5d6004c82e2d7244aad68bb00365d03353aa2ac2d87ec93b28b59b029543fde2

Analysis

max time kernel
149s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/09/2026, 16:36

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
attachment20260930-429995-ajve0x.htm
Size 1KB
Sample260930-t39qds1eph
SHA256 5d6004c82e2d7244aad68bb00365d03353aa2ac2d87ec93b28b59b029543fde2
MD5 3a134f40128e3382caf68c7037564ce6
SHA1 d53f727b1b15ed1d2286e65613578331cb2a01f7
SHA512 7dc021062e3dd4f2601fa8291c6c7370bcb1b579bc09aac01ed304c2dfe255c0a67248a2e7b90940563d9c914749f0488d85f55208a5f48bf413f651b735d21e
TLSH
T1FD11CCDB03E23DA45493333764434B8EDF380175E7724F753475211A138A29AD4239F4
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3848	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-895009113-1202185046-1686627690-1000\{FC9A6BE0-6A22-48AB-8112-4DE5C463CD49}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2484	msedge.exe
2484	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4112	msedge.exe
4112	msedge.exe
4112	msedge.exe
4112	msedge.exe
4112	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4112	msedge.exe
4112	msedge.exe
4112	msedge.exe
4112	msedge.exe
4112	msedge.exe
4112	msedge.exe
4112	msedge.exe
4112	msedge.exe
4112	msedge.exe
4112	msedge.exe
4112	msedge.exe
4112	msedge.exe
4112	msedge.exe
4112	msedge.exe
4112	msedge.exe
4112	msedge.exe
4112	msedge.exe
4112	msedge.exe
4112	msedge.exe
4112	msedge.exe
4112	msedge.exe
4112	msedge.exe
4112	msedge.exe
4112	msedge.exe
4112	msedge.exe
4112	msedge.exe
4112	msedge.exe
4112	msedge.exe
4112	msedge.exe
4112	msedge.exe
4112	msedge.exe
4112	msedge.exe
4112	msedge.exe
4112	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4112	msedge.exe
4112	msedge.exe
4112	msedge.exe
4112	msedge.exe
4112	msedge.exe
4112	msedge.exe
4112	msedge.exe
4112	msedge.exe
4112	msedge.exe
4112	msedge.exe
4112	msedge.exe
4112	msedge.exe
4112	msedge.exe
4112	msedge.exe
4112	msedge.exe
4112	msedge.exe
4112	msedge.exe
4112	msedge.exe
4112	msedge.exe
4112	msedge.exe
4112	msedge.exe
4112	msedge.exe
4112	msedge.exe
4112	msedge.exe
4112	msedge.exe
4112	msedge.exe
4112	msedge.exe
4112	msedge.exe
4112	msedge.exe
4112	msedge.exe
4112	msedge.exe
4112	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4112 wrote to memory of 452	4112	msedge.exe	85
PID 4112 wrote to memory of 2676	4112	msedge.exe	86
PID 4112 wrote to memory of 3848	4112	msedge.exe	88
PID 4112 wrote to memory of 2676	4112	msedge.exe	86
PID 4112 wrote to memory of 2676	4112	msedge.exe	86
PID 4112 wrote to memory of 1092	4112	msedge.exe	89
PID 4112 wrote to memory of 1092	4112	msedge.exe	89
PID 4112 wrote to memory of 3344	4112	msedge.exe	90
PID 4112 wrote to memory of 3344	4112	msedge.exe	90
PID 4112 wrote to memory of 3344	4112	msedge.exe	90
PID 4112 wrote to memory of 1368	4112	msedge.exe	91
PID 4112 wrote to memory of 1368	4112	msedge.exe	91
PID 4112 wrote to memory of 1368	4112	msedge.exe	91
PID 4112 wrote to memory of 3948	4112	msedge.exe	92
PID 4112 wrote to memory of 5012	4112	msedge.exe	93
PID 4112 wrote to memory of 3948	4112	msedge.exe	92
PID 4112 wrote to memory of 3948	4112	msedge.exe	92
PID 4112 wrote to memory of 5012	4112	msedge.exe	93
PID 4112 wrote to memory of 5012	4112	msedge.exe	93
PID 4112 wrote to memory of 2120	4112	msedge.exe	101
PID 4112 wrote to memory of 3232	4112	msedge.exe	102
PID 4112 wrote to memory of 2120	4112	msedge.exe	101
PID 4112 wrote to memory of 3232	4112	msedge.exe	102
PID 4112 wrote to memory of 4772	4112	msedge.exe	105
PID 4112 wrote to memory of 2408	4112	msedge.exe	116
PID 4112 wrote to memory of 668	4112	msedge.exe	117
PID 4112 wrote to memory of 2936	4112	msedge.exe	118
PID 4112 wrote to memory of 668	4112	msedge.exe	121
PID 4112 wrote to memory of 668	4112	msedge.exe	121
PID 4112 wrote to memory of 2484	4112	msedge.exe	123

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\attachment20260930-429995-ajve0x.htm
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x210,0x23c,0x240,0x238,0x248,0x7ffa42b6c188,0x7ffa42b6c194,0x7ffa42b6c1a0
  2⤵
  PID:452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1656,i,16189863492350964304,14257728150215369402,262144 --field-trial-handle=2280,i,1672244407303121765,8012391197599937746,262144 --variations-seed-version --mojo-platform-channel-handle=2276 /prefetch:2
  2⤵
  PID:2676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1820,i,3898371672508738763,6908791410448943812,524288 --field-trial-handle=2280,i,1672244407303121765,8012391197599937746,262144 --variations-seed-version --mojo-platform-channel-handle=2324 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2496,i,1230228070954017557,4231574082607844450,524288 --field-trial-handle=2280,i,1672244407303121765,8012391197599937746,262144 --variations-seed-version --mojo-platform-channel-handle=3124 /prefetch:8
  2⤵
  PID:1092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3436,i,1522379542715210488,9461196875219818519,2097152 --field-trial-handle=2280,i,1672244407303121765,8012391197599937746,262144 --variations-seed-version --mojo-platform-channel-handle=3452 /prefetch:1
  2⤵
  PID:3344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3456,i,10944319509378771863,1865041155891627439,2097152 --field-trial-handle=2280,i,1672244407303121765,8012391197599937746,262144 --variations-seed-version --mojo-platform-channel-handle=3468 /prefetch:1
  2⤵
  PID:1368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4164,i,917636796170221399,14510186804501535961,2097152 --field-trial-handle=2280,i,1672244407303121765,8012391197599937746,262144 --variations-seed-version --mojo-platform-channel-handle=4196 /prefetch:1
  2⤵
  PID:3948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4180,i,13650635344270649013,14067414348244769364,2097152 --field-trial-handle=2280,i,1672244407303121765,8012391197599937746,262144 --variations-seed-version --mojo-platform-channel-handle=4348 /prefetch:2
  2⤵
  PID:5012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5084,i,8103303782663660127,18167987295911764351,524288 --field-trial-handle=2280,i,1672244407303121765,8012391197599937746,262144 --variations-seed-version --mojo-platform-channel-handle=5116 /prefetch:8
  2⤵
  PID:2120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5080,i,11356188195117569987,2375730579535568340,524288 --field-trial-handle=2280,i,1672244407303121765,8012391197599937746,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:8
  2⤵
  PID:3232
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5944,i,15976895104287062992,10052905915826991821,524288 --field-trial-handle=2280,i,1672244407303121765,8012391197599937746,262144 --variations-seed-version --mojo-platform-channel-handle=5952 /prefetch:8
  2⤵
  PID:4184
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5944,i,15976895104287062992,10052905915826991821,524288 --field-trial-handle=2280,i,1672244407303121765,8012391197599937746,262144 --variations-seed-version --mojo-platform-channel-handle=5952 /prefetch:8
  2⤵
  PID:4772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4520,i,3121663448938943895,8799206668693614934,524288 --field-trial-handle=2280,i,1672244407303121765,8012391197599937746,262144 --variations-seed-version --mojo-platform-channel-handle=4180 /prefetch:8
  2⤵
  PID:2408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4504,i,2725484556178258672,12630942208732510281,524288 --field-trial-handle=2280,i,1672244407303121765,8012391197599937746,262144 --variations-seed-version --mojo-platform-channel-handle=4492 /prefetch:8
  2⤵
  PID:668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4508,i,10617902068537167731,13488366400657878197,524288 --field-trial-handle=2280,i,1672244407303121765,8012391197599937746,262144 --variations-seed-version --mojo-platform-channel-handle=6292 /prefetch:8
  2⤵
  PID:2936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5372,i,15294082058365911125,10649231604887530172,524288 --field-trial-handle=2280,i,1672244407303121765,8012391197599937746,262144 --variations-seed-version --mojo-platform-channel-handle=5560 /prefetch:8
  2⤵
  PID:668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=3420,i,6059038833851937568,43055212658330777,262144 --field-trial-handle=2280,i,1672244407303121765,8012391197599937746,262144 --variations-seed-version --mojo-platform-channel-handle=6212 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2484

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3224

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 928eda824fe964cd23927cf06086d7d24e20a3a5092daf1acee5b632c76c962a
MD5 4ac43ee6512ba8635b7ba6bd015c291b
SHA1 5f9e2474b00ec0e2a9472c049fbea550e26309aa
SHA512 e5ebf9e92458f66e31e080121135313e828b8ebade0bc0e085221ae0d4f5afe0d2035c566590cbfb5902d96f17befe7b24310b4fb9e647b999113175af800ebc
TLSH
T17BD022B2B3A038CFE300083302A083BA2C0A80F300FAE2208C30E08C0BCC02AC283880
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 4c499e7e5332b71a7a448c33a9206c77728810e44ab3ec12f10597941c26df9e
MD5 bc44386bf787aae1326a30c6765d8aaf
SHA1 3bd567c2e3e7446579bc732f386c55f3e67521fe
SHA512 144f5537073477ef05a022d6a18882d3e9eb43a6899bdd44a0b4775e7f70132647428af77cefd1a80284862fd01605d2fc1c9ffc3f5d5214b3387f5b6536bc62
TLSH
T1835178C741524C60F796C3B7A3F649E3BA34CAC71D9F1E510484ECFA8846FD4C18014A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58a8ed.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58a8ed.TMP
Size 3KB
SHA256 d7803b9fee09c72c19ed1780ff6df23faac7b5eb70397e6c36d982cd336f1dbd
MD5 f59536f95188da5834d49165334a57b5
SHA1 798f3a74d479ccf0d1209cc593f838c351bd65b4
SHA512 a2c1e415c0243ad7486125ee137ca642166afcbc8bc5d450ebf70c1deed43b81c268f938c62fce5e879ad771593cff42d220d4d021eccbb3b429505a20f0c0dc
TLSH
T12F5177C741524C60F796C3BBA3F689E7BA34CAC71D9F2E520484ECFA894AFD4C58014A
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 bd75fa75622f5b98c89aebb5f0f96d8a7b27825fb7bead964598d7954aa8d284
MD5 2fba091f635b17e93a5891c699ec8417
SHA1 6cbde080937190833657e2d380b91d893f5d4a35
SHA512 7b0af109933b4c4350641698854c62910261457f423a4677f2f7c1ce1f90e44ebcd4961aab0dc6b0df9a897e1f1132494b13c9c7dfe802467eea4b496ac51bb7
TLSH
T1C3117DF3C7E585AE890556F05A24AF2BCE2D0516431C7C1985D4EF2793E3475E00299F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 5165033147346ef0455d18d53512e389e66e98813ab50147e4639a4a8e7d7d02
MD5 06d48c3bd4ed708c590150f51c30fed0
SHA1 a5660688788bb34d89b47582fce91775dd4f3493
SHA512 747022cf85ce697133b06e2ec88343fef6c4ec95d23d0662e56479e7742720263067b2dbd398ee619aac890174dd08f6b29a978ae0566dbb988dfcd169fe22e8
SSDEEP 192:sxZ5RtW9/fvssDIdpduHW6+WNGY36aOfIgrJ:sxZ5m9/fvsscoHbGX39
TLSH
T18112B6516E28A97B8CC7D31DBB25BF53D6F9503251D01E88A6FC861C04E7ADD120B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 68c1d8e04bebf25bd25028f84db5f6971dd45efc124f5b8e90cf837a599b3eff
MD5 fbe731e0ad37741751b49f017f0569d6
SHA1 8a9aaa6df0eec77f5c6f3f9ed2cffe80ad5c8dcc
SHA512 61718317be68ddff9177f5762827e3fc48fc5d36581de16c10fab21a991a5c3be60a383bbd51f4169bf5f65b83fe5734e172234b96df522a4259a3a66124f3fd
SSDEEP 192:sxZ5RtW9/fvsrDIdpHuHW6+WNGY362OfIg5GJ:sxZ5m9/fvsrcOHbGXLc
TLSH
T1AD22C7526E28697B8CC7D31DBB25BF53E6F9503251901E88B6FC861C05E7ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 80df334e7e398b323615750d678fd9b56b9541076d9210967a73d78f6bba49d1
MD5 0718d2b48f972a4afc70e0d32d9a671d
SHA1 c9f86511afc08f6c565d9ae2f0fb3c1d77d9b8d7
SHA512 63ad8065e65c98ddcc438f293c3e74399e70c8a12843c2b412f15c2d26995839dffdd1d7817e444eeb1405ef6556d7f9066676551fbda264d8b4c659561dac1b
SSDEEP 192:sxZ5RtW9/fvsrDIdpduHW6+WNGY36xOfIg5GJ:sxZ5m9/fvsrcoHbGX6c
TLSH
T1BA22B6526E28697B8CC7D31DBB25BF53E6F9503251911E88B6FC861C05E7ADD220B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 d164d9b92e57bc6e2554175fb21376bbcfc8bd29f9cd3c17705af64c35021bf3
MD5 ee1e603c219365058a49a9187e715628
SHA1 5e6f4789550be40f769683e522695427372b083a
SHA512 6eb85fa00fdeac43179a42c9ee43b6c1ce3d6e14096f94a0088581128bb5142d9eef6c092e4f8e717906d20099784aae7ec64a2bdc8493c78c7b748412445963
SSDEEP 192:sxZ5RtW9/fvsWDIdpduHW6+WNGY36aOfIg5kJ:sxZ5m9/fvsWcoHbGX3u
TLSH
T1F622B5526E28A97B8CC7D31DBB25BF53D6F9503251D11E88A6FC861C05E7ADD220B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 20b0b08a6f9bc95d77c243c589e1b6fb933addf170dd1b4939dfcfa674accc82
MD5 159f5d1352076de2c8fde4a2ba33e4d9
SHA1 6f99b1d9fa0697794f3f3cfe3cd8827fc4317221
SHA512 10453ce5ee1c95ef1e7b98f6879310ace7821ce14f61ed73ae2f8f61ca174a5f3b700517dfc5bf35034bed2c0e0ae75f456372db47343cde263a9e08a2adc5b8
SSDEEP 768:51Klm7QWvUYe08F1+UoAYDCx9Tuqh0VfUC9xbog/OVh/LlpPs/iro3j:51Klm7QWvUYe0u1ja8/L/E/53j
TLSH
T1B9C2FB3B740CCB7E4FC05A9DDC5A6F976EA802C7A6588D4047FA984C02C77EA512A4DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 793B
SHA256 13ccaf31adc06b2acf20fcd5f17f7a7c18d2e57850d018ed3ee6ae3d7ab2fd84
MD5 81737d07793c7f0e7dac3994ea251880
SHA1 f2c8fa3a153366e5ebeb62a0e0168e7fcf1aafc6
SHA512 6973aca275e8531eed0659ab3576b6e3db173729c355c7d34f11c2ab417da02e747816123f5487c06f9d8ca09a24226643289d55e3ef2612897194bd54ba66b6
TLSH
T169019C4032EF335024FD35849858E6AE464331753714FF2A3AB50C6A8B16E1949FA4C9
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 1KB
SHA256 f35fb6d594d8cfca0edfe00fa28cf8897f49f7189fc2d83e2156cbe5cc2669aa
MD5 44a11a743a89b95827e56f493cccc9d3
SHA1 6cf0f966660685f79147128364e112d8c3fd5801
SHA512 58e8865ae53b676c943b446ef2a607424973e63345ce3a2aa12366a9d40470554bef39ee7456135580229d8efffaa79cb9edde9e2b5f59a2b70de2fa976da229
TLSH
T11B217A5072EB335028FD35889958D5AE0A4331753314FF2A36790C7ACB26E1958FA4C9
MD5 SHA1 SHA512 TLSH

Submit Download

2c01b8d4-0998-4017-90da-b27aaa1ae4fe.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\2c01b8d4-0998-4017-90da-b27aaa1ae4fe.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 144912136c424fdde5d0b1baab5d935728dfce949a7f00153428bc7aea76c789
MD5 1471aa29bc1f57b6c20e4cacb4ed6713
SHA1 98c263e59383a5fdad4aa7d3bfd312a560cb597e
SHA512 8e4ee345ad20bf19545d4d463e75db24a1333e088c2b0213d3b419bbb9c6efd4beaae48d9b7ca0b06ffa1d11bde3d0e22a39481445b5446d1e0c23219ce3619a
SSDEEP 384:+ZcIhsNvzRbYwgh//iDkEYo25tgOIwZOyCpoT:8hY8/aDpu5XsFI
TLSH
T144827D729CB89CB65DE79241F18772038FB48067DBC56F94D9ECAB1C02DA1E8030BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 1beec4aab95dcc30d1074834606983cbc6a269bb4a19a14709b5df311267b1ec
MD5 25515570ad13f72c191d6f5d089f144d
SHA1 4daebc9f0bf339122611a52e61364332947f0ef9
SHA512 dca9624a7c55dfe88ad802a21d66b6223207853d5980db881b2dca9c2e3cf1a11f2b6300e5fbb6982cd50c618d2ae6cf4103c475620c573e2cc4e17f1332287d
SSDEEP 384:riFiZcIJzsNR8TUNTUlIlYRbYwgh//iDkEYoI5tgOIwZOyCpoT:GFQpQwgo8/aDpA5XsFI
TLSH
T1B0A25C7398A4DDBB6DF79741F54B72038FB440B7CAC5AA94E6DC9A1D01DA0E8030BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 fdbbb89b13e9099d381e3c7621cc5c8e42dee80b6e051b668b85e89e37c99d3f
MD5 77b2b9498ccf5b57da9419aa008bfc4b
SHA1 fcdcd1ed942e43dc45e19c7f381958d1a93fd0ad
SHA512 afdce64e19f39f7cf33dea9c4941838a062b83c525be7151f0f616e47af2d569c3de4bf52f9cd4cc496be7fe68f1e8fb475e6d8a8254537ff2f43c13fd47dc07
SSDEEP 96:KqONkNQsjpfbUmjH5ih/cIPURHl8h4otop5aaDoBKP4v+Y1xf//ojdMxMY+XhBj/:BONl6JUm0QmiUyHcso//ihBjU5BCYGU6
TLSH
T11D02C539AC68ACBB8EE39E45F54777239FA4107BDA911F84DAD92E2C01D715C2307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 ac38a863a8e912e1d4d92a794781cb2652b90d62d4e1bf77c881dd4ff8400f7d
MD5 183f8829878322dff34c0095b23cb959
SHA1 850ec7687d13be665fc3cfec2c50fa17e34433a3
SHA512 f7c4728a2e3ac37da0fb778f1ab0b6bd893908148616e81b6f223de880f125f40637008b8340792e085c20222ac904ce8d66f771ade20c89a0eb62dab9a2918c
SSDEEP 384:5ZcIhsNvYRbYwgh//iDkEYo25tgOIwZOyCpoT:Rhd8/aDpu5XsFI
TLSH
T133827D729CB89CB65CE79241F18772039FB48067DBC55F94D9ECAB1D02DA1A8030BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 10730f8e065daddeab5e3c391fa1a1f3d0f473dbb30856727285041a55c800fa
MD5 ad03e2c20c1639f0c48e4a7b364f90d5
SHA1 1a796de647d5c3aa84fb2af1cde8ed5a3d7de8cb
SHA512 dac7b82fe7c05b6b2c33904447c27b931d7f0894993c30a3032a97fb9aba54c1e933fc2b4377bfe000ca02b777119a022ba3de8d34f71dbd1bb7defd45eba3a4
SSDEEP 192:BONi6JUWQmiUy0cAo//ihBjkGnPwosDQNxtqcU6:BONi6+yoAo//iDkEYot5U6
TLSH
T1CF121835B868AC7B5DA39991F08376139E644077DB856F94DADC2E2C02EE1AC530BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d2c51fe4-b791-44c3-b43c-320de72aa42a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\d2c51fe4-b791-44c3-b43c-320de72aa42a.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 be7d20d453a7c7eb012a87944facc4dd320f7e5f03762f283d70dd3cf99db24f
MD5 13de62836588794193802da4dd3de27e
SHA1 4fa7bb44d4dff06cdcfed0285273ed8fdcb88438
SHA512 68ed9c8199621148ee956fd29e17796746d50203ae4ff8c5f51e30e4d6c66a7d4b95b383d226232b720ae83098c58667df34cae676644b2741682190568028ab
TLSH
T1E4412C5CB7EA1148B3B76E0A9BF6A96D447FB9332E06945E10110D4F0622B40C971B37
MD5 SHA1 SHA512 TLSH

Submit Download