ccde54317343ebacd6da2afde0b4007f766b637b1ba34510c74de49797553d77

Analysis

max time kernel
148s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/09/2026, 09:43

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
attachment20260930-1253-7d1x5t.html
Size 116B
Sample260930-lp25dsvs2j
SHA256 ccde54317343ebacd6da2afde0b4007f766b637b1ba34510c74de49797553d77
MD5 0e2f15dcf7166552e959f0ddb363e706
SHA1 642e84dc85171feae5dbbb9727736ee1424a232c
SHA512 2a659912d4f25102f996a71566eca6840ac2b3271147c266d9836f2fc5785b4b514e248b396d62b7504556f50046f7610023adc8c55c2c9b9a8ec715c29ce525
TLSH
T122B0125F120702053D601D527DD3375714174B9E01A969E01267C9FECCCB9B2EE4739C
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3916	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2101206053-1414382737-268919432-1000\{D410723B-6DB8-420D-A1EB-272069FEDA41}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2676	msedge.exe
2676	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
984	msedge.exe
984	msedge.exe
984	msedge.exe
984	msedge.exe
984	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
984	msedge.exe
984	msedge.exe
984	msedge.exe
984	msedge.exe
984	msedge.exe
984	msedge.exe
984	msedge.exe
984	msedge.exe
984	msedge.exe
984	msedge.exe
984	msedge.exe
984	msedge.exe
984	msedge.exe
984	msedge.exe
984	msedge.exe
984	msedge.exe
984	msedge.exe
984	msedge.exe
984	msedge.exe
984	msedge.exe
984	msedge.exe
984	msedge.exe
984	msedge.exe
984	msedge.exe
984	msedge.exe
984	msedge.exe
984	msedge.exe
984	msedge.exe
984	msedge.exe
984	msedge.exe
984	msedge.exe
984	msedge.exe
984	msedge.exe
984	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
984	msedge.exe
984	msedge.exe
984	msedge.exe
984	msedge.exe
984	msedge.exe
984	msedge.exe
984	msedge.exe
984	msedge.exe
984	msedge.exe
984	msedge.exe
984	msedge.exe
984	msedge.exe
984	msedge.exe
984	msedge.exe
984	msedge.exe
984	msedge.exe
984	msedge.exe
984	msedge.exe
984	msedge.exe
984	msedge.exe
984	msedge.exe
984	msedge.exe
984	msedge.exe
984	msedge.exe
984	msedge.exe
984	msedge.exe
984	msedge.exe
984	msedge.exe
984	msedge.exe
984	msedge.exe
984	msedge.exe
984	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 984 wrote to memory of 4728	984	msedge.exe	84
PID 984 wrote to memory of 3916	984	msedge.exe	88
PID 984 wrote to memory of 1272	984	msedge.exe	89
PID 984 wrote to memory of 1272	984	msedge.exe	89
PID 984 wrote to memory of 1272	984	msedge.exe	89
PID 984 wrote to memory of 4100	984	msedge.exe	90
PID 984 wrote to memory of 4100	984	msedge.exe	90
PID 984 wrote to memory of 4056	984	msedge.exe	91
PID 984 wrote to memory of 4056	984	msedge.exe	91
PID 984 wrote to memory of 4056	984	msedge.exe	91
PID 984 wrote to memory of 1700	984	msedge.exe	92
PID 984 wrote to memory of 1700	984	msedge.exe	92
PID 984 wrote to memory of 1700	984	msedge.exe	92
PID 984 wrote to memory of 4644	984	msedge.exe	93
PID 984 wrote to memory of 1992	984	msedge.exe	94
PID 984 wrote to memory of 4644	984	msedge.exe	93
PID 984 wrote to memory of 4644	984	msedge.exe	93
PID 984 wrote to memory of 1992	984	msedge.exe	94
PID 984 wrote to memory of 1992	984	msedge.exe	94
PID 984 wrote to memory of 2028	984	msedge.exe	99
PID 984 wrote to memory of 4520	984	msedge.exe	100
PID 984 wrote to memory of 2028	984	msedge.exe	99
PID 984 wrote to memory of 4520	984	msedge.exe	100
PID 984 wrote to memory of 1312	984	msedge.exe	102
PID 984 wrote to memory of 1520	984	msedge.exe	117
PID 984 wrote to memory of 688	984	msedge.exe	118
PID 984 wrote to memory of 5056	984	msedge.exe	119
PID 984 wrote to memory of 4636	984	msedge.exe	122
PID 984 wrote to memory of 4636	984	msedge.exe	122
PID 984 wrote to memory of 2676	984	msedge.exe	126

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\attachment20260930-1253-7d1x5t.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x24c,0x7ff972c8c188,0x7ff972c8c194,0x7ff972c8c1a0
  2⤵
  PID:4728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1968,i,14182654770850835308,11582049959828522094,524288 --field-trial-handle=2808,i,9728870279624362380,8807878670888123097,262144 --variations-seed-version --mojo-platform-channel-handle=2876 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1696,i,365477116781482804,3690428137026717852,262144 --field-trial-handle=2808,i,9728870279624362380,8807878670888123097,262144 --variations-seed-version --mojo-platform-channel-handle=2804 /prefetch:2
  2⤵
  PID:1272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2328,i,16068061356782147749,9283612708673820148,524288 --field-trial-handle=2808,i,9728870279624362380,8807878670888123097,262144 --variations-seed-version --mojo-platform-channel-handle=2916 /prefetch:8
  2⤵
  PID:4100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3468,i,2973634630689014854,8981775959657613435,2097152 --field-trial-handle=2808,i,9728870279624362380,8807878670888123097,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  PID:4056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3472,i,8038388121241250695,11686722882524135617,2097152 --field-trial-handle=2808,i,9728870279624362380,8807878670888123097,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:1
  2⤵
  PID:1700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4188,i,12211361220883058594,1147119211799286606,2097152 --field-trial-handle=2808,i,9728870279624362380,8807878670888123097,262144 --variations-seed-version --mojo-platform-channel-handle=4292 /prefetch:1
  2⤵
  PID:4644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4200,i,9051888873993250209,1962842576493285878,2097152 --field-trial-handle=2808,i,9728870279624362380,8807878670888123097,262144 --variations-seed-version --mojo-platform-channel-handle=4364 /prefetch:2
  2⤵
  PID:1992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5140,i,4651268517094201858,5780677672227348590,524288 --field-trial-handle=2808,i,9728870279624362380,8807878670888123097,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  PID:2028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5144,i,1886400649225041939,13546154322445628697,524288 --field-trial-handle=2808,i,9728870279624362380,8807878670888123097,262144 --variations-seed-version --mojo-platform-channel-handle=5208 /prefetch:8
  2⤵
  PID:4520
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5808,i,2158857075465834812,12446880225090879015,524288 --field-trial-handle=2808,i,9728870279624362380,8807878670888123097,262144 --variations-seed-version --mojo-platform-channel-handle=5820 /prefetch:8
  2⤵
  PID:4284
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5808,i,2158857075465834812,12446880225090879015,524288 --field-trial-handle=2808,i,9728870279624362380,8807878670888123097,262144 --variations-seed-version --mojo-platform-channel-handle=5820 /prefetch:8
  2⤵
  PID:1312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4412,i,6364067898479662495,11230847986578269871,524288 --field-trial-handle=2808,i,9728870279624362380,8807878670888123097,262144 --variations-seed-version --mojo-platform-channel-handle=4404 /prefetch:8
  2⤵
  PID:1520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5884,i,5892795770814871637,4671551081100550383,524288 --field-trial-handle=2808,i,9728870279624362380,8807878670888123097,262144 --variations-seed-version --mojo-platform-channel-handle=4544 /prefetch:8
  2⤵
  PID:688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5948,i,5198427356054745657,4257158125927213333,524288 --field-trial-handle=2808,i,9728870279624362380,8807878670888123097,262144 --variations-seed-version --mojo-platform-channel-handle=6300 /prefetch:8
  2⤵
  PID:5056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4824,i,11725705858892554230,13665978602144727606,524288 --field-trial-handle=2808,i,9728870279624362380,8807878670888123097,262144 --variations-seed-version --mojo-platform-channel-handle=6208 /prefetch:8
  2⤵
  PID:4636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6100,i,8840545373113327332,16621424921184340189,262144 --field-trial-handle=2808,i,9728870279624362380,8807878670888123097,262144 --variations-seed-version --mojo-platform-channel-handle=5980 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2676

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4072

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 61a97be736e0441d45644d31b38bd9bef6c1bd260fa1ecbb5d099fa493fee6b4
MD5 99bbd8400adc948f85ebd87cb24b3fcb
SHA1 c8fb9564ede7ecb06cef446bdb527025127a796e
SHA512 75b3ee70eca487cbbfb3d5b4b25bae158ff99188ab36d55f391e9f80c51ce9fa433897d79a0ae37ad64698bc3eb5aa9a10a49116fb8f7f35ed0a6e98aa8321b7
TLSH
T109D022C8F2A0300CE00C3233A02BCE022B88CEA8F0032BCA000E8C80E8800C80CF2C8E
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 87a6b56b3a47cfd9f58f49b21d0040033c8cfd80b50e49b434794cefa7e29583
MD5 74ef2da89fa243ea7d0030317efca192
SHA1 ceb38f6fe8b62f80d617114db8b4617467417ae3
SHA512 285847f78095225db6f446ab877593c3e8e9c642b3beec1b15e7b1eec59d6b2f61ada0e2fb96cf36a3046dbd5102c274473cea5f978ee83b010039a4dc00d05d
TLSH
T10DD024C471D0340CD40C31335015CD011744CD54F00317C7000D4C40C4400C40CF1C4D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 bb138dc03c03f93bc8f94ebc68767e4c80a052b42d7a6aa8169b205f089af1b6
MD5 678015bd541646b701f11c1037afd7d7
SHA1 265a2cfd9f696786867442e91a77d7c2d4145273
SHA512 6c358b133a08c44204aca660ddcb691737f240d023c79391d158d7924f0bdf30bda9999a068d306edac8e563d8f209b39d0a261a7f20384c6ba67f107d3a84e1
TLSH
T188615E83D24346E9F7AA65B091D69DDB3A35909784433F3EC8C8CB76A407726DA1D073
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59194b.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59194b.TMP
Size 3KB
SHA256 426f2afe58d662b4894f999ee5ec6521543a6eee8cc4c37d4e8d9bf74e8594b9
MD5 13d2d11d5e53d6c55ba88be75a8d4cd1
SHA1 34846305a01deff4d664ba75e8a7382446997e0d
SHA512 649a604bc40335cbca45d96d2c66cb6bb54fc6a28727990a673e35bfd099ded47fa74dfb479c7aa4ddc2b12f72bdfee43eb7e46edbdd18d76d002112eb40bedf
TLSH
T175615E83D34342E9F7AA65B095E29DDB3A34909784433F3EC8C8CA75A407726DA1D073
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 3a79b084adb80b4cae8cdf56a8b5efc6f8d35cab9193322f8d9df256f89fd3ee
MD5 e2527ee5fdecf4b824269fc80a31e521
SHA1 440dffa1dc8d3524fa16a97ca7b842a9d1baea97
SHA512 180816ca2d7f2f5975aead4f4896a6369e68b98516291447831a76543a3efda24932be941cfdf8e8ce4506c35b18cd5d33b485c0ebecbaade8fc96dcd2899658
TLSH
T1F3117DF3C3D595AE891116F0AA28EE1BCE1D0506421C7C1AC5E4EF6B93E3475E1115AB
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 e5d9355b36ffdf9336058159b3f053bc2379f205f3f713dad9be07241d73cfb3
MD5 f70f36aae9454be9e2a01222ebcc757e
SHA1 4b5b0682ee5182b737b74299ec538412ea402750
SHA512 1e5ccb461dd2558d9077e38500a3334dae97c7bc940d1fccb4f5f2a543b392db7efa74f1e80226840dbac1075a034e507a3c7cdb5ab455ff3ecf4c92732ae465
SSDEEP 192:sxZDRuWv/fcsczvgaIdpdlHW6+WNGYaQY5IgrJ:sxZDXv/fcsc7gzrHbGZ9
TLSH
T18312A6127E28A97B8CC7D20DBB25BF53E6F9503291941E48EAFCC61C05E6ADD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 4d95e1cb5b51362007e667fdf7a42c63f0f1480606a200e5da156d1f560da3ce
MD5 db05faec7c56b8f98aebe3ae49f01c19
SHA1 951a7f6a5e43b2c99a2cd2e5373206fb33cf405b
SHA512 f78a31df0625eb2f866eafa7d02a9192b9d0b0df80a562a1d8f158e11c7eb027e75a0948d10bae545fa3ac86dd9902bdfa9f69a76b66598e902e50e7194e8870
SSDEEP 192:sxZDRuWv/fcsy/vgaIdpHlHW6+WNGYaFY5Ig50J:sxZDXv/fcsy3gzFHbGue
TLSH
T10E22B552BE68697B8CC7E20DFA55BF53E2F9503291941E4CA6FCC61C05E6ADE120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 cf564510c78ac7e1cae7cca44ff0bdfcfe402918365eac68c4fbd35e7b0fadea
MD5 b4dbc38721e8d3d16c4dd628c26da699
SHA1 a737a3850942a9ad56704ff31c3e5268c921dda0
SHA512 f0ac995c9826ea9bdcac85ff7948f97facd437aee107154ec76ed4e9e004bdcb261ed3c7e8b6f02a97b7caeae78827c548d824da11c41141b32416463f19ff07
SSDEEP 192:sxZDRuWv/fcsyzvgaIdpdlHW6+WNGYaQY5Ig5eJ:sxZDXv/fcsy7gzrHbGZ0
TLSH
T1A322A512BE28A97B8CC7D20DFA55BF53E6F9503291951E48A6FCC61C05E6ADE120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 7ccfb19c59ced5633aecb8624dc040dadeaf5e757372eb81a94ff3f1f419d230
MD5 0816d58b35285d7e66115456e62f7a7c
SHA1 bf304d6289b61c80af0305e32a2d74028c257b8a
SHA512 3cda5490e83bc730b7a79ab0e45ae237e4905968a67f83615cb18f5d4c3d06d1378a16dbe1a4b867c1effe84d166f649e567dedcd612546084a8e9843a1d8fb3
SSDEEP 192:sxZDRuWv/fcsy/vgaIdpdlHW6+WNGYa/Y5Ig50J:sxZDXv/fcsy3gzrHbGse
TLSH
T1C222B512BE28697B8CC7E20DFA55BF43E6F9503291951E48A6FCC61C05E6ADE120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 382a5272dfe8aa4396de9df340b552822dce88dd71a8de429c12cfc7adeb8139
MD5 0b3096c08c668c52054d229ded268ac5
SHA1 ff691c96c2e70777ce86e1d8f967bc96b0b757db
SHA512 fa70fd02a2b08924d061ff80ea9f918f3002567beb986027b92f9c5d507a4e4414c9c038fd2839a22d5ca981e4ed21bb76d35ba120808711fe27c15e19e04117
SSDEEP 768:FmyQRbrWvvlpZ8F1+UoAYDCx9Tuqh0VfUC9xbog/OVaKLlRXH36rokZp0:FmyQRbrWvvlpZu1jaXKLf33xkZp0
TLSH
T1FBC2EA2B640CCB7E4FC01E9DDC6A6F976EA802C766588D4447FA984C02C77EE512A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

aaf5d659-e75e-4f31-ac00-eff2be3d1c32.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\aaf5d659-e75e-4f31-ac00-eff2be3d1c32.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 208ce1778597f1508447dd35e499e75f0bc81dc06b9406cdee8acbe7434ae4bf
MD5 90cded4833d3c9771f22a0adc650e506
SHA1 c14bc88e6954c9b722a1d9e19b7b7268bbe7bda5
SHA512 a4dfedb3a69334b5ef46dc4a8da845d7165dba4829cc3d7b10352f71aa8a7e939a74d0738532a1259e8f5843f4792aaad3497a1f3c7bdfba465a6625d8e45ad3
SSDEEP 384:lZiFiZcIWzsNI8TUNTUlIlxBIrvbp5u8ipaiNaL0QtgOIwZOyjkoh:qFQmdwgFoDkpUL0QXspO
TLSH
T1EEA27D335CE8997FBDF78A51F54A72139EF480A7D684AB84E6DC962C01EB0D80307D12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 994227ff7de3f194c1e74c6a95935e7ddfffa89d3ab51f7e6d1c87a23477de70
MD5 88c9967a7fdaa5dd0968295ee29d44e0
SHA1 ce9f8d10511db9087456bcf16167b375b225a7ab
SHA512 e13327782acd9846d5434cbc59e245b25160f9853df9281b0efad46139532270e9c236b8e53f72b693a72839b21d2fe97fb24144c2f08ceb544679017849ac6f
SSDEEP 192:SONH6iDCQmiUyJTHq5u88PpPCPSq0hicU6:SONH6/AHq5u8ipaN0JU6
TLSH
T16F02E7396C783CBB9DE3AD15B54B7B139FE5116BE6941B84D9E8161C00D769C1303923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 36257478c06500ec4bb366b8584b71265a19ebd447dace32edee30bfb9d87587
MD5 e5ee0261073491109be449a6a4424cdd
SHA1 5ec66706952aeb7c1cd5500e5bc7bec33f0204ff
SHA512 823475a5b4f4aa8a19ec594eb50295c8f98350385411115cbc8cccaa1b21352556e9fc9089f2f98a5383ef35cc595c077592c76a6e869d27f06577a94c00154e
SSDEEP 384:0ZcIhsNYxBIrvbp5u8ipaiNaU0QtgOIwZOyjkoh:yhPoDkpUU0QXspO
TLSH
T14A827D3268B85CBB6CE79115F54B72139EB8805BD3C86F84D9EC972D01EA5E90307D17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 e452a878969eaa40f49c60df19f34479f4154b744011ae555e4ba8fecba9c2fa
MD5 d4b560217e4967f238df765591a4043b
SHA1 f44291f49a21649a108187bbe18fc9cde7826b58
SHA512 44b90616ba24ca87d1d93858a2d60e6fb06a16c4909f9408736d33e7c0ad4f34f077b1e3317ac220f9778126bda3f88dbaaa2624df53125d7dc6dbbfc6ed6127
SSDEEP 384:FZcIhsNY8BIrvbp5u8ipaiNaU0QtgOIwZOyjkoh:9hUoDkpUU0QXspO
TLSH
T143827D3258B85CBB6CE79111F54B72139EB88057D3C86BC4D9EC972D01EA5E50307D17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 36891a2b577014dc857926c467dc92800d9769c13d65b6857ae921fa8ae7d07d
MD5 7200089183e0e60234fbaacc608542d1
SHA1 f11149f73eebfc4a34e9f4ed26ecbdd3d5c6a738
SHA512 f9fe306fe1f2b505b14435796acf91ef1b2b6632f1745f4bf10c4a29db0f79632be41aeb724fc4567d637958b17099904bd20795a1b5b8f8b3979ba01e74737d
SSDEEP 192:SONp6iDXQmiUysT5q5u88PpPCi3daiYuZ0Tq3U6:SONp6on5q5u8ipaiNa40QU6
TLSH
T18F122A3678B86C7F6DD39961F44B32139EA4426BE7886F84D9EC162C02EF5985307913
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 b6a1ac09dfcdde98c6568687948c1e06ab7e92828bf83c060b99dcc2def4e623
MD5 173f50f0edba5250cb413df0afaf7c36
SHA1 8d2d109c4d1afd9b6674980879f1ed17173c67b4
SHA512 6556311896b6efc0e0797c3518be1feae9394656c0cf5d947c557c748cebe718906b926a59858bff8e1ce1cc278700728bbd815a1860467f59014f2a1a1278e4
TLSH
T10541575CAAF91158B3B76F5AABF2A86E447BB9372E46945D10120E4F0A22B40C961733
MD5 SHA1 SHA512 TLSH

Submit Download