3e10b452175f0acbfcda6bc2487e308e0c5f4913f1ca5b0ed77be7a462a066bc

Analysis

max time kernel
148s
max time network
138s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
01/10/2026, 15:39

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
attachment20261001-527357-b3xnch.html
Size 171B
Sample261001-s3mp7avgrd
SHA256 3e10b452175f0acbfcda6bc2487e308e0c5f4913f1ca5b0ed77be7a462a066bc
MD5 e082ebc14f6b24945336f6450b985e45
SHA1 df12ad35c265b0198582e2dc94e0a93048e4de82
SHA512 8dac8fb7101ee6a50ec58409a7d51009d9a3f6b1266377cad6f7f9001bc6f6734ffc067e7cfd0f17a1d0e288803fa8c8d37925590f6421772323ce99a4a9a1bf
TLSH
T1E4C08C7D10C13C150270A93C1DD3B397EC93198E01422B41308180232F35620CED32D0
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2684	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2304238888-3968896904-642854331-1000\{ADB2A5BE-37C1-4520-9A62-73E0531ECA4F}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4924	msedge.exe
4924	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4584 wrote to memory of 4384	4584	msedge.exe	89
PID 4584 wrote to memory of 5260	4584	msedge.exe	90
PID 4584 wrote to memory of 2684	4584	msedge.exe	91
PID 4584 wrote to memory of 5260	4584	msedge.exe	90
PID 4584 wrote to memory of 5260	4584	msedge.exe	90
PID 4584 wrote to memory of 2956	4584	msedge.exe	93
PID 4584 wrote to memory of 2956	4584	msedge.exe	93
PID 4584 wrote to memory of 3524	4584	msedge.exe	94
PID 4584 wrote to memory of 3964	4584	msedge.exe	95
PID 4584 wrote to memory of 3524	4584	msedge.exe	94
PID 4584 wrote to memory of 3524	4584	msedge.exe	94
PID 4584 wrote to memory of 3964	4584	msedge.exe	95
PID 4584 wrote to memory of 3964	4584	msedge.exe	95
PID 4584 wrote to memory of 4352	4584	msedge.exe	96
PID 4584 wrote to memory of 4352	4584	msedge.exe	96
PID 4584 wrote to memory of 4352	4584	msedge.exe	96
PID 4584 wrote to memory of 5912	4584	msedge.exe	97
PID 4584 wrote to memory of 5912	4584	msedge.exe	97
PID 4584 wrote to memory of 5912	4584	msedge.exe	97
PID 4584 wrote to memory of 6056	4584	msedge.exe	99
PID 4584 wrote to memory of 6056	4584	msedge.exe	99
PID 4584 wrote to memory of 1404	4584	msedge.exe	100
PID 4584 wrote to memory of 1404	4584	msedge.exe	100
PID 4584 wrote to memory of 1392	4584	msedge.exe	102
PID 4584 wrote to memory of 4464	4584	msedge.exe	106
PID 4584 wrote to memory of 1884	4584	msedge.exe	107
PID 4584 wrote to memory of 5188	4584	msedge.exe	108
PID 4584 wrote to memory of 1732	4584	msedge.exe	109
PID 4584 wrote to memory of 1732	4584	msedge.exe	109
PID 4584 wrote to memory of 4924	4584	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\attachment20261001-527357-b3xnch.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2c0,0x7ffb1265c188,0x7ffb1265c194,0x7ffb1265c1a0
  2⤵
  PID:4384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1536,i,10003693593209934004,8502399430850549928,262144 --field-trial-handle=2124,i,10436871432600377834,4117407780692783059,262144 --variations-seed-version --mojo-platform-channel-handle=2120 /prefetch:2
  2⤵
  PID:5260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1896,i,14189992439677163081,11048468754519902101,524288 --field-trial-handle=2124,i,10436871432600377834,4117407780692783059,262144 --variations-seed-version --mojo-platform-channel-handle=2408 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2512,i,8762144566331044020,11146211544085804344,524288 --field-trial-handle=2124,i,10436871432600377834,4117407780692783059,262144 --variations-seed-version --mojo-platform-channel-handle=3384 /prefetch:13
  2⤵
  PID:2956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3644,i,17957291184408597810,14161856919779823190,2097152 --field-trial-handle=2124,i,10436871432600377834,4117407780692783059,262144 --variations-seed-version --mojo-platform-channel-handle=3692 /prefetch:1
  2⤵
  PID:3524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3648,i,11446240188742270906,5341030957406481630,2097152 --field-trial-handle=2124,i,10436871432600377834,4117407780692783059,262144 --variations-seed-version --mojo-platform-channel-handle=3696 /prefetch:1
  2⤵
  PID:3964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4328,i,6223662634364426976,1710226121807470848,2097152 --field-trial-handle=2124,i,10436871432600377834,4117407780692783059,262144 --variations-seed-version --mojo-platform-channel-handle=4436 /prefetch:9
  2⤵
  PID:4352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4316,i,17675263937351758905,3568877175159729995,2097152 --field-trial-handle=2124,i,10436871432600377834,4117407780692783059,262144 --variations-seed-version --mojo-platform-channel-handle=4332 /prefetch:1
  2⤵
  PID:5912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4996,i,5381552257029602403,13144175417168605439,524288 --field-trial-handle=2124,i,10436871432600377834,4117407780692783059,262144 --variations-seed-version --mojo-platform-channel-handle=5416 /prefetch:14
  2⤵
  PID:6056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5280,i,15095862884906842063,12831512245552847184,524288 --field-trial-handle=2124,i,10436871432600377834,4117407780692783059,262144 --variations-seed-version --mojo-platform-channel-handle=5436 /prefetch:14
  2⤵
  PID:1404
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6136,i,11923319809482706718,12692739348595661918,524288 --field-trial-handle=2124,i,10436871432600377834,4117407780692783059,262144 --variations-seed-version --mojo-platform-channel-handle=6160 /prefetch:14
  2⤵
  PID:1484
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6136,i,11923319809482706718,12692739348595661918,524288 --field-trial-handle=2124,i,10436871432600377834,4117407780692783059,262144 --variations-seed-version --mojo-platform-channel-handle=6160 /prefetch:14
  2⤵
  PID:1392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5052,i,8952495132457063497,13383703811228020647,524288 --field-trial-handle=2124,i,10436871432600377834,4117407780692783059,262144 --variations-seed-version --mojo-platform-channel-handle=5044 /prefetch:14
  2⤵
  PID:4464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4292,i,11552754373416076473,9403359611269373703,524288 --field-trial-handle=2124,i,10436871432600377834,4117407780692783059,262144 --variations-seed-version --mojo-platform-channel-handle=4436 /prefetch:14
  2⤵
  PID:1884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4336,i,9728264273993418779,9553217726152734433,524288 --field-trial-handle=2124,i,10436871432600377834,4117407780692783059,262144 --variations-seed-version --mojo-platform-channel-handle=5028 /prefetch:14
  2⤵
  PID:5188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5648,i,14922870010820344059,3510660192093741735,524288 --field-trial-handle=2124,i,10436871432600377834,4117407780692783059,262144 --variations-seed-version --mojo-platform-channel-handle=5480 /prefetch:14
  2⤵
  PID:1732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5832,i,2691646146199325262,14621952847980086801,262144 --field-trial-handle=2124,i,10436871432600377834,4117407780692783059,262144 --variations-seed-version --mojo-platform-channel-handle=6040 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4924

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4160

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2584

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 84d025c8484a1ba1eae075fe4fb60ee1013d5e3c0fe4757f9d23c77a5ecf4bff
MD5 40a03f8f45ceb83458e7ff6718e8114c
SHA1 3aee2deed85e7e1b8a1a9090347606288ce5f90c
SHA512 011f7c1ff606c9271e176c099ac19361c51f6a3eb7ee8dae4e0bead781595a3fa38a006247688a203ba11818d1de1b9066033932d5d22ba79d5a19f921cf6159
TLSH
T164D02B316CDD4D23C08CA27C0056004117617400FE10404011211048080824142823AD
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 72a43fbaed1cd4a89462ff759b5bb2f6f6d1a7a9c08002937c809c101fc685e4
MD5 b04c9bc22d86d65999036cf784bd7a42
SHA1 74f3b96e34181e491a9fd238877d82f72fce321d
SHA512 9bbf9224f5546df81a26e79932518e2c3bea2fc0e37127e4af1f02d1a5543680b5d9370365c28b8bb5427b3bb4f27eb12737d158490216ff77859483f95a6b00
TLSH
T189D02B316CED4C23C08CA27C0057004117517400EA1040401221504808082414281399
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 23034b1f353ab7c89947a3f38bcfa132ea096b7d98424422af1e557a88d004e9
MD5 a87b6cb75b9739c0b879d7861cacb275
SHA1 1c3c7038ce87aa65a447ef14cd4c341d4dcd6214
SHA512 b4a6b204c5c3c08d04d283a275273f84c0dc127d8cad38838c99b3e90fd63e41ab3809838dee2f65b06edfa7c8b2545b9ea75e568754dec77305563904c1c1b2
TLSH
T17B512A2006AC4DD6F759C07B82C60EC73A33F6D2F5830F811E96E9B8AA2672C61CD104
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe598812.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe598812.TMP
Size 2KB
SHA256 b58c55a815caa21473b9c8fa84cefe3ea9510511c4b9facbd23a376c82886369
MD5 66379cbbcea3b73f0c81d2da27037bb1
SHA1 5892f0b34f59fc67ff311bc562904e41c89c6b9c
SHA512 02d2a0dacfadd69477196df802fc47576af2c453d27e591551d8292e490c03aa2612a89766fa81ad92f91373cb3cd8afae87c5a21a54aea3a08fdb23dd07477e
TLSH
T10E512A2006AC4DD6F759C07B82C60EC73A33F6D2F5831F811E9AD9B8AA2672C61CD104
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 81bd0d7b91eb5b110c4262be3f6972e599eae0cd7d22eb39d7dae00976664062
MD5 ca8322dbbd8e0299f6ed5109b7f7f458
SHA1 fc04c190b29ce63dd9b411bc354f22aa8f322399
SHA512 527f112d999d05c138506d9d3dbe61aa3351058cad237e06b6700461b4e3124bd00bbd2f62ef174bf5dd79b7a444ea5fc0ac9667d0ea06c1f7f47872befc55fe
TLSH
T10341A0F3C3E8867E890156F4AB146E2BCE1D0915832C3D5AC5E4AE2B93F34B1E14199F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 4ff78dcbb45793ed4eb7297fe90e21562691cef34b6ba5621c182921270da60a
MD5 bd3f69a1ea2096305193f218cbb00a6c
SHA1 b365d6cf3255e2c65653ca6d1a6a3e441cff6fee
SHA512 46e6c6d32e110f59e533e734c57822ddae21320f9530574b863504d9cac5ee600c0374827da89f245a3f3cab5248566b3559da185ba27a429ab31e8b216c62fb
SSDEEP 192:sxRhRYbJ/f0+sHJzoA8p4G/g6+WNIYueirGDIgIJ:sxRhMJ/ffsHUH/5Iws
TLSH
T1A422A5156E68A97B8CCBD21DBB65BF63D2F91032A1D11E48B7FC9A1C04E76DD120740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 000868956040393fb6300555329e82c3644ad7457db0028ea0796ad338059209
MD5 f3ad023be8bf932d668dea7f1e4e9391
SHA1 263097de6a32a567370de91bdca9617f72e6a949
SHA512 f343feee6cf21ee29d149b4a46faeef6967bdbffcc5de56128b8abe44d45b15da440426b23933ab54822fea2e4dc7c3ab00eee515669d7a80d986055c2dd56b6
SSDEEP 192:sxR+RYbJ/f0+seJzoA8p4G/g6+WNIYuTirGDIgDJJ:sxR+MJ/ffseUH/5ID/
TLSH
T17F32C755AE68A97B8CCBE20DBB55BF23E2F9103261D11E48B7FC8A1C15E76DD120740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 18e5caed099ad90bbf75a94b031821bf1f126d06aafaf2a9ceb860a0bc413fa7
MD5 93c109a7e87f600d05f17163f09ff2a4
SHA1 3a332c3a27f7208035b48c45239056ff4a135e95
SHA512 a46091c8dd59a2fb63793cef5f7a492092a16142d83159684e111d51dc9bd8590c20d893fdf8f792fdbf3e8ff594a2a4b42f8c33d235510895b309ebc85fb46c
SSDEEP 192:sxR+RYbJ/f0+sFJzoA8p4G/g6+WNIYueirGDIgD3J:sxR+MJ/ffsFUH/5IwF
TLSH
T1A832C515AE68A97B8CCBD21DBB56BF23D2F91032A0D11E48B7FC9A1C04E76DD120740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 ce8d91cab5747140d72cafaafa73ae4c4657ecd89a1274c1592e87643fb614c3
MD5 25a153720b9f48fbd626827fb531f67d
SHA1 5998c684aade8226d50662c455ce3b9894b14a39
SHA512 5721a826760ba93c033cd58fcd6c1035c5bd6567d50ce53045f259085ee28a62783187e21a55522bedbbbd1194cd828fe55719562f94376f54eb70b733fa94c8
SSDEEP 384:/7fnhUVfCtg6UFfCwKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVXb9kMR69rocbH:/jnhUJWg6cfCw8F1+UoAYDCx9Tuqh0VR
TLSH
T1E1B2DA2B644CCB7E9FC00AADDC196F976D9802C796A88D4047FE994C03C77EE911A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

c1548715-086a-4f6f-bc8b-598edf8bbd98.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\c1548715-086a-4f6f-bc8b-598edf8bbd98.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 82f7b7950342b7dd4ac4d75660a4c69cf52fb7657ba81b192b04b5366e849b9a
MD5 39c42b3a572912d46a195acfb8eb391a
SHA1 d1988b03f99ddd8f93c53525c4c237f9f8a25109
SHA512 47246c5cb0d23591f387c832b44a70fb7ff316fe440e44cab467047e9d2bd59a2c30c2cf716de9a18399722260dd0d22304b3e3714c3d76c7ad1c6c36d04ec19
SSDEEP 768:hF3HluSO5ytrbuMIYNa8S5oYklnA+G2sC7:hF3sWv0TWRdAh2sC7
TLSH
T1ACF2BF36A9E4DAB79CFA53C4B206A353AEF01223D0955AD889ED1B5D06C76BF0303816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 8015391f03966598107cecdff04447bfde018652133c4b4d8c1faf5a6e247a06
MD5 4486177e6e30a78b706f1fe29b39a9fd
SHA1 1bb172982b955a52acd6de5c3b73fa7b584bc0a5
SHA512 5a9823244518a05bc903ea545a8a258c80bb02522daf30f0d715814587dacaae17c7df4299d75aca0e20dce2307cbcde44251f59564b03bc7d72bc824003b4d4
SSDEEP 768:5D/UxvxjgC+s3oEuSO5ytrbjMIYNa8S5oYklnA+G2sbQ:QZj3+s32WvdTWRdAh2sbQ
TLSH
T16613B03AA9E4AD739CF653C4B30AA357AEE11523D0C66EE849ED1E4D07C72AE4303456
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 68588b27b75d43afdda491eab3dcc1b7a6a724573bb0cb7c1b4ccdaebb5455fc
MD5 54121c90ab2858d27d22bb97c4adee2a
SHA1 4adf288a33933fc2f1907e90841e8c2c692b1993
SHA512 6ff56d7b7236616908ca246afa1b147bac9e64c12a789cedfcb9cd7b5e0af438274f448956203bb5a10c5a2ee1a911fabe715e60ad7d6d7bfc42ec0de0d23102
SSDEEP 768:5fF3oluSO5ytrbuMIYNa8S5oYklnA+G2sC7:BF3FWv0TWRdAh2sC7
TLSH
T149F2BF35A9E4EDB79CFA53C5B206A3436EF41223D0955AD8C8ED1B5D06C76BF0303816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 6d7e8358b5c0b65757eccb5fb4ac9fb4b4e3f22a81d5bb085e6208fc25ee3c0b
MD5 aea4f52774eed90cf76ee00d240c1306
SHA1 78d8e5fac292aa01a1048d51db40d6efa000e4ac
SHA512 24a4a62233ee4ea4539d8c208584e8c2267b3753e04f157f8fc97f9684042893cdc53a34083dd58810913a912e9620cbeef8b7434733937e5de0cae879b7657b
SSDEEP 768:CFQc31wgFluSO5ytrb3MIYNa8S5oYklnA+G2sC7:Zc32WvxTWRdAh2sC7
TLSH
T17503BF3799E4DAB7ACFA57C4F3067302AEF10163C095AAD4DADC1E1D02872EE0303852
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 48091b8ff1425e613b6ec9a7a9c4ebed40611ac5c1405e474d2a6de3e32c8f29
MD5 b10182bec6fee397ae090548e549fe24
SHA1 749c02a7effc24a461a5109bad5516b8afaafab1
SHA512 776e4dd1162bd01888b982cb7341a707925584911e00fb25862aae5562534461ebad38a2b68ab389ce15cc58c52cc6550c8bc2df38f9f2508ee2d760d81a291b
SSDEEP 768:do/UxvxjgC+23HfBSO5ytfJMIYNa8S5oYklnAalSH8L4:nZj3+23/1WfHTWRdA6S04
TLSH
T1CC03C03AAD94A9738CF663C4B60AA357AEE55263D0C16AF889EC1F0E17C73BD5303451
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b1a6a8cc-3e87-4c40-b297-a5ae37710ce5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\b1a6a8cc-3e87-4c40-b297-a5ae37710ce5.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download