ccde54317343ebacd6da2afde0b4007f766b637b1ba34510c74de49797553d77

Analysis

max time kernel
148s
max time network
140s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/09/2026, 12:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
attachment20260930-1253-c1jgj1.html
Size 116B
Sample260930-pm36fsfc73
SHA256 ccde54317343ebacd6da2afde0b4007f766b637b1ba34510c74de49797553d77
MD5 0e2f15dcf7166552e959f0ddb363e706
SHA1 642e84dc85171feae5dbbb9727736ee1424a232c
SHA512 2a659912d4f25102f996a71566eca6840ac2b3271147c266d9836f2fc5785b4b514e248b396d62b7504556f50046f7610023adc8c55c2c9b9a8ec715c29ce525
TLSH
T122B0125F120702053D601D527DD3375714174B9E01A969E01267C9FECCCB9B2EE4739C
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4284	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-895009113-1202185046-1686627690-1000\{8BE14D3F-99AC-4D97-8676-823812581804}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4344	msedge.exe
4344	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe
540	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 540 wrote to memory of 4728	540	msedge.exe	86
PID 540 wrote to memory of 4284	540	msedge.exe	87
PID 540 wrote to memory of 2212	540	msedge.exe	88
PID 540 wrote to memory of 2212	540	msedge.exe	88
PID 540 wrote to memory of 2212	540	msedge.exe	88
PID 540 wrote to memory of 4584	540	msedge.exe	89
PID 540 wrote to memory of 4584	540	msedge.exe	89
PID 540 wrote to memory of 3152	540	msedge.exe	90
PID 540 wrote to memory of 2392	540	msedge.exe	91
PID 540 wrote to memory of 3152	540	msedge.exe	90
PID 540 wrote to memory of 3152	540	msedge.exe	90
PID 540 wrote to memory of 2392	540	msedge.exe	91
PID 540 wrote to memory of 2392	540	msedge.exe	91
PID 540 wrote to memory of 5020	540	msedge.exe	93
PID 540 wrote to memory of 4344	540	msedge.exe	94
PID 540 wrote to memory of 5020	540	msedge.exe	93
PID 540 wrote to memory of 5020	540	msedge.exe	93
PID 540 wrote to memory of 4344	540	msedge.exe	94
PID 540 wrote to memory of 4344	540	msedge.exe	94
PID 540 wrote to memory of 2656	540	msedge.exe	100
PID 540 wrote to memory of 2656	540	msedge.exe	100
PID 540 wrote to memory of 2496	540	msedge.exe	101
PID 540 wrote to memory of 2496	540	msedge.exe	101
PID 540 wrote to memory of 1364	540	msedge.exe	105
PID 540 wrote to memory of 4924	540	msedge.exe	113
PID 540 wrote to memory of 1684	540	msedge.exe	114
PID 540 wrote to memory of 4888	540	msedge.exe	115
PID 540 wrote to memory of 4636	540	msedge.exe	123
PID 540 wrote to memory of 4636	540	msedge.exe	123
PID 540 wrote to memory of 3920	540	msedge.exe	125
PID 540 wrote to memory of 3920	540	msedge.exe	125
PID 540 wrote to memory of 4344	540	msedge.exe	126

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\attachment20260930-1253-c1jgj1.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x24c,0x7ff9e5fbc188,0x7ff9e5fbc194,0x7ff9e5fbc1a0
  2⤵
  PID:4728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1940,i,11893111988738611338,14371272669085559040,524288 --field-trial-handle=2280,i,16931932844466847861,15267162640044820309,262144 --variations-seed-version --mojo-platform-channel-handle=2316 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1704,i,14879243413336899294,1840802183578805206,262144 --field-trial-handle=2280,i,16931932844466847861,15267162640044820309,262144 --variations-seed-version --mojo-platform-channel-handle=2276 /prefetch:2
  2⤵
  PID:2212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2596,i,114585766558224556,7360405594861696809,524288 --field-trial-handle=2280,i,16931932844466847861,15267162640044820309,262144 --variations-seed-version --mojo-platform-channel-handle=2568 /prefetch:8
  2⤵
  PID:4584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3440,i,16178068940305792974,12199562869030207475,2097152 --field-trial-handle=2280,i,16931932844466847861,15267162640044820309,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
  2⤵
  PID:3152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3468,i,11105408474603648551,10220810237426622725,2097152 --field-trial-handle=2280,i,16931932844466847861,15267162640044820309,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:2392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4256,i,2945581269147061343,10929489026189534983,2097152 --field-trial-handle=2280,i,16931932844466847861,15267162640044820309,262144 --variations-seed-version --mojo-platform-channel-handle=4304 /prefetch:1
  2⤵
  PID:5020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4276,i,10970417314217969013,5553028665103927890,2097152 --field-trial-handle=2280,i,16931932844466847861,15267162640044820309,262144 --variations-seed-version --mojo-platform-channel-handle=4308 /prefetch:2
  2⤵
  PID:4344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5084,i,17748666512709226879,13295145692400741846,524288 --field-trial-handle=2280,i,16931932844466847861,15267162640044820309,262144 --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:8
  2⤵
  PID:2656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,134291399880853080,4449566122982070385,524288 --field-trial-handle=2280,i,16931932844466847861,15267162640044820309,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
  2⤵
  PID:2496
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5888,i,9163236826196485966,453767106556907682,524288 --field-trial-handle=2280,i,16931932844466847861,15267162640044820309,262144 --variations-seed-version --mojo-platform-channel-handle=5908 /prefetch:8
  2⤵
  PID:2976
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5888,i,9163236826196485966,453767106556907682,524288 --field-trial-handle=2280,i,16931932844466847861,15267162640044820309,262144 --variations-seed-version --mojo-platform-channel-handle=5908 /prefetch:8
  2⤵
  PID:1364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4544,i,6810414877351733795,6485027379839017358,524288 --field-trial-handle=2280,i,16931932844466847861,15267162640044820309,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:8
  2⤵
  PID:4924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4548,i,12882089211375212442,12447789038998788465,524288 --field-trial-handle=2280,i,16931932844466847861,15267162640044820309,262144 --variations-seed-version --mojo-platform-channel-handle=4524 /prefetch:8
  2⤵
  PID:1684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4532,i,14915380078182942505,7925602243848174066,524288 --field-trial-handle=2280,i,16931932844466847861,15267162640044820309,262144 --variations-seed-version --mojo-platform-channel-handle=4308 /prefetch:8
  2⤵
  PID:4888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5436,i,12648289626673115896,14055642462589955707,524288 --field-trial-handle=2280,i,16931932844466847861,15267162640044820309,262144 --variations-seed-version --mojo-platform-channel-handle=5444 /prefetch:8
  2⤵
  PID:4636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=748,i,43958035842993807,2911717020132638203,524288 --field-trial-handle=2280,i,16931932844466847861,15267162640044820309,262144 --variations-seed-version --mojo-platform-channel-handle=5760 /prefetch:8
  2⤵
  PID:3920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6136,i,12555965462855759222,8058828877168961683,262144 --field-trial-handle=2280,i,16931932844466847861,15267162640044820309,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4344

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2456

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 928eda824fe964cd23927cf06086d7d24e20a3a5092daf1acee5b632c76c962a
MD5 4ac43ee6512ba8635b7ba6bd015c291b
SHA1 5f9e2474b00ec0e2a9472c049fbea550e26309aa
SHA512 e5ebf9e92458f66e31e080121135313e828b8ebade0bc0e085221ae0d4f5afe0d2035c566590cbfb5902d96f17befe7b24310b4fb9e647b999113175af800ebc
TLSH
T17BD022B2B3A038CFE300083302A083BA2C0A80F300FAE2208C30E08C0BCC02AC283880
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 93c2ca3ce74eca17f27aa90cc3323bb8d6aea5c365862a01a512ce14b9f825b4
MD5 e8a3239e6b22580d77fb537c7bea1fab
SHA1 a99ffe9234c27e560f1c607d3b6c6507928368a3
SHA512 17b0e6f99943a02540148a685b91c62eafca3ef65d9a628bfb59d3b69a93b27c7d3ac42bdc808c52b5b1eac9bf4466a1099df17cd3f5df0bbd5b5282ca8b904e
TLSH
T170D0247133D03CCFD7000433015043751C0540F300F5D3104C30D04C07CD055C143440
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 8afd40fa9a60f9d55140962144514ed24eadb85a4db09361ff6179081fb8ace7
MD5 2b86f4e34d264d43696cb2fc0103f3d9
SHA1 53ac4e0ed55b6d7dfcf69ecb8d7ba85f2c918b91
SHA512 d62e4c4276935473f62dbbf00bdcbe97f26eaf86858927288380834c121c89f96dcd73bb29a204ff11e09cf9850fe5ec8a7732c5ecd8048bdf03a444750ae0f2
TLSH
T16161A6808C80C1D9F3E06373A1D72CABB1BA50C11DAB0EA1597EEDFD8846F165684E34
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58ac77.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58ac77.TMP
Size 3KB
SHA256 48fc2922e16f74d75471c9132dded5fe324fb0e93febb26883005f01c9597542
MD5 c57210ded1eb78aaa18f34cdb88e936d
SHA1 e00accf44726ede228fb787a6615b00bfef131d0
SHA512 d2f05b920d03ff4096830bf4385c4ddd12def30c67c1cdcdcef703975046189b64ce28207f4e5b66b10a321b20e1e59199035bff7391b19cbd33d890db6a8046
TLSH
T1376198808C80C1D9F3E16373A1D72CABB5BA50C11DAB0DA1597EEDFD8846F1656C4E34
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 733B
SHA256 7ed5f69bf411ff98b786ef54d0e70cd827545fefa60b0111ea21726bf287df23
MD5 b78affd9ac45f89994e6911bdf4a8b87
SHA1 35572157e9c9c2bf0e5193df6cd1842470434433
SHA512 33a58040b36beabcf28498807334e304da5e5d2f4036f02d2f0646bd7fb05f7ea9ac96bc3cc762995abdd92be5fc695b13c99b2250158d3046afabf41ff9edc3
TLSH
T1BE019CB3C3E595AE8E0056F06A18AE1BCE2D0602431C7D1AD5D4AF2B93E3475E10189B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 0db48128019ce605e5b7e3f7b193bb6a0d34e33fb078e0df71dbab8da84e95cc
MD5 ff4d69a0c55e269ae28115ab3a0b231f
SHA1 2e9a84a4922f7d7d365148f160873ffa9e65ac85
SHA512 5a42fa9b3c85d478f948190a0d2d3ed8b907ed9eb2ca63cbb6ad4540a7480f16ab3d0b25f20faf32aabb9d99e01bf1d64454b927022a1616200cfac688ed48ee
SSDEEP 192:sxZZRHW9/fGsR7IdpdAHW6+WNGY36agBIgrJ:sxZZQ9/fGsRk6HbGX39
TLSH
T16912C8516E28A97B8CC7E20DBB25BF13E6F95032A1D51E58EAFC861C05E66DD130780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 ec8423204c0c528fe6a7c8e87f240de7b46f4b116339a9cd26c5a0e0ae735d1c
MD5 c96b004ccc014c24cf3f9bf11c036745
SHA1 ad3da1ecfbb3e6ac9456a1ee1b840555321b5d27
SHA512 653c4dff3c3c39ea905822aa7b3539d0e676d2c7830188c3fb0d652089c778b6f9d24e783db46273047ed17dc6ef57334543b2fffac20d9a68073de9d370894f
SSDEEP 192:sxZZRHW9/fGsa7IdpHAHW6+WNGY363gBIg5TJ:sxZZQ9/fGsakgHbGX0T
TLSH
T1B422B8526E68697B8CC7E20DBA25BF53E6F9503291D11E48A6FCCA1C05E76DE130780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 4aaeefe85fa4376e6abf5c17c8077be85fc975eb33ebbcb736c242c56de65289
MD5 0ab2f6a75d8c84a5c4e78613180ec4da
SHA1 09b68ef89e7ec2598463e950dfae5fb2e8fc61f5
SHA512 c436b40b074409a6b9ddeb0b20478807b75cdb1f6564becc51235daaf8188612893f9b739de34900cbd894561a83108d674ef08625862be20458563302a1f7d6
SSDEEP 192:sxZZRHW9/fGsa7IdpdAHW6+WNGY36PgBIg5TJ:sxZZQ9/fGsak6HbGXsT
TLSH
T10822B6526E68697B8CC7E20DBA25BF13E6F9503291D51E48A6FC8A1C05E66DE130780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 99451470b7878e38496833b81d1eb0095625a377e7bd119cff9639b32334cd20
MD5 74a79cf5517541cec509779b85fccc2a
SHA1 d8ef5c32095a523af02ca0c0f2fd0c2741715fde
SHA512 44e24d4aec9d7ed43db4564446bb9fa7dd84bd119388cfaf77bddcac121b9a853c4bdccc08cae98c01c72e2a80354c002d6acb2ef8ba7549675be6b46d111666
SSDEEP 192:sxZZRHW9/fGs07IdpdAHW6+WNGY36agBIg5pJ:sxZZQ9/fGs0k6HbGX3d
TLSH
T11922C8526E68697B8CC7E20DBB25BF13D6F9503291D11E48E6FC8A1C05E66DE130780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 d76752eedfef15400996499cc6c63008d37dd05e36cf592a5018084b19e92aea
MD5 66ab78219830a61f2a9a43122469cef2
SHA1 6f78ba48774c59b6aaaa65392a1d2388401e0118
SHA512 256063bc8147701c65d618ba32867199368ad726a897abbd90ebf8ebf276e34a9bd85fa8cd56cdaedbd7ffaa05199b7d0f546fbc15581c480ef5e7d4bc11dd5a
SSDEEP 768:sKKlm7QWvUYe08F1+UoAYDCx9Tuqh0VfUC9xbog/OVh/LlpPs/aro6K:sKKlm7QWvUYe0u1ja8/L/E/R6K
TLSH
T10FC2FA3B640CCB7E4FC05E9DDC5A6F976EA802C7A6588D4047FA984C02C77EA91264DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59477f.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59477f.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 c77c69891c70ae959aa651bf9d5bdd3be787c911c4fdb546c54ab2fb3b530daa
MD5 5060dbfd72583d47965edbd5e86b8b4c
SHA1 c53dd82adef62301a17d1edf6882ec56e891ad3d
SHA512 95cdc58cc3e820ef901a63a119ebc663524be5329cd7ec11a8baf65afec2ba0b241a64b1c3facc02f7b32fab452813555409830b2fd47da866ee105e1ec6331c
SSDEEP 384:RUZcIhsNl+NTbU1Qh//YhqPtgOIwZOyIroi:RShBcs/Q8PXsRx
TLSH
T187827C725CB8ACB76DE79140F04B72038EB48067D6C59F84D5EDAB1D02EA1A91307D17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 68768fd2709accc11d28656d2e0b2683f3e6e3fd671fbbb2f348a87523cfe993
MD5 b5ed4bc91ec6224522ee39441530e103
SHA1 50e9f911666a633d4e09fd54b5a528f5e982c328
SHA512 07b29ccf4770e653c3930d9452f97a4dc00b87c90507029a31db89095bedb29a3c6518e8cd74f1c9432d1cc66d9d48702835ecc3bce6d1952a6de2bf10689704
SSDEEP 384:V2iFiZcIqzsN/8TUNTUlIlvNTbU1Qh//YhgPtgOIwZOyIroi:VdFQiCwgrcs/QWPXsRx
TLSH
T1FAA27D735CA4DDBBADFB9A44F54A72038EB440B7C6C1AB94E6DDAA1D01E60E80307D16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 8e5fae6ec9dfc940b700d4d81b7aa781467bea6314f27ed702bbc2ed7bfeae72
MD5 e0613c5628d52d92face1866d8983790
SHA1 a15e7880ccc05e9361fca7a1366d1bd413b35b80
SHA512 034ebab05a6cfa22b093dabea475c4de58210f6729d80c827555ee0511b271989e2b4f3b203fdb325ad55e2b16c107ca38d5ed26fb7b98edb1462b5137688814
SSDEEP 96:KqONkrQsjpfbUmjH5ih/cIPURHl8h4otop5waD2BKP4v+Y1xf//ojdoxTeYzqsod:BON/6JUm0QmiUypmso//YpBCM1EYU6
TLSH
T1C102E739BC78BCBB8EE3AE45F48777239FA4106B96915F44DAD82A2D01D725C1303C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 8d290fa9d494d36324053e5d7c250a1f7181fc8050a44e00fa0b6fd316e2e7f1
MD5 7f5e82020b48b2bd440dd8030b20fe86
SHA1 f40905874772bd42d2439dbb9db79b242ba4871e
SHA512 aaebb5bbf15afbb96765a69e2df9566baf20cdc93c5d593bc43b7510303828d688ad837348039e53c4b49d1d2c5b1e8589e8a28c6f658ce93af963bc4da4cc04
SSDEEP 384:tUZcIhsNlvNTbU1Qh//YhqPtgOIwZOyIroi:tShCcs/Q8PXsRx
TLSH
T1D3828C726CB8ACB75DE7A140F04B72039EB4806BD6C59F84D5EDAB1D02EA1A91307D17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 c7b1fecc1a9ed2fa21cb4e2baf5825250dbf5e23b355532b5cbd07afc0c0ee8d
MD5 f5a2a34cf53adf0c8acff6252bbf3a9d
SHA1 0307cccecdbf4ff0e0cdb8259edfc9ffa20800b9
SHA512 a5d0c71db0a7bc163226e0cb20a70c7312a75ef60b56799eda07598d6b0961164a9be9abaeb69665050823bf7cb2f737944d2e4220d34fc655d825c86c201e31
SSDEEP 96:KqONkoQsjpfbUzH5ih/cIPURHl8h4otop5wiD2BWP4v+Y1xf//ojdoxTeYzqsoVJ:BONg6JUkQmiUyrmQo//YhvNx6qHU6
TLSH
T106120735B878FCB75EA3A580F08736238EA44167DB856F84D6DC2B2C06DB1AC9307C12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4af53c7f-a9f7-4c31-a896-eff5419d5cd8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\4af53c7f-a9f7-4c31-a896-eff5419d5cd8.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 20f71ad45d2658df45e0ec76db4fb2f21c2cd1b805b8a84c8baa4fa37a15d529
MD5 ae496ccb679c96f5ac31895df42ae51a
SHA1 26bb6a109262737f51d0ffa3aa2aa32ea681ea34
SHA512 c457f0b9381dc23fa6fc73504395d5a3dd1d1c9e307377e29afe64b318df16337edc34c9f4fbad64b346059b10536da2502c72f8f5768c6feaa7de5ad2e54b53
TLSH
T1C341F85CA6E91148B3B77F5AABF6696D487FB9372F06D45D00110E8E0A72A40D8A1B33
MD5 SHA1 SHA512 TLSH

Submit Download