3e10b452175f0acbfcda6bc2487e308e0c5f4913f1ca5b0ed77be7a462a066bc

Analysis

max time kernel
149s
max time network
142s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/09/2026, 17:43

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
attachment20260930-429995-dwss9a.html
Size 171B
Sample260930-warefswbpe
SHA256 3e10b452175f0acbfcda6bc2487e308e0c5f4913f1ca5b0ed77be7a462a066bc
MD5 e082ebc14f6b24945336f6450b985e45
SHA1 df12ad35c265b0198582e2dc94e0a93048e4de82
SHA512 8dac8fb7101ee6a50ec58409a7d51009d9a3f6b1266377cad6f7f9001bc6f6734ffc067e7cfd0f17a1d0e288803fa8c8d37925590f6421772323ce99a4a9a1bf
TLSH
T1E4C08C7D10C13C150270A93C1DD3B397EC93198E01422B41308180232F35620CED32D0
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2112	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1696934516-3600988056-1840298893-1000\{A589701B-E62F-4A5E-BA49-3C1513B16481}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4636	msedge.exe
4636	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 2252 wrote to memory of 404	2252	msedge.exe	88
PID 2252 wrote to memory of 3452	2252	msedge.exe	89
PID 2252 wrote to memory of 2112	2252	msedge.exe	90
PID 2252 wrote to memory of 3452	2252	msedge.exe	89
PID 2252 wrote to memory of 3452	2252	msedge.exe	89
PID 2252 wrote to memory of 5096	2252	msedge.exe	91
PID 2252 wrote to memory of 5096	2252	msedge.exe	91
PID 2252 wrote to memory of 1700	2252	msedge.exe	93
PID 2252 wrote to memory of 1700	2252	msedge.exe	93
PID 2252 wrote to memory of 1516	2252	msedge.exe	94
PID 2252 wrote to memory of 1700	2252	msedge.exe	93
PID 2252 wrote to memory of 1516	2252	msedge.exe	94
PID 2252 wrote to memory of 1516	2252	msedge.exe	94
PID 2252 wrote to memory of 2076	2252	msedge.exe	95
PID 2252 wrote to memory of 3536	2252	msedge.exe	96
PID 2252 wrote to memory of 2076	2252	msedge.exe	95
PID 2252 wrote to memory of 2076	2252	msedge.exe	95
PID 2252 wrote to memory of 3536	2252	msedge.exe	96
PID 2252 wrote to memory of 3536	2252	msedge.exe	96
PID 2252 wrote to memory of 2452	2252	msedge.exe	102
PID 2252 wrote to memory of 2556	2252	msedge.exe	103
PID 2252 wrote to memory of 2452	2252	msedge.exe	102
PID 2252 wrote to memory of 2556	2252	msedge.exe	103
PID 2252 wrote to memory of 4912	2252	msedge.exe	105
PID 2252 wrote to memory of 3820	2252	msedge.exe	114
PID 2252 wrote to memory of 4928	2252	msedge.exe	115
PID 2252 wrote to memory of 792	2252	msedge.exe	116
PID 2252 wrote to memory of 2836	2252	msedge.exe	118
PID 2252 wrote to memory of 2836	2252	msedge.exe	118
PID 2252 wrote to memory of 100	2252	msedge.exe	125
PID 2252 wrote to memory of 100	2252	msedge.exe	125
PID 2252 wrote to memory of 4636	2252	msedge.exe	129

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\attachment20260930-429995-dwss9a.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ffd838bc188,0x7ffd838bc194,0x7ffd838bc1a0
  2⤵
  PID:404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1668,i,12605109938990549715,17703864299274908814,262144 --field-trial-handle=2280,i,10751280808876278263,3143540978361113723,262144 --variations-seed-version --mojo-platform-channel-handle=2276 /prefetch:2
  2⤵
  PID:3452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1816,i,864929543007059661,2462089348409617604,524288 --field-trial-handle=2280,i,10751280808876278263,3143540978361113723,262144 --variations-seed-version --mojo-platform-channel-handle=2308 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2576,i,17984676722281397275,5585920248267797682,524288 --field-trial-handle=2280,i,10751280808876278263,3143540978361113723,262144 --variations-seed-version --mojo-platform-channel-handle=2708 /prefetch:8
  2⤵
  PID:5096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3448,i,329648260952652773,10199082570321773376,2097152 --field-trial-handle=2280,i,10751280808876278263,3143540978361113723,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:1700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3452,i,10307606966098437281,5803989217659637565,2097152 --field-trial-handle=2280,i,10751280808876278263,3143540978361113723,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:1516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4224,i,12426533939961806985,15470694406257334719,2097152 --field-trial-handle=2280,i,10751280808876278263,3143540978361113723,262144 --variations-seed-version --mojo-platform-channel-handle=4276 /prefetch:1
  2⤵
  PID:2076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4256,i,13528588805706075591,14059525375013241605,2097152 --field-trial-handle=2280,i,10751280808876278263,3143540978361113723,262144 --variations-seed-version --mojo-platform-channel-handle=4328 /prefetch:2
  2⤵
  PID:3536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4816,i,116354834316742282,14260693344605090531,524288 --field-trial-handle=2280,i,10751280808876278263,3143540978361113723,262144 --variations-seed-version --mojo-platform-channel-handle=5164 /prefetch:8
  2⤵
  PID:2452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3632,i,9533956026349217855,8064822797718869612,524288 --field-trial-handle=2280,i,10751280808876278263,3143540978361113723,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:8
  2⤵
  PID:2556
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5836,i,6780642062582309986,15555122651220518816,524288 --field-trial-handle=2280,i,10751280808876278263,3143540978361113723,262144 --variations-seed-version --mojo-platform-channel-handle=5868 /prefetch:8
  2⤵
  PID:1668
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5836,i,6780642062582309986,15555122651220518816,524288 --field-trial-handle=2280,i,10751280808876278263,3143540978361113723,262144 --variations-seed-version --mojo-platform-channel-handle=5868 /prefetch:8
  2⤵
  PID:4912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4360,i,4290910027684759986,6986559437844806777,524288 --field-trial-handle=2280,i,10751280808876278263,3143540978361113723,262144 --variations-seed-version --mojo-platform-channel-handle=4540 /prefetch:8
  2⤵
  PID:3820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4300,i,3119176504882532989,10835651118417677453,524288 --field-trial-handle=2280,i,10751280808876278263,3143540978361113723,262144 --variations-seed-version --mojo-platform-channel-handle=6308 /prefetch:8
  2⤵
  PID:4928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4536,i,5398756882253350410,607298899645883800,524288 --field-trial-handle=2280,i,10751280808876278263,3143540978361113723,262144 --variations-seed-version --mojo-platform-channel-handle=4516 /prefetch:8
  2⤵
  PID:792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4892,i,791589671744287537,13999673313378112187,524288 --field-trial-handle=2280,i,10751280808876278263,3143540978361113723,262144 --variations-seed-version --mojo-platform-channel-handle=2932 /prefetch:8
  2⤵
  PID:2836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5304,i,3060136908978142780,13309981392578425288,524288 --field-trial-handle=2280,i,10751280808876278263,3143540978361113723,262144 --variations-seed-version --mojo-platform-channel-handle=5280 /prefetch:8
  2⤵
  PID:100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5344,i,412922569239063246,16815611429091116423,262144 --field-trial-handle=2280,i,10751280808876278263,3143540978361113723,262144 --variations-seed-version --mojo-platform-channel-handle=6004 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4636

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3248

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 5421c8b0bf6e5f37422a05b412b233cde63f1db63aa71d65c91c5b31275595c0
MD5 07f616e3db8597d59ea940f94c1abb0b
SHA1 eedf28342bbff8c4cae798c2980ea6953992f1b2
SHA512 30782b7b7d8c6db47a40bc15f968f35fca7939aaa4b83a8a19c8f5a415c745b54c161abc0037d24bad8ebf15d5deb4134f24e357c1b5869f1598fa22619302be
TLSH
T163D0243C7F114D50D40041710530D50435D3CC1740D015050C354C074C101C11305CD0
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 ea28cdd76f43a577ce64c932fe84aa8a2a0b40207ac6fc99e2c9693e8205efcf
MD5 30b5ae4319818c017a15e68c0eb73115
SHA1 160ab51ba587b22c67669864bebcc1d3d5e73a06
SHA512 9fb41c83ecac6ac708b2d4afbed909c4b4f6357b5b8e4067314ebae0ff7281a8e0194d5871f6495ba1394a85dd7282a1ebfe01c0e832e55b7b32728d760e193a
TLSH
T1BC514CC2BDF160D1FBA8007888FD91D7327A4573174B1D392D91C778BA2F76618023A0
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 6d97bbf93a67401a6455da0f7001cdda799ce2d1ad8514101395d5273fac122f
MD5 bf64de498256517a17831f0cfd004a96
SHA1 4ea7b0026489944e418a7eaab11705d8d5f58c0d
SHA512 c2a8d5d2eb47843542146487e4c73aef1eb15bb9d0e33ef5790a12dd17bc7db382925800e2f514afa7088b59e4df5312bf2f6a09d9c39a25d61c69b5bbd493b7
TLSH
T1AA11BAF3C7D585AECA0116F05A28EE2BCE2D0606821C7D59C9D4EF2BD3E3075E10299B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 2aa8bc1dd5b0a5f9ebf3187b1dd2465c5e8b0e61e24dc4acfc04acd40cf2d58c
MD5 7f38f2ddcb5c16f9fdac5b13a3df76d2
SHA1 758ef2a43a0354944348f5ab1dbc874f6e76de91
SHA512 e38d95ae7c83f55c27fa5880af1ca7a47d489bb03a3e6a08b11b907009f448076ee3edd6b53bda827c7451005a1ddf478b3914eb6b2108c87428b9a90689d298
SSDEEP 192:sxZYRnWL/f4sOeIdpdnHW6+WNGY3RsJIgrJ:sxZYcL/f4sOPZHbGT9
TLSH
T12622B8116E78A97B8CC7D20DBA15BF53E6F9503291941E58E6FC862C05E7ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 9e5614bff1ef3333e0b50af40f07d37db909f879a5293c18841f4e0af8aed3ba
MD5 5252829a521b0a7ef8aa3d7a64d31fdf
SHA1 963c7fa152c33ed90b534a795b8eed474243dbbb
SHA512 ef0b8984926084d84c3c9a1ba7df679c31705e356f7985a96a50522b6250e6bef6c572e82243af80950fd23049fd514ed7c94c9c5f1fd17b157f7ac5e3c8d27f
SSDEEP 192:sxZYRnWL/f4sUeIdpHnHW6+WNGY30sJIg5JJ:sxZYcL/f4sUPHHbG0t
TLSH
T1EB22D8516E78A97B9CC7D20DBA19BF53E6F9503251901E58A6FCC62C05E7BCD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 2602299f6cf0c57996532682e327a99a1812b396e249fbc48e4ad1a17a047878
MD5 8bac47a9b2d6d339b565c1993c29db0f
SHA1 4cca04c7d7e770186bb3595821ba96e6bebde49d
SHA512 7efb91b300cfe2f6224f6b1d356435fadded0e4d005d673b086bd954e98681bc10a2de38666650b6c30ea869fbeb3aac472dbf9e5b9e42c3a508949791525554
SSDEEP 192:sxZYRnWL/f4sUeIdpdnHW6+WNGY3NsJIg5JJ:sxZYcL/f4sUPZHbGZt
TLSH
T11122B7516E78A97B9CC7D20DBA15BF53E6F9503291901E58A6FCC62C05E7ACD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 e9174f5285aa303ecf090da929b413f6201343c1eb9392259cc8c70906d38027
MD5 a81eab40eba60bec4e0e47549292c8be
SHA1 62111122c05f66502d32d0818c028ab8da96e64c
SHA512 d497b8a74fd7e2b3abd4680204af35a9f4b9eba679ebab792bb11d3885e47f6e06ebc1dfb44220ae3e0e58b94b88620d1b008903277acd0acfca04e05ffd7412
SSDEEP 192:sxZYRnWL/f4sMeIdpdnHW6+WNGY3RsJIg5rJ:sxZYcL/f4sMPZHbGTr
TLSH
T10022C7116E78A97B8CC7D20DBB19BF53E6F9503291941E58A6FC862C05E7ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 3c86064a2234222526170b01f374914f01a251b5b59a4d2ef19fc3b252efc445
MD5 58ec4abc61d3084bc041d7eff90c4909
SHA1 7b40459bc1aee794fcf30b01ccb9025bf156ef12
SHA512 731422f667dd00553889aa3f028372f4beb434e11728f4e78ea6dbc29d7d96d9ff6f5b491750136ee96ab85e0d560852a5d76c22339f94c53750a1a425f92b6b
SSDEEP 768:d730AbSWvS2l98F1+UoAYDCx9Tuqh0VfUC9xbog/OVGmLlLJ72WrolZMR:d730AbSWvS2l9u1jaLmLZ12tq
TLSH
T1CEC2EB3B644CCB7E4FC01A9DDC6AAF9B6E9C02C7A6548D4047FA984C02C77EA51274DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 900dc81dc702e90fa702a47619f3380f61c631caa51184a85f2290023fd2c7ea
MD5 2a38f4c23d84cc5aaea4486334d1ae1f
SHA1 0605cf9cd262bc598dfaec27fdd65b8dd1812683
SHA512 720338f7515fb3690a819e03f04ae427237c850a2901a502284d90c16619aba63470785a4bde71866a85a1c8aa9e735f42adb8fc71302586fc84be0f13f398d8
SSDEEP 48:K0BQ9xbfj8bP6nISJ8K9p1D8xhsYarhhyLKV4kKIYJbUzEIScJK9A16JxyZYLsoo:KcyIK7ia2VKKOEdkAKJKCJ
TLSH
T17891B05131770240387E254E81F8A72F128135F37019EA2BBFB955B64E6AE0C4DFE8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59932e.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59932e.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 eb43ccaff2f4fbc94d3ac2cfbe4f18983897b299740f06ccd96bddab958ae050
MD5 3ef199e984e9843515b51866b46a8899
SHA1 bfedd570dcffea0cd4022508df0647c70689fe72
SHA512 d51653e952bbe3447f3fd76bc258b9bf16a1441cf1ad80cdc50daa7e706a049d9902afba40296a2a48b960aec468ef7d220449114bf14f4fd631b0d65a7c5627
SSDEEP 384:SZcIhsNqGNVdpuqr49iX5F7Z5TtgOIwZOyqLwoP:ghMh8a3TXsZ80
TLSH
T1DA828C32A8B89CBF5CF7D154F14A76035FB88267E7D8AF54C8ED672D01D6698030B922
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 019b4097d17d585bd0bd295dc6e33d3122c7e972a69732851be88e24d2aa6b88
MD5 7f11e637ea8fb0ab668bb63aa508cd7a
SHA1 76a60870077efc7ed9b6b732a8150cf62ee56380
SHA512 decf1cd63d7ba8c099166dc2714e795ac3f2ff0c14205eff0b20db8fa331577346a1358a8d55a63d160367174d344617a350d3e6d051af7f1c450dc3730152d9
SSDEEP 384:SiFiZcIezsNy8TUNTUlIl9NVdpuqr49iX5F7ZMTtgOIwZOyqLwoP:ZFQ+jwgxh8ayTXsZ80
TLSH
T1C6A26B3398E889BFADF79A44F64A36039FB44167C694EA64D6DD6B2D00975D8030BC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 570fe8f70f81b7ecd89d1bf2d675f4973ee17ffd1bc799643f337af4d9938b6e
MD5 e84a86c4be13f4f01ad68c6631e60674
SHA1 21d829b7cb6a37ef77d11314dd7b8734046d9663
SHA512 718b327600d99ea2c8a622a439dfe06cd5b67301e4f9bc34743e72dc6b35e1985cdb72dd4f6f936cb2346cbe67385cf9de5c817c94f7b1e3769fc7811a0f3a73
SSDEEP 384:rZcIhsNq9NVdpuqr49iX5F7Z5TtgOIwZOyqLwoP:zhFh8a3TXsZ80
TLSH
T10A828D32A8B89CBF5CF7D154F14A76035FB88167D7D8AF54C8ED672D01D6698030B922
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 6d24574ec0a2b0b2145e2ffb02a267dfac6242c177d3ac89229468efd6307ae8
MD5 97b175bc86a7e57929d7fe03555c2fb2
SHA1 027c9cba1121017b346ea4d102d01c40020810f0
SHA512 2db0b85ed96fcdad1ffe5885c55f8f885862bbef40583fc948d6f1906b34b4c7b09459d86edd46da0d3f8f969b6df4717ce2b2137e5273db87d7b35246aa41c4
SSDEEP 192:LON76AmwppQmiUyWlIsiX5F7Z4eSlRtqKU6:LON76ipH9IsiX5F7ZkTU6
TLSH
T1AC121B36B8B8AC7F4DE3A554F04735136EA54267DB886F94C9EC2B3C01DB59C530A832
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 d5093880dec9b76a9bfd1d2888b94d79a88fdee5c1daccadbada43f49b2bdd53
MD5 f09a2ea13dfac380231d1c67296b0f8d
SHA1 c8b579c90ee103824590af78e056d604c282b644
SHA512 4c33a43e416e0265f56a0585f0b5be5638398c1d30c8f8af76ee458ad555ea86a921797c26131d2a1630a32beb3fd0357125a24ee4614507614ce842ae546b40
SSDEEP 192:LONlB6AmwprQmiUybl6siX5F7RJiakZU6:LONH6ipdC6siX5F7GbU6
TLSH
T1A402EA35BD686C7B8DF3AE45F54737139FA5116BE6946F44C9E81B2C01D764C1306832
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

718b0810-0d18-4947-8542-64d2d0f647a3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\718b0810-0d18-4947-8542-64d2d0f647a3.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 df0b36acb6759fc2c4e46abd2c4da419d203062bd06a7214fb7d45ec3b3d9a82
MD5 bb209cab23bab680d7bd58b7610201df
SHA1 ebc603170b2b92a0d766d83f37709cdaf9f3462b
SHA512 94fb2daed40bf619f680f650f7ac9d0a4ceed224c438307f8236ed32ce8428a4ef3b527b481a84580faf6c52329c34ed7ae5cb2f77d9a34e4eeb73bf00864d7e
TLSH
T1E641296CA6F91148B3B36E5A9BF6A86D487BB9332E06D09D10110D4F0762B40C9B1737
MD5 SHA1 SHA512 TLSH

Submit Download