8d4fcf5a99266d4b0f1dc48eeda9ee3dce2c1426009f3d26a510c4740fdf4ffc

Analysis

max time kernel
148s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/09/2026, 18:28

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
.html
Size 294KB
Sample260930-w4jayafa63
SHA256 8d4fcf5a99266d4b0f1dc48eeda9ee3dce2c1426009f3d26a510c4740fdf4ffc
MD5 e35f0bc4988d4d60431e49522b69ea44
SHA1 da68bf1808ccd30a98549de81889a952576f71d7
SHA512 248a12b8a9df9bf02e28f0c786a10e8a89dd0f01e883ea54ccad4e1d37eceb17cf190927fc7037ec9a087436f67cb728dcaaad6d47de9ce06b578cb50190698f
SSDEEP 3072:f0EnynzqdhPQIbLilR48Fg3IVZgGUnCIhrXvJ85ZKJZ4XA:cEnynzq7YIbLA48FLZgjCIv9JZ4w
TLSH
T110544B726300B53BB813DD90A6BF6F0E3C29E127DC0A46F8A591E930DFE2DB6151525E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4708	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-939655444-3071939294-1401108526-1000\{067E6C88-7338-4416-BFCB-35D5310F039D}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
548	msedge.exe
548	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 556 wrote to memory of 1028	556	msedge.exe	87
PID 556 wrote to memory of 4708	556	msedge.exe	88
PID 556 wrote to memory of 4620	556	msedge.exe	89
PID 556 wrote to memory of 4620	556	msedge.exe	89
PID 556 wrote to memory of 4620	556	msedge.exe	89
PID 556 wrote to memory of 1492	556	msedge.exe	90
PID 556 wrote to memory of 1492	556	msedge.exe	90
PID 556 wrote to memory of 4692	556	msedge.exe	91
PID 556 wrote to memory of 4692	556	msedge.exe	91
PID 556 wrote to memory of 4692	556	msedge.exe	91
PID 556 wrote to memory of 1464	556	msedge.exe	92
PID 556 wrote to memory of 1464	556	msedge.exe	92
PID 556 wrote to memory of 1464	556	msedge.exe	92
PID 556 wrote to memory of 2304	556	msedge.exe	93
PID 556 wrote to memory of 3480	556	msedge.exe	94
PID 556 wrote to memory of 2304	556	msedge.exe	93
PID 556 wrote to memory of 2304	556	msedge.exe	93
PID 556 wrote to memory of 3480	556	msedge.exe	94
PID 556 wrote to memory of 3480	556	msedge.exe	94
PID 556 wrote to memory of 688	556	msedge.exe	103
PID 556 wrote to memory of 688	556	msedge.exe	103
PID 556 wrote to memory of 2496	556	msedge.exe	104
PID 556 wrote to memory of 2496	556	msedge.exe	104
PID 556 wrote to memory of 2520	556	msedge.exe	106
PID 556 wrote to memory of 2520	556	msedge.exe	115
PID 556 wrote to memory of 4876	556	msedge.exe	116
PID 556 wrote to memory of 4872	556	msedge.exe	117
PID 556 wrote to memory of 4892	556	msedge.exe	126
PID 556 wrote to memory of 4892	556	msedge.exe	126
PID 556 wrote to memory of 988	556	msedge.exe	129
PID 556 wrote to memory of 988	556	msedge.exe	129
PID 556 wrote to memory of 548	556	msedge.exe	130

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffb7641c188,0x7ffb7641c194,0x7ffb7641c1a0
  2⤵
  PID:1028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1832,i,11633719030796883794,4938857615579696729,524288 --field-trial-handle=2232,i,2627500584520982615,3471653063123518802,262144 --variations-seed-version --mojo-platform-channel-handle=2268 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1624,i,9095466189906082313,12750236700854470122,262144 --field-trial-handle=2232,i,2627500584520982615,3471653063123518802,262144 --variations-seed-version --mojo-platform-channel-handle=2228 /prefetch:2
  2⤵
  PID:4620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2580,i,9247874016425178746,13609291108098710858,524288 --field-trial-handle=2232,i,2627500584520982615,3471653063123518802,262144 --variations-seed-version --mojo-platform-channel-handle=2404 /prefetch:8
  2⤵
  PID:1492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3416,i,10191621169694968141,3205467708812555347,2097152 --field-trial-handle=2232,i,2627500584520982615,3471653063123518802,262144 --variations-seed-version --mojo-platform-channel-handle=3436 /prefetch:1
  2⤵
  PID:4692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3432,i,4605336674573899004,7557837095774659367,2097152 --field-trial-handle=2232,i,2627500584520982615,3471653063123518802,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:1464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4248,i,3806291874411536189,9152265303031489189,2097152 --field-trial-handle=2232,i,2627500584520982615,3471653063123518802,262144 --variations-seed-version --mojo-platform-channel-handle=4284 /prefetch:1
  2⤵
  PID:2304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4276,i,4339505924025376035,5215132031662741018,2097152 --field-trial-handle=2232,i,2627500584520982615,3471653063123518802,262144 --variations-seed-version --mojo-platform-channel-handle=4300 /prefetch:2
  2⤵
  PID:3480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5016,i,15852600907939997656,7871348522527826157,524288 --field-trial-handle=2232,i,2627500584520982615,3471653063123518802,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:8
  2⤵
  PID:688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5020,i,3752240744916546127,12809957329246249202,524288 --field-trial-handle=2232,i,2627500584520982615,3471653063123518802,262144 --variations-seed-version --mojo-platform-channel-handle=5208 /prefetch:8
  2⤵
  PID:2496
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5788,i,17645020160945255029,4467419688912219881,524288 --field-trial-handle=2232,i,2627500584520982615,3471653063123518802,262144 --variations-seed-version --mojo-platform-channel-handle=5812 /prefetch:8
  2⤵
  PID:4896
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5788,i,17645020160945255029,4467419688912219881,524288 --field-trial-handle=2232,i,2627500584520982615,3471653063123518802,262144 --variations-seed-version --mojo-platform-channel-handle=5812 /prefetch:8
  2⤵
  PID:2520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4524,i,8280048176191416514,1333732090425243338,524288 --field-trial-handle=2232,i,2627500584520982615,3471653063123518802,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:8
  2⤵
  PID:2520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4528,i,2263505293301458905,15879467443163792868,524288 --field-trial-handle=2232,i,2627500584520982615,3471653063123518802,262144 --variations-seed-version --mojo-platform-channel-handle=4292 /prefetch:8
  2⤵
  PID:4876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4512,i,16197012173997390040,13298197628200679008,524288 --field-trial-handle=2232,i,2627500584520982615,3471653063123518802,262144 --variations-seed-version --mojo-platform-channel-handle=5872 /prefetch:8
  2⤵
  PID:4872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5392,i,3847620820335471998,7356285338811700575,524288 --field-trial-handle=2232,i,2627500584520982615,3471653063123518802,262144 --variations-seed-version --mojo-platform-channel-handle=5368 /prefetch:8
  2⤵
  PID:4892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5972,i,3598436087316504511,15933662213359514854,524288 --field-trial-handle=2232,i,2627500584520982615,3471653063123518802,262144 --variations-seed-version --mojo-platform-channel-handle=5380 /prefetch:8
  2⤵
  PID:988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5304,i,6913192076425770232,16750372863527399259,262144 --field-trial-handle=2232,i,2627500584520982615,3471653063123518802,262144 --variations-seed-version --mojo-platform-channel-handle=5168 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:548

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3780

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a82246f88da27a43b1718bd24e8cdfa3c17ae97a8d238e7befd5fac9a384a0a9
MD5 89669bdc21a8230bc30fb1b7dd97b74a
SHA1 2a5e6b394e76cb0c70b0bba2c18c74bbdd1a4cf6
SHA512 0c8eb5310ea11fffab4f6974f3ba27683ef8dd0cc87e73007e67d163fd017b83b6c0025e8e6b07401acc6ea67dcf75918453237e2f7dcf47044e2050973484b7
TLSH
T1C3D022F8FBE28020F0B23A3200BCC3C30008AB0820A803303C33200C2C880CAE22BE8C
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e6cd13b34cf3f758c2f4e7c55e8801132cc91647c947cbafe475ce8928ff2c2f
MD5 b36cb034fe7df72fefb0bfa9340c6a6f
SHA1 8471623779cc15452b8cb60924e40c193607fe42
SHA512 6f72e14e09c254a1a7d581eaf85757baf7b4cd74f1e1978ecd80b20d91bc8f87462f9d782c3b0604a3b7c22e084b46d1afb4dd162a82905a3464ca87d8223542
TLSH
T1C6D024F477D14010F4713531007CC3C300045704105443303C33100C0C440C5D117D4C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 6885f52995bdd2181530bc5f0cbfa83f790f2f444edbc8039f3f9606f21376ff
MD5 b2651731964074116270813c09910124
SHA1 19da3d9b38efe4066ad04fdd7b2aff5ffa0c8ff8
SHA512 330f08c0d791f6dfaa185ab67200f66c51d3e8ce2e49aa5585c85f2c79bbf3698b93525f2cca143b5b69cc69f734f3ed0102d917a353aff77bf3c6269ee335e5
TLSH
T1AF613AC25513C2DEDB5982B587D921863EBCD6B8A2C3CD9101ABF83B7B0EF965000153
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58be3a.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58be3a.TMP
Size 3KB
SHA256 187f73fef9514d4b8b7b01ea399d0d17a43d81d6a44f99ad969d6ad4ff94d11b
MD5 d7aff80b2fe120fee8f661db4deb07fb
SHA1 891233256eff6fc417b1fd7be1342413599b0997
SHA512 c1191c12033e20d319dcd2dc1d173a24eb1bf56b1b9f0f0e9fc06ba9b3f7fdcad73d2550b3b6bf42fcb969f827fc64ced0603c3a5f77da0da4031ace092c5025
TLSH
T1CE613AC25513C2DEDB5982B587D9218A3EBCD7B8A6C3CD9201ABF83B7B0EF965000153
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 805d86dcfcd796c2909a3a6c057d3da465b6dea8e6ea7827b0ac40cb9505a410
MD5 f6afd43ff220e0d3366140a575956787
SHA1 2aaf1e611aece79de5c8995e8952aa24020e4274
SHA512 7c174543a32575fa6217c2485b83c0391545c4fecbbd64701c00b6ee0525affe3aa640bc0e5e955f810bcbe6f3a991f4bd4cc61c403feaa72c1ad3f7b451832f
TLSH
T15B41EFF7C3D5867E8D0156F09B25AE2ACE2D050A422C3C16C8E8EF5BA3F2471D20259F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 28bd635a6ffd9b40690b74663ff3b8a8e88e363650c67ded8b595128e7442121
MD5 672b90909ddb2d1418081f84254bcd5f
SHA1 48a2fb8b35d400b4d254e12b5499dffa055190ac
SHA512 c4296ee12be8685cad0c8750fa3fa582fa0d331bfc6624d0a2616fecec38ba17da2dc098aaaea3f1a1a675eecbed41736f2f1d50e6d0990956a4d20f1a50ed33
SSDEEP 192:sxZpcRxWM/fZspw0IdpdIHW6+WNGYapYyTIgrJ:sxZpcyM/fZspq6HbGn9
TLSH
T17712B7126E28A97B8CC7D21DBB25BF13D6F9503291D41E48E6FC861C04E7ADE220784F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 8e6a62eae0a5f303b579c5f459363fa936e509f66a1e27fab6645926b82d1bf0
MD5 938bc39434bcd2809867a4aba0870f5e
SHA1 d61bf3b798f48595da782fb6e2a977d310f5b7e1
SHA512 3b85f3370839dd1f547de03ea75446cfd628acc2783a853e4a7f5feb0dd4877a88e4d4c35b613bfebb446036bd52dfa5e568ccc046c4175b36d31ec7e51389f7
SSDEEP 192:sxZpcRxWM/fZsQHw0IdpHIHW6+WNGYapByTIg5HJ:sxZpcyM/fZsQHqoHbGUP
TLSH
T17C22C7526E28A97B9CC7D21DBB25BF13E6F9503251D01E48E6FC861C05E7ACE220785F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 1b1cb81fbc67d440d9c46e4c7239f4d4437425d48aedc8e140804b55885e8fb9
MD5 dd6234bcce9bd0eb4a1b96f628d1a04a
SHA1 5b42d69df11fe96234af9584a7728b7f50c81339
SHA512 0772e489750570f8db6968a17d230544c0a09e69c6b6a38316455bf45c44dd2ca9a96cda570facc51142fb8147a57150f4ca51940a8ccce6d12e99bee00ddb62
SSDEEP 192:sxZpcRxWM/fZsQHw0IdpdIHW6+WNGYapXyTIg5HJ:sxZpcyM/fZsQHq6HbG2P
TLSH
T13A22B7526E28A97B9CC7D21DBB25BF13E6F9503251D01E48E6FC861C05E7ACE220785F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 12ec1b15c985eee68db49a4b213790ec15af19f7601aebce9604b5cf1eb617e2
MD5 cd5b05c31ddf1b4d4814f43d18c6c248
SHA1 03e18ee4c2f7218b0bf1ee546d7a89acae77ff43
SHA512 8b2c018b9a11133fb0963a0318b86d3823af5fa4be984840c78a5ab906bb8f11cf986fb1bd788aa184579ccf68a35ce5351ae0c979133c5634c768353ee6968d
SSDEEP 192:sxZpcRxWM/fZs/w0IdpdIHW6+WNGYapYyTIg5tJ:sxZpcyM/fZs/q6HbGn5
TLSH
T10322B6526E28A97B8CC7D21DBB65BF53D6F9503291D01E48E6FC861C04E7ADE220784F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 2dc8c5f0795f8dbefbb9c5042fef237c2ab8cd9809fb725ff9181f40bd16ebe3
MD5 2b7b785586cf2745f0bf0001ba0796d1
SHA1 f2810900f804a56dbe1749dfae088829211943a1
SHA512 cf1e781903c002f255c509b7337a92fa9208fbb1cabf4a86ceee636be0194a4417f275c4828b56f56a30835fbf63dd398d273006827fb28ea09f3a43e3cc1a49
SSDEEP 768:KCWPcLKWvKeEe8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjlLlACy75ro4RfeDmRG:KCWPcLKWvKeEeu1jaClLiF7y4RWDmRG
TLSH
T106C2FA3B644CCB7E5FC01A9DDC5A6FA73E9802C79A548D4047FE984C02C77EA912A4CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ac9bf150-223d-4483-9c9b-13f1f8ce4dca.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ac9bf150-223d-4483-9c9b-13f1f8ce4dca.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe595922.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe595922.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 fc3cce51568e0e4bfd76467c574bb6414adbcdf62137e31410d7f363457c39d8
MD5 4e972e268d671d7fbb019c97beaecb29
SHA1 4c18042523fc08b62b0178208f08f08ae2cb24c3
SHA512 de9e9cd79f4f2990cacceb621c767f1096e019965773d73675066202db01ef097322e06fb1217730b6c718b68ababa94333350cac565ef6755031b8b840b1269
SSDEEP 384:lZcIhsNzP/Ia1SEwzIGmEb6RiwtgOIwZOyxOoT:dh8zirb4iwXsFg
TLSH
T15B827D729CB8ACBB6DF7A104F58776035EB88127D7C46B94D5EC5B1D01EB2A8030BD1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 17348789e839f44a532d0806cafd742cb89eaaf627bc30ae8d39bc26077abc09
MD5 ce783d454f359e20af0862179a575879
SHA1 f06011363baafcffd3d5ea87d4a4f765c4fbf40c
SHA512 21e0bbb54d14eb2d6c2b686813ab6c4bb49777c7579833eb770f8debea94891bb71c97c10f265c942df6995abb327b7d6d637a8e2604cabfa50a76126f06d42b
SSDEEP 384:hiFiZcIWzsNN8TUNTUlIl2/Ia1SEwzIGmEb6hoiwtgOIwZOyxOoT:IFQmkwggzirb6oiwXsFg
TLSH
T1E7A26C738CE8D87BBDF79A44F58A36038EB84167C6C5AB94E6D85A1C00EB1D8030BD56
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 59351b87b7775c3b45f0c57b39444db0b6c5d1bfce2318fd947567e7f82bb72c
MD5 0dd1df62e18ddb068d490973115f1544
SHA1 24b0c90681fea6bf9e5269c8352b7c6c198ae13c
SHA512 ff3e83acd6a1e23c4455c00fc038624d0a9842c2ba6036a5b386751c27cb155aeab8077eb5f30d85cbf20154f98cf51bd2df41c51b5e8cee5b17a2e8a4c8c965
SSDEEP 192:aONx6IE7QmiUylUTPuIGmE7ROC7sMkCU6:aONx6DtdPuIGmEFsmU6
TLSH
T11F02F935ECB8BCBB9EF3AE09F4877A235EA5112BE6D12F94D9D41A1D00D724C1307922
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 9360d042cf55d6bba667ba12b8fa43efb1cdd5f45fdc8096b5a530bd45243b72
MD5 61eb80e5ca686b9387cb96b9eecdde89
SHA1 58ec6b24ecdc1a31adcdca040a6264fc34931498
SHA512 8afccf623b7f1d28b94ae3cd582f6f0c128e2e0803aee250583ef509c12f57794e6c96ceb28fb532e023c2ff6433d9525055c2def671d261087f1f5af2948d7a
SSDEEP 384:+ZcIhsNz2/Ia1SEwzIGmEb6RiwtgOIwZOyxOoT:8hBzirb4iwXsFg
TLSH
T165827D729CB8ACBB6DF7A104F58776035EB88127D7C46B94D5EC5B1D00EB6A8030BD1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 c030a1f72f8b57ff50c65cc67738b1f52b028a244d40fc42c0d186c878b155be
MD5 5426745a8eba394878d37d903db19c80
SHA1 d2b6125e5977978c3e989cf69bb7a2d752f64380
SHA512 382680c81e7b0126a11ece80b63ae0b1e9766ab19eec6f68f875596af05529d593bc588e6eae00ac0fb0bd510ec07ff9300614b145ce97f39e9917a35b781b44
SSDEEP 192:aONW6IE+QmiUyaUTwuIGmE7RYW6V27HMUqPU6:aONW6D6AwuIGmEb6SHwU6
TLSH
T14212FA76A8B8BC7BAEA3A804F48739135EA54227DBC97F90D5DC1A1C00EF25C130B956
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b6fa9fc5-d689-482a-9c3c-df8a9dec7cd9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\b6fa9fc5-d689-482a-9c3c-df8a9dec7cd9.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 f57c0e532192e280db240e038a85197db0f20b36646b9d6476045280aa0f453a
MD5 9e3729dc10f72ae3cce5a95ec6b0f6db
SHA1 ab52c8c0096210d4982f6bcbe6deec9aaaf2c6f7
SHA512 b6da557d9be21f8d488e54d9123784f4f383f6e6fa8eddec570ab7396c8fd2362b5acb4c8fbf292a89852a1300e88f71c4892cb9e186369bedd8c40f310c9813
TLSH
T16A41F798A6FD1148B3B76E0A9BF7A82E487BB9772E06D49D10110E4F0667E40CD71B37
MD5 SHA1 SHA512 TLSH

Submit Download