field-trial-handle=2380,i,739638238601768444,7470452878603339416,262144 --variations-seed-version --mojo-platform-channel-handle=1956 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4936

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4868

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d11bd63a3c8c3641d5bd4407fbf20115daee67c3050695788e54c8df9585c700
MD5 7aa846396cdcfea376b8811e8e19c8ac
SHA1 ec25e76211c784e758c9892460a28903222a2b23
SHA512 4816b3d9d1883ae78008726282d2a4c42f9b30d81ff004d60af22873868f3ccc332adb8973ee5a1ed3fdec5d56a832c2ead1cfe30616125d07466daec4eaf02f
TLSH
T17DD02203FF038A2CC8C00CB2002EC22C0F8AF8000A00B2C08030328BCC28B00B02EC88
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7481989667805f861819a64a3969aaaf46d409d3cc4fe4b19154b579a00c6e16
MD5 a70a868c80f3eeab924f0b5bd11ac679
SHA1 22ca93079bed2cfcd0fa02ef66751ff5288ac608
SHA512 380ff0ee96c6b0037a0ca6f886ef323cc451588842ad026ea5bd4a5e33587abc8a13aec63444eb9137cad40409498bf6e0730b0a623f020bfebec6de03bf7d19
TLSH
T1C8D01103FB828A2CC8C008B2002C822C0A8AF8000A00A2828030228A8C28A00A02EC88
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 9357e69ad3edeb9b5941f201517f29d3ece27c78b74ca2b10b1e09846915cadc
MD5 78ef5df4670723c850fd313ea1216cec
SHA1 9e39923e2cf7db2b31832f3645a8180a95dc5d78
SHA512 1805dc8785e606384ad04babd5286206cb8e1a5b0efb29b2ed2d68ca2db996436efc3e44fba793effb28a2eba530ffa1be4533817141599d108cfb753a4d51be
TLSH
T17C6181901A618694E75C8077CAEE639FB972AEF064737D3611E8C8689B8F7ED4108240
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58fa49.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58fa49.TMP
Size 3KB
SHA256 1b3a7864132c8a65634e16d86805fdeb7ba31f51b4a684f22e6fd26981d7802d
MD5 af81a91f3beaaa66f76f7eaddc133a9f
SHA1 99296599d7a32f90f8fd3536cb6601a297130856
SHA512 bd479ac49409f0b3794d85577c854f24f577ece3830cafcc19b7c701df5c4a42b9e3358e39e37f6beec5453fb40fa1eb41c9b21b57667cb4d8ff34b8098d75b0
TLSH
T18D6182901A618A94E75C9073CEED639FB9B2AEF064737D3611E8C4689B8F7ED5108240
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 703c3ee2b851c35cc81b4be1e39988513e44cbcd3b2dfa5380b71847a1aa1bef
MD5 81d60c416fe45c2517622bf8ce849c2f
SHA1 70bc04c5f9fd0bdb8bc0e0234d7c15b9e1d034e6
SHA512 379335c890210e31e3b7188621ca2bd02baf38ea628438f82709709c394073e120fec52c7075587c60d19c440d165ce4ecd12fa93ff4a8b48a4a9f0189ff9732
TLSH
T10F117DB3C3D585AEC90116F06A28AE2BCE1D0506831C7C5995D4EF67D3E3075E10159F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 154896761b1502713db9737723ddf488111ea1bfdffb6e458465adaa422836c1
MD5 5a5ae09ae6d1b90ee936438226b34023
SHA1 d3098217bb583ca3b3438744b1730e0df8f7f316
SHA512 5439f02e6159ab8a930c670fc4632bff0cb4cecab24142f54e4787f7802b758346c478ff30955238928ac1620f801b83c6b3a31a5a5cf2eca03b869bdee16e15
SSDEEP 192:sxZTRMWO/fRsi/jIdpdlHW6+WNGYYBaY7hWIgrJ:sxZTBO/fRsi/8fHbGfy9
TLSH
T1EF12A6156E28A57B8CCBE21DBB15BF53E6F9503291D11E58EAFC861C04E76CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 7662279d2480ac9ff4b65f84fe770e9c0e598afdfcc5e1034019878199666795
MD5 829c2bb6ba95dc4f5465f3cb264dc2b5
SHA1 687cbe804d4b73ad2965b42f10e7d9322d9f66a4
SHA512 93797ce2be3a382eaabe97091ff6e82e4d8219d8ca4c0e3b2a44da6b97cb1ea05daed88341483817de2a0c24b7ac806d7f78525b089e9da64efd8e23d164096b
SSDEEP 192:sxZTRMWO/fRsy/jIdpHlHW6+WNGYYB2Y7hWIg5eJ:sxZTBO/fRsy/8FHbGf2U
TLSH
T15522C8566E28A57B8CC7E21DBB15BF53E6F9503291901E48AAFCC61C05E76CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 7c12fee7b380e1335dcc9609bdd69fe84c187b48ee4557c46d0dbb2bc3f442a5
MD5 08a4bea857e3daae3b554ee1830e2721
SHA1 6be8f2f69a35d7fb3df9702b14d949c23e07ea68
SHA512 a00073c865bf96417a83d13cff766c1c6a67d270aa07f456e3efe726082f4e4989daa49c58b3a6b548dbc0cc4184f6bb780007ea666cbbb6b91e8887a3184778
SSDEEP 192:sxZTRMWO/fRsy/jIdpdlHW6+WNGYYBVY7hWIg5eJ:sxZTBO/fRsy/8fHbGfbU
TLSH
T16522C8556E28A97B8CCBE21DBB15BF53E6F9503291D11E48AAFCC61C05E76CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 8ec28c44df549102c71554efdd96591670eef861b8f194c1283e64b646e829d6
MD5 9bbcb6da4bfbf17cad2a73f1582b99ad
SHA1 7a9bb3dc35c88b071457eda80f5f3716150125ee
SHA512 f460fba6dfe7a26a8a543b05bac00711b8f523009d105c165d8259d266c5dfaf72caa9bdbe0158cf2742e5a26f3e7b0e5fa8f2583018fda15bd5a8a645882bd2
SSDEEP 192:sxZTRMWO/fRsc/jIdpdlHW6+WNGYYBaY7hWIg5sJ:sxZTBO/fRsc/8fHbGfyW
TLSH
T11D22B7556E28A57B8CCBE21DBB55BF53E6F9503291D11E48AAFC861C04E76CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 2a4e8db29bf8eed78e7abc976d4f5de26976fcfe6ac0313340dedad26a9e0e85
MD5 a8cdc4f44376dbffd04dffe92d4a8dd1
SHA1 95a74c3e574be1bfa41da8297ad0242735c73ae9
SHA512 0cdbb5d38003ecf1d47a71138875bdef946a247daab47e8b2c2018581ea1a781301035606c2aadb5a31c91dba8de5cab9cb7d8826094721c37dd2d21f82f1090
SSDEEP 768:b8yYR7jWv3NpB8F1+UoAYDCx9Tuqh0VfUC9xbog/OViCLlGcvXAropI4jl:b8yYR7jWv3NpBu1ja/CL8OXLCA
TLSH
T1EDC2E93B640DCB7E4FC01A9DDC5A6FDB3E9802C796548D4047FA984C02C77EAA12A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e3f5f11f-f169-4005-85fc-9c5aa28b1bc6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\e3f5f11f-f169-4005-85fc-9c5aa28b1bc6.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 844ce019bbc44251761f7a36f01a5260a82cc08f136485fa6309f4edff6532bc
MD5 66d0e28faa821163066a4ff12db7c733
SHA1 18cd79eb69c494faf80e5299e31a9626242c6c96
SHA512 9fd3edeca251dd41c34b45be95d7ba77aba7700a254144912ac2bfa30eee59e0f64efb3f8df4e90c22183a692984deac3e4af79d69a273f86b8e28fd5c443114
SSDEEP 384:bZcIhsNMH92NUiIbaVuQX5+Dti8/GXy2D8tgOIwZOycLIoc:Dh52NUIjkDBmy2wXsHcv
TLSH
T19D828E329DB8ACBB2DF7B185B48632039FB45427E6C86B80D5FC6B1C00DD698031AD17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 74e07b68bca44c0761506f87ef4a0e2c3e6f5d2fc366edbc3ff6c25b289dedb3
MD5 b0c3f30b9c76bb3cb8244c2288a9c288
SHA1 6bc3d9abcf01aaadd742f96e05f0f197c0a4d7f9
SHA512 1f1127f6558c7a916ea882ac53f0231a07e3cd0c67bfebc53e29a14cdf71ab72ee5321abaac8e9632c237ec1621edaba792c2d6bd44299707ec8e089f37be7df
SSDEEP 384:7iFiZcIczsNE8TUNTUlIlm92NUiIbaVuQX5+Dti8/GXI2D8tgOIwZOycLIoc:WFQglwgg2NUIjkDBmI2wXsHcv
TLSH
T1CAA27D339DA8DC7F6DF7AA85F58A32039EB45063D5C5AB90E7EC5B1C009A5DC030AD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 013a7b98f782a61a984adaf88f714118934cd18bec1ed20acaf23330b8cb914e
MD5 7f2d86c97edd2c38edf1aab37f4fac8f
SHA1 436fc729a303ca10ce2f6c21372eab4a3f777c9a
SHA512 691f5f8018237c68949862e2efe654ed6058cc2266a377b8f3bf676f85b455573d26c4035f36669e8860dbc756473986c91b371519a0e6eff9216dfc2f76c990
SSDEEP 192:EONk6nnHGQmiUybsQYcX5hQDP1+jzor0o3sMcCLU6:EONk6nC3QNX5+Dti8/ooU6
TLSH
T14F02EB34ACB87CBB8EF3AD46B48637135F95212BE5942B84DAFC5E1C00DB65C2316927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 606184b1a18f273e19b6119e06eb79952ce62dd9d90e6d6fb3bcbc9354ab3faa
MD5 a18b8e4c9fd75bf70d2c4f0d6836f0cb
SHA1 5fec9f41ee7add937737ff72e8deaef7baad700f
SHA512 495d4552c7962408d66675a22f9ff22e80c82bd041caf4f3178a5a9fcbe3d9051a5e307feed0a2b10c7b0d367322879b479cc5b56f92725115c535279c8beab7
SSDEEP 384:zZcIhsNMm92NUiIbaVuQX5+Dti8/GXy2D8tgOIwZOycLIoc:rhW2NUIjkDBmy2wXsHcv
TLSH
T137828E329DB8AC7B5DF7B145B48636039FB45427D6C86B80D5FC5B1C00DD698031AD17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 8196c0f53779c08de7ed710671da4adf8751bdbde9eed8952dc88157ced99246
MD5 f5a2580af8c849d26936b6c979390e4e
SHA1 df5699ca857ce45cd6048526fc0f8f4ca671a8f6
SHA512 bf2946bb96d4577814458da3dbd78fcd65ea40fffbd0da9e9eeb10f94aa1489d0d86db0d8d4adda1aa2d69f0964b4f0c0b5a194ded7fc6171f171d50e6621bd4
SSDEEP 192:EON16nnHaQmiUyXsgYcX5hQDP1+jzor0o3WXTeBg3lq5D8U6:EON16n2tgNX5+Dti8/GXR2D8U6
TLSH
T1C0122B35A8B8BC7B1DE3B595B48731139EA51127EA887B80D6FC2E2C01DF65C530AD23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dfd06833-7d3e-4c72-9e1a-96caa3dda38b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\dfd06833-7d3e-4c72-9e1a-96caa3dda38b.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 f1b0ec25c00733e025b09e6f9240ac54d99d7c38e5a88ee2c588477d4d1e8035
MD5 842dc6b876d3b29551711e1b5683747c
SHA1 001286e68161e45ef385bb2e3efe1befdf1f065b
SHA512 765d61309be41c26507b8ee81001744381708ac080f21eebf2a26661586682cd83ac1982a936de4641d2aa1cd87637a630ec2634832679ad3e81c0b4eed3a9a9
TLSH
T1E7411858AAE91158B3B77F16AFF6686E447F7D772E0AD45D10010D4F0A23A00C9B1733
MD5 SHA1 SHA512 TLSH

Submit Download