5dfa57bf10f02106e404ffb38bc5b2da62eb96b9b02b74d10f1b472a89e6ee5b

Analysis

max time kernel
148s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/09/2026, 21:50

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
attachment20260930-527357-ifmzut.htm
Size 194B
Sample260930-1py53a1bjd
SHA256 5dfa57bf10f02106e404ffb38bc5b2da62eb96b9b02b74d10f1b472a89e6ee5b
MD5 0fe53cf75ee2569670f22b4df68cfdff
SHA1 c8ce77fbd6e13476239c598378c612a8b57685c0
SHA512 ee321ac4703144eafd3d4db7deefe08d8aef572e3c67fc9d4203f5349646173caadf91608fd10220a16ea91099657c4a8460e3ca09a781af646cb3a5282db660
TLSH
T121C0C0B7E400620CDB3078D500F172CC00F8819C9C82CA003D8018E8B39696AC9031D1
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4376	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-939655444-3071939294-1401108526-1000\{1C0D990F-AA16-4526-BED6-0EE09FD007C8}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5116	msedge.exe
5116	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 1504 wrote to memory of 1416	1504	msedge.exe	86
PID 1504 wrote to memory of 4376	1504	msedge.exe	87
PID 1504 wrote to memory of 2164	1504	msedge.exe	88
PID 1504 wrote to memory of 2164	1504	msedge.exe	88
PID 1504 wrote to memory of 2164	1504	msedge.exe	88
PID 1504 wrote to memory of 3280	1504	msedge.exe	89
PID 1504 wrote to memory of 3280	1504	msedge.exe	89
PID 1504 wrote to memory of 4536	1504	msedge.exe	90
PID 1504 wrote to memory of 2252	1504	msedge.exe	91
PID 1504 wrote to memory of 4536	1504	msedge.exe	90
PID 1504 wrote to memory of 4536	1504	msedge.exe	90
PID 1504 wrote to memory of 2252	1504	msedge.exe	91
PID 1504 wrote to memory of 2252	1504	msedge.exe	91
PID 1504 wrote to memory of 4352	1504	msedge.exe	92
PID 1504 wrote to memory of 4352	1504	msedge.exe	92
PID 1504 wrote to memory of 4352	1504	msedge.exe	92
PID 1504 wrote to memory of 4692	1504	msedge.exe	93
PID 1504 wrote to memory of 4692	1504	msedge.exe	93
PID 1504 wrote to memory of 4692	1504	msedge.exe	93
PID 1504 wrote to memory of 2376	1504	msedge.exe	100
PID 1504 wrote to memory of 1040	1504	msedge.exe	101
PID 1504 wrote to memory of 2376	1504	msedge.exe	100
PID 1504 wrote to memory of 1040	1504	msedge.exe	101
PID 1504 wrote to memory of 3124	1504	msedge.exe	106
PID 1504 wrote to memory of 5116	1504	msedge.exe	113
PID 1504 wrote to memory of 3984	1504	msedge.exe	114
PID 1504 wrote to memory of 1256	1504	msedge.exe	115
PID 1504 wrote to memory of 4320	1504	msedge.exe	123
PID 1504 wrote to memory of 4320	1504	msedge.exe	123
PID 1504 wrote to memory of 2744	1504	msedge.exe	126
PID 1504 wrote to memory of 2744	1504	msedge.exe	126
PID 1504 wrote to memory of 5116	1504	msedge.exe	128

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\attachment20260930-527357-ifmzut.htm
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x238,0x2a0,0x7ffad580c188,0x7ffad580c194,0x7ffad580c1a0
  2⤵
  PID:1416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1984,i,17922598536042868369,5148379196507565295,524288 --field-trial-handle=2324,i,14745512337985238201,16705613780357526419,262144 --variations-seed-version --mojo-platform-channel-handle=2352 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1736,i,10268454082306299869,3369750974517060280,262144 --field-trial-handle=2324,i,14745512337985238201,16705613780357526419,262144 --variations-seed-version --mojo-platform-channel-handle=2320 /prefetch:2
  2⤵
  PID:2164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2368,i,7705605374437942249,10596531551356791274,524288 --field-trial-handle=2324,i,14745512337985238201,16705613780357526419,262144 --variations-seed-version --mojo-platform-channel-handle=2720 /prefetch:8
  2⤵
  PID:3280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3424,i,14682807618453008804,8215822702628089035,2097152 --field-trial-handle=2324,i,14745512337985238201,16705613780357526419,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
  2⤵
  PID:4536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3456,i,6798745260980281326,5417837339028109764,2097152 --field-trial-handle=2324,i,14745512337985238201,16705613780357526419,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
  2⤵
  PID:2252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4164,i,9809194421220204295,15252291273782432292,2097152 --field-trial-handle=2324,i,14745512337985238201,16705613780357526419,262144 --variations-seed-version --mojo-platform-channel-handle=4220 /prefetch:1
  2⤵
  PID:4352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4240,i,13108828337320616689,3442558263026822843,2097152 --field-trial-handle=2324,i,14745512337985238201,16705613780357526419,262144 --variations-seed-version --mojo-platform-channel-handle=4352 /prefetch:2
  2⤵
  PID:4692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3596,i,14279776238229877947,4311029270947012658,524288 --field-trial-handle=2324,i,14745512337985238201,16705613780357526419,262144 --variations-seed-version --mojo-platform-channel-handle=5204 /prefetch:8
  2⤵
  PID:2376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,16836877131207591750,4459368639620332273,524288 --field-trial-handle=2324,i,14745512337985238201,16705613780357526419,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
  2⤵
  PID:1040
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5920,i,2031043924036314999,8486181386902500414,524288 --field-trial-handle=2324,i,14745512337985238201,16705613780357526419,262144 --variations-seed-version --mojo-platform-channel-handle=5944 /prefetch:8
  2⤵
  PID:900
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5920,i,2031043924036314999,8486181386902500414,524288 --field-trial-handle=2324,i,14745512337985238201,16705613780357526419,262144 --variations-seed-version --mojo-platform-channel-handle=5944 /prefetch:8
  2⤵
  PID:3124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4944,i,5775500992298953037,17232014762047277623,524288 --field-trial-handle=2324,i,14745512337985238201,16705613780357526419,262144 --variations-seed-version --mojo-platform-channel-handle=4224 /prefetch:8
  2⤵
  PID:5116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4248,i,10350582596789709176,18040037863846859821,524288 --field-trial-handle=2324,i,14745512337985238201,16705613780357526419,262144 --variations-seed-version --mojo-platform-channel-handle=2548 /prefetch:8
  2⤵
  PID:3984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3632,i,12973445977766708510,7345043527526332870,524288 --field-trial-handle=2324,i,14745512337985238201,16705613780357526419,262144 --variations-seed-version --mojo-platform-channel-handle=4440 /prefetch:8
  2⤵
  PID:1256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5176,i,13899460639944311094,9587790234446120276,524288 --field-trial-handle=2324,i,14745512337985238201,16705613780357526419,262144 --variations-seed-version --mojo-platform-channel-handle=2032 /prefetch:8
  2⤵
  PID:4320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=760,i,12568688351377390644,18435122315716599146,524288 --field-trial-handle=2324,i,14745512337985238201,16705613780357526419,262144 --variations-seed-version --mojo-platform-channel-handle=5820 /prefetch:8
  2⤵
  PID:2744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6208,i,3309846394841800085,3623928820949209300,262144 --field-trial-handle=2324,i,14745512337985238201,16705613780357526419,262144 --variations-seed-version --mojo-platform-channel-handle=5264 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5116

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3480

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a82246f88da27a43b1718bd24e8cdfa3c17ae97a8d238e7befd5fac9a384a0a9
MD5 89669bdc21a8230bc30fb1b7dd97b74a
SHA1 2a5e6b394e76cb0c70b0bba2c18c74bbdd1a4cf6
SHA512 0c8eb5310ea11fffab4f6974f3ba27683ef8dd0cc87e73007e67d163fd017b83b6c0025e8e6b07401acc6ea67dcf75918453237e2f7dcf47044e2050973484b7
TLSH
T1C3D022F8FBE28020F0B23A3200BCC3C30008AB0820A803303C33200C2C880CAE22BE8C
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e6cd13b34cf3f758c2f4e7c55e8801132cc91647c947cbafe475ce8928ff2c2f
MD5 b36cb034fe7df72fefb0bfa9340c6a6f
SHA1 8471623779cc15452b8cb60924e40c193607fe42
SHA512 6f72e14e09c254a1a7d581eaf85757baf7b4cd74f1e1978ecd80b20d91bc8f87462f9d782c3b0604a3b7c22e084b46d1afb4dd162a82905a3464ca87d8223542
TLSH
T1C6D024F477D14010F4713531007CC3C300045704105443303C33100C0C440C5D117D4C
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 9160bef3faad259d64324c2850df74bbef6e2811f0cda72624906f7f5d49bb81
MD5 ee9aa29c8d32ce96dcc8728cd49fac8f
SHA1 0e6a4d1d6badf01633f1b7a2068d63d808c82bde
SHA512 b9b83b2a1dae82efd05249b91824386f49d32c2f98933554feeda6c83b6dfae5c7d0061a78c77e23907f6e857db161e2b7d7e2651c6e3b19dba0e3481a804d7f
TLSH
T1F961505189C143BFF74CBC7165E630BB36F59984C883AE6154B7CC798A0E7521A3174C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5945c9.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5945c9.TMP
Size 3KB
SHA256 c2874c0ba7c39e1a96ec42b0a5982fcec722165cb09aa0a3a283a965ef0bfd11
MD5 665b000b41a38a67e9a5e7f2f325e181
SHA1 7984325bd37e5ade2ba638b522aace66fd4cb5a2
SHA512 6562be9a82fcda9d23ff9c3fd2c5676abb36fa3608e53102d99d180656f35cade97ab243eca35912a65910dda29bd835832899d5777b11d4d968380259c277c2
TLSH
T1C4615E5189C143BFF74CBC71A5E630BB36F69A84C883AE6254B7CC798A0E7521A7170C
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 f13516961c25f5ca47e8ea8e218fb39cd453c9e59096fa76daa02185ad29a150
MD5 6e4ac31184ff74659f63b9cd5e818640
SHA1 fbdf6ebb3f66f5cfd4e01e7c08d1551100cdbe52
SHA512 eaa2abca277e9ab6ad36fe4687d7d118d628157a62357169993926840931bb0912320390bc3cad8b2b30327094dea591cc7bfc27dd55aeb32fc327f06b2cec10
TLSH
T1C4115BB3C7D585AE891156F05A24EE2BCE2D0505422C7C19C9D4EF6793E3069D00159F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 8cdbe29cf6de4c4ee0a3583d3d67d6bdc0552641b92a24a568c42e53cde6bf2b
MD5 1931438d919b0275e8c0270da7e78870
SHA1 2e681c29c710f2cc71f858dea3e1ac9041c8644a
SHA512 7c95d81b2d6b79c7d775a644d896db7ba87eb584b31dc4213b9230a6344d09f3d058ffb072ca9a265b13bc32df03fa863623cbeaa81a733b2e652d608c7e05ee
SSDEEP 192:sxZaR2W1/fas1JdIdpdJHW6+WNGYapYHVIgrJ:sxZa31/fas14LHbGW9
TLSH
T14212B712AE28A57B8CC7E20DBB65BF53E6F9503291D51E48EAFC861C05E66DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 d079ffe5b1fa5ab20fe0e78b4d1f75375946b352382bdbe339f6d1cda25a9ddd
MD5 1a3f18509fd75b8708cbb60fb371924d
SHA1 62406dacddc4178371423f73d6e1bcfa786ac559
SHA512 ee4000c5fa6c26bd338beda0549f35fccb54b830e32d33976698f69917974f5fa7369f7f2af5c866e8057e900da45626713a2411debbc2918e6cf4d4444d99c6
SSDEEP 192:sxZaR2W1/fasKJdIdpHJHW6+WNGYapYHVIg58J:sxZa31/fasK4pHbGOq
TLSH
T1AB22B752AE68A97B8CC7E20DBB55BF53E6F9503291D11E48AAFC861C05E76CD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 26f3aaae24f7e81f448ed494b397cd46d800aeee9da1bbfae02f74522b13cedd
MD5 475a8acb5431249d5841ccbc7f23a2fc
SHA1 d98a00234359f208d1f5cfebae9429e0a8c47da3
SHA512 13b9fa8bcb0d5e4713e610fc310b64c2a4647cd0d9aee021330ee9d27b19b6ae182c19d0f7f0bea8b3adaeab185164998c85c3e391da4f12711eddb5f56f71e1
SSDEEP 192:sxZaR2W1/fasKJdIdpdJHW6+WNGYapOHVIg58J:sxZa31/fasK4LHbGwq
TLSH
T18122B752AE68697B8CC7E20DBB55BF53E6F9503291D11E48AAFC861C05E76CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 4555e35c98a86ae3e5be137b291e1c8b0a6adceb9f6c1b336fa8824e0ce2e7d4
MD5 d3f98f76047d4ddec9cf78e794fac88c
SHA1 84ecba0541a258dfc146a04fe6aeddcae31615d6
SHA512 be94c20c48c28191614258d0ffa25fb923e0e316be0c53ae68aa72c1764bce3d7d11786c1773f91a1c0a9c6703b194ecd2470d47f298bbfe6c380e77b5815d7e
SSDEEP 192:sxZaR2W1/fasdJdIdpdJHW6+WNGYapYHVIg5WJ:sxZa31/fasd4LHbGWQ
TLSH
T1BC22B712AE78A97B8CC7E20DBB55BF53E6F9503291D01E48EAFC861C05E66CD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 8fd68722fa325c67a06a5e34b05815548040260d58054d993f553dff87f418ca
MD5 e4c644ad462953fbfea2043fdcf29eeb
SHA1 8fc8fba92617f21aa8bdbaa70772d1c39b71991b
SHA512 819506f874432e929de9e72d31eca925940f38c0429834c6c0869ba7896be4524102ad097ff99a4a64dbcc2d73cab13f6440457c06644519f71fba1a33ac8af7
SSDEEP 768:ggWPcLKWvKeEe8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjlLlACy7Xro4pfeumR2:ggWPcLKWvKeEeu1jaClLiF7E4pWumR2
TLSH
T1F1C2FB3B640CCB7E4FC01A9DDC5A6FA77E9802C79A648D4047FE944C02C77EA912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 1KB
SHA256 e0a0e58103dc8a2e029472e0949ababf25604b73139f134262d3d88bcd41f118
MD5 2375dae0f8b26659cd4cb60a4e790d69
SHA1 eaf1ce26370715d854e9a43b3290af3e1a02e343
SHA512 11d709dc195e62d25e33e9c2241e2f764299b126e456f85c00451a68b19ef16290077f7d5fb3a32d33467e73a7850c39a9cb648bb9b2a1e569d2119c31943428
TLSH
T1D5217C52303B065028BD250CBA58B61F828172613114FF2B76BC31A54F2BF084EBD5F9
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 1KB
SHA256 e29f29d6497d2552aa4540e7a06fef44aa8aacc119d7bd7203f16d244553ac7a
MD5 da51f8d318638563dfe02878e975ad1d
SHA1 b3da6b68a8f695c51d4476435dc0129795df7b6d
SHA512 6bf082e10e2b68cb2516f04c1921574738018ebe8ebf9763b858db05d401a6e4de0c503cfd916146128108f48f90085fa2a4e11d3469ff494f1ab73616dadafb
TLSH
T1BF216C52313B065028BD250CBA98B61F828173623514FF2B7ABC31654F2BF084EBC5F9
MD5 SHA1 SHA512 TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59e0e0.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59e0e0.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 ddd8da607b92b153d603c77aa78ced534577c97379756279768b083fe035aa9f
MD5 33f33d471e82afa2570a82c0f8d4d1b8
SHA1 993a823b285897fdc83d245e6567ec8b12f107d1
SHA512 5543f575ffc472fbe093eda03af4ba592bfb153f4e88f9b73a196cf4404e5ce50f307342b1c652dc85b7c74c717cea12aac6bcb3e108eb6e876a31c40116c8dc
SSDEEP 384:FZcIhsNGS9+12+RzIGmz73YnixtgOIwZOyHLGoo:9hQ+pdgj8ixXssi7
TLSH
T167827C72DCB8ACBA5EF7E544F4862A135EB98567D2C86F8494DC5B0D01DB298030B91B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 ed8ce9de4e8204e58f47ede08ca47c8a97e24d519783e215eea776968ed91785
MD5 1bd03d644e4ea695a324e360ea8f7e0d
SHA1 ef88ca00d3e048d011b8b69c2a52cb2006755103
SHA512 81e78959e29844af91ba7a70629780fa9f827c013e1d696d777298512df306e29b20c3894f9ade9296e211b688d1253f2a9b5fdf42677353d8414e0c7e382be9
SSDEEP 384:wiFiZcI3zsNG8TUNTUlIlz9+12+RzIGmz73YWzixtgOIwZOyHLGoo:LFQjHwgf+pdgj3zixXssi7
TLSH
T195A26C73CCB898BFAEF7DA44F54A36138EB58167C6C5AB90E6D85A0D01DB19C030BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 9db6968652922ee4f5f005377c97602ad24e331c648050fd22bea9d0e4ab0c10
MD5 584e0cb37c6c4d16f97bf2a49bc37485
SHA1 475d5d94fe002e1aa8dab11c27ca09c48b216431
SHA512 86c9535c84f37b614e493491188b41f4bf399de43b9f1c90abf2998cf081740c6439ea95c77494e39fbc8477fd109d90f201dfce700ac318bcf1b93b796fd649
SSDEEP 192:aON+6IE7QmiUyN2TPuIGmz7EmuC7sWWuU6:aON+6DtrPuIGmz7ZsOU6
TLSH
T1AF02F839EC7C7CBB9FB3AD49F4872B236EA5112BE5952F84D9E41A0D00D725C1307926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 aca0498c0442dcc54815386997b6b6e326ed5d1368473529fa64d38d240e52e1
MD5 07178c5e00d4e1e22c77cd403b1744db
SHA1 3e703c79aacd0dfa7c18cf122c64edaf2c917ab6
SHA512 0536da3c6319df2f93f597542ab75e1381f2ffecd9197f017f34ee387508428876bbc40742b080e818b84ffa259a1ea98afa2346dc884d4d37b827a20eaed3a5
SSDEEP 384:yZcIhsNGz9+12+RzIGmz73YnixtgOIwZOyHLGoo:Ah3+pdgj8ixXssi7
TLSH
T170827C72DCB8ACBB5EF7E544F4863A135EB88527D2C86F8494EC5B0D01DB298030B91B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 7fa09a0c30076c6aa812c229719f018ae193f171a92024d6dfcf1f03dc30cb9c
MD5 ae169640dce6183d4731a9be2814aa05
SHA1 b4d9e605dd2d5712ff74e3d9685b178a47a1e3a0
SHA512 69dcdfcee6f7b2a29cd82002af13645b9991f3bf94ed3f4c9b7ebfb01fd3bfdd7d31180e315b466642790d994a16ef91836fd04e7375a43ee796923f7210aa1f
SSDEEP 192:aON/6IETQmiUy92TjuIGmz7EmxYBeUc27HnqKU6:aON/6DFFjuIGmz73YrHxU6
TLSH
T15712F936D8B8BC6B9EA3E945F4873A235D758227DAC97F80D5DC2A1C01DF25C130B916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

aa32891f-0062-4a78-8386-93c63ca92327.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\aa32891f-0062-4a78-8386-93c63ca92327.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 d27bdc70080c4da08bf9388b67e50d289e3829974ccd6c5b452a3d4a93e56ff4
MD5 74279ab2b47a55f34275599202befd9f
SHA1 442d6a745366d1bbfabc867c2bf7302cc821bc61
SHA512 e41bd2178046376e05d84a4c4792c23c4b882e4df9530c4449f13c1de54c9bc6b93fd452fba0a38f69da49f549bf4e435f1c0d029ef9664f6999373b6c72c802
TLSH
T13E412A58AAFA1148B3776E5AABF6A86D487BBD332F06D45E00110D4F0A62B00C8B1737
MD5 SHA1 SHA512 TLSH

Submit Download