57a2e109f673e227475536ed553b8042cdc6ff548f37aa50edb0ca6133947bfc

Analysis

max time kernel
148s
max time network
143s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/09/2026, 12:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
strategic-conference-brochure.html
Size 720B
Sample260930-phkhjseh46
SHA256 57a2e109f673e227475536ed553b8042cdc6ff548f37aa50edb0ca6133947bfc
MD5 702f51a5b5456e994e87e879f0fe46e6
SHA1 6e8f1897fc88e03031e06957164369ef5c4a4395
SHA512 3b8f69100d3e0da6542995f0c23f741df51c8edbd2eafa89fa4ad4016e28328b20c995e2665c0f35d3f79e0643ccd2691d7e4d05d5360ee9c2e26a70a3a8da05
TLSH
T19C01103A811474BDFD32097AD05DD0085290F4CBB2905E129EE4B2AB7EA5EDB50E3BDC
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4776	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2101206053-1414382737-268919432-1000\{6CF90813-A155-4493-8834-4760FCE11975}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4308	msedge.exe
4308	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3252	msedge.exe
3252	msedge.exe
3252	msedge.exe
3252	msedge.exe
3252	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3252	msedge.exe
3252	msedge.exe
3252	msedge.exe
3252	msedge.exe
3252	msedge.exe
3252	msedge.exe
3252	msedge.exe
3252	msedge.exe
3252	msedge.exe
3252	msedge.exe
3252	msedge.exe
3252	msedge.exe
3252	msedge.exe
3252	msedge.exe
3252	msedge.exe
3252	msedge.exe
3252	msedge.exe
3252	msedge.exe
3252	msedge.exe
3252	msedge.exe
3252	msedge.exe
3252	msedge.exe
3252	msedge.exe
3252	msedge.exe
3252	msedge.exe
3252	msedge.exe
3252	msedge.exe
3252	msedge.exe
3252	msedge.exe
3252	msedge.exe
3252	msedge.exe
3252	msedge.exe
3252	msedge.exe
3252	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3252	msedge.exe
3252	msedge.exe
3252	msedge.exe
3252	msedge.exe
3252	msedge.exe
3252	msedge.exe
3252	msedge.exe
3252	msedge.exe
3252	msedge.exe
3252	msedge.exe
3252	msedge.exe
3252	msedge.exe
3252	msedge.exe
3252	msedge.exe
3252	msedge.exe
3252	msedge.exe
3252	msedge.exe
3252	msedge.exe
3252	msedge.exe
3252	msedge.exe
3252	msedge.exe
3252	msedge.exe
3252	msedge.exe
3252	msedge.exe
3252	msedge.exe
3252	msedge.exe
3252	msedge.exe
3252	msedge.exe
3252	msedge.exe
3252	msedge.exe
3252	msedge.exe
3252	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 3252 wrote to memory of 2768	3252	msedge.exe	85
PID 3252 wrote to memory of 2516	3252	msedge.exe	86
PID 3252 wrote to memory of 4776	3252	msedge.exe	87
PID 3252 wrote to memory of 2516	3252	msedge.exe	86
PID 3252 wrote to memory of 2516	3252	msedge.exe	86
PID 3252 wrote to memory of 2368	3252	msedge.exe	88
PID 3252 wrote to memory of 2368	3252	msedge.exe	88
PID 3252 wrote to memory of 3192	3252	msedge.exe	89
PID 3252 wrote to memory of 3524	3252	msedge.exe	90
PID 3252 wrote to memory of 3192	3252	msedge.exe	89
PID 3252 wrote to memory of 3192	3252	msedge.exe	89
PID 3252 wrote to memory of 3524	3252	msedge.exe	90
PID 3252 wrote to memory of 3524	3252	msedge.exe	90
PID 3252 wrote to memory of 1996	3252	msedge.exe	92
PID 3252 wrote to memory of 4808	3252	msedge.exe	93
PID 3252 wrote to memory of 1996	3252	msedge.exe	92
PID 3252 wrote to memory of 1996	3252	msedge.exe	92
PID 3252 wrote to memory of 4808	3252	msedge.exe	93
PID 3252 wrote to memory of 4808	3252	msedge.exe	93
PID 3252 wrote to memory of 552	3252	msedge.exe	98
PID 3252 wrote to memory of 4128	3252	msedge.exe	99
PID 3252 wrote to memory of 552	3252	msedge.exe	98
PID 3252 wrote to memory of 4128	3252	msedge.exe	99
PID 3252 wrote to memory of 624	3252	msedge.exe	102
PID 3252 wrote to memory of 1680	3252	msedge.exe	116
PID 3252 wrote to memory of 2392	3252	msedge.exe	117
PID 3252 wrote to memory of 2160	3252	msedge.exe	118
PID 3252 wrote to memory of 4760	3252	msedge.exe	121
PID 3252 wrote to memory of 4760	3252	msedge.exe	121
PID 3252 wrote to memory of 5096	3252	msedge.exe	122
PID 3252 wrote to memory of 5096	3252	msedge.exe	122
PID 3252 wrote to memory of 4308	3252	msedge.exe	126

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\strategic-conference-brochure.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x290,0x7ffef14ec188,0x7ffef14ec194,0x7ffef14ec1a0
  2⤵
  PID:2768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1624,i,15023999296675060376,9739774480509323499,262144 --field-trial-handle=2260,i,7805493298117684255,6664830877633627919,262144 --variations-seed-version --mojo-platform-channel-handle=2256 /prefetch:2
  2⤵
  PID:2516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1940,i,1841028652699629697,16056200682288867455,524288 --field-trial-handle=2260,i,7805493298117684255,6664830877633627919,262144 --variations-seed-version --mojo-platform-channel-handle=2296 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2600,i,13111209119627459668,11522180662229877582,524288 --field-trial-handle=2260,i,7805493298117684255,6664830877633627919,262144 --variations-seed-version --mojo-platform-channel-handle=2732 /prefetch:8
  2⤵
  PID:2368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3432,i,12567572728107647101,11733820657482578072,2097152 --field-trial-handle=2260,i,7805493298117684255,6664830877633627919,262144 --variations-seed-version --mojo-platform-channel-handle=3460 /prefetch:1
  2⤵
  PID:3192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3436,i,10963432171466996210,3224482687658023594,2097152 --field-trial-handle=2260,i,7805493298117684255,6664830877633627919,262144 --variations-seed-version --mojo-platform-channel-handle=3468 /prefetch:1
  2⤵
  PID:3524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4216,i,2854073099668308106,4090546021882818068,2097152 --field-trial-handle=2260,i,7805493298117684255,6664830877633627919,262144 --variations-seed-version --mojo-platform-channel-handle=3412 /prefetch:1
  2⤵
  PID:1996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4232,i,213887905021442736,14565874131059324381,2097152 --field-trial-handle=2260,i,7805493298117684255,6664830877633627919,262144 --variations-seed-version --mojo-platform-channel-handle=4244 /prefetch:2
  2⤵
  PID:4808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3580,i,3224961052957187196,8866979444628068708,524288 --field-trial-handle=2260,i,7805493298117684255,6664830877633627919,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:8
  2⤵
  PID:552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3612,i,14687290323417772062,9965147241296568303,524288 --field-trial-handle=2260,i,7805493298117684255,6664830877633627919,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
  2⤵
  PID:4128
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5824,i,7301655176891341986,3984690180907474188,524288 --field-trial-handle=2260,i,7805493298117684255,6664830877633627919,262144 --variations-seed-version --mojo-platform-channel-handle=5852 /prefetch:8
  2⤵
  PID:3440
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5824,i,7301655176891341986,3984690180907474188,524288 --field-trial-handle=2260,i,7805493298117684255,6664830877633627919,262144 --variations-seed-version --mojo-platform-channel-handle=5852 /prefetch:8
  2⤵
  PID:624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4532,i,17718916633008791302,8783429519426022122,524288 --field-trial-handle=2260,i,7805493298117684255,6664830877633627919,262144 --variations-seed-version --mojo-platform-channel-handle=5988 /prefetch:8
  2⤵
  PID:1680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4360,i,11915298322879963717,7223525131616917467,524288 --field-trial-handle=2260,i,7805493298117684255,6664830877633627919,262144 --variations-seed-version --mojo-platform-channel-handle=4340 /prefetch:8
  2⤵
  PID:2392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4316,i,1218980789609987024,2626783378395629211,524288 --field-trial-handle=2260,i,7805493298117684255,6664830877633627919,262144 --variations-seed-version --mojo-platform-channel-handle=6384 /prefetch:8
  2⤵
  PID:2160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5980,i,1109138437793039817,5388636158392575723,524288 --field-trial-handle=2260,i,7805493298117684255,6664830877633627919,262144 --variations-seed-version --mojo-platform-channel-handle=5412 /prefetch:8
  2⤵
  PID:4760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5952,i,8774342863691274386,2571916037330023030,524288 --field-trial-handle=2260,i,7805493298117684255,6664830877633627919,262144 --variations-seed-version --mojo-platform-channel-handle=5936 /prefetch:8
  2⤵
  PID:5096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=772,i,5096772423134162168,10254468227396030248,262144 --field-trial-handle=2260,i,7805493298117684255,6664830877633627919,262144 --variations-seed-version --mojo-platform-channel-handle=6180 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4308

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5080

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 61a97be736e0441d45644d31b38bd9bef6c1bd260fa1ecbb5d099fa493fee6b4
MD5 99bbd8400adc948f85ebd87cb24b3fcb
SHA1 c8fb9564ede7ecb06cef446bdb527025127a796e
SHA512 75b3ee70eca487cbbfb3d5b4b25bae158ff99188ab36d55f391e9f80c51ce9fa433897d79a0ae37ad64698bc3eb5aa9a10a49116fb8f7f35ed0a6e98aa8321b7
TLSH
T109D022C8F2A0300CE00C3233A02BCE022B88CEA8F0032BCA000E8C80E8800C80CF2C8E
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 87a6b56b3a47cfd9f58f49b21d0040033c8cfd80b50e49b434794cefa7e29583
MD5 74ef2da89fa243ea7d0030317efca192
SHA1 ceb38f6fe8b62f80d617114db8b4617467417ae3
SHA512 285847f78095225db6f446ab877593c3e8e9c642b3beec1b15e7b1eec59d6b2f61ada0e2fb96cf36a3046dbd5102c274473cea5f978ee83b010039a4dc00d05d
TLSH
T10DD024C471D0340CD40C31335015CD011744CD54F00317C7000D4C40C4400C40CF1C4D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 a2ef1e2c6d96d9eba99cab3a661a561675fa7b28ab1f12117ffdcc03cc067a76
MD5 83a53754701fc6dc12ed71fbe05f6b73
SHA1 6139f86f00442f08e72af916d5ec1d6502f63c00
SHA512 7e11c019ddbe0b85ee8d838016e52f805a1eebd2926dea8d3bcda146ca27ca711a6566b01ff258accb58282299a77f56563290026adc97784b6ed2fd263cf818
TLSH
T17161B5A35A4460DEF7AAE577B3E5219B3E70C08091832DD21E58D4B758C63FF518ADB0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58da3e.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58da3e.TMP
Size 3KB
SHA256 194e655388866517c2c3b0cf1f65eefbd4a59cbbc727f4ecd14e53ffd07b5265
MD5 5a279ba0cb4300281b057c2add8ca5a6
SHA1 27e792b05f5783a6c4b6948892c9f818f516df48
SHA512 e4567c1f9d1bb40bb43330d81a78ea8c9e4898e18c3cd27022c4a7ca15ef1cdbaab8db362db86783253258b79907083d4dd28a4dbd00f5d70706ef8a0a914a74
TLSH
T12761A4A35A4060DEF7AAE577B3E5219B3E70C08091832DD21E58D4B758C63FF518ADB0
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 55913067a7765e43d81f74a2ecd9d876ad464fd0e2cccc58d4aa5044bbcc415a
MD5 f4e53775ac80beaf3658ef31e6bc0d95
SHA1 e2627305dce58bcb787a00ecb55a85274018adbf
SHA512 04c3bce57a2f0ba4f6966c4091a098157aa626aa598973462e8c86807b838b32b99ccaadf337aedb983c8139547efbdf70b8410d4f47b96561208ac90bc82d68
TLSH
T15A117DB3C3D585AE891156F05A28AE2BDE2D0605421C7C1985D4EF27D3E3475E00159F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 7be4ed4cd6c8f9ebe95258dd5f34d5f034697dacd0e65256c77b3608a7c99b49
MD5 ef84d6a1ee5c4b307e7e07e0d61c50bb
SHA1 38addd6ce62b8c53abc93b9635a8e9024351d84e
SHA512 f99589205bea778576ca2c24b3e04ca5637071010406c6342cfd3fa661faa10b6f28b3924fc92beba9a2458a9f3890ab8940e85e223fd47b632b3445da1987db
SSDEEP 192:sxZhR0WD/frsUyneIdpdoHW6+WNGYaQDWIgrJ:sxZh1D/frsUynPyHbGD9
TLSH
T1C012B8516E28B97B8CCBD20DBA15BF53E6F9503291951E88EAFC861C05E7ADD130780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 babebfe5020d53df6d8bd9b7f3295237c147bc8ac55e1a2881f7c3336fdd2f58
MD5 32c49caed6313ab55768eddbc2c3494d
SHA1 3c98907d59cb56ebfd2513ada8d2f9d33c647bda
SHA512 4c9346d998bbf5b9e0aa527931e9ab8e6f704754c3ef58cb81cf2d1e86b08b921dc0243b2ccb87e41144458f93f8f50924ab546e7f6ca51fe4d254167b1463df
SSDEEP 192:sxZhR0WD/frsLayneIdpHoHW6+WNGYaaDWIg5vJ:sxZh1D/frsmynPIHbG97
TLSH
T13522C9516E28A97B8CCBE21DBA15BF53E6F9503291911E88A6FC861C05E7BCD130780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 a8e526fd1e18b0dde6549f675e5370e974637d2d4bfe1e632de877704fb7acb8
MD5 cb426d0e1742f74a5e8f59a32cd2d323
SHA1 2844fe7fb09bf1b0f5a32c04506d916de07f55e6
SHA512 ce81cd0c96076b53c199e4befe56174c0aa130c49138efbac27b0fc8fe0087bdad92cdd3175f71c35aeb346e4083db103031a9c5058856ac4a3e831ac271ba3e
SSDEEP 192:sxZhR0WD/frsyyneIdpdoHW6+WNGYaQDWIg5FJ:sxZh1D/frsyynPyHbGDV
TLSH
T19F22B751AE38B97B8CCBD20DBA15BF53D6F9503191911E88AAFC861C05E76CD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 171f665f4cedb75895311065d5ea2aec567779d6166ef011e4ca25f69cac8c2a
MD5 a8b91a6dbd3506bca8fe892031bf1146
SHA1 ba7bfff4aa12b297928e1437f1e1c769cf3934d9
SHA512 a32c4219fca28dcf233efbef5a51f0c5be9333f37e8a0fd8be85a31148f800d6a19679e00b534dddf3b7a64086b648f4ae3fbf5204a3fbf4de6ba9b1d07a4fb2
SSDEEP 192:sxZhR0WD/frsLayneIdpdoHW6+WNGYa7DWIg5vJ:sxZh1D/frsmynPyHbGm7
TLSH
T1E722B9516E28A97B8CCBE20DBB15BF53E6F9503251911E88A6FC861C05E77CD130780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 2968e38b489faa207f12d1521983bc2283913b6692ddf326c73932c0b1ae1c13
MD5 0e98e9ff93054b1a474eb7d8197b707b
SHA1 c30e9c30cec5f246c54f60d0f1091a353e3800c0
SHA512 a933f67031983a13ed98982271bb33960bd25304b8f131b21e955a3420070ef48dada46bbc39c6426824f2c5542790433daf77697f5ee716c9372c21cdd61535
SSDEEP 768:3EyQRbrWvvlpZ8F1+UoAYDCx9Tuqh0VfUC9xbog/OVaKLlRXH39roZZYC:3EyQRbrWvvlpZu1jaXKLf332ZZYC
TLSH
T150C2F93B640CCB7E4FC01E9DDC6A6F976EA802C766588D4447FA984C02C77EE512A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 967B
SHA256 77ba3064d68c0733bc933e8d6fb7d987c5b7fe0ef7478a16918d9701e8a5bee8
MD5 9d7e905763e05d8f2bdd938ee754da23
SHA1 5bce9b5f525e99337194b7c84dd80fae96561eaa
SHA512 da957536b1447bb2144fde528508f6102d3c0f917456ee9d479d25d7941b31ebfb2aad5882fa0be6ce7caac45adcf521fd5ba6a4165d38e16d1c543ea0a3a642
TLSH
T106114E12712A05C03C7D2608895BC61E8A4B75F13414E91FBFBB40F60BA6A084FBC7D9
MD5 SHA1 SHA512 TLSH

Submit Download

eb5e127f-5364-4da9-8a85-91df8999d8fe.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\eb5e127f-5364-4da9-8a85-91df8999d8fe.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 5143957c628bb105497ddd11ee354552b6e48ec95ca96b7ea2799f6a57a5c8c4
MD5 f1b69f91f4bda0461495032b8d943c8a
SHA1 591f28302091a523de95a7bc0e832423131b210c
SHA512 fb4d06449d9e86ac0704e258b3738fa8da4a1329b3051087c35eafdb9ad88ba29679d971f4a1c76e54e70fb4431308bf2a2fb6404659dd4090bd5c2fcd3ea05c
SSDEEP 384:AiFiZcIPzsNp8TUNTUlIl0PhsJjp5u8imn4la6ptgOIwZOyGYoR:bFQrwwgIQLkmP6pXswO
TLSH
T196A26C7348A8987F6DFB9B51F64B32138FB4406BD7C5AA84E6DC9A1D01A71D8030BD52
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 56b2633795cda9e3fa3e52ffb0d809f583752dafbc9a9e2020c4f9577fbdd70f
MD5 f671b9df654bec7026f3706609f1c5b8
SHA1 cddb9cd8d9cb8328b6c9ceed48557bf3936063b8
SHA512 4568d9a195d38594ae9436ec271883ffdb306c21b83c48ccf418cef325ecd0208419453ad4ea90bbb0e2f220512d0409fb3de7c7fe8c5da2845df0a89637e2a3
SSDEEP 192:SONA6iDCQmiUypDHq5u88PPuhYY7SqKrKU6:SONA6/QHq5u8imnhZU6
TLSH
T12F02E838AC687C7B9DE3AD15B5877B135FA4013FE7951B84D9E81A2C01E768C1303923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 b92a4b74c198c9e8821ccab23b8bdc235feffca8f684b1cb00012163bbe991a5
MD5 6a05ea3ef190b8696520b5859e72db4f
SHA1 0a2895171fe75e76f110915be61081bedd43bbcb
SHA512 ed9830647ee021b9860145424ed1172b370ad3835933ec8b3f271f908951a146ca483e426bdbcf2b7b4629b0d828575597f2be0b519815519a670783a21af27c
SSDEEP 384:KZcIhsNXPPhsJjp5u8imn4laXptgOIwZOyGYoR:oh4QLkmPXpXswO
TLSH
T107827C3258B85CBA6CEBA251F58732139FB8402BE3C55FC4D5EDA71D02EA5E5030BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 6201624edd31f80898d5065ddde9074e180dd1bea47d04250d8251f89ec08491
MD5 4ca15ea1fc6318263991c42721a4cd7d
SHA1 4497ba74e42098245087316742b731c72d47bb18
SHA512 bc8b06ee67a990da11a7f9c23243d6c15c0beaf195bd9777b99e606704d5bf977f53285217ec07d5d39e2624b9729489e138df87673aef49ce7eddbd0dc9bb7f
SSDEEP 192:SONy6iD9QmiUyTDxq5u88PPuhYY4laeuZZqsU6:SONy6eoxq5u8imn4laBpU6
TLSH
T135124B356878AC7B6DE3A960F44336239EA4412BE7896F80D5DD2B2C02EF59C1307913
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0b0a1f0b-e009-4a0a-b148-f0c8126e640f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\0b0a1f0b-e009-4a0a-b148-f0c8126e640f.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

f807fda5-f724-401c-a8ac-5d8345d123d6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\f807fda5-f724-401c-a8ac-5d8345d123d6.tmp
Size 18KB
SHA256 50311b3b0d4e04e89d17ca68b10582af9710f33d53b38c052f623ac5a6297a7b
MD5 a89f45cb4c98ee4607ee57a59f1af50c
SHA1 5a8b004bc6dd0371e7a4014618de84a2e01e586b
SHA512 d18662e6e04c9af2ec5f80af76daa651355e94f8d06478ccc477ff69ee3651d101ac0e6eed04cd15d9226e9f34ad630c6627ca2f94c541a3279a8cb918a91509
SSDEEP 384:fZcIhsNX0PhsJjp5u8imn4laXptgOIwZOyGYoR:3hjQLkmPXpXswO
TLSH
T1C7827C7258B85CBA6CEBA251F58732139FB8402BE3C95F84D5ECA72D02EA5D5030BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 f90e04eeac04aa5b962486ccb9a1941e91f35a2cd81cd494845bf5c1e4361eba
MD5 865ec52b59635b88e87d66ab9c74a6c2
SHA1 50e57f357393737a0d718774d1ddcc99a88b0656
SHA512 9807d66c0832b4ba9cafe10b332d3ae90520a48625f9a4c25b0c1b54a8c47c8fd2dffe9a23e84b3419e82e7d2c2e2d6ed7e62c1ec572c21d25e657efd146c4f0
TLSH
T121412B68AAE91148B3B66F55AFF6A46E487ABD772F06D59D00010D4F0A73B00C9B1B37
MD5 SHA1 SHA512 TLSH

Submit Download