ccde54317343ebacd6da2afde0b4007f766b637b1ba34510c74de49797553d77

Analysis

max time kernel
148s
max time network
143s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/09/2026, 00:23

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
attachment20260930-1092870-ar43q5.html
Size 116B
Sample260930-apy7ysxvet
SHA256 ccde54317343ebacd6da2afde0b4007f766b637b1ba34510c74de49797553d77
MD5 0e2f15dcf7166552e959f0ddb363e706
SHA1 642e84dc85171feae5dbbb9727736ee1424a232c
SHA512 2a659912d4f25102f996a71566eca6840ac2b3271147c266d9836f2fc5785b4b514e248b396d62b7504556f50046f7610023adc8c55c2c9b9a8ec715c29ce525
TLSH
T122B0125F120702053D601D527DD3375714174B9E01A969E01267C9FECCCB9B2EE4739C
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2788	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-747854149-4118156852-591593384-1000\{44AF4E1A-A1DE-4FA6-A6B5-9EF6E758D206}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2552	msedge.exe
2552	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 752 wrote to memory of 4880	752	msedge.exe	86
PID 752 wrote to memory of 2788	752	msedge.exe	87
PID 752 wrote to memory of 3796	752	msedge.exe	88
PID 752 wrote to memory of 3796	752	msedge.exe	88
PID 752 wrote to memory of 3796	752	msedge.exe	88
PID 752 wrote to memory of 2760	752	msedge.exe	89
PID 752 wrote to memory of 2760	752	msedge.exe	89
PID 752 wrote to memory of 2532	752	msedge.exe	90
PID 752 wrote to memory of 2532	752	msedge.exe	90
PID 752 wrote to memory of 2532	752	msedge.exe	90
PID 752 wrote to memory of 2976	752	msedge.exe	91
PID 752 wrote to memory of 2976	752	msedge.exe	91
PID 752 wrote to memory of 2976	752	msedge.exe	91
PID 752 wrote to memory of 3276	752	msedge.exe	93
PID 752 wrote to memory of 3276	752	msedge.exe	93
PID 752 wrote to memory of 3276	752	msedge.exe	93
PID 752 wrote to memory of 4072	752	msedge.exe	94
PID 752 wrote to memory of 4072	752	msedge.exe	94
PID 752 wrote to memory of 4072	752	msedge.exe	94
PID 752 wrote to memory of 2492	752	msedge.exe	102
PID 752 wrote to memory of 2492	752	msedge.exe	102
PID 752 wrote to memory of 5084	752	msedge.exe	103
PID 752 wrote to memory of 5084	752	msedge.exe	103
PID 752 wrote to memory of 2128	752	msedge.exe	105
PID 752 wrote to memory of 3604	752	msedge.exe	112
PID 752 wrote to memory of 4104	752	msedge.exe	113
PID 752 wrote to memory of 3756	752	msedge.exe	114
PID 752 wrote to memory of 3488	752	msedge.exe	116
PID 752 wrote to memory of 3488	752	msedge.exe	116
PID 752 wrote to memory of 3848	752	msedge.exe	124
PID 752 wrote to memory of 3848	752	msedge.exe	124
PID 752 wrote to memory of 2552	752	msedge.exe	128

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\attachment20260930-1092870-ar43q5.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ffabe77c188,0x7ffabe77c194,0x7ffabe77c1a0
  2⤵
  PID:4880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1928,i,7294080324207659501,13066134249101683260,524288 --field-trial-handle=2268,i,13572687681574642037,16541807816236571576,262144 --variations-seed-version --mojo-platform-channel-handle=2296 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1640,i,18273810110483731815,9977838649778530077,262144 --field-trial-handle=2268,i,13572687681574642037,16541807816236571576,262144 --variations-seed-version --mojo-platform-channel-handle=2264 /prefetch:2
  2⤵
  PID:3796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2436,i,15052072679398164808,2657194413153088327,524288 --field-trial-handle=2268,i,13572687681574642037,16541807816236571576,262144 --variations-seed-version --mojo-platform-channel-handle=2456 /prefetch:8
  2⤵
  PID:2760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3436,i,6166620073438835283,17480190398693174869,2097152 --field-trial-handle=2268,i,13572687681574642037,16541807816236571576,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:2532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3456,i,8048017909439511263,11659733725677324294,2097152 --field-trial-handle=2268,i,13572687681574642037,16541807816236571576,262144 --variations-seed-version --mojo-platform-channel-handle=3464 /prefetch:1
  2⤵
  PID:2976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4212,i,15260983153796018736,3154241154024928648,2097152 --field-trial-handle=2268,i,13572687681574642037,16541807816236571576,262144 --variations-seed-version --mojo-platform-channel-handle=4252 /prefetch:1
  2⤵
  PID:3276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4236,i,5949868219127390853,7181088766061511371,2097152 --field-trial-handle=2268,i,13572687681574642037,16541807816236571576,262144 --variations-seed-version --mojo-platform-channel-handle=4320 /prefetch:2
  2⤵
  PID:4072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5092,i,11333251061246470490,16494933431765136210,524288 --field-trial-handle=2268,i,13572687681574642037,16541807816236571576,262144 --variations-seed-version --mojo-platform-channel-handle=5140 /prefetch:8
  2⤵
  PID:2492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3488,i,17505871408925772619,13435827612954139800,524288 --field-trial-handle=2268,i,13572687681574642037,16541807816236571576,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:8
  2⤵
  PID:5084
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5920,i,8311246342930884270,17490833908150220097,524288 --field-trial-handle=2268,i,13572687681574642037,16541807816236571576,262144 --variations-seed-version --mojo-platform-channel-handle=5940 /prefetch:8
  2⤵
  PID:4408
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5920,i,8311246342930884270,17490833908150220097,524288 --field-trial-handle=2268,i,13572687681574642037,16541807816236571576,262144 --variations-seed-version --mojo-platform-channel-handle=5940 /prefetch:8
  2⤵
  PID:2128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3612,i,17909807431352547376,7242956834016745096,524288 --field-trial-handle=2268,i,13572687681574642037,16541807816236571576,262144 --variations-seed-version --mojo-platform-channel-handle=4260 /prefetch:8
  2⤵
  PID:3604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4360,i,12154340467930868174,2268365337049474823,524288 --field-trial-handle=2268,i,13572687681574642037,16541807816236571576,262144 --variations-seed-version --mojo-platform-channel-handle=4708 /prefetch:8
  2⤵
  PID:4104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4344,i,12610118102056771424,18172721233407770820,524288 --field-trial-handle=2268,i,13572687681574642037,16541807816236571576,262144 --variations-seed-version --mojo-platform-channel-handle=6332 /prefetch:8
  2⤵
  PID:3756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2136,i,4968083873931561932,18415647683246907320,524288 --field-trial-handle=2268,i,13572687681574642037,16541807816236571576,262144 --variations-seed-version --mojo-platform-channel-handle=2928 /prefetch:8
  2⤵
  PID:3488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5548,i,6423459863463001949,5447104919598098167,524288 --field-trial-handle=2268,i,13572687681574642037,16541807816236571576,262144 --variations-seed-version --mojo-platform-channel-handle=5436 /prefetch:8
  2⤵
  PID:3848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5844,i,15167439446750091003,6329221208292431743,262144 --field-trial-handle=2268,i,13572687681574642037,16541807816236571576,262144 --variations-seed-version --mojo-platform-channel-handle=6168 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2552

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4616

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CrashpadMetrics-active.pma
Size 16KB
SHA256 814d47aad78c212b52568b9c7b58d242899d490d3afebce66181cae50c880df5
MD5 8c7cdfea4284ba987d295d82a9c7ddd6
SHA1 7d1a3a66f2d64a383b230196ba89a263ce7ee957
SHA512 59c8229e834c944265aed4131c79f41f9f940a48651b9fb18800cef5bae36d17c7fd5880120c6fee8ce22a157b65bc63846b65765bc4dc86e15926dcce400d0d
SSDEEP 12:sf9iXhV0xoUZxCe+JKlkQuMRxCb8TXuYJ0IJpPK6BsyW1inPiz:U9iRqxoUZxWMk8xVTeYWI31BtXP
TLSH
T105724C85B34498FFC8835E7189BD27903774F6DF1F02866B6A6A760E2E271C84F44224
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a62a1faeaaa56a5f5375b4d4921e6b263c0bc10a5ecc1f991894c66c32a88aef
MD5 64fcd85513a139bcf5844ab49aea8206
SHA1 3c834eccb77da48c4abac17c440971305fd9b653
SHA512 cd1b39ff43d56158fbb01c5408a5bf247d5bd82279b205a914ab4cdccfece77a5399e430bb26db6f7d10e70dc3503c3bf37c5de59e23cb8f62d6337066c4114f
TLSH
T15DD02232EBF00E82C00B0032082282880F08C03C08003222A23C20AE3A80CEC2E23000
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d1cc89f8f1c9f75d127814445edc4d6d9314209d3b11e5a2b4cc826747683f30
MD5 3bc9cc32c2de3150dc7916bb61984962
SHA1 d75ba9bc7ad74cb95dcb4ec6de6e6b18f5813a04
SHA512 fd090e624e91a98337689ed57390fc5813fab21acd3af426c9de6566ea4d92a7875c4f92a1b64d547eaf9ce40cad3d8a85472a30cf521aea6198cf74b69805ac
TLSH
T12ED02232ABF00E82C80B0032082082880F08C03C0800B323A23C20AE2A82CEC2E23000
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 d7c6193d7586889cdfa331c734b332ca7d9d8e00e693f5f04b9a9e0c686438c8
MD5 0629c7eeb55b7d39da7966dec9348bdc
SHA1 6cceb49c247306232948ef511d9e3a8f2fa4df6c
SHA512 7c6f7efdffca36f8772b66dd86939939e23fafa64dc93257af0778ab8da37f57caf7c9c901e50534f56ad067797b7f65680f2a0190f933306f5718864308c513
TLSH
T19F5192B0BF8481A9F798627C9DCA02473E34998558B77FCC11E7CD7AF80A71E1125E44
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe591c58.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe591c58.TMP
Size 3KB
SHA256 54347f41ccf3732f7aa368063f8bafaf4139f46e40c5e7834ec873ffd80fb2f7
MD5 6bed2059ddb0bb2bff52bfc6b1b58301
SHA1 deb1f7304c4d21a1847103527aa2a2219e5a2254
SHA512 a94da13a73cea6e39e0895ba58d45f86178969486a0b9087bc3110ef5c3f9eeb81b14b690906e558f024b6a1b295563ddaea46cb0855792d77a9340e7bbdd0fa
TLSH
T1CB5191B4BF8481A9F798627C9DCA02473E34998558B77FCD21EBCD7AF80A71E1124E44
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 2917bf09e0f09b2d82ed16af9d21c01363a5e6265f2b8f5ec98b0b3a2cdae005
MD5 8653e11046e386e0b3e781bd0e04985f
SHA1 2a8478e2003e462627804ec0f859e098b48a3a02
SHA512 b8def82b77c18acf113dd2ad98a7d16313490868f83989cc444ab5d873c92856585acdb17e65944b1b86501fce8bd454f9d52322df019a8e3bfe125fdc8c5039
TLSH
T13811BDF3C3D585AE8D1116F0AA24AE1BCE1D0505431C7C1985D4EF2B93F3475D10299F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 b2944523f21a1e8bfcd99243aaf03b2f5118a55279ce17fe3d8d1f5572bc1bdf
MD5 360226885e7a35a7690c53936822f185
SHA1 8eac4e4a081a70a66adbb7cae707180bf298ed7e
SHA512 27f7769cfcf796488d978af16a167d3ce1accd67e838e36a69eb5e1f11db0073caa4385a417972769e165bb8cf42f0117e62d1be6063fc0ee14ac376c5e9b895
SSDEEP 192:sxZjRjWX/fks7tIdpdiHW6+WNGYgUknIgrJ:sxZjAX/fks7O8HbGP9
TLSH
T12822A7526E34A97B8CC7D21DBB65BF53E6F9503251941E48AAFC862C04E76DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 e7d28f6a98c191a39eb065369158fed99cc160db3b2e08352799ac80306d6053
MD5 0db97934d03554ef2a07294a184abc06
SHA1 d51872571ecdf8298f056e2b667794b54ea33b89
SHA512 31fbdceb17b405bc007ba74db6dea8900cb083529c648371b313f0dfcb53f8066bcba850ad981c16314cfafa48b514ef3732e30a20a494132eff9f9019429f91
SSDEEP 192:sxZjRjWX/fksItIdpHiHW6+WNGYgAknIg5rJ:sxZjAX/fksIOCHbGvz
TLSH
T18822B8626E38A97B8CC7D21DBF55BF53E2F9503251941E48AAFC8A2C05E76CD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 e6f07d336e30a7adbc4b095bf0dfa657e5ca84614308d5832381c19ee794420a
MD5 a26e0081c22b0763d70bf4c0e94f9dd3
SHA1 6d8450975375990862ec93b9daac897ea59b283b
SHA512 b2716740b38ecbe56be615c20376a2a7831649244c09099f52d91317c10f99656a543c406b5da9165591712ff7092ddf94ef3d847a371e9a28243d76de24c106
SSDEEP 192:sxZjRjWX/fksItIdpdiHW6+WNGYggknIg5rJ:sxZjAX/fksIO8HbGnz
TLSH
T1F922B8626E38A97B8CC7D20DBB55BF53E6F9503251951E48BAFC8A2C05E76CD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 d184ed60b3c53d0c100f79229516fadac33f55465fe66d3d79f7c030154771a6
MD5 46cf6144d420f98404f3dd7f6e365122
SHA1 d353d9816d47c3744b444bd1629ed27045665dcc
SHA512 b6f44fc86961b67583f8bed43b718416c03fa70aa4cb97e76519309e8d1db9b64a7916e44dd55d509d97139f6c55d5988f95b2f59d6cc2bda41b6e5ca12b728d
SSDEEP 192:sxZjRjWX/fksNtIdpdiHW6+WNGYgUknIg5xJ:sxZjAX/fksNO8HbGP9
TLSH
T1A522A7626E34A97B8CC7D21DBB55BF53E6F9503251941E48AAFC862C04E76DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 bc6f3290e538ff0167dc54ad3c51bbcc91dd674d6675301093ad069861011ac6
MD5 782e73a4bb238f9794193f2992ec90f0
SHA1 7f6c146efed1e21e021019762d12da3433951870
SHA512 fd6c05333fc35c47eca028220969387ee0017172248694adfdb49a0b3051f84002becb23d02b0b1346ed250d1346a0851e526a03eae714079c086c20b5ce3537
SSDEEP 768:ijichfPWvPZpl8F1+UoAYDCx9Tuqh0VfUC9xbog/OVu+LlEKXzFroKPY:ijichfPWvPZplu1jan+LKgz+YY
TLSH
T13DC2FA3B644CCA7E4FC01A5DDD1A6F9B7E9802C7AA588D4047FA984C02C77EE51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 dd6e7c9d4b2809d908f6e60ecc88e00f1cbe35cf3362723ecbf1d4fb451564b8
MD5 be27356fc45ce6902066b9217daeff45
SHA1 73faa68bda6643fd804a367c5ed34b514875cd3d
SHA512 0d37376d70f80aab245bb018063487ee4c45ae5abbdcff6b5fbb2242c6902a7a57dc84d627a246ec8ad419d8debcc5e0564562fd71e00574c88d6de2339bdba1
SSDEEP 96:KQNqKu0CC+oKDCslgZ1DPTgv3WzddgK11d7gJtdGbFt7:Atn8f7
TLSH
T1CE914052307B130038BD244981B59AAE464271B73058EF2B7FB901E78E6FE489DFE4D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d7742dec-e543-46fe-88e2-5217511dd957.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\d7742dec-e543-46fe-88e2-5217511dd957.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 1ba590c8d4aaa2753bd4a98a5c198333844ea28ee8f9a81aafb2a1855e7618dd
MD5 c173e47bc711993462f8c9f288217edc
SHA1 1476d9ade96963baa537db3cba7eb33657136c7b
SHA512 ff2896ee403199cc2482d174ac550e5a9b16468eb1e87ed23dd46c19664a3c81f36f0ebc3cb86573c6f12b2be01b11b169e04ab9c39d9b58770b1a25cb34c676
SSDEEP 384:gZcIhsNm8iBeM52fRBGYX5EXLEs9XlaYo7fVTStgOIwZOycLuoX:ehfeMCDGYuXLEs9ETVeXsbaM
TLSH
T115827D329CB8ACBB5CEB5185F58A36035FB89127E7C4AB94D4ED5B1D00DA298130BE17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 a16f6b931d278a1b66d76e14c8a67e6a97353e8e9de6167aa629c14e99f1d97a
MD5 53b872589ca140b9ad6e111a720485f1
SHA1 19b733367ac9555dea0faf284c173e8d058efa77
SHA512 6016c4a08945d7f6c2f303ec6a4add051e1d78f07f99cd44f2c4772aac92cacd267727ff46b55edb35e7d74a86eee35547d2f06b8d360a833089c669f44137e4
SSDEEP 384:aiFiZcIJzsNm8TUNTUlIlHiBeM52fRBGYX5EXLEs9XlaYo7fBTStgOIwZOycLuoX:RFQpjwg6eMCDGYuXLEs9ETBeXsbaM
TLSH
T114A25B338CB8DCBF6CFA5A85F94A36038EB49167D685EB90E6DD5A1D009B1D8030BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 0a8d5642a361453973e8b29137a55c0b75093dc77a7d1d06a4c00b681dfe9538
MD5 419dc01d8553883c1ee008b9bf316ddb
SHA1 f1e30b047ab4cea4b0fbcee7b58a5d8cfed00e88
SHA512 1db2a8f2e75bee4ca3198053451391fda1a3179edd5fa84ac051dde5bf008ca0c8684072ab1048bf24565241c70d73c8a6084eb471f997eb02b3c44febd5790b
SSDEEP 384:kZcIhsNmHiBeM52fRBGYX5EXLEs9XlaYo7fVTStgOIwZOycLuoX:ChmeMCDGYuXLEs9ETVeXsbaM
TLSH
T1C8827E329CB8ACBB5CEB9145F58A36035FB89127D7C4AF94D4ED5B1D00DA298130BE17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 e2a79858c7e43adb09d13eafbb8be4819f1cdad68af86b91a40e822f47ac1148
MD5 4d61d31757499887b4d96dfa6ab70c20
SHA1 5ccb1bb259b72c017744b1f10a0dc344b39e257d
SHA512 d5487359c3e5e855ed8905323210cd5bd0df7318a4dd2defc70f667a4142ee40c4eb5ee18c9ba17f7d2f0b64fe5aad13c6a342132eef471fde7d2223376fd9d1
SSDEEP 192:LJONX6DphnqQmiUyKKrjwGYX59ezWCLEs9XlaPwo7fNkIIYq5zSU6:lONX61UojwGYX5EXLEs9XlaYo7fWTSU6
TLSH
T1E1121935A8B8BC6B5DD36594B48B36135FE8522BEB847F84D5DC1A1C01DF29C130B927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 df8e9b282a1424c4d7195234479e48232f76f12a37f58cdc07fe4b9df4a50b14
MD5 3938067adb25c547552f49fafaec46fe
SHA1 862624a62f54319afdf9330d870a083773e81d9a
SHA512 f7db44bb67b51a796a12300c85d0ef9cebfec8947e12588053289280b5e85d332382746e360a74a93a4dc466b31eb38418fe66dfd38305dbbce3966f70a4eb56
SSDEEP 192:LJONV6DphmqQmiUyK4rq8wGYX59ezWCLEsXkk7sbU6:lONV619SRwGYX5EXLEs/yU6
TLSH
T1AB02FA39AC78BCBB9DE36E45B58B26139FE4112FAA906F44D6E81A1D01C768C1307937
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4d8a9def-332c-42c1-a492-b467f99496e3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\4d8a9def-332c-42c1-a492-b467f99496e3.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 cb9ca9335d723d9eaac8e770c5c377000c4974c2b68556a9f6971f066987ea45
MD5 4a73055c106d14c7e309d2bf0e5f6734
SHA1 b2ccc3c021d3d8d54ebdc476e59d101417a177c3
SHA512 d5d8a4f53f4a803f3ec6b21fc6e98c2a5e4445380f69dae8e7306c81e566e36cd456dc4f6e56714faed202b409b534d811984f67b627bb340c7d3e4bef4596b8
TLSH
T1A141D85DAAED1108B3776F56AFF6A4AD487ABC772F06C59D10110E4E0A67A04C8B1B33
MD5 SHA1 SHA512 TLSH

Submit Download