3e10b452175f0acbfcda6bc2487e308e0c5f4913f1ca5b0ed77be7a462a066bc

Analysis

max time kernel
148s
max time network
142s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
29/09/2026, 19:34

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
attachment20260929-1092870-tzvm56.html
Size 171B
Sample260929-yabp4swcmd
SHA256 3e10b452175f0acbfcda6bc2487e308e0c5f4913f1ca5b0ed77be7a462a066bc
MD5 e082ebc14f6b24945336f6450b985e45
SHA1 df12ad35c265b0198582e2dc94e0a93048e4de82
SHA512 8dac8fb7101ee6a50ec58409a7d51009d9a3f6b1266377cad6f7f9001bc6f6734ffc067e7cfd0f17a1d0e288803fa8c8d37925590f6421772323ce99a4a9a1bf
TLSH
T1E4C08C7D10C13C150270A93C1DD3B397EC93198E01422B41308180232F35620CED32D0
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4888	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-524788801-3318743092-4051225893-1000\{772E1B60-D902-4503-8E96-1333CF6557EA}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3272	msedge.exe
3272	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe
884	msedge.exe

Suspicious use of WriteProcessMemory 34 IoCs

description	pid	Process	procid_target
PID 884 wrote to memory of 1332	884	msedge.exe	86
PID 884 wrote to memory of 4888	884	msedge.exe	87
PID 884 wrote to memory of 4552	884	msedge.exe	89
PID 884 wrote to memory of 4552	884	msedge.exe	89
PID 884 wrote to memory of 4552	884	msedge.exe	89
PID 884 wrote to memory of 2100	884	msedge.exe	90
PID 884 wrote to memory of 2100	884	msedge.exe	90
PID 884 wrote to memory of 4780	884	msedge.exe	91
PID 884 wrote to memory of 3256	884	msedge.exe	92
PID 884 wrote to memory of 4780	884	msedge.exe	91
PID 884 wrote to memory of 4780	884	msedge.exe	91
PID 884 wrote to memory of 3256	884	msedge.exe	92
PID 884 wrote to memory of 3256	884	msedge.exe	92
PID 884 wrote to memory of 1688	884	msedge.exe	93
PID 884 wrote to memory of 4936	884	msedge.exe	94
PID 884 wrote to memory of 1688	884	msedge.exe	93
PID 884 wrote to memory of 1688	884	msedge.exe	93
PID 884 wrote to memory of 4936	884	msedge.exe	94
PID 884 wrote to memory of 4936	884	msedge.exe	94
PID 884 wrote to memory of 2320	884	msedge.exe	102
PID 884 wrote to memory of 1552	884	msedge.exe	103
PID 884 wrote to memory of 2320	884	msedge.exe	102
PID 884 wrote to memory of 1552	884	msedge.exe	103
PID 884 wrote to memory of 4724	884	msedge.exe	105
PID 884 wrote to memory of 4120	884	msedge.exe	114
PID 884 wrote to memory of 4768	884	msedge.exe	115
PID 884 wrote to memory of 1576	884	msedge.exe	116
PID 884 wrote to memory of 3864	884	msedge.exe	126
PID 884 wrote to memory of 3864	884	msedge.exe	126
PID 884 wrote to memory of 3912	884	msedge.exe	127
PID 884 wrote to memory of 3912	884	msedge.exe	127
PID 884 wrote to memory of 3948	884	msedge.exe	130
PID 884 wrote to memory of 3948	884	msedge.exe	130
PID 884 wrote to memory of 3272	884	msedge.exe	132

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\attachment20260929-1092870-tzvm56.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ff84c3dc188,0x7ff84c3dc194,0x7ff84c3dc1a0
  2⤵
  PID:1332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1744,i,7905712930459970561,16574914724838287717,524288 --field-trial-handle=2292,i,7905750894031257710,9660741385505949514,262144 --variations-seed-version --mojo-platform-channel-handle=2456 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1660,i,6910678298229871834,5481383621509042660,262144 --field-trial-handle=2292,i,7905750894031257710,9660741385505949514,262144 --variations-seed-version --mojo-platform-channel-handle=2288 /prefetch:2
  2⤵
  PID:4552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2632,i,7808094268833859661,11754010948110821073,524288 --field-trial-handle=2292,i,7905750894031257710,9660741385505949514,262144 --variations-seed-version --mojo-platform-channel-handle=2748 /prefetch:8
  2⤵
  PID:2100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3392,i,10231898168209085603,5458579634707095541,2097152 --field-trial-handle=2292,i,7905750894031257710,9660741385505949514,262144 --variations-seed-version --mojo-platform-channel-handle=3436 /prefetch:1
  2⤵
  PID:4780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3400,i,10684901786470664078,16464726370210587138,2097152 --field-trial-handle=2292,i,7905750894031257710,9660741385505949514,262144 --variations-seed-version --mojo-platform-channel-handle=3440 /prefetch:1
  2⤵
  PID:3256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4204,i,3821319892836389337,16042525857225928718,2097152 --field-trial-handle=2292,i,7905750894031257710,9660741385505949514,262144 --variations-seed-version --mojo-platform-channel-handle=4264 /prefetch:1
  2⤵
  PID:1688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4240,i,7070060757445736143,16463194521919059232,2097152 --field-trial-handle=2292,i,7905750894031257710,9660741385505949514,262144 --variations-seed-version --mojo-platform-channel-handle=4284 /prefetch:2
  2⤵
  PID:4936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3588,i,12358655071302951482,5707163376193527387,524288 --field-trial-handle=2292,i,7905750894031257710,9660741385505949514,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:8
  2⤵
  PID:2320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4216,i,17995212556372775799,1073083988869947868,524288 --field-trial-handle=2292,i,7905750894031257710,9660741385505949514,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:8
  2⤵
  PID:1552
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5808,i,9150297128701382584,15805323222981588243,524288 --field-trial-handle=2292,i,7905750894031257710,9660741385505949514,262144 --variations-seed-version --mojo-platform-channel-handle=5844 /prefetch:8
  2⤵
  PID:4284
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5808,i,9150297128701382584,15805323222981588243,524288 --field-trial-handle=2292,i,7905750894031257710,9660741385505949514,262144 --variations-seed-version --mojo-platform-channel-handle=5844 /prefetch:8
  2⤵
  PID:4724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4344,i,5569334165144389723,4984686820892750778,524288 --field-trial-handle=2292,i,7905750894031257710,9660741385505949514,262144 --variations-seed-version --mojo-platform-channel-handle=4236 /prefetch:8
  2⤵
  PID:4120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4328,i,12823938580745520740,3002820704971393746,524288 --field-trial-handle=2292,i,7905750894031257710,9660741385505949514,262144 --variations-seed-version --mojo-platform-channel-handle=3580 /prefetch:8
  2⤵
  PID:4768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4272,i,429691607543896235,7742982565988187781,524288 --field-trial-handle=2292,i,7905750894031257710,9660741385505949514,262144 --variations-seed-version --mojo-platform-channel-handle=4468 /prefetch:8
  2⤵
  PID:1576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6196,i,15727679365365053183,7562838856571690234,524288 --field-trial-handle=2292,i,7905750894031257710,9660741385505949514,262144 --variations-seed-version --mojo-platform-channel-handle=6096 /prefetch:8
  2⤵
  PID:3864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5164,i,13443710785222343809,2412018569942708919,524288 --field-trial-handle=2292,i,7905750894031257710,9660741385505949514,262144 --variations-seed-version --mojo-platform-channel-handle=5796 /prefetch:8
  2⤵
  PID:3912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=780,i,9271335197831629000,827065742776583104,524288 --field-trial-handle=2292,i,7905750894031257710,9660741385505949514,262144 --variations-seed-version --mojo-platform-channel-handle=5792 /prefetch:8
  2⤵
  PID:3948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1204,i,13007977607150761577,11591872634553201945,262144 --field-trial-handle=2292,i,7905750894031257710,9660741385505949514,262144 --variations-seed-version --mojo-platform-channel-handle=6140 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3272

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2960

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c904cde2439d0f658b6928376273908e18874923ffb5ab0253d91ef97d247274
MD5 71592819d06ab9dfd94505cef3db0b85
SHA1 fa4c610ce7419e5f934db322abc11ec563259b9b
SHA512 f0dccb656458e10495c6728811a1fad970a69f8abb5ce8e9bcba9e93f496cd66fb3ce8ce1065b946203d7912789774c609787e85dd5139479b2562b6f05cfae0
TLSH
T16BD002F8BB950515C5C970F7713BDB8143B6EB218246265D64F21E082D747B23606895
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ad9341a3ad2b263d2be4ffd8a97b10f49a2c167d02a5b66182496dee5e8cf827
MD5 8f79499bd1d234dc030ef99e2f850e0e
SHA1 4dd7c44b8570ce93f3db7df7fe1188f189fa82fa
SHA512 d06aa3eb27c999ba47fce9a170740591ef6bacf188a5d364ad9a567936919e24290b5c0c3a8ad16cae1e37c71c2364d9db3ba42e5914a96b0f1f732c29ff5945
TLSH
T199D022F83BC00800C8C830F3303ACB8003B2EB208202230E20F20E080C303F23202880
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 79e039eb689c9e76a39a200f5f69b34c2e9bd9e42779d96a5f20cfd7976ca999
MD5 18390c9b3635467ae85ea91b86254048
SHA1 f135eda781046393cef917d825e4de1bd2b9cca0
SHA512 7b7f30e0aea94a50366660301b2d8a4a1000f82e1da0bb1e2f4aa39a29dd888c390d1cadc6e542dc24d76e756963325b8743f79abf4cad9db0f31317b6441a0a
TLSH
T1E6E026CC55C8C33FEAB0676B43784B4C82803B0BD2CCAE5A170498857A03044E2D26F1
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 54b2ce7c3ea5a6d08424d09250d1791a2d0b04833dacbbbcf3d46e35c9cb3d18
MD5 caa9fcc06ea2711cf942ca763b8c8634
SHA1 1e45d80d1d4c404e4291a903dc3a262b1e68dd47
SHA512 32cd470e5f6b1503d0e4275b3c902af9702b9161d60fa287da3e4e73f2380ec9ff8d234a113612db4706fa93396d82203e1b0b7ee024dbbc1e6b27e81420505d
TLSH
T15861B74DC5948274FF68047381D221E33D35B68A46F7AFE207A9F9BADB3A364535801C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58d116.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58d116.TMP
Size 3KB
SHA256 ce1e0072b75f7e98478790c30874af6e418dc5b4c388e08ab130ebfae87d09a2
MD5 9fac035589ba3bdc04a86c8ac4b4ad67
SHA1 a28bf6e3ada4f554c835a2bcc9f9487325c62444
SHA512 2b40427b83d2a71f0fb4cce8c0db2e4489bc9854f893dbdb63b7bb63d9350b8f4bcba3bab2c03de3952a7c9791a394ba5a235ec32c1a20951dc3cfde6dbfa89c
TLSH
T17561A64DC5944274FF68047386D221E33D35B68A46F7AFE207A9F9BADB3A364139801C
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 dcc962d968440bdb2d6bcd7bf329d33ac0d990f67d2f8d93c983b1dfb92394bf
MD5 5fb0fec75c47faa9248a8859b882e468
SHA1 a05489aa6c9150269e2ca130836f70cc27821518
SHA512 16389f1d821c5150d11da89f2d3b004fd7a4ef9dae46cd713805c41312682bd58efd20181adf5ad4268491739cacbacb74862a226856fc5839917b7fc972c36b
TLSH
T18B113DB3C3D5C6AE890156F05A28AE1BCE1D0606822C7D2995D4EF27D7E3479D10199F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 4fd3dfa50b218089c3e6b53444edc55c21c499753e19c06d8fd5a365bba6c3e7
MD5 188f260b1b3fd7f259dcff6ecc9a6559
SHA1 03b8d7c2da66eeb7c3e5dd4677733a2f630ea593
SHA512 ec4d915c596c50f5753591940bd13d64881f43326468679f0fefbd1d9a4c257a14c52ac332fb67efad759d598001a429c16ccb040e33b0bec73918f7262a511c
SSDEEP 192:sxZtqRDWP/f8s6DIdpdiHW6+WNGYRPRwdIgrJ:sxZtqAP/f8s6csHbGmu9
TLSH
T15512B9526E28A57B8CC7D20DBA25BF53D6F9503195D41E48FAFC851C05EAADD130740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 87fe503094c834644295aefcb3a3feda6e78d761f3283e41ac184725c891fdb2
MD5 09dbf62508585f4865ac5361c6341929
SHA1 5fbb2e173bfab51baf970b0618fe4859527a05d1
SHA512 ed7722db3b73cfa692111d673cf3afbf13bb6a15be70e7970362cb8343c17944729519ce957096805043c21eb90d294b137b14e56dfff9fdf961537fa0d83be6
SSDEEP 192:sxZtqRDWP/f8siMDIdpdiHW6+WNGYRP/wdIg57J:sxZtqAP/f8sxcsHbGmgD
TLSH
T1C722B852AE28697B8CCBE20DBA157F53E6F9503295901E48BAFCC61C05EAADD130740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 9c8f37c777351cbaa667182779db531861f65a03a181512bab74d1d83c9d5cea
MD5 f18b0780980da569f5be03b4ea2f816b
SHA1 f09c560d524625f25c8ce03490068b6008a6ee5f
SHA512 35e0d605c60c89f28aad362c0a68da842873de366838f9f4b8129c2c3b5f7e99541df7daac5408a60ee40e72f9345ae7e45d86764f8b022e43c1db138d4e7864
SSDEEP 192:sxZtqRDWP/f8siMDIdpHiHW6+WNGYRPwwdIg57J:sxZtqAP/f8sxcCHbGmtD
TLSH
T11822C952AE28697B8CC7E21DBA15BF53E6F9503295901E48FAFCC61C05EAADD130740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 d5a4f3c5dc1abc92db9fe2e3f50af969cbbb59d4e5eb4ed25ff79875cdbd4844
MD5 17a805e5cbc756846730e4f4835529d6
SHA1 6bea1b3104200fa50e7e7cd67fda90a8ab66dda5
SHA512 fbbf31d75a14edc68932d9d172cd25efd8bd740523ff33b0bc51778a5d647dba6fcc3afc71cc0120a8ae0a3b4634f6e14a4b72fdbdf1aac77fa7726a6bf1462a
SSDEEP 192:sxZtqRDWP/f8suDIdpdiHW6+WNGYRPRwdIg5BJ:sxZtqAP/f8sucsHbGmuN
TLSH
T19322B752AE28A97B8CCBD21DBA25BF53D6F9503195D01E48EAFC861C05EAADD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 230b7927a78fddc3f152e4dd62ee86968a78b8a676104ab0f0d9f29bff3ac985
MD5 867b14606bb45663ef011facae520a89
SHA1 359ecf39d4dfa2b99cc68ef138a588f717209e87
SHA512 c5a057838ead63abc335827d67fa29b90b47225dc7cc9cc982a209511a52397090e932a4afc82d45efe856970f35ed1efa13f2c3a3529a917086fb011782a9d7
SSDEEP 768:QeK9uzYWvcQWs8F1+UoAYDCx9Tuqh0VfUC9xbog/OVpHLlh7k3zro7+5n:QeK9uzYWvcQWsu1ja0HL7Q3A7+5n
TLSH
T1FFC20A3F640CCB7E5FC01A9DDC5A6F973E9802D7A6588D4047FA984C02C77EA52264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 1KB
SHA256 20b72fcd5dc1ca338e590ec93c9439afeb579d1b52fb46d25eb98558f62a8ed5
MD5 fb7685b3ba548288388b3cf67f991c36
SHA1 460b89c9896138305a6c29fad191c75698c9b6c6
SHA512 c36be8e00451a2f2bd450b15187757eac8692d78242a04d6eddc1d5b8d9ddb87ea3b30ce15c300a41121a3b9ce4af950eec39ce0c76a2650e199c39274e20c1d
TLSH
T10B31EACC34BB6A50387E6824D2B8961E22413167359CF66A3BBC10B10F67F441DFDACA
MD5 SHA1 SHA512 TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe596c7c.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe596c7c.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 80a1a9c372cef86e64713e9ca533a70eab0a81549808af82d80e8375031fa247
MD5 8dd26c1384728796f7bc86fb7c54f76e
SHA1 ffe2906e11d3dea95f8b491b2c61e57270e6c3b6
SHA512 f340f89cf68751f9d1b1e019e21d3c1ad814e38f7bf32c00ad04ee86d396c78abb0665642924fe56d64edec67ddfd4d78ca62e072cbd5c6f1351d0e4a08ff6ec
SSDEEP 384:GZcIhsNMKw9LpOAOjTVKjGYmJOSytgOIwZOyyL4oe:Uhd4znJJOBXs1Et
TLSH
T143828E32AC785D7B9CFBE101F58A32034FB49067E6D56B80D5ED1B1D01DAAA9130BD1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 a956400f8b26ccf48a5a52c74f06001173cc62118f1ae4f6a299d9f553015947
MD5 f91df433b19938d7060f5a6a7314df47
SHA1 2af4d83617f527baf3ae2dcf9916dda1afb35a30
SHA512 f6663181924632272cf9ca04dac4db6265ee8ea3245f323b7b87339e69b3080f5b0b2f41f5d4d158da314fb037fdd763dcd986a4948c5e40ebe79e733d9c64e9
SSDEEP 384:BiFiZcItzsNE8TUNTUlIlTw9LpOAOjTVKjGYmNOSytgOIwZOyyL4oe:oFQVpwgU4znJNOBXs1Et
TLSH
T17BA27E339C688D7FACFBDA41F58A32038FB440A7D995AA90E6DD5A1C019B5EC030BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 b3695ec7ad36b34311d6270c8f1d7dd20d293f0f393f7a99df2f79db1784af5c
MD5 1819e657e313e59f0be33baf9b70fd31
SHA1 26d9858857da44b43925623a9e8d41ac93e70f34
SHA512 c50c1c7bb879b5dc992250b6a9f953372a1ddef6037801ecea95ec9b9cb614aaafe49834f89a28a6b7b03fc355262a646aaa6934f2d71dfe0d95bb5beaa2b3e3
SSDEEP 192:SONF6ygpQmiUyL3tOCTVgVHDR0pqzPOkAU6:SONF6lHutOCTVKjGWOBU6
TLSH
T1EF02D735AC686CBB9DF3AE06F48B36235FE4117BD9552B84D9E81A1C00D766C2307D36
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 2301b4872e2db7cc7a5f10d9b9ee9979202bf3cfb15b7ec0d5224c60a4108b64
MD5 0b980d16767a9f06175423085904c86f
SHA1 a9a94963b1101b02c8148574240cc5ac6a178d31
SHA512 b2f41660afddc144d8215539e77c1b65205af3853ea1ebca2ced9d0268969e662d7474b2ce46fd71cba3763428a17ff823e1cb1eadf08327d42a077719685db9
SSDEEP 384:LZcIhsNMTw9LpOAOjTVKjGYmJOSytgOIwZOyyL4oe:Thq4znJJOBXs1Et
TLSH
T118828E32AC785D7B9CFBE101F58A32035FB49067E6956F80D5ED1B1D01DAAA8130BD1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 eaa3460ccdc92653060469e3387eeb057626308626f651ea7a7a476c55489dd1
MD5 5ed8389a90115e6a49f66fbe5e354b51
SHA1 6a6ba209451bc843968491eb5002a7d88db62cdd
SHA512 2460e9049d3af9600cee2a3aef65e6be22070a3ece9b61d77f26678bdd209603dedc8dbb9637e1a554b045c335ba68ccfacdadd5718c4b3985774e781123b584
SSDEEP 192:SONd6ybQmiUy53gOCTVgVHDR0p+L9ERJ3UOSiqSU6:SONd6WCgOCTVKjGYmoOSyU6
TLSH
T177120936B8686C7B5DE3A541F48B32135FE49167EA496F80D5EC1E1C01EF6AC230B926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d14eccab-1e91-40e1-ad00-ce869f966b6e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\d14eccab-1e91-40e1-ad00-ce869f966b6e.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 9ec0ba747aaf4605447fe6f275c42d1adabd7ac5489dd57bd67c9fc9ce199da9
MD5 19eadfc2da495d099345962c7c14b5c8
SHA1 be02b809104523a191065097fc01679d78c07592
SHA512 79359ffad61017f70477da728cf8d69f7d154e21da7476e5070907ffc3db728d118efce77dc4ab11e99b7a81408ff5b41bb8f113beec316d42d1f77ee046efa3
TLSH
T1D9411A58A6ED1148B3B76F5A6FF6B96D447BBD372F05D09E00010D4F4A62B00C961773
MD5 SHA1 SHA512 TLSH

Submit Download