af6f2b66f13d44d2ec1a96fd2846b3339c52234b98d44fc0fc8d72eaf817bf20

Analysis

max time kernel
149s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/09/2026, 17:00

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
attachment20260930-429995-ix9mb4.html
Size 214KB
Sample260930-vh6nnsshke
SHA256 af6f2b66f13d44d2ec1a96fd2846b3339c52234b98d44fc0fc8d72eaf817bf20
MD5 ca2c96be8ad4c1b27afc858a639eb1f4
SHA1 34bcbb32e3946883cf26447531ab98af52bcab62
SHA512 3437202655e3eb3621e7f896424eace53f0c5f24acf844be2b9d563d88009e6cf5a37bcddba9c2cbaba921fa3f1b6b8b256eb36e35e548489e0a5a04be7cb99c
SSDEEP 3072:opm0WkXwgEweVFmk0RHyEoCmetxWnm6t6b9U9QfyA7cxGTdTbLayQsH:oglIYWRHyrCunm6t6i947gGTx3pQ4
TLSH
T13024023459202B0E3B9246B4B26575A40EF90CB3E95F96227BC801F5EFED1F29049CE7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2000	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-747854149-4118156852-591593384-1000\{94ABF2A5-4546-404E-BD9C-5FDA30487EF8}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1652	msedge.exe
1652	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4392 wrote to memory of 2764	4392	msedge.exe	87
PID 4392 wrote to memory of 2000	4392	msedge.exe	88
PID 4392 wrote to memory of 4540	4392	msedge.exe	89
PID 4392 wrote to memory of 4540	4392	msedge.exe	89
PID 4392 wrote to memory of 1948	4392	msedge.exe	90
PID 4392 wrote to memory of 1948	4392	msedge.exe	90
PID 4392 wrote to memory of 1948	4392	msedge.exe	90
PID 4392 wrote to memory of 736	4392	msedge.exe	92
PID 4392 wrote to memory of 736	4392	msedge.exe	92
PID 4392 wrote to memory of 2776	4392	msedge.exe	93
PID 4392 wrote to memory of 736	4392	msedge.exe	92
PID 4392 wrote to memory of 2776	4392	msedge.exe	93
PID 4392 wrote to memory of 2776	4392	msedge.exe	93
PID 4392 wrote to memory of 5080	4392	msedge.exe	94
PID 4392 wrote to memory of 2192	4392	msedge.exe	95
PID 4392 wrote to memory of 5080	4392	msedge.exe	94
PID 4392 wrote to memory of 5080	4392	msedge.exe	94
PID 4392 wrote to memory of 2192	4392	msedge.exe	95
PID 4392 wrote to memory of 2192	4392	msedge.exe	95
PID 4392 wrote to memory of 3040	4392	msedge.exe	101
PID 4392 wrote to memory of 5024	4392	msedge.exe	102
PID 4392 wrote to memory of 3040	4392	msedge.exe	101
PID 4392 wrote to memory of 5024	4392	msedge.exe	102
PID 4392 wrote to memory of 3360	4392	msedge.exe	104
PID 4392 wrote to memory of 2640	4392	msedge.exe	113
PID 4392 wrote to memory of 4788	4392	msedge.exe	114
PID 4392 wrote to memory of 1360	4392	msedge.exe	115
PID 4392 wrote to memory of 204	4392	msedge.exe	124
PID 4392 wrote to memory of 204	4392	msedge.exe	124
PID 4392 wrote to memory of 1652	4392	msedge.exe	128

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\attachment20260930-429995-ix9mb4.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ff93291c188,0x7ff93291c194,0x7ff93291c1a0
  2⤵
  PID:2764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1976,i,11886471125516784984,5135179739454371652,524288 --field-trial-handle=2476,i,14522960301286624363,17379513852207717475,262144 --variations-seed-version --mojo-platform-channel-handle=2500 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2256,i,2402442824554608199,3756420404222487952,524288 --field-trial-handle=2476,i,14522960301286624363,17379513852207717475,262144 --variations-seed-version --mojo-platform-channel-handle=2508 /prefetch:8
  2⤵
  PID:4540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1648,i,8115917671788489994,17753706054113134671,262144 --field-trial-handle=2476,i,14522960301286624363,17379513852207717475,262144 --variations-seed-version --mojo-platform-channel-handle=2464 /prefetch:2
  2⤵
  PID:1948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3520,i,4656579950967495423,7426425580346057101,2097152 --field-trial-handle=2476,i,14522960301286624363,17379513852207717475,262144 --variations-seed-version --mojo-platform-channel-handle=3588 /prefetch:1
  2⤵
  PID:736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3516,i,11436549647521086592,18044080089699922902,2097152 --field-trial-handle=2476,i,14522960301286624363,17379513852207717475,262144 --variations-seed-version --mojo-platform-channel-handle=3560 /prefetch:1
  2⤵
  PID:2776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4232,i,11747356289696554554,3170136687511523709,2097152 --field-trial-handle=2476,i,14522960301286624363,17379513852207717475,262144 --variations-seed-version --mojo-platform-channel-handle=4248 /prefetch:1
  2⤵
  PID:5080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4296,i,4766649286937726236,3871126335236494461,2097152 --field-trial-handle=2476,i,14522960301286624363,17379513852207717475,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:2
  2⤵
  PID:2192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5048,i,1382437984130925630,16566611966665237211,524288 --field-trial-handle=2476,i,14522960301286624363,17379513852207717475,262144 --variations-seed-version --mojo-platform-channel-handle=3792 /prefetch:8
  2⤵
  PID:3040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5156,i,14874870628599377045,3183775504189210729,524288 --field-trial-handle=2476,i,14522960301286624363,17379513852207717475,262144 --variations-seed-version --mojo-platform-channel-handle=3756 /prefetch:8
  2⤵
  PID:5024
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5924,i,4053483722701009211,1293835235267393566,524288 --field-trial-handle=2476,i,14522960301286624363,17379513852207717475,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:8
  2⤵
  PID:2408
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5924,i,4053483722701009211,1293835235267393566,524288 --field-trial-handle=2476,i,14522960301286624363,17379513852207717475,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:8
  2⤵
  PID:3360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3496,i,6684106113593663267,15078419540682746243,524288 --field-trial-handle=2476,i,14522960301286624363,17379513852207717475,262144 --variations-seed-version --mojo-platform-channel-handle=4256 /prefetch:8
  2⤵
  PID:2640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4280,i,2165971686242464294,15735003680208901277,524288 --field-trial-handle=2476,i,14522960301286624363,17379513852207717475,262144 --variations-seed-version --mojo-platform-channel-handle=4592 /prefetch:8
  2⤵
  PID:4788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5188,i,294829063049276201,5024191747903259560,524288 --field-trial-handle=2476,i,14522960301286624363,17379513852207717475,262144 --variations-seed-version --mojo-platform-channel-handle=4252 /prefetch:8
  2⤵
  PID:1360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5988,i,16606829234872445305,14187404526090976485,524288 --field-trial-handle=2476,i,14522960301286624363,17379513852207717475,262144 --variations-seed-version --mojo-platform-channel-handle=5920 /prefetch:8
  2⤵
  PID:204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=4912,i,3693466068134663214,3139677496073548465,262144 --field-trial-handle=2476,i,14522960301286624363,17379513852207717475,262144 --variations-seed-version --mojo-platform-channel-handle=6132 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1652

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3024

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a62a1faeaaa56a5f5375b4d4921e6b263c0bc10a5ecc1f991894c66c32a88aef
MD5 64fcd85513a139bcf5844ab49aea8206
SHA1 3c834eccb77da48c4abac17c440971305fd9b653
SHA512 cd1b39ff43d56158fbb01c5408a5bf247d5bd82279b205a914ab4cdccfece77a5399e430bb26db6f7d10e70dc3503c3bf37c5de59e23cb8f62d6337066c4114f
TLSH
T15DD02232EBF00E82C00B0032082282880F08C03C08003222A23C20AE3A80CEC2E23000
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d1cc89f8f1c9f75d127814445edc4d6d9314209d3b11e5a2b4cc826747683f30
MD5 3bc9cc32c2de3150dc7916bb61984962
SHA1 d75ba9bc7ad74cb95dcb4ec6de6e6b18f5813a04
SHA512 fd090e624e91a98337689ed57390fc5813fab21acd3af426c9de6566ea4d92a7875c4f92a1b64d547eaf9ce40cad3d8a85472a30cf521aea6198cf74b69805ac
TLSH
T12ED02232ABF00E82C80B0032082082880F08C03C0800B323A23C20AE2A82CEC2E23000
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 980552587422acae76fd5ff2056316122f8ae3f5e2c3eaaa7e581249d2a94c59
MD5 15380f0d151f5b7a9f56a661bdb42f5c
SHA1 adff3f5abfe3020fc109fbee7c16d654b219e065
SHA512 56b60d8e09366b999ab60e43eac64656114810b0cd52ac428c8df05dc1a4587a6bb3fa4bf5bb9ad98a383e8619a5b00e3b647afd81cc487014fad61e9856fb36
TLSH
T18F618579AA70E2B9FFA84479D5DA14CF39325D95B447BEC30EB4E87ACC7630491B8100
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58c6f5.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58c6f5.TMP
Size 3KB
SHA256 3e0289cb51245adb8c6cc53ac54249e83936c7f0cd046bdfea867a4d6fce9dfd
MD5 56cc8acfdd8fc0b67c2b6983b73f2a90
SHA1 96151a57cb1c9832f672eac52c6cb3c28ae37695
SHA512 233ba8bc60f9e768c057c76dc1a0f64054a70c51aeae9382d673e726317b0bb1793418e475b7ca14a9290ffbce2855b9d7c60a376dfb7c4c8b05e929a6980356
TLSH
T1A1617479AA60E2B8FFA84479D5DA54CF39325D95B447BED30EB4E87ACC7630491B8100
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 733B
SHA256 a29643eb95360b99a6ab31a560f025e4bee3bb09167ee5178fb73b0f08004683
MD5 faa9c6093b264b7564d5f105ee8990d8
SHA1 50c34d53697e5065f3e03663cf7beb9df181f1ca
SHA512 f00bfbd1e62fea712bf7a7f9c161aff8d59c8eecd3db0ced3ed71ea41a31b2fe5972ab1c745a6ae59dbd4ef01bcd1e951930c176b63946c06f86b676a4856ace
TLSH
T1320168B3C3E499AE8A0153F06A18AF1BCE2C0502421C7D5A85D4AE2B93E24B9D00189B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 e5f1d4b49f72fa9fa2807ba22a38df36198c10f09e5b508aeccf7b6396e76b09
MD5 3dc041e4411696f0a373c1b8d0a76727
SHA1 b7e1165ab67a604c82424bde2bbc35571f9f8826
SHA512 c9e942cab8db0c767df4af086b4513f888ac5569e7fc309d3bf7cd1836d75d069f4009d9623bfd5b0eeb790f326bc94c83e4ea205243f70eb10d264a101bf2c4
SSDEEP 192:sxZQRMW9/fjs2mIdpdnHW6+WNGYgUm3IgrJ:sxZQ19/fjs2HdHbGL9
TLSH
T17712B8516E28B97B8CC7D20DBB65BF53E5FA503251951E48EAFC861C04E7ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 af725ae21d33508178f165bd05b7f33094d5e5aceec7df9a866c0b912464394d
MD5 130110ded9ac1b159130284aef18d59f
SHA1 5f25ca4cc24bc6f23f1ae0b0eb8cd5e8d610c383
SHA512 70eca2c60bd8e3b4b417b68172a8bc8c807579ee27238f0110802f1a975f657618ea64328d8b465db5992ad0dc5bb92c3112cfbc02a86baa2eeaf52017822c5a
SSDEEP 192:sxZQRMW9/fjsWmIdpdnHW6+WNGYgAm3Ig5MJ:sxZQ19/fjsWHdHbGb6
TLSH
T14422C8516E28B97B8CCBD20DBB55BF53E6FA503251911E48A6FCC61C04E7ADE220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 be987bd8c2272addf44b82f929e5c03524dc67c5518896ea90addb77604eaf9f
MD5 d61a9c59bd5e25073784345b5ffaf52e
SHA1 7cb1291d3e3066651a14c981b7c88a42933989b1
SHA512 056b02f6d2e739810fbb0a57fcf537f012a3a812ceba190ae209dbdb46c0023b05b6708dde3c8937651cbca822ec218e4801ad81ca78dfae2a8ed81551d73358
SSDEEP 192:sxZQRMW9/fjsTmIdpdnHW6+WNGYgUm3Ig5mJ:sxZQ19/fjsTHdHbGLg
TLSH
T1BF22C8516E28B97B8CC7D20DBB55BF53E6FA103251901E48AAFC861C04E7ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 35c77b5c9a331f38c81924c0b91b1b7bb3e9b06959ef8ebb7dde64d91e9152ea
MD5 4515ba247a251db3265e9d6c74036a2c
SHA1 cd409711163a3af22902a5f7d07027f6e069c7f5
SHA512 d7ae6c52f7c45a54a3d3df28de4b55f8f12a14690e5de113f2cdc4df44824c7400e81fb14f1fec47d548b2c0e7962f7992c88d2d9934b4488ff8505b2db992c7
SSDEEP 192:sxZQRMW9/fjsWmIdpHnHW6+WNGYgRDm3Ig5MJ:sxZQ19/fjsWHHHbGM6
TLSH
T15222C8526E28A97B8CC7D20DBB55BF53E6FA507251911E4CA6FCC61C04E7ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 be4763d2c6568319cdfea1e240dd670204031d00cc3228206962afc20ac9b7a4
MD5 49347d8891cd548c2c25c4382d801aca
SHA1 3e48c0a27371aa5b14a07a3268c58b9158132217
SHA512 8fa46adec7d71e478202b8339edec27bad565f4aea993a654d4fcc9f7e8893177d21550242f13b1f2871d87b1a47378710878547b677ab8b360a7423f392ef39
SSDEEP 768:r0ichfPWvPZpl8F1+UoAYDCx9Tuqh0VfUC9xbog/OVu+LlEKXz0rosNk:r0ichfPWvPZplu1jan+LKgzfgk
TLSH
T139C2E93B644CCB7E4FC01A9DDD5A6F9A7E9802C7A6588D4047FE984C02C77EE51264CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe596066.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe596066.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 80148484728624e298af1ff0907767865034724febd46ca286829314c1355f04
MD5 a3168cecd1cfa817bd8293f25506cc73
SHA1 dc6d5f95a3d6d7ff02f469c32b32a6ee05b40f81
SHA512 a70a945d47cf835dbbd6a7a159153926246faad510285665d2eeca5a2cdbdc113bf689e201395d6a58af4a2cc729401de5a1e535716130da21b5524dbe467c26
SSDEEP 384:gZcIhsN1HHX5cmzBGYX5E0S+YpDxQVZh6DKhHeoP:ehuXF9GYu0SVp1QfYGHeE
TLSH
T19B827E729878AC7B5CE7E542F4472A035FF89117A3886F84D5EC6B1D00DB698131BD2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 340f7ccb1943bfdd3b82f3eba79b1bddccf5a705ebfbc4a78d657318cdee8e40
MD5 d73c4abb0952d9fce3b328080059d54e
SHA1 d9103bc774d43f9c681a2895f3c6a086be1453dd
SHA512 f9a949e8e556c8c6419be753b8527f40c70378adc1ab55d4d45672e901e7782ce13a14d34f6f99d5a0b6a7ec311de5a7d3d174ad94853e5e562cca0c6d82de9c
SSDEEP 384:DiFiZcIBzsNP8TUNTUlIlkHX5cmzBGYX5E0S+YpDRQVZh6DKhHeoP:uFQxqwgYXF9GYu0SVptQfYGHeE
TLSH
T119A27D738CA8D87FADF79A42F84B26038FF44167D685AB94E2DC5A1D00DB59C130BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 7ce84373a96d7f3ee91cf8fc39c522d8a057edf27039c268f26fb412abf76553
MD5 afa7e530f0a599a77c5e867706675e19
SHA1 1b19e8d6adb4fa441991819b0fa790f61ff47ca2
SHA512 c963360a96befacdadabd552c99e5d9e3d79e88dba56b94a330565b25a44bfba2512e9d70f5153f87973364ed2f73a6cbb58671fd360ccac2f0b29804f9bf548
SSDEEP 384:aZcIhsN1kHX5cmzBGYX5E0S+YpDxQVZh6DKhHeoP:Yh1XF9GYu0SVp1QfYGHeE
TLSH
T1C7828E729878AC7B5CE7E542F4472A035FF89117A3886F84D5EC6B1D00DB698231BD2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 8ce38bfe307a84e0bb7eafd2e1ebd43f677e023978307692d987d2d73f91c205
MD5 f2e37e23ad63a85e315134f1df34c6e8
SHA1 290079e57a3ae9099990f0293b8b8523966c3c0b
SHA512 a1cec412f654e60e868bbb2964fe4e7a812a656b918152183279dd6e14275ae9c2dc024a579684eca28e550f490290d69f6e48285f477354bcd2edb729c6e657
SSDEEP 192:LJONc6DphmqQmiUyVYNq8wGYX59ezVCNY+Yjkk7Xr/U6:lONc619RRwGYX5E0S+YbLU6
TLSH
T14602F935E878BCBB9DE36E45B48B2A235FD4112BAA942F84D6E81E1C00D768C1307C37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 b40b8b687d1bb7b7e98a3dd49604962d4d2799bf231d79371d5a6f2bc034bd90
MD5 af29944ace3240e1f34a34206165a202
SHA1 7bb3945d4eea615d3ffb465c596c9053e264f8a1
SHA512 8e91e6c3fad46b3a2ed118df229ed8484be36a2c1332a9b532437a45fa8019e3c5e5d94eb7409aa92e941adf89f137282eee355838ccdcbe5d7573def1ef202f
SSDEEP 192:LJONo6Dph/qQmiUyNYNhwGYX59ezVCNY+YpDyexkIIiq52U6:lONo61snhwGYX5E0S+YpDUQU6
TLSH
T1D5122A31A8B8AC7B5DD3A951F48B3A135FE4122BEB847F94D5EC1A1C01DF69C130E926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7ee72f9e-1fea-49f0-86a6-13b374b67ecc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\7ee72f9e-1fea-49f0-86a6-13b374b67ecc.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 1200f1319e1c0ad0f29e33f4e3c9f3e8ef7133c93c7464bc95d298ce53346e57
MD5 dbd701a660a9adcc4b9b243ea902a66f
SHA1 54b7f347a8315457a936460fb86ce6086f04562e
SHA512 121c9dfc309180f391759d83a45c3065783ffed178f44cf163ecc288b2121977a67a5f8b88dc280834c5950e743d1af13eb069fc22e85e3c34c58029e21f8e14
TLSH
T10941275CBAE91148B3B77F559BF6A8AD047A7D672F07C4AE00110E4F4627A00C9B1B37
MD5 SHA1 SHA512 TLSH

Submit Download