ccde54317343ebacd6da2afde0b4007f766b637b1ba34510c74de49797553d77

Analysis

max time kernel
149s
max time network
144s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/09/2026, 10:51

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
attachment20260930-1253-od8w6q.html
Size 116B
Sample260930-mxvkys1dle
SHA256 ccde54317343ebacd6da2afde0b4007f766b637b1ba34510c74de49797553d77
MD5 0e2f15dcf7166552e959f0ddb363e706
SHA1 642e84dc85171feae5dbbb9727736ee1424a232c
SHA512 2a659912d4f25102f996a71566eca6840ac2b3271147c266d9836f2fc5785b4b514e248b396d62b7504556f50046f7610023adc8c55c2c9b9a8ec715c29ce525
TLSH
T122B0125F120702053D601D527DD3375714174B9E01A969E01267C9FECCCB9B2EE4739C
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4592	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-747854149-4118156852-591593384-1000\{60B3B486-5026-4F3F-AF8E-2618AD0D9223}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
672	msedge.exe
672	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2680	msedge.exe
2680	msedge.exe
2680	msedge.exe
2680	msedge.exe
2680	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2680	msedge.exe
2680	msedge.exe
2680	msedge.exe
2680	msedge.exe
2680	msedge.exe
2680	msedge.exe
2680	msedge.exe
2680	msedge.exe
2680	msedge.exe
2680	msedge.exe
2680	msedge.exe
2680	msedge.exe
2680	msedge.exe
2680	msedge.exe
2680	msedge.exe
2680	msedge.exe
2680	msedge.exe
2680	msedge.exe
2680	msedge.exe
2680	msedge.exe
2680	msedge.exe
2680	msedge.exe
2680	msedge.exe
2680	msedge.exe
2680	msedge.exe
2680	msedge.exe
2680	msedge.exe
2680	msedge.exe
2680	msedge.exe
2680	msedge.exe
2680	msedge.exe
2680	msedge.exe
2680	msedge.exe
2680	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2680	msedge.exe
2680	msedge.exe
2680	msedge.exe
2680	msedge.exe
2680	msedge.exe
2680	msedge.exe
2680	msedge.exe
2680	msedge.exe
2680	msedge.exe
2680	msedge.exe
2680	msedge.exe
2680	msedge.exe
2680	msedge.exe
2680	msedge.exe
2680	msedge.exe
2680	msedge.exe
2680	msedge.exe
2680	msedge.exe
2680	msedge.exe
2680	msedge.exe
2680	msedge.exe
2680	msedge.exe
2680	msedge.exe
2680	msedge.exe
2680	msedge.exe
2680	msedge.exe
2680	msedge.exe
2680	msedge.exe
2680	msedge.exe
2680	msedge.exe
2680	msedge.exe
2680	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2680 wrote to memory of 3060	2680	msedge.exe	86
PID 2680 wrote to memory of 4592	2680	msedge.exe	87
PID 2680 wrote to memory of 3628	2680	msedge.exe	88
PID 2680 wrote to memory of 3628	2680	msedge.exe	88
PID 2680 wrote to memory of 3628	2680	msedge.exe	88
PID 2680 wrote to memory of 464	2680	msedge.exe	89
PID 2680 wrote to memory of 464	2680	msedge.exe	89
PID 2680 wrote to memory of 768	2680	msedge.exe	90
PID 2680 wrote to memory of 768	2680	msedge.exe	90
PID 2680 wrote to memory of 768	2680	msedge.exe	90
PID 2680 wrote to memory of 1952	2680	msedge.exe	91
PID 2680 wrote to memory of 1952	2680	msedge.exe	91
PID 2680 wrote to memory of 1952	2680	msedge.exe	91
PID 2680 wrote to memory of 1748	2680	msedge.exe	93
PID 2680 wrote to memory of 1748	2680	msedge.exe	93
PID 2680 wrote to memory of 1748	2680	msedge.exe	93
PID 2680 wrote to memory of 2556	2680	msedge.exe	94
PID 2680 wrote to memory of 2556	2680	msedge.exe	94
PID 2680 wrote to memory of 2556	2680	msedge.exe	94
PID 2680 wrote to memory of 4352	2680	msedge.exe	98
PID 2680 wrote to memory of 4352	2680	msedge.exe	98
PID 2680 wrote to memory of 2396	2680	msedge.exe	99
PID 2680 wrote to memory of 2396	2680	msedge.exe	99
PID 2680 wrote to memory of 2784	2680	msedge.exe	103
PID 2680 wrote to memory of 4776	2680	msedge.exe	113
PID 2680 wrote to memory of 2580	2680	msedge.exe	114
PID 2680 wrote to memory of 1140	2680	msedge.exe	115
PID 2680 wrote to memory of 4044	2680	msedge.exe	124
PID 2680 wrote to memory of 4044	2680	msedge.exe	124
PID 2680 wrote to memory of 672	2680	msedge.exe	128

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\attachment20260930-1253-od8w6q.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7fff1e38c188,0x7fff1e38c194,0x7fff1e38c1a0
  2⤵
  PID:3060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1868,i,12062011339487159368,347494267956488500,524288 --field-trial-handle=2084,i,9961565314078830415,8249473445692500774,262144 --variations-seed-version --mojo-platform-channel-handle=2208 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1712,i,11802558603946364208,7303134492950137346,262144 --field-trial-handle=2084,i,9961565314078830415,8249473445692500774,262144 --variations-seed-version --mojo-platform-channel-handle=2076 /prefetch:2
  2⤵
  PID:3628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2492,i,14660821882304656733,10614722571178884444,524288 --field-trial-handle=2084,i,9961565314078830415,8249473445692500774,262144 --variations-seed-version --mojo-platform-channel-handle=2672 /prefetch:8
  2⤵
  PID:464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3452,i,16148604269254635619,1341299751673222387,2097152 --field-trial-handle=2084,i,9961565314078830415,8249473445692500774,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3456,i,16889948385263100408,15898709619149439840,2097152 --field-trial-handle=2084,i,9961565314078830415,8249473445692500774,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
  2⤵
  PID:1952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4196,i,7187326544577782212,11490970613990290225,2097152 --field-trial-handle=2084,i,9961565314078830415,8249473445692500774,262144 --variations-seed-version --mojo-platform-channel-handle=4244 /prefetch:1
  2⤵
  PID:1748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4228,i,10983981859151034869,4584856266529471984,2097152 --field-trial-handle=2084,i,9961565314078830415,8249473445692500774,262144 --variations-seed-version --mojo-platform-channel-handle=4280 /prefetch:2
  2⤵
  PID:2556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,15131402832062506156,2126585663891351419,524288 --field-trial-handle=2084,i,9961565314078830415,8249473445692500774,262144 --variations-seed-version --mojo-platform-channel-handle=5168 /prefetch:8
  2⤵
  PID:4352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,18116959719920309718,4004137027366076071,524288 --field-trial-handle=2084,i,9961565314078830415,8249473445692500774,262144 --variations-seed-version --mojo-platform-channel-handle=5140 /prefetch:8
  2⤵
  PID:2396
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5928,i,9803451545285463642,15100912217915537776,524288 --field-trial-handle=2084,i,9961565314078830415,8249473445692500774,262144 --variations-seed-version --mojo-platform-channel-handle=5944 /prefetch:8
  2⤵
  PID:600
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5928,i,9803451545285463642,15100912217915537776,524288 --field-trial-handle=2084,i,9961565314078830415,8249473445692500774,262144 --variations-seed-version --mojo-platform-channel-handle=5944 /prefetch:8
  2⤵
  PID:2784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4276,i,341865572394330818,15357257935264359385,524288 --field-trial-handle=2084,i,9961565314078830415,8249473445692500774,262144 --variations-seed-version --mojo-platform-channel-handle=4320 /prefetch:8
  2⤵
  PID:4776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4780,i,1056041101720897246,9624082020730652260,524288 --field-trial-handle=2084,i,9961565314078830415,8249473445692500774,262144 --variations-seed-version --mojo-platform-channel-handle=4280 /prefetch:8
  2⤵
  PID:2580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4228,i,2804907439446890214,4268022699197048976,524288 --field-trial-handle=2084,i,9961565314078830415,8249473445692500774,262144 --variations-seed-version --mojo-platform-channel-handle=4900 /prefetch:8
  2⤵
  PID:1140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5956,i,10144427346022290771,5337366851961024332,524288 --field-trial-handle=2084,i,9961565314078830415,8249473445692500774,262144 --variations-seed-version --mojo-platform-channel-handle=120 /prefetch:8
  2⤵
  PID:4044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=748,i,2712780371279005047,4908749486181539884,262144 --field-trial-handle=2084,i,9961565314078830415,8249473445692500774,262144 --variations-seed-version --mojo-platform-channel-handle=6168 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:672

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1844

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a62a1faeaaa56a5f5375b4d4921e6b263c0bc10a5ecc1f991894c66c32a88aef
MD5 64fcd85513a139bcf5844ab49aea8206
SHA1 3c834eccb77da48c4abac17c440971305fd9b653
SHA512 cd1b39ff43d56158fbb01c5408a5bf247d5bd82279b205a914ab4cdccfece77a5399e430bb26db6f7d10e70dc3503c3bf37c5de59e23cb8f62d6337066c4114f
TLSH
T15DD02232EBF00E82C00B0032082282880F08C03C08003222A23C20AE3A80CEC2E23000
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d1cc89f8f1c9f75d127814445edc4d6d9314209d3b11e5a2b4cc826747683f30
MD5 3bc9cc32c2de3150dc7916bb61984962
SHA1 d75ba9bc7ad74cb95dcb4ec6de6e6b18f5813a04
SHA512 fd090e624e91a98337689ed57390fc5813fab21acd3af426c9de6566ea4d92a7875c4f92a1b64d547eaf9ce40cad3d8a85472a30cf521aea6198cf74b69805ac
TLSH
T12ED02232ABF00E82C80B0032082082880F08C03C0800B323A23C20AE2A82CEC2E23000
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 7344fd75c9373b3c914292b86a275e5078d1ea640cccd6b4979f13dc140f804e
MD5 7a923122741c5d1502e761eacf0f6e10
SHA1 aac74074d81cd01a0c171831cc83cc6a2ac3f395
SHA512 9f32a8f37be7f8dd6dd2ab955076fd58dd5718fa4a4485817d077de27a535ac90d6c95e7422e9a677a8d80289eb36d7330c7b27ef38cc7deb536d77a33041cc4
TLSH
T16161C6CC454180AFFF9480789DDD70CB37365D82BA4F1DF38198D4B6A886BD4C28A890
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58dfeb.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58dfeb.TMP
Size 3KB
SHA256 cbad47861de038e48c1f1a57af0cf03bc240de83f1ab41dcddfd542b418788b1
MD5 f8e6f05224e232788cc78321507ec295
SHA1 a2811f3c0bc18a130217464b7f936b3cd0f2eabe
SHA512 bf355a2790f0c5829049354df4c5c14ccccc67ba3e63bf4a13e93ccdad9dcf453271aa48eff1ad0f6be767ab3d6d3e8b53b4e273681ec55b4efbd8671667585d
TLSH
T1FA61C6CC454184AFFF9480789DDD70CB37365D867A4F0DF38098D4B6A886BD4C2C9890
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 bc52c677cff840afc9942b84131ab878029501d5dc7c17528993c31f68be18c1
MD5 d3ec24a4fbcfd27c771a035a0ff433bc
SHA1 77ad942138bbfa9e4d69fe60d35aea87a96e6893
SHA512 b2d35f9494e5da433681bfa80bbb56ae0fbcb683b0faaf4407aced80a763846ee121af4e362560f345cd56293b95a2113a75e699e8c38a5d3f15e200b23db873
TLSH
T117117DF3C3D585AE8D0157F0AA24AE1BCE2D0505421C7C1995D4EF27D3E3475E10259B
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 9ab940633fdac71d8fb4a5c4ab041d3d9b2faa9c8ee3e5db4048bb35a33e2f9c
MD5 618accd31a4ae39ddac6bef256366401
SHA1 eb4454877e313357557c0eef937114ab8c386c8e
SHA512 12bb2a7ac8f35435dd52ad655e743b4e727c0f514406de092332b4f98be117cef52cfba35deab9215c34f41c1b24f657f8b140fd2455a3247f25fe67ecd82a52
SSDEEP 192:sxZ6RQWv/f4sPCIdpdZHW6+WNGYgUCbIgrJ:sxZ6lv/f4sPrHHbG39
TLSH
T1F912B7116E28B97B8CC7D21DBB15BF53E6F95032A1951E4CAAFC861C04E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 0e9240797a115f1af4b01935bffce3627e6c2ecac83df937ad03f8826f55336e
MD5 51992a6a152e8207d87778c129b4bf71
SHA1 3e9078ec83099aec996f76e73aa8e27ab7a66cc5
SHA512 9c941d822902d6c05e8f6d652e9da943bca03685e82b3ea10c4f6aa34ba470011b6d3c2b83fd50d9688abde14c8b3a2b3939b771269a6f41c7d0d2a1cf9ba9a4
SSDEEP 192:sxZ6RQWv/f4sOCIdpHZHW6+WNGYgICbIg53J:sxZ6lv/f4sOr5HbG7r
TLSH
T18222C7526E68A97B8CC7D60DBB15BF53E6F95032A1950E4CAAFC861C04E77DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 162aaaa748d02fda0345a4ad44400455e3a0242756307324e8878f707bfb6f97
MD5 f384374ffe762bbe955b26aa8d1150df
SHA1 ad0821a5cc26727b90698d3b2620aa30974bf17b
SHA512 7038bd0df62a4c4cd64ccfe224580cbdad444440b80058dbfd4959c30708b1350524cc5310f7a1919809e7ee922d273f15f0df8e5e1745c2ed176d005de0b284
SSDEEP 192:sxZ6RQWv/f4sOCIdpdZHW6+WNGYg7CbIg53J:sxZ6lv/f4sOrHHbGyr
TLSH
T1EE22B6516E68A97B8CC6D60DBB15BF53E6F95032A1950E4CAAFC862C04E77DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 cf97fcbe156ec55c759098cca9142244f08a8b4d84520095f8eb69b82ce9efe6
MD5 609d1f777a33827d0444d5d8293a811c
SHA1 670bd55191988d36e5a2e99dacc9fb9d136e9399
SHA512 b89b6df6168f0b21ae9bd5581efb51b891afdbb5efe0f7f7c2080abc0f9a0b4853d5a8fc73e671a24994bcee9d3c772e8488d272c3978953583b2a37b96629ab
SSDEEP 192:sxZ6RQWv/f4sACIdpdZHW6+WNGYgUCbIg5dJ:sxZ6lv/f4sArHHbG3F
TLSH
T1B122B6116E68B97B8CC6D21DBB15BF53E6F95032A1951E4CAAFC862C04E77DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 cc395abc522a606ffd3d9267f5abaec1f243ec4e1dd24c6a97eeaaacee50c4cb
MD5 8f77b0b62ae5ac2846be8c72f3b6cd91
SHA1 d82f834720d3b5a31e65c4be7c173f6137f09366
SHA512 324cb2c127ab6938187d8d4560f406d518e261b078cd5489bbd65fc21d0f837b9ed29ccbcd1385d169040746409979ffd81f1d72c1c15f644aa4838b3fceff0d
SSDEEP 768:rAichfPWvPZpl8F1+UoAYDCx9Tuqh0VfUC9xbog/OVu+LlEKXzgrozPF:rAichfPWvPZplu1jan+LKgzrzF
TLSH
T1CAC2E93B640CCB7E4FC01E9DDD5A6F9A7EA802C7A6588D4047FA984C02C77EE51264CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f331f73a-35a1-48ae-bd7f-184df919eb11.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\f331f73a-35a1-48ae-bd7f-184df919eb11.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 c426255b5c6c29b29d18838f08e8f13659a81d924c7179686f795e9646c492e1
MD5 dfae21415acce0bb558a8d7f5f7c0ff6
SHA1 de2fe27f556b980fdcdcb3c66c0afa342dab2669
SHA512 83a9f97aa43e4e2f48f51fb82cde253852bf087f2b66e98eb6ec90b50b8627f1c1b17234c580ed44fc1802c951b112a520d3cf8697eb50d2303022a97e3c89d3
SSDEEP 384:yiFiZcIdzsN/8TUNTUlIlXAi5vW0pBGYX5ECm9TDdwtgOIwZOyNoW:5FQlSwgTM0LGYuCwHdwXsEp
TLSH
T16BA25B3388B8997F6DEB9A45F98A32038FB85137D684EB9496DD5A1C009A1D8130BD17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 c077530bafe2c3a9d206a60fb44fb865b41dbcda946e9947fc49c756e47c2268
MD5 7474af9c92cfe585c16446e34a2291d1
SHA1 3799fc71365edd46ad50ca1824260b4b71189aba
SHA512 3eb5373ced3466617569682c63c171f879d54f33fef1a77fb232f8c6700878a07e11c5d1dbed56ac50d6cd764723153b9af644a78ce8931471dbd5eb0326538d
SSDEEP 192:LJONk6DphmqQmiUyodEq8wGYX59ezbCMmIXkk7VUU6:lONk6195ERwGYX5ECm/eU6
TLSH
T19D02E935A8787C7B8EE3AE45F5872B175FD8112BAA906F84D6E81A1D00C769C2307927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 56e050e0ffbb7c571681830a52e8a27d0628fde6f5fdc1c6b489b4a7c9dc1e13
MD5 dbe0c6d434a224f286504b1701b58e14
SHA1 d07e41e1e7bcd201a82fe7042c75436a77a903be
SHA512 8d967c0d91f15096a6676e116df7d8045e4193b38ebf5886482ccefdd0606d73b3dc20e7b8e7d650a6c8eb1fd28a77b50677d07d3d82cc49fbd7b2848a17fdd9
SSDEEP 384:5ZcIhsNlyAi5vW0pBGYX5ECm9TDBwtgOIwZOyNoW:RhJM0LGYuCwHBwXsEp
TLSH
T1FD827D3298B8AC7B5DEB9545F58B36034FB89127E7C4AF9495ED2B1C00DA2E8130BD17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 85cf1807b5a15ec826825862ad8a4643563da1b889f1ed1887a3ecd35e5f6322
MD5 bd0034843dd1ea8bc24d021fe5339c4c
SHA1 93b3ead9e1b31fce57e03eb73e97658db4edf299
SHA512 3dc52ccbec6d69eb53f27deaba97997c6892456f2411f8730d2c220212f534869efcf6d9e0630959ffd0708e4f61099964e4f6fa441ab3f856401196fe745ecd
SSDEEP 384:eZcIhsNlXAi5vW0pBGYX5ECm9TDBwtgOIwZOyNoW:chOM0LGYuCwHBwXsEp
TLSH
T1D1827E3298B8AC7B5CEB9545F58B36034FB89127A7C4AF9495ED5B1C00DA2E8130BD17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 aad3564dce91e5f5caf2ebbdbd8a2202d98d4893a864cae17acbc2828e151c82
MD5 53fee4c585efa6cde71ab4cd86ce3b16
SHA1 ed7851c102a745dd44a7a1196f406650c2423d80
SHA512 953492c8771e02aec34bbf7c14061de2c6d20e9b80468f092b5f775139d6a0a2b98f05b16c763ff83a54bca8ec1bbaca6057ad7b2a0379ad865748fefddc8fb5
SSDEEP 192:LJONA6DphIqQmiUy1dELwGYX59ezbCMmI9TDrJkIIIq5AU6:lONA61nQELwGYX5ECm9TDOwU6
TLSH
T19312F835A8B8BC7B5DD36895F48736034FE8522BEB847F9495DC1A1C01DF69C230A927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

faab770d-f924-4226-b20d-3b7ef8628e74.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\faab770d-f924-4226-b20d-3b7ef8628e74.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 2c248d042ad49a16921dec107f3ef590d572c7d1444b15c24db2690ddd2ff01a
MD5 dac28ef0e640d2b4b29b73fe78aa2325
SHA1 35145bf34dc87084fc83fb28819b3cc67c455b7a
SHA512 63886877086a2799c4b45b22024d6a27a69721166f120bed01a1129aae133058a9b62251a38b88851d87cb3454bd1f5a24e8bbd517c6730608197af9efad5a1e
TLSH
T1AE413B5CA6F91108B3B7AF569BF7785E483AB8371B07D49D00110E8E4627A41DC6273B
MD5 SHA1 SHA512 TLSH

Submit Download