3e10b452175f0acbfcda6bc2487e308e0c5f4913f1ca5b0ed77be7a462a066bc

Analysis

max time kernel
148s
max time network
135s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/09/2026, 09:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
attachment20260930-1253-tqchzh.html
Size 171B
Sample260930-leprbas1hx
SHA256 3e10b452175f0acbfcda6bc2487e308e0c5f4913f1ca5b0ed77be7a462a066bc
MD5 e082ebc14f6b24945336f6450b985e45
SHA1 df12ad35c265b0198582e2dc94e0a93048e4de82
SHA512 8dac8fb7101ee6a50ec58409a7d51009d9a3f6b1266377cad6f7f9001bc6f6734ffc067e7cfd0f17a1d0e288803fa8c8d37925590f6421772323ce99a4a9a1bf
TLSH
T1E4C08C7D10C13C150270A93C1DD3B397EC93198E01422B41308180232F35620CED32D0
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2820	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-895009113-1202185046-1686627690-1000\{F872A170-4BFF-47F5-BDB4-9C0F308CD61F}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1656	msedge.exe
1656	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 4688 wrote to memory of 3256	4688	msedge.exe	88
PID 4688 wrote to memory of 2820	4688	msedge.exe	89
PID 4688 wrote to memory of 3760	4688	msedge.exe	90
PID 4688 wrote to memory of 3760	4688	msedge.exe	90
PID 4688 wrote to memory of 3760	4688	msedge.exe	90
PID 4688 wrote to memory of 1008	4688	msedge.exe	91
PID 4688 wrote to memory of 1008	4688	msedge.exe	91
PID 4688 wrote to memory of 1460	4688	msedge.exe	92
PID 4688 wrote to memory of 1460	4688	msedge.exe	92
PID 4688 wrote to memory of 880	4688	msedge.exe	93
PID 4688 wrote to memory of 1460	4688	msedge.exe	92
PID 4688 wrote to memory of 880	4688	msedge.exe	93
PID 4688 wrote to memory of 880	4688	msedge.exe	93
PID 4688 wrote to memory of 2020	4688	msedge.exe	94
PID 4688 wrote to memory of 2020	4688	msedge.exe	94
PID 4688 wrote to memory of 2020	4688	msedge.exe	94
PID 4688 wrote to memory of 440	4688	msedge.exe	95
PID 4688 wrote to memory of 440	4688	msedge.exe	95
PID 4688 wrote to memory of 440	4688	msedge.exe	95
PID 4688 wrote to memory of 924	4688	msedge.exe	104
PID 4688 wrote to memory of 4308	4688	msedge.exe	105
PID 4688 wrote to memory of 924	4688	msedge.exe	104
PID 4688 wrote to memory of 4308	4688	msedge.exe	105
PID 4688 wrote to memory of 3240	4688	msedge.exe	107
PID 4688 wrote to memory of 4460	4688	msedge.exe	118
PID 4688 wrote to memory of 2456	4688	msedge.exe	119
PID 4688 wrote to memory of 4612	4688	msedge.exe	120
PID 4688 wrote to memory of 440	4688	msedge.exe	122
PID 4688 wrote to memory of 440	4688	msedge.exe	122
PID 4688 wrote to memory of 4788	4688	msedge.exe	124
PID 4688 wrote to memory of 4788	4688	msedge.exe	124
PID 4688 wrote to memory of 1656	4688	msedge.exe	126

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\attachment20260930-1253-tqchzh.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x254,0x7ff86622c188,0x7ff86622c194,0x7ff86622c1a0
  2⤵
  PID:3256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1816,i,10086317596983439993,8569675489590223358,524288 --field-trial-handle=2500,i,9018286221120690932,14021252233648828864,262144 --variations-seed-version --mojo-platform-channel-handle=2536 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1648,i,12890728416016361201,9361258697224926291,262144 --field-trial-handle=2500,i,9018286221120690932,14021252233648828864,262144 --variations-seed-version --mojo-platform-channel-handle=2492 /prefetch:2
  2⤵
  PID:3760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2240,i,17155198506207465862,16852735148411254567,524288 --field-trial-handle=2500,i,9018286221120690932,14021252233648828864,262144 --variations-seed-version --mojo-platform-channel-handle=2544 /prefetch:8
  2⤵
  PID:1008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3436,i,8065698161335420979,3823644051946729775,2097152 --field-trial-handle=2500,i,9018286221120690932,14021252233648828864,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:1460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3440,i,9708850136441671126,17706850543451122550,2097152 --field-trial-handle=2500,i,9018286221120690932,14021252233648828864,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4204,i,11351415954510121107,10393838609531116404,2097152 --field-trial-handle=2500,i,9018286221120690932,14021252233648828864,262144 --variations-seed-version --mojo-platform-channel-handle=4128 /prefetch:1
  2⤵
  PID:2020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4208,i,1545179926242157855,10100968445105252352,2097152 --field-trial-handle=2500,i,9018286221120690932,14021252233648828864,262144 --variations-seed-version --mojo-platform-channel-handle=4432 /prefetch:2
  2⤵
  PID:440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5096,i,7069294296802284325,1315526906279898791,524288 --field-trial-handle=2500,i,9018286221120690932,14021252233648828864,262144 --variations-seed-version --mojo-platform-channel-handle=5116 /prefetch:8
  2⤵
  PID:924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5100,i,15962381313106101949,6084096374357918427,524288 --field-trial-handle=2500,i,9018286221120690932,14021252233648828864,262144 --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:8
  2⤵
  PID:4308
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,17655155715926574856,663901456400358705,524288 --field-trial-handle=2500,i,9018286221120690932,14021252233648828864,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:8
  2⤵
  PID:3800
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,17655155715926574856,663901456400358705,524288 --field-trial-handle=2500,i,9018286221120690932,14021252233648828864,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:8
  2⤵
  PID:3240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3592,i,15889199435658831592,18036442518760290332,524288 --field-trial-handle=2500,i,9018286221120690932,14021252233648828864,262144 --variations-seed-version --mojo-platform-channel-handle=4548 /prefetch:8
  2⤵
  PID:4460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4244,i,9206470260202639804,11107924706993597794,524288 --field-trial-handle=2500,i,9018286221120690932,14021252233648828864,262144 --variations-seed-version --mojo-platform-channel-handle=4536 /prefetch:8
  2⤵
  PID:2456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4200,i,12458402075524076409,4047420906970490541,524288 --field-trial-handle=2500,i,9018286221120690932,14021252233648828864,262144 --variations-seed-version --mojo-platform-channel-handle=5936 /prefetch:8
  2⤵
  PID:4612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5184,i,4325287833527491563,3188504095114702667,524288 --field-trial-handle=2500,i,9018286221120690932,14021252233648828864,262144 --variations-seed-version --mojo-platform-channel-handle=5024 /prefetch:8
  2⤵
  PID:440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5424,i,5265063892520296490,14397544847693329278,524288 --field-trial-handle=2500,i,9018286221120690932,14021252233648828864,262144 --variations-seed-version --mojo-platform-channel-handle=5164 /prefetch:8
  2⤵
  PID:4788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6116,i,16401560121285002171,7751199276794826831,262144 --field-trial-handle=2500,i,9018286221120690932,14021252233648828864,262144 --variations-seed-version --mojo-platform-channel-handle=5952 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1656

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2484

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 928eda824fe964cd23927cf06086d7d24e20a3a5092daf1acee5b632c76c962a
MD5 4ac43ee6512ba8635b7ba6bd015c291b
SHA1 5f9e2474b00ec0e2a9472c049fbea550e26309aa
SHA512 e5ebf9e92458f66e31e080121135313e828b8ebade0bc0e085221ae0d4f5afe0d2035c566590cbfb5902d96f17befe7b24310b4fb9e647b999113175af800ebc
TLSH
T17BD022B2B3A038CFE300083302A083BA2C0A80F300FAE2208C30E08C0BCC02AC283880
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 93c2ca3ce74eca17f27aa90cc3323bb8d6aea5c365862a01a512ce14b9f825b4
MD5 e8a3239e6b22580d77fb537c7bea1fab
SHA1 a99ffe9234c27e560f1c607d3b6c6507928368a3
SHA512 17b0e6f99943a02540148a685b91c62eafca3ef65d9a628bfb59d3b69a93b27c7d3ac42bdc808c52b5b1eac9bf4466a1099df17cd3f5df0bbd5b5282ca8b904e
TLSH
T170D0247133D03CCFD7000433015043751C0540F300F5D3104C30D04C07CD055C143440
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 9e29755c522bd75cef63da1298bbc87f1f8f88cf752dcf6f94737159d0d8f387
MD5 5336aa3b3faab5862c97d90133f0b327
SHA1 4092f20f0fe56b334d6ddfbbe92d8fe8da7c6fbf
SHA512 1b2667f2803cb3e0ac2a0d6105adde65b4022acfa4143da88de3a5941776d24b7a22f9ec6e5871656f1e5ca345b81823ba76a1c57b813372322694c5f45d14b7
TLSH
T1B6617E90BFD078A1FBA8BFB9DFD704833AB3A7C01AA7ED40A080D8F95E067905060354
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58fbdf.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58fbdf.TMP
Size 3KB
SHA256 45d140339ce7ce556c970402a4dabb93e45a61e920f4d330543c368d00e29279
MD5 101df980e9874c890eed0a892e1248a4
SHA1 f97b1222a34cc6de71c83310168a5930bd8b7e35
SHA512 047a3971d9b3fd0bea638927810e833dc7c059c32282dcbc38d54f89b09d4f3ce9b4a9fabaaff0006683eaf286d957b572d4b47478f4b9987ea745997787ddf2
TLSH
T108617E90BFC078A1FBA87FB9DFE7048336B3A7C01AA7ED41A080D8F95E067905060354
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 000bc80fe12cc6a8f5c3ac5536f31a2d25f0c463ce49d5e29eda56a4d1a7fb5b
MD5 3683109cca337092dd2aef1a3588a366
SHA1 00a255d6437293bfad281b7fa269ace3afe01307
SHA512 5712a03e5b373b7e32f729cfba29b6b609f3dc7858924c686b12b1731e96aaa35c10be3e68309ffaf353ba557bb36ce6da4649108e9ac86831d8552e4b57d936
TLSH
T145115BB3C3E595AE891116F06A24AE2BCE1D050542187C1A95D4EF2793E3465E10159B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 9aa861fddb3e827479b54e092681a6911374f58029c553043244194d463b58ae
MD5 2e7673f79fdfbc1e079e130af408ab9d
SHA1 c2cc90c23489e2633ef5e31c58cb297c0f5aa3c7
SHA512 f62db2aac18a896fe773b6312d796b219553f91c494ab52add3939f261b9c8e025430f2083eaf7d564b5f0fac3a50d513a2c9f6509a1a2ba88bb5aa5721b1416
SSDEEP 192:sxZ8RgWF/fqs4WIdpdNHW6+WNGY36nNTIg5jJ:sxZ8dF/fqs4XPHbGXJf
TLSH
T1CF22A6116E68A97B8CCBE20DBA25BF53E6F9503251951E5CE6FC861C05E7ACD230780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 0bdf1edc2d3ac5aced642029cfa834170fc25837794ff494f63f1180500ea266
MD5 ed09c1473e85e66fcd4d5457e7d9cd38
SHA1 4e39250d22242afede6e6d1448cfee5eb28cd461
SHA512 f34824a891d5fcc03e0207992c95ac3e0457346cb26cf1f6384a157cffbcb703dfa78970168fa014a25965a9f6fd07fda3009af0c970991eaa35d85ac226bc32
SSDEEP 192:sxZ8RgWF/fqscWIdpdNHW6+WNGY36aNTIgrJ:sxZ8dF/fqscXPHbGXu9
TLSH
T1F312B6116E28A97B8CCBD20DBA25BF53D6F9503291D51E5CEAFC861C05E6ADD230780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 9311cfca973e1bfa8a292ba5f24ff38a4165efd72780e1e4b7c53dfe93eca496
MD5 9dce164f3c6be258ffd4a0fe8c6e9b44
SHA1 37311022a624c377eb8c151196967d6b3a40fb13
SHA512 11a6500f4c888057cac31f5b22cb91c8920671b9ccc4831ae638dfa7619205e31241793340c97eb09123a0e4dc04152db4f3414953a26f139afb04fbe0ee8f63
SSDEEP 192:sxZ8RgWF/fqs4WIdpHNHW6+WNGY36yNTIg5jJ:sxZ8dF/fqs4XtHbGXWf
TLSH
T11422B7526E68A97B8CCBE20DBA25BF53D6F9503251951E4CE6FC861C05E7ACD130780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 33ba86ae5dc5cb526ad79a2a67ae9ce310844ff2b038bbe33e2105ab8fb42bf0
MD5 3a01ed69149d4206ffa7848e38445ed5
SHA1 aef91bbc1d069b38b3f63924955fa19341e885af
SHA512 e54ec19ebfce4649c7d50bfcd8fe65174fc457d79a99d8c75620fa06bdb8bd316ae77e96dab82ad88392ee2979ded0caa81dabee43d13b79041b8336fb78b10b
SSDEEP 192:sxZ8RgWF/fqsKWIdpdNHW6+WNGY36aNTIg55J:sxZ8dF/fqsKXPHbGXuJ
TLSH
T1F622B6116E68A97B8CCBD20DBA25BF53D6F9503251D51E5CE6FC861C05E66CD230780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 abbdc5da1d244d5988c62b3741958fa68ad16a52ea1954af62cdc01ddf356dd2
MD5 5e5772cfb361c26b9ccb9f008bdecfa0
SHA1 1f699dd0c25e15a8798da1030c2d9f2ceff2a51d
SHA512 69e82011150026cba5380dd0e6152451191c120cfbc1ee8b35030b6245b9902c7220375ce66b1ed6a8384013074d06f98053a33268ef5ed2b54f9ca845237bc0
SSDEEP 768:BlKlm7QWvUYe08F1+UoAYDCx9Tuqh0VfUC9xbog/OVh/LlpPs/SroRD:BlKlm7QWvUYe0u1ja8/L/E/JRD
TLSH
T196C2F93B640CCB7E4FC05A9DDC5A6F976EA802C7A6588D4047FA984C02C77EE91264DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

133c420f-e998-4e94-9a26-c913a3edb96c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\133c420f-e998-4e94-9a26-c913a3edb96c.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 0e5fbf302f8b246f5336e407a62a891ab67c511e66c3aa5856c6d6f0bd3cee5b
MD5 359d60acf75abac87bb29d1a47c1eb97
SHA1 b136cae5932182fc6f5f42d4e70a758db61a7af8
SHA512 66f25e41c72a1d82386bb0c37992847b615614ba99d46584e468878422fc32dd0275d2dee0fc89cb185d84cc32d2b3a4fb92611f96e7f3da0ddc137efec4cf3b
SSDEEP 384:sZcIhsNI1Qmlcsgb8RUh//z8ExUXQx+3VZh6DKhHwoH:6h2mlcSY/D8Qx+3fYGHwU
TLSH
T119828D36B878ACB719F7A185F44B37038EB0806797C96E98D5ECAF1D01DA1682307D27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 56d7aa03cfec236ef91828c38cac76baa128ca4b064670c81e250504fd764e6f
MD5 62f34f3a9e070aa9327ea62f93bd976d
SHA1 4d2678d4ff636153aaf0c19dd6ea03f5c4294b1b
SHA512 18098c6bad4cc171b962a888030f3c18b72f99effc8e6daa22a24ca4bd422dc3babd75d493523a0f1a28a83ca07c9238a9e094231f0feb33b65e81aa1f4464af
SSDEEP 384:OiFiZcI/zsN48TUNTUlIlEQmlcsgb8RUh//z8ExUXQ9+3VZh6DKhHwoH:lFQ7hwg/mlcSY/D8Q9+3fYGHwU
TLSH
T147A27E37A868D87B6DFBAA85F54A3313CEB04067C6C5AA94E3DC9E1D01DB19C1307D26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 c81e08a0203e43e2cf220945ad8e110aab72f181f1bcfe18246ff6bb7b115bde
MD5 693b54088ce531f4e485f56cef0ab2fe
SHA1 b976f714844b3511158810e98cff1846ce433dcf
SHA512 927325f36e2fbcd8a15e0346463e952c4a6b4c917bcf34f879a84ae6d4184099c1b20cd2a810d9e67f1dd50bde46e49bc1573fd357dc678fd97a3d9eacd87068
SSDEEP 192:BONN6JUm0QmiUyKXso//jjzorB6ywxWjBC+FaU6:BONN6+mEFso//z8ExH+MU6
TLSH
T1C702C738B8687CBB9AF3AE45B44737139FA4106BA6951F44DAE81E1D01D725C2306D26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 bf28aa842221e10402ea31ad9abbd54eb1d9412ce5db4227ebbb3a51883f4c0a
MD5 753d5eb3cbef2e54be9ebc74364d84ff
SHA1 eab3cd50d9018fb7a19d7532897cd0c848d648aa
SHA512 5e5e30db099c0b58a636f5806779f25f2286ee50ed00532608054fab5ea67c6f434a1701119914a4625de6c5c106c20d05325856813f177452738822d7506e90
SSDEEP 192:BONx6JUuQmiUyMX0o//jjzorB6ywxW5XQQNx+Cq3U6:BONx6+q70o//z8ExUXQ6+3U6
TLSH
T159120935B878BC6B5EE3A555F04B32139EA0412BEB896F94D6EC2F1C01DB25C534AC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 de22718530286bd98b0424690655793d3aba60bd326864b76e2a8bcb59a14802
MD5 cf808ef622137bdee04deecb6a731129
SHA1 da5e749fb3345cef6f783354f4152f4518849667
SHA512 a39d1eeb607fb486a532e03bbe9898f2207907301ba1f2fe3187751646424a0d431664e9529aa54a77f14ef74b7a5166c04421d9436cb8a99d3b741a94450fc8
SSDEEP 384:XZcIhsNIEQmlcsgb8RUh//z8ExUXQx+3VZh6DKhHwoH:fhVmlcSY/D8Qx+3fYGHwU
TLSH
T17A828D36B878ACB719F7A185F44B37038EB0802797C95E98D6ECAF1D01DA5582303D27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

297a2494-81d3-4e81-8cf7-f55f57f64d76.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\297a2494-81d3-4e81-8cf7-f55f57f64d76.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 1982e87621b076087695e34ccd8f7a7364833dd86356edc354e09588e3cd2564
MD5 75daf3e740aa3fbf0084e45ff7376b05
SHA1 be000489f29db0a520cb544c3e4920cbb8ebefc0
SHA512 fb144b37eeab67951b74ae2451ebcf21b6bc1ffaa0fec21606d436e5cbbe461fafa4b293d8c2469e31c56b2d2e1165bae48bb6eac8cb124a88c4fd121183d7bf
TLSH
T18641F858AAFD1158B3B76F5A9BF6A46E087BBD372E06D15D00110E4E0627E40CC72B37
MD5 SHA1 SHA512 TLSH

Submit Download