5d6004c82e2d7244aad68bb00365d03353aa2ac2d87ec93b28b59b029543fde2

Analysis

max time kernel
148s
max time network
134s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/09/2026, 17:06

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
attachment20260930-429995-10akmr.htm
Size 1KB
Sample260930-vmfcaayyhx
SHA256 5d6004c82e2d7244aad68bb00365d03353aa2ac2d87ec93b28b59b029543fde2
MD5 3a134f40128e3382caf68c7037564ce6
SHA1 d53f727b1b15ed1d2286e65613578331cb2a01f7
SHA512 7dc021062e3dd4f2601fa8291c6c7370bcb1b579bc09aac01ed304c2dfe255c0a67248a2e7b90940563d9c914749f0488d85f55208a5f48bf413f651b735d21e
TLSH
T1FD11CCDB03E23DA45493333764434B8EDF380175E7724F753475211A138A29AD4239F4
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1136	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-696679853-3915825385-3233721679-1000\{24BB6165-6A26-4D3E-A4BB-B3801C5938D2}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2752	msedge.exe
2752	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe
5952	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 5952 wrote to memory of 4240	5952	msedge.exe	89
PID 5952 wrote to memory of 2004	5952	msedge.exe	90
PID 5952 wrote to memory of 1136	5952	msedge.exe	91
PID 5952 wrote to memory of 2004	5952	msedge.exe	90
PID 5952 wrote to memory of 2004	5952	msedge.exe	90
PID 5952 wrote to memory of 5404	5952	msedge.exe	92
PID 5952 wrote to memory of 5404	5952	msedge.exe	92
PID 5952 wrote to memory of 2416	5952	msedge.exe	94
PID 5952 wrote to memory of 3384	5952	msedge.exe	95
PID 5952 wrote to memory of 2416	5952	msedge.exe	94
PID 5952 wrote to memory of 2416	5952	msedge.exe	94
PID 5952 wrote to memory of 3384	5952	msedge.exe	95
PID 5952 wrote to memory of 3384	5952	msedge.exe	95
PID 5952 wrote to memory of 1488	5952	msedge.exe	96
PID 5952 wrote to memory of 1488	5952	msedge.exe	96
PID 5952 wrote to memory of 1488	5952	msedge.exe	96
PID 5952 wrote to memory of 4136	5952	msedge.exe	97
PID 5952 wrote to memory of 4136	5952	msedge.exe	97
PID 5952 wrote to memory of 4136	5952	msedge.exe	97
PID 5952 wrote to memory of 4968	5952	msedge.exe	99
PID 5952 wrote to memory of 4968	5952	msedge.exe	99
PID 5952 wrote to memory of 3396	5952	msedge.exe	100
PID 5952 wrote to memory of 3396	5952	msedge.exe	100
PID 5952 wrote to memory of 292	5952	msedge.exe	102
PID 5952 wrote to memory of 1880	5952	msedge.exe	106
PID 5952 wrote to memory of 1860	5952	msedge.exe	107
PID 5952 wrote to memory of 1092	5952	msedge.exe	108
PID 5952 wrote to memory of 3600	5952	msedge.exe	109
PID 5952 wrote to memory of 3600	5952	msedge.exe	109
PID 5952 wrote to memory of 2752	5952	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\attachment20260930-429995-10akmr.htm
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2b8,0x7ffaec75c188,0x7ffaec75c194,0x7ffaec75c1a0
  2⤵
  PID:4240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1600,i,1063749617945924824,11389495840204294155,262144 --field-trial-handle=2264,i,14722687578550995115,2337732979422326884,262144 --variations-seed-version --mojo-platform-channel-handle=2260 /prefetch:2
  2⤵
  PID:2004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1784,i,5075461442531462493,11162498775633083344,524288 --field-trial-handle=2264,i,14722687578550995115,2337732979422326884,262144 --variations-seed-version --mojo-platform-channel-handle=2300 /prefetch:11
  2⤵
  - System Time Discovery
  PID:1136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2480,i,14417427283353342458,1006800416261547638,524288 --field-trial-handle=2264,i,14722687578550995115,2337732979422326884,262144 --variations-seed-version --mojo-platform-channel-handle=3336 /prefetch:13
  2⤵
  PID:5404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3576,i,7735297917234476770,9261698849081548675,2097152 --field-trial-handle=2264,i,14722687578550995115,2337732979422326884,262144 --variations-seed-version --mojo-platform-channel-handle=3644 /prefetch:1
  2⤵
  PID:2416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3588,i,10355073359156779769,12918194726310537478,2097152 --field-trial-handle=2264,i,14722687578550995115,2337732979422326884,262144 --variations-seed-version --mojo-platform-channel-handle=3648 /prefetch:1
  2⤵
  PID:3384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4320,i,12928267866059485726,9751257441759331520,2097152 --field-trial-handle=2264,i,14722687578550995115,2337732979422326884,262144 --variations-seed-version --mojo-platform-channel-handle=4848 /prefetch:1
  2⤵
  PID:1488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4300,i,2629916356260216495,10596009515284657,2097152 --field-trial-handle=2264,i,14722687578550995115,2337732979422326884,262144 --variations-seed-version --mojo-platform-channel-handle=4884 /prefetch:9
  2⤵
  PID:4136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5272,i,448491591238927294,6190801118559526058,524288 --field-trial-handle=2264,i,14722687578550995115,2337732979422326884,262144 --variations-seed-version --mojo-platform-channel-handle=5404 /prefetch:14
  2⤵
  PID:4968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5268,i,11200283841015601608,11442124219228649477,524288 --field-trial-handle=2264,i,14722687578550995115,2337732979422326884,262144 --variations-seed-version --mojo-platform-channel-handle=5376 /prefetch:14
  2⤵
  PID:3396
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5992,i,13834812868978318688,9383646307213336467,524288 --field-trial-handle=2264,i,14722687578550995115,2337732979422326884,262144 --variations-seed-version --mojo-platform-channel-handle=6008 /prefetch:14
  2⤵
  PID:5052
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5992,i,13834812868978318688,9383646307213336467,524288 --field-trial-handle=2264,i,14722687578550995115,2337732979422326884,262144 --variations-seed-version --mojo-platform-channel-handle=6008 /prefetch:14
  2⤵
  PID:292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3676,i,5450547140546151493,9459240909787893720,524288 --field-trial-handle=2264,i,14722687578550995115,2337732979422326884,262144 --variations-seed-version --mojo-platform-channel-handle=5080 /prefetch:14
  2⤵
  PID:1880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3640,i,1418471533720662828,8151521355230084652,524288 --field-trial-handle=2264,i,14722687578550995115,2337732979422326884,262144 --variations-seed-version --mojo-platform-channel-handle=6608 /prefetch:14
  2⤵
  PID:1860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4288,i,1465169953103068342,9094009232190849412,524288 --field-trial-handle=2264,i,14722687578550995115,2337732979422326884,262144 --variations-seed-version --mojo-platform-channel-handle=6560 /prefetch:14
  2⤵
  PID:1092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6600,i,18058272849751795294,18088433629084976401,524288 --field-trial-handle=2264,i,14722687578550995115,2337732979422326884,262144 --variations-seed-version --mojo-platform-channel-handle=5512 /prefetch:14
  2⤵
  PID:3600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=4288,i,2040475056101567726,6799557460019778152,262144 --field-trial-handle=2264,i,14722687578550995115,2337732979422326884,262144 --variations-seed-version --mojo-platform-channel-handle=6516 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2752

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1092

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5228

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 59619e39464102fa53912dd9a15237954c5125d546c48a72b8bdb58ad9eb9753
MD5 f80a0057aa895d42a15b594d07d09f76
SHA1 2478a67794a5362ccf809b7a2c8f64a03c72fa32
SHA512 4a9ec8459a11d9e573883d5eacfd5386cf838bad2bd0b33ff1b37017f5f2cf6bfcef877344a87892e3c49ce624e0cae52791ded1593b8233138de87fd2e5e634
TLSH
T1C6D02B75F668E9D2C140043C00410920706035066F6801C206030038040324B55022C7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 91a032a4ffcdd10503afdeb5220904a7e7cea899c3a55606bb3e90180ed9472e
MD5 f04321ebc7aa4a8f91bb5362a6c4c79b
SHA1 c98d3283204e4a0453e416a04c3ae56e4c3feed8
SHA512 c2faa7fae738d85299e6f63b9eaf33c25db5a255ea3f5f6a8551842b7e0cec73c7e8b5e86a9cfb9714287d2b382b57b7249bc70671dbfde2815d5937243570af
TLSH
T1DED02B71F678E8D2C140043C00420920705035061F6801C207034038040324B55012C3
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 53b88a8867a3a683104bacf1440d91b435f5c3155fd01b4d4be8cbbcfea9360b
MD5 c6830bb20063467a22cba90ec0c05f42
SHA1 84f15d298eec3714e61432333307a8886cfa0fd3
SHA512 b399e5078fe2077c613e0bd03bd90a7d4bcdbc8622631f9eb8f363505ad5730e0414f20404c85692df121376a184b85b48c488508706dfa370b6a46480fda18f
TLSH
T11D51D74099A48085FF98063197F63E873E34968F65E70FA1418DC9B8DA0E7F9C178798
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 05fe48a47803d0ef6dabb629061951a275c73c56d5f811db6a4120a3ee916a93
MD5 0927450a218877ba7c66af7247b3c3ca
SHA1 69c1a04bb06461e60515e1920dcd254585318e2b
SHA512 0c4b93dec8dc6b039d7ac9ae625c61fe132c35f15f79c0442d93b1d3c3dfe2013dc82cde134cf08df9e2d517d00eb00135c15969367c335de9376df73beb4836
TLSH
T11A419EF3C3E4867E891156F4AA14AE2BCE1D0915432C3D5AC9D4EE1B93E34B1E14199F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 374bf0444f4082a6fcf9ed2c03f51e3e47da92d98bae182f229bf777ef0c8500
MD5 060b0073816fa778f1ea5b1798e214ec
SHA1 380133e601b7d6cc9f8780e413e5ce2438ca73bc
SHA512 b66eaca519957e33270e9efb078f2210fdd397e68ac3be504c103f7f1cfafc0b41ffcdd6a84c454a7b27e86b397d0668390ca395f7c61ef3affe9b5da3605967
SSDEEP 192:sxRiRLbC/fesrnGezoA8p4w/g6+WNIYi+kWGGiEIgD0J:sxRilC/fesrGD5/5IcE
TLSH
T1A432C715AD68E97B9CDBD20DBB55BF53D2F9503260D11E48B6FC861C04EBACE220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 c6f4400fea4113ae2765d604e27dde1eb79582c0375f1a06c940e490a94abf9c
MD5 643f90112adc54996e5e59aac5114085
SHA1 ce172059476ded35fedf6dfd92093b7d21614f8e
SHA512 44d22574dfd80799347f9414e72e644fcb2c20a95dcc267163ce185dc135683c270e73e3b2b350f781a50e6421e62f47c6b11039e3ad5bbad733a6124bb4bb55
SSDEEP 192:sxRiRLbC/fesYnGezoA8p4w/g6+WNIYiVkWGGiEIgDuJ:sxRilC/fesYGD5/5Ij2
TLSH
T13732B615AD68E97B8CDBD20DBB65BF53D2F9503260D11E48B6FC961C04EB6CE220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 a34fa8ba8ec0f6dd7a5aa6e66cf942731a2f339a0fae67c59ac0960b3897970d
MD5 ea3520157174416645ebff707fd6eb32
SHA1 5dd157a43c03190b75ef677e63e86884a2843620
SHA512 1a440157b046cebc224865a8236584d560e07e01308bf1527326c84356510668c3a9af644c66e06e68a0166c051e8391150a576e17e3304fd05c81c0dc30420d
SSDEEP 192:sxRpRLbC/fes+nGezoA8p4w/g6+WNIYiVkWGGiEIgIJ:sxRplC/fes+GD5/5Ijs
TLSH
T14C32A515AD68A97B8CDBD20DBB29BF53D2F9503261D11E48B6FC961C04EA6DE120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 842691493663c90d183e469a224784fbf69bad218fbbd6bfceb5bbcf5d559ed0
MD5 517f33c02009ba44a02b13f19ec00e9b
SHA1 3a3fbaa66a22ec8e72f2d7fca8ba65b71f56248b
SHA512 c3bad4b17622fd91c3f0a4de608ebe33b6fcf3e1348d213ba7ca5d34118776514362de8984a07d00880e414a19f73081fb4612769253bf55357168a989f8b83a
SSDEEP 384:XLMDmVifCtgvdFfnvKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVC69lLRRKrohZm:XIDmVoWgvHfnv8F1+UoAYDCx9Tuqh0Vz
TLSH
T116B2DA2B640DC77F4F800A9DAC296FD77D9801CB9A588D4047FE994C02D77EA921A4DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 de29785e34a422fa9630f3d0f61214d2bf4949aa565cf3079e5bb1d19a93141a
MD5 f6e4f7ad9e9ba596928ccfb9a38f2951
SHA1 7721012b01191cc111c19ae92efcc877ca80368f
SHA512 c45a16343ac88708130c74ea734ddf53f4cbd60156ff75864de293fe2dee2b79b2f445cdf8bcc3af1475ec8048e48f857dcd2158370b32c3e26688c963fb516c
SSDEEP 96:KUowK1+Kklcxl3X3qxP+Zr1qKzfrLqXFt2TVhebKKkMS:qj35Rf
TLSH
T139911220303B2280397E3919D0E8977E534171673165E66B7FEA40A38E2BE451CFD5DE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

c71c1a1b-5d61-4318-b5d7-38496c7d92da.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\c71c1a1b-5d61-4318-b5d7-38496c7d92da.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 6638e776f118b98804a5bd15647d8a1ccc09c47437f2fee19b60c81aa42aed63
MD5 5c76cd394ddd759fd8c51dfb7566a785
SHA1 27252ab2941b1aa5fd3ce950d97cfdfd49ce7e0b
SHA512 5e4973883fb0660717f47f5900e6c2a400b970bc4b450afc3e3f38bd5315b9055a5c39189efcf2ac4592d3fe27415edfc03aea9ab51bb9b99db867b0576581ad
SSDEEP 768:w/UxvxjgC+93hvcZ0rfZWnYo/VYoyqBw4Ot5AEl94BHYjH0IO4:dZj3+931qBVa5AEncHYjUl4
TLSH
T1CD03BF39DCA49D239CF6E7C5B61B37479EF19563A4C16DE48CDC6D0E0A8729E130B80A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 87c6631d4f6221a71da54469a8be175db25c7572adb7ebc3f7852065526412cb
MD5 c88809b0bfe08edda32a2cca2b9b1f6c
SHA1 e3b8bdc2ccd8e7d2c430a7ccc0c15a8316a1789e
SHA512 a92592b51b634f58f5282405b713537ec9d7d34271acadd5fcc7e8c8d88a35eab9a3498eec7e517c6e809c5be58160c1db1f3c27e18b71e2952bf48583675382
SSDEEP 768:WI3zvcZ0rfZWnYo/VYoyqBw4Ot5AEl94BHYjH02sKjpN:WI3DqBVa5AEncHYjU2sKjr
TLSH
T1C6F2AD35DCA189739CFAE3C5B60B36066EF19153A9C15ED098DC6A1E0A8769F134BC0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 c23633748a2b1860d081718a17b4f0db1d0f7a235e1be9627f326aa6530a021e
MD5 f07a3adde0084d307529754e07310bbd
SHA1 3266369114c740a47b40a1639cfe863854b9f87c
SHA512 e3d27be4cbe395bbb2a43f02346661fee3d3a11b2f628d970ea8be5f36ce192a8526121c8cdbb1598e5e2fd1b2a0da2565f1d3a5eb173bb0a07b9cfaf50c50a2
SSDEEP 768:gI3UvcZ0rfZWnYo/VYoyqBw4Ot5AEl94BHYjH02sKjpN:gI3+qBVa5AEncHYjU2sKjr
TLSH
T1D9F2AD35DCB089739CFAE3C5B60B36066EF19153A9C15ED098DC6A1E0A8769F134BC0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 0376005e07da0d0dd54191d123d76c205fdbc35f7c414d2cdfefcd50fdba3183
MD5 8d9b842376dfdef33fe37b41cbecacec
SHA1 cedb24ff236ac693d17438d315340cdda9244f18
SHA512 c1779205a803cc0c17f8f6fa41415474cb52c85867a510ea15043e253f951127f5ba4573e26f37832fe76687c0f512ceb2e547cc5468c14bb5c42bdfaddfebe9
SSDEEP 768:iFQS37wg3vcZ0rfZWnYo/VYoyaBw4Ot5AEl94BHYjH02sKjpN:5S31aBVa5AEncHYjU2sKjr
TLSH
T1A303AE36CCA4C977ACFADBC5F60A33069EF19163E9C1AAD0E9DC691D054719E134BC0A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 4bd34cbf685062e8ea35757a28add99a516ee1d0ad58ce84795fb7feff085fe6
MD5 e0b416ccc78ead0e70573fa76250000d
SHA1 e3702fa99916d5640a6c674d251591ebbefd87ab
SHA512 7dc8e865e6e2ee27508192520ab11e27c67694b035c962bfee6a1e13a17c530fc1690cc58eb607dbf531fc753e1c3d7cc05347278494d0db039603a5c5de975c
SSDEEP 768:z/UxvxjgC+b3pjcZ0rfZWnYo/tBw4Ot5AEl94BHYj/GAFTN/:GZj3+b3UBVa5AEncHYjOAFB/
TLSH
T10703BF39DCA59923CCF69785770B3387AEF19563A5C26ED48DDC2E1E0A8725D130B80A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4641e611-1163-43f4-a06c-3ea619490a25.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\4641e611-1163-43f4-a06c-3ea619490a25.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download