ccde54317343ebacd6da2afde0b4007f766b637b1ba34510c74de49797553d77

Analysis

max time kernel
148s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/09/2026, 14:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
attachment20260930-1253-mijkzm.html
Size 116B
Sample260930-rsreysvgkd
SHA256 ccde54317343ebacd6da2afde0b4007f766b637b1ba34510c74de49797553d77
MD5 0e2f15dcf7166552e959f0ddb363e706
SHA1 642e84dc85171feae5dbbb9727736ee1424a232c
SHA512 2a659912d4f25102f996a71566eca6840ac2b3271147c266d9836f2fc5785b4b514e248b396d62b7504556f50046f7610023adc8c55c2c9b9a8ec715c29ce525
TLSH
T122B0125F120702053D601D527DD3375714174B9E01A969E01267C9FECCCB9B2EE4739C
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1880	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1846164713-4096795028-774071693-1000\{BAFDD2EB-37F3-460F-A2EC-44A3D50CCCA6}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4460	msedge.exe
4460	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3104	msedge.exe
3104	msedge.exe
3104	msedge.exe
3104	msedge.exe
3104	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3104	msedge.exe
3104	msedge.exe
3104	msedge.exe
3104	msedge.exe
3104	msedge.exe
3104	msedge.exe
3104	msedge.exe
3104	msedge.exe
3104	msedge.exe
3104	msedge.exe
3104	msedge.exe
3104	msedge.exe
3104	msedge.exe
3104	msedge.exe
3104	msedge.exe
3104	msedge.exe
3104	msedge.exe
3104	msedge.exe
3104	msedge.exe
3104	msedge.exe
3104	msedge.exe
3104	msedge.exe
3104	msedge.exe
3104	msedge.exe
3104	msedge.exe
3104	msedge.exe
3104	msedge.exe
3104	msedge.exe
3104	msedge.exe
3104	msedge.exe
3104	msedge.exe
3104	msedge.exe
3104	msedge.exe
3104	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3104	msedge.exe
3104	msedge.exe
3104	msedge.exe
3104	msedge.exe
3104	msedge.exe
3104	msedge.exe
3104	msedge.exe
3104	msedge.exe
3104	msedge.exe
3104	msedge.exe
3104	msedge.exe
3104	msedge.exe
3104	msedge.exe
3104	msedge.exe
3104	msedge.exe
3104	msedge.exe
3104	msedge.exe
3104	msedge.exe
3104	msedge.exe
3104	msedge.exe
3104	msedge.exe
3104	msedge.exe
3104	msedge.exe
3104	msedge.exe
3104	msedge.exe
3104	msedge.exe
3104	msedge.exe
3104	msedge.exe
3104	msedge.exe
3104	msedge.exe
3104	msedge.exe
3104	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3104 wrote to memory of 904	3104	msedge.exe	89
PID 3104 wrote to memory of 1880	3104	msedge.exe	90
PID 3104 wrote to memory of 3980	3104	msedge.exe	91
PID 3104 wrote to memory of 3980	3104	msedge.exe	91
PID 3104 wrote to memory of 3980	3104	msedge.exe	91
PID 3104 wrote to memory of 2464	3104	msedge.exe	92
PID 3104 wrote to memory of 2464	3104	msedge.exe	92
PID 3104 wrote to memory of 4768	3104	msedge.exe	93
PID 3104 wrote to memory of 3712	3104	msedge.exe	94
PID 3104 wrote to memory of 4768	3104	msedge.exe	93
PID 3104 wrote to memory of 4768	3104	msedge.exe	93
PID 3104 wrote to memory of 3712	3104	msedge.exe	94
PID 3104 wrote to memory of 3712	3104	msedge.exe	94
PID 3104 wrote to memory of 3460	3104	msedge.exe	95
PID 3104 wrote to memory of 3460	3104	msedge.exe	95
PID 3104 wrote to memory of 3460	3104	msedge.exe	95
PID 3104 wrote to memory of 5012	3104	msedge.exe	96
PID 3104 wrote to memory of 5012	3104	msedge.exe	96
PID 3104 wrote to memory of 5012	3104	msedge.exe	96
PID 3104 wrote to memory of 4868	3104	msedge.exe	101
PID 3104 wrote to memory of 5044	3104	msedge.exe	102
PID 3104 wrote to memory of 4868	3104	msedge.exe	101
PID 3104 wrote to memory of 5044	3104	msedge.exe	102
PID 3104 wrote to memory of 2460	3104	msedge.exe	106
PID 3104 wrote to memory of 3448	3104	msedge.exe	113
PID 3104 wrote to memory of 2176	3104	msedge.exe	114
PID 3104 wrote to memory of 2064	3104	msedge.exe	115
PID 3104 wrote to memory of 1120	3104	msedge.exe	124
PID 3104 wrote to memory of 1120	3104	msedge.exe	124
PID 3104 wrote to memory of 4460	3104	msedge.exe	128

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\attachment20260930-1253-mijkzm.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2b4,0x7ffe3612c188,0x7ffe3612c194,0x7ffe3612c1a0
  2⤵
  PID:904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1956,i,7252229266375901951,6759992610841027748,524288 --field-trial-handle=2304,i,4339197784735592412,12894198796458877740,262144 --variations-seed-version --mojo-platform-channel-handle=2332 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1688,i,11869124956188616923,18404041634832063226,262144 --field-trial-handle=2304,i,4339197784735592412,12894198796458877740,262144 --variations-seed-version --mojo-platform-channel-handle=2300 /prefetch:2
  2⤵
  PID:3980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2648,i,11482596601722795236,17889574132637909284,524288 --field-trial-handle=2304,i,4339197784735592412,12894198796458877740,262144 --variations-seed-version --mojo-platform-channel-handle=2856 /prefetch:8
  2⤵
  PID:2464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3460,i,14637586594327066999,2620160618047506736,2097152 --field-trial-handle=2304,i,4339197784735592412,12894198796458877740,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
  2⤵
  PID:4768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3464,i,12639221475621884214,14189069830107486217,2097152 --field-trial-handle=2304,i,4339197784735592412,12894198796458877740,262144 --variations-seed-version --mojo-platform-channel-handle=3540 /prefetch:1
  2⤵
  PID:3712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4212,i,7863550791040384053,4937051755459266518,2097152 --field-trial-handle=2304,i,4339197784735592412,12894198796458877740,262144 --variations-seed-version --mojo-platform-channel-handle=4240 /prefetch:1
  2⤵
  PID:3460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4224,i,10315751456289537253,7144994326848827215,2097152 --field-trial-handle=2304,i,4339197784735592412,12894198796458877740,262144 --variations-seed-version --mojo-platform-channel-handle=4244 /prefetch:2
  2⤵
  PID:5012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5140,i,8454440215350905320,916178883654906942,524288 --field-trial-handle=2304,i,4339197784735592412,12894198796458877740,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
  2⤵
  PID:4868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5096,i,1935375556638361455,3607103580361847504,524288 --field-trial-handle=2304,i,4339197784735592412,12894198796458877740,262144 --variations-seed-version --mojo-platform-channel-handle=5216 /prefetch:8
  2⤵
  PID:5044
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5576,i,16664931859166608761,8410351220203273022,524288 --field-trial-handle=2304,i,4339197784735592412,12894198796458877740,262144 --variations-seed-version --mojo-platform-channel-handle=5852 /prefetch:8
  2⤵
  PID:408
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5576,i,16664931859166608761,8410351220203273022,524288 --field-trial-handle=2304,i,4339197784735592412,12894198796458877740,262144 --variations-seed-version --mojo-platform-channel-handle=5852 /prefetch:8
  2⤵
  PID:2460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4564,i,4348913393465561595,9817210633847978664,524288 --field-trial-handle=2304,i,4339197784735592412,12894198796458877740,262144 --variations-seed-version --mojo-platform-channel-handle=3664 /prefetch:8
  2⤵
  PID:3448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4548,i,13787508554101243521,14688546643013384705,524288 --field-trial-handle=2304,i,4339197784735592412,12894198796458877740,262144 --variations-seed-version --mojo-platform-channel-handle=4536 /prefetch:8
  2⤵
  PID:2176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4552,i,9978970201992085972,7081960292989002349,524288 --field-trial-handle=2304,i,4339197784735592412,12894198796458877740,262144 --variations-seed-version --mojo-platform-channel-handle=5032 /prefetch:8
  2⤵
  PID:2064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5460,i,13653318458155982264,17150594584572006573,524288 --field-trial-handle=2304,i,4339197784735592412,12894198796458877740,262144 --variations-seed-version --mojo-platform-channel-handle=5164 /prefetch:8
  2⤵
  PID:1120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6064,i,7506036065014026187,18273933321500813401,262144 --field-trial-handle=2304,i,4339197784735592412,12894198796458877740,262144 --variations-seed-version --mojo-platform-channel-handle=5192 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4460

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2460

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d11bd63a3c8c3641d5bd4407fbf20115daee67c3050695788e54c8df9585c700
MD5 7aa846396cdcfea376b8811e8e19c8ac
SHA1 ec25e76211c784e758c9892460a28903222a2b23
SHA512 4816b3d9d1883ae78008726282d2a4c42f9b30d81ff004d60af22873868f3ccc332adb8973ee5a1ed3fdec5d56a832c2ead1cfe30616125d07466daec4eaf02f
TLSH
T17DD02203FF038A2CC8C00CB2002EC22C0F8AF8000A00B2C08030328BCC28B00B02EC88
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 8861a6cb4641409139127d6f761021f7af5e676d3740156dd520f23fcf0a5a9e
MD5 9bf88c9ba19d42b92f1c00dc1797fbc1
SHA1 3d9f1f235c45a9bbd9ab6931ed69b88a934ef7b5
SHA512 6a48dd5c9a7814a315a63a11d3a0053fe7097e100b2b025ad44c98020b0dc111c872fcc36fd7ea59c147a816c091eab5198184e3cc37a8b98e6b223235c4310f
TLSH
T12E41AA00DE907395FBE40675AEC41EC77AB69EAC91431F013EB8C1BA6A8EB5B7141C54
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 733B
SHA256 7b08aeb7d4db2e253b4f5e568fde470e1b680405efd5b042e656ad7976054832
MD5 69bc19f8c4addcbda60a455dbe1176a1
SHA1 1ae82cd1d6db592b1b53bf2718156a3d960f6c6e
SHA512 2c19c5f5f9263b90c5edfb609e8ffad982430499c3a43a3a021d21be836f0daf6278492854d186564edbd0268782331bab19094ba3e61e36cc571fea423a633e
TLSH
T1A80190F3C3E5996E8A0056F066189E1BCE2D0502431C7C59C5D4AE2B93F3475D10189B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 d7a165a16c8f1e92c5d394445d003f133c970a4c18a0781a4056ff8d98b22519
MD5 00ca1eda632075a70220a383718319b3
SHA1 5c2dd6e431111cb2ee08fbfc2f7b5d49c543a000
SHA512 8451fed341b5740011036ec17fcca359a99fd12661761c113aeeb67ddd0db4beb583ce507fdd511e4a373de244cc857ddde997ac1ff9811726f8f0ea43217800
SSDEEP 192:sxZVRHWT/fTsaAIdpdkHW6+WNGYYBaE+9IgrJ:sxZVsT/fTsaBeHbGfXe9
TLSH
T10422A7516E38B57B8CC7D209BB65BF53E6F9503261D01E98EAFC961C04E66DE220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 c623ebed272c3b53354674b0d4748db6cb75f3e29e51cb4a55b35bc1c0356af3
MD5 f2c45eb9fe5cd3fdb6ecd01e66a532ad
SHA1 33bb1010c8ee5e01e4aa4097fdbd16619051dc33
SHA512 d11344d0b1e64e2096fc98d2264d8187e4311ce99d4a41e0aa5b96823da399f268367fbb16ba4256de0bfc1541acc27fbfc01cc02b69d8afcdfe696720a0bad4
SSDEEP 192:sxZVRHWT/fTseAIdpHkHW6+WNGYYBkE+9Ig54J:sxZVsT/fTseBEHbGfpeG
TLSH
T19B22B7516E78797B8CC7E20DBB55BF53E6F9503261901E88EAFC961C05E66CE220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 53fe5cafd254df2a7010981cf608d0ebfc22858f621766fa4136830a37d016b2
MD5 939c8bb4c0ffe87a6ccf63344ad62da0
SHA1 a8f92e1cf4084edb1f8be4af41ccbd9a753c9056
SHA512 f701e4a834db7d412dd9325c4208fb73d0d280b2a8365465d51c651087bf9f0d0af30443a93f3598a7a6cc67d1efd2207f2345ace6f688e8535f6d4acbb2f87c
SSDEEP 192:sxZVRHWT/fTsAAIdpdkHW6+WNGYYBaE+9Ig5SJ:sxZVsT/fTsABeHbGfXeM
TLSH
T10A22B7116E78B57B8CCBD209BB55BF53E6F9503261D01E98EAFC961C04E66CE220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 f5991ba500f3c9a6a68d23a031f7633ac5d13b4cd758b4d30f0796c031cffdd4
MD5 8f70ca307fa5b6805d7402a253399b4b
SHA1 04cea474514ed980a37a2418a4a1be9d33c34735
SHA512 b9270e89e9e6d209ee3fcec953e595b4cdc71d3b6c4fd2db3bffca53c3da5afaa725e337c29b8859a155f6b901915c990b0a8bf09b6c079477b3d7db5d338c24
SSDEEP 192:sxZVRHWT/fTseAIdpdkHW6+WNGYYBoE+9Ig54J:sxZVsT/fTseBeHbGfVeG
TLSH
T17A22C7516E78797B8CC7E209BB55BF43E6F9503261901E88E6FCD61C05E66CE220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 87a41e0a1063177c3ec9a53b03f49e8414880fd90219b48b16699d5381d8df9e
MD5 fa5738f39a86d8be074af5e91b349058
SHA1 7deb57b5c63f9a90b4c93d2f85472792f07410e5
SHA512 ad467b14ef3beeff57d82c80bdaade5ace5e248b47086fc237e3752a59475fcaefbefe6b4d350caa245c91a7701ff4137374519b3ead15f1a41ebb7abb4b4c31
SSDEEP 768:noyYR7jWv3NpB8F1+UoAYDCx9Tuqh0VfUC9xbog/OViCLlGcvXkropff9:noyYR7jWv3NpBu1ja/CL8OXvH
TLSH
T1B2C2E92B644DCB7E4FC01E9DDC5A6F9B3E9802C7A6548D4047FA984C02C77EA912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 39f57304a3073eceecf425a955a3bb51597e7400e32ca8100ffbcf2b277b5817
MD5 9aa06085131b01f66579d71f111da3f9
SHA1 908bda2438c5322479fcdf6fedf5a38074ea18e5
SHA512 3d05ed9ca8cf8b9c06af36eea7ceb34be36bfef14f398337c09635ae4563bb22e908e025ba018608c09abe0641414d10e19dce296145ab235890fee90b238fb6
SSDEEP 48:KglEZVnTHIbbcLq2EGqTba5iISuTK9K1oTxMDYBSqwyLdcRtfLPwbD2jISlwK9lK:Kg5T2KIUCyOgKv6kSYKTaS
TLSH
T1F091C342317B524078BD294C8175976E41513273701CEDBABEBD08665E1FF484EFE8E9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5a19e2.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5a19e2.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 214c8ce31a13958b82f5eb9d4af7566ca6667b15423a97618831ed0d96e944a0
MD5 a4ae3a381f0f7394d7a9cd46969b7e35
SHA1 bf34bbd2992e71de76a6b9cd2d2c27a0a8608a77
SHA512 99c408cf1c8d4fe99da3dd83e5459f10a23458c21d6d0eec4ee6c3708bfca8f0d47426da6fed883e66d2370ed3b7d48fd2870eee9cbd1e7fba2d34cc81b28d6b
SSDEEP 384:rZcIhsNJUbvhiWl8QX5+DtwO01gLJramQtgOIwZOybLtoN:zhHj3kDmOfLhamQXs05e
TLSH
T1A4828D329DB4AD7B8DEB9581F08732035FB85527E6C8ABC4D1ED6B1D00DA6A8130AD17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 8624160f837c02f3f5699269d82d3045331b06f814e3b7546041fc549b505e7a
MD5 49c22f760789e714ed369d4ff7761d93
SHA1 eaecd5db2ed866b752cc4e6ed918d9fd26532d9c
SHA512 fdb7eccd93d4e2f2d742fc60d20c6f6ee9cc147d34bfc9fc79c9b7871504c50b2a77a43d283ced93a5615b81683f7c5c3eb0308fce0dd2f9e5994f3ebc6c4078
SSDEEP 384:ZiFiZcIDzsNq8TUNTUlIl+vhiWl8QX5+DtwO01gLJr+mQtgOIwZOybLtoN:wFQHLwgij3kDmOfLh+mQXs05e
TLSH
T1F5A27C339DA4DD7F9DFB9B81F48A32039FB44167D584EAD0E2D86E1C009A6EC030AD12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 eb56c9d927c5eed5cf6b9a8073195b209ed679d0f142c5ea73b9fd3d1f4cb7e3
MD5 d450c896aa590ab36e5a18393771e21e
SHA1 12cbe665e3e7b7ee2c2837c0966d487bb533c186
SHA512 77979be05c535495e65a1ee1739006df5e3b5eb6bfd073038dc19491091f02fa18bdcb784a345381ea570d3dfbfb367f2cd70007d3341e3824113d615cdb9156
SSDEEP 192:EONk6nnHGQmiUy+VQYcX5hQDP1wO01KMc17U6:EONk6nCHQNX5+DtwO01y1U6
TLSH
T13602D934BDB87C7B8EF7AE45B48637176F952127E5942BC4D6E81E1C00DB69C230AD22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 40ccbd851d54571f96a91dd6a1f23b38ed7411f149d8ccbe265657b62bfe42d9
MD5 87de9a160764e1b7ec94b57579a7a0f6
SHA1 2bb09e94f47c80e56e5ac0db6d9aba201ec3fd6e
SHA512 b298d3b9545832da916652bca55fbc38f0179320643f148c8d9fbe67ba4ba97fd83a1bb6420cdabbe3830995f37245b932b96a9f769a108ffe7949e62ff83f79
SSDEEP 192:EONj6nnHuQmiUySVsYcX5hQDP1wO01g8SJrZg3Vq5QU6:EONj6nKpsNX5+DtwO01gLJremQU6
TLSH
T1C4120B31A9A4EC778EE36985F08731175EA55227DA897FC0D5DC2E1C01DF6AC630DC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 e0a36ad5d59e4f62c3557ecd715b4d7f5edec28ec87735a131ff60e88a2ee66d
MD5 2a5deb07f4444343a9186f84893977f9
SHA1 67939dd889f8b8db38d6162466350bb1cc5c9a07
SHA512 d271c59385bdf320d9befa9ed3d263dfba39b3ed9765b7d6a3484730967ee0505859a34f54cc2c7fa58c03cf76877e8e11d2b34f56f205bd2fde8cf4709854a5
SSDEEP 384:3ZcIhsNJU+vhiWl8QX5+DtwO01gLJramQtgOIwZOybLtoN:/hmj3kDmOfLhamQXs05e
TLSH
T1E5827E329DB49D7B8DEB9581F08732035FB45527E6C8ABC4D1ED6B1D00DAAA8130AD17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

36fab7bb-09f4-46a0-a521-3452c862b63f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\36fab7bb-09f4-46a0-a521-3452c862b63f.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 fdaa57eaeae8cbe0706e8c009cef57c72d17e3425b11f8eaa020a8f0084d9bb6
MD5 069c99d709bf8b33aec6f3dd50204d53
SHA1 4680a75314e9c96f8f12955649efcf07e732476a
SHA512 7731bab4b32fc87b9b7d07773fdb78990050c9d9d1e87e5575374dd70a4e95d714007d2a8ee070b2c621765fbde4ab33da4fffad0a78a769efb180e0a1ffb5e7
TLSH
T11841F758A6E91148B3B77F4AAFF7A86D987FB8372E06D45E10110E4F0A66B40C861737
MD5 SHA1 SHA512 TLSH

Submit Download