5d6004c82e2d7244aad68bb00365d03353aa2ac2d87ec93b28b59b029543fde2

Analysis

max time kernel
149s
max time network
124s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/09/2026, 00:28

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
attachment20260930-1092870-l8eax4.htm
Size 1KB
Sample260930-asd17axy4k
SHA256 5d6004c82e2d7244aad68bb00365d03353aa2ac2d87ec93b28b59b029543fde2
MD5 3a134f40128e3382caf68c7037564ce6
SHA1 d53f727b1b15ed1d2286e65613578331cb2a01f7
SHA512 7dc021062e3dd4f2601fa8291c6c7370bcb1b579bc09aac01ed304c2dfe255c0a67248a2e7b90940563d9c914749f0488d85f55208a5f48bf413f651b735d21e
TLSH
T1FD11CCDB03E23DA45493333764434B8EDF380175E7724F753475211A138A29AD4239F4
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4352	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-939655444-3071939294-1401108526-1000\{BED0FE9C-25A9-4CDA-A953-6BEC75FF17B3}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3696	msedge.exe
3696	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 1788 wrote to memory of 3944	1788	msedge.exe	86
PID 1788 wrote to memory of 4352	1788	msedge.exe	87
PID 1788 wrote to memory of 3084	1788	msedge.exe	88
PID 1788 wrote to memory of 3084	1788	msedge.exe	88
PID 1788 wrote to memory of 3132	1788	msedge.exe	89
PID 1788 wrote to memory of 3132	1788	msedge.exe	89
PID 1788 wrote to memory of 3132	1788	msedge.exe	89
PID 1788 wrote to memory of 1688	1788	msedge.exe	90
PID 1788 wrote to memory of 4560	1788	msedge.exe	91
PID 1788 wrote to memory of 1688	1788	msedge.exe	90
PID 1788 wrote to memory of 1688	1788	msedge.exe	90
PID 1788 wrote to memory of 4560	1788	msedge.exe	91
PID 1788 wrote to memory of 4560	1788	msedge.exe	91
PID 1788 wrote to memory of 3784	1788	msedge.exe	93
PID 1788 wrote to memory of 2944	1788	msedge.exe	94
PID 1788 wrote to memory of 3784	1788	msedge.exe	93
PID 1788 wrote to memory of 3784	1788	msedge.exe	93
PID 1788 wrote to memory of 2944	1788	msedge.exe	94
PID 1788 wrote to memory of 2944	1788	msedge.exe	94
PID 1788 wrote to memory of 3664	1788	msedge.exe	100
PID 1788 wrote to memory of 652	1788	msedge.exe	101
PID 1788 wrote to memory of 3664	1788	msedge.exe	100
PID 1788 wrote to memory of 652	1788	msedge.exe	101
PID 1788 wrote to memory of 1488	1788	msedge.exe	103
PID 1788 wrote to memory of 2332	1788	msedge.exe	112
PID 1788 wrote to memory of 3992	1788	msedge.exe	113
PID 1788 wrote to memory of 1172	1788	msedge.exe	114
PID 1788 wrote to memory of 4088	1788	msedge.exe	122
PID 1788 wrote to memory of 4088	1788	msedge.exe	122
PID 1788 wrote to memory of 4256	1788	msedge.exe	125
PID 1788 wrote to memory of 4256	1788	msedge.exe	125
PID 1788 wrote to memory of 3696	1788	msedge.exe	127

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\attachment20260930-1092870-l8eax4.htm
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffbe964c188,0x7ffbe964c194,0x7ffbe964c1a0
  2⤵
  PID:3944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1748,i,9690146488488703789,219919053388367599,524288 --field-trial-handle=2468,i,9013054433776450495,16392703002034137208,262144 --variations-seed-version --mojo-platform-channel-handle=2496 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1888,i,4234088138820089476,3060648454729539640,524288 --field-trial-handle=2468,i,9013054433776450495,16392703002034137208,262144 --variations-seed-version --mojo-platform-channel-handle=2504 /prefetch:8
  2⤵
  PID:3084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1652,i,6103794516181131193,12965827197767925110,262144 --field-trial-handle=2468,i,9013054433776450495,16392703002034137208,262144 --variations-seed-version --mojo-platform-channel-handle=2464 /prefetch:2
  2⤵
  PID:3132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3444,i,18200409290984879419,1001416400756629059,2097152 --field-trial-handle=2468,i,9013054433776450495,16392703002034137208,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:1688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3448,i,11551832400946574951,14202718956170242758,2097152 --field-trial-handle=2468,i,9013054433776450495,16392703002034137208,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
  2⤵
  PID:4560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4188,i,2397224332573802022,8348369481334156020,2097152 --field-trial-handle=2468,i,9013054433776450495,16392703002034137208,262144 --variations-seed-version --mojo-platform-channel-handle=4216 /prefetch:1
  2⤵
  PID:3784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4200,i,17153827899024022561,8210957641784004942,2097152 --field-trial-handle=2468,i,9013054433776450495,16392703002034137208,262144 --variations-seed-version --mojo-platform-channel-handle=4244 /prefetch:2
  2⤵
  PID:2944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5084,i,7265417751802041836,12517791370312315667,524288 --field-trial-handle=2468,i,9013054433776450495,16392703002034137208,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:8
  2⤵
  PID:3664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5100,i,14840435370877850190,17176418643832723589,524288 --field-trial-handle=2468,i,9013054433776450495,16392703002034137208,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
  2⤵
  PID:652
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5848,i,16110041819879134500,733610049979308915,524288 --field-trial-handle=2468,i,9013054433776450495,16392703002034137208,262144 --variations-seed-version --mojo-platform-channel-handle=5868 /prefetch:8
  2⤵
  PID:3952
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5848,i,16110041819879134500,733610049979308915,524288 --field-trial-handle=2468,i,9013054433776450495,16392703002034137208,262144 --variations-seed-version --mojo-platform-channel-handle=5868 /prefetch:8
  2⤵
  PID:1488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4548,i,13161582788768011801,2348610320933269375,524288 --field-trial-handle=2468,i,9013054433776450495,16392703002034137208,262144 --variations-seed-version --mojo-platform-channel-handle=560 /prefetch:8
  2⤵
  PID:2332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4532,i,9164926134782892953,15885599635278503836,524288 --field-trial-handle=2468,i,9013054433776450495,16392703002034137208,262144 --variations-seed-version --mojo-platform-channel-handle=4496 /prefetch:8
  2⤵
  PID:3992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4536,i,15414710697683556751,1163606793808929285,524288 --field-trial-handle=2468,i,9013054433776450495,16392703002034137208,262144 --variations-seed-version --mojo-platform-channel-handle=5936 /prefetch:8
  2⤵
  PID:1172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5404,i,3420032683254462922,1718753535992976822,524288 --field-trial-handle=2468,i,9013054433776450495,16392703002034137208,262144 --variations-seed-version --mojo-platform-channel-handle=2564 /prefetch:8
  2⤵
  PID:4088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5732,i,18150744924298551773,15392091878390961185,524288 --field-trial-handle=2468,i,9013054433776450495,16392703002034137208,262144 --variations-seed-version --mojo-platform-channel-handle=3392 /prefetch:8
  2⤵
  PID:4256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6132,i,3031623701842538645,7565013243837900338,262144 --field-trial-handle=2468,i,9013054433776450495,16392703002034137208,262144 --variations-seed-version --mojo-platform-channel-handle=6124 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3696

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2180

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 7331d61b72578f10058ae20f1a7351dc99070a754006884c0b775bb57bffd9cc
MD5 df1098b0a62fea8609e624a81ae2865a
SHA1 eb148addd613d8dae155058eacdf967eae295b15
SHA512 0ec5916b4d090394f668a1ee0ca76c2125146f8b8507c9e7dd1bb90a8aed21e61551b85c2a32b975aea241df7bda238c513a58ebe378cd3af3d77e71803ef6d8
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7s:fwUQC5VwBIiElEd2K57P7s
TLSH
T1D2B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 9e411e40b2b1e7f1576e6c2cf3027d590d4c5916b7a5e41c1a711f9117d0f1e1
MD5 f86a69ac894860b8a7e2ac52b3c2987b
SHA1 835d87e07bf2af2a2410d66f27145dd25efdaad6
SHA512 6de1915f0367b482a80195c1b703b1007a524ab2a6815670db955de8dd4235e1faa888dde7fcefe1ccbf4dae73b9d41563a6a2f7e5d8d75bf2ff9783b485b777
TLSH
T1ABD02BF8DBD88120F033383400398283308C660420061120A873114C0C441C34225868
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 18eb5a70b8dc14ee5a30ef2a54b3e14abbda2b2d751a8e8abad286d8e92d8872
MD5 a2b3071ef6468d20d3499dac11b0df41
SHA1 e96a1ba764d6003a0c508557df66dec18df2a1e7
SHA512 144677b38dc2433c6ce2cd569ea8dac3d5f5013e173fcf4e0e6d6d88ad42c12001c58ec8fdf8229ee7476fa921cb946792037c4914570deac4969d9365895b19
TLSH
T113D02BF89BD88520F433383400388283308C660420065221A873114C0C451C34225868
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 3f38edccdd68db70d4bf6689d9d1d9115bf862d3327f297be9dffe49d6e69fe0
MD5 ea3a855cf28b50282327d3fc8c06e092
SHA1 1590bda190536f28c541955c4665aee2b0be9ce3
SHA512 f831e3f3f9b9ebd4d0697c8dc2c46cdc3aefa20e8bda6f5fae28adfed61a18cc7cdb869e6ff05b9cfa97ba8444bb8975e8d61ef301bd4ec85307072ee0b0ace9
TLSH
T18851318056A25370FF64F87E99E5136F3B38D481D7CB6E5A08A6DCBC7BCA39E9106044
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58e308.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58e308.TMP
Size 2KB
SHA256 cd68e1f81ad570272cc049684ffbd5b5fc2e78c0e5f73fe2c29bdc0657b3cd70
MD5 05e4a9be6114964a53112e209438acc9
SHA1 aa914c5bb3a3c6037bb9dcfdcb678678ac89b036
SHA512 6a3ac04bc6438cf431c512af16ccab2cf56b50039c83039dd4480cf1f76a0b4c0a92d1590080a6af4c843cbdb2a01540874bb5ad1864e7666f1731687bc51e0b
TLSH
T16B51528056925370FF64F87E9AE4136F3B38D481D7CB6E5A08A6DCBC7BCA39E9102044
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 0d00964cddfdb3da44532463948f7ed3e02336e73c1d8aa3a4aab2a07216f687
MD5 e7d1071c0655d85191aba30eef5c5201
SHA1 c4e5cfee5c7a734cf9a3e8a353f03791da03f760
SHA512 5b856907aff44ff89127b05303584c82a3be5b521f3e7733c62aeb305a71ac9986dbbdfc8d1948a52ee5499c096884e121091d7f2101ee2ba51f055ac42738b5
TLSH
T1CB117DB3C3D585AE8D0556F06A24AE2BDE1D0516425C7C19C9D4EF2793F3075D10299F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 21226b5163d23d191acd0e68ea6a578d045b9c84947ca03fdd7caf67af89ba4e
MD5 547a732d3356fa4612e5c434bc8faedc
SHA1 7d914e79aeeea67797c5505610c7e4cbe74f34e6
SHA512 cefbf3b39e04cb862952829951849d720ea25a111fec5b727201b8e64d8a9bf9ea35f8a0831bdb9e8505397289af0b54347ba7f7a7c35e978d90b1514d4e07a9
SSDEEP 192:sxZ+R6Wb/fIsyZ5/IdpdoHW6+WNGYapYe+pIgrJ:sxZ+Db/fIsyZ2KHbGVq9
TLSH
T10A22B7126E38A97B8CC7D20DBA55BF53E6F9503291D51E48EAFC852C05E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 6a5ae05b1439e7981ca12738f513a43a75bc5db381b0e753f38d324df08446e4
MD5 21d2bd6fbd07f4d7532fd449a0d011f9
SHA1 c27f8657175ebfb28cc663b6394834fca00183e8
SHA512 49abf2975eef3abbfb47109484c864c387660cfc6829200bc4db900bd3ccabde6c00c65df75a6e2736cd9d1ab2c94f96650d60af8fe38104068ba0d6e454bfd3
SSDEEP 192:sxZ+R6Wb/fIsG/5/IdpHoHW6+WNGYapNe+pIg5PJ:sxZ+Db/fIsG/2IHbGCqL
TLSH
T1CC22B7226E78A97B8CC7D20DBA55BF53E6F9503291911E48E6FCC62C05E77DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 3efa1fb15e8d8e0942ef9ed2e16bce837649a6da55ad2673891805c4a4920158
MD5 19a6ae76465c769947786bf7fa68358f
SHA1 21e5acc2ddbc38841f7cc19b7b68a804233f0c28
SHA512 f33db7c6165454d8030614c84c2415ee9dfc64f43d5d5fcd1e7872eaa8de44b854d908509f8c3238e337ec615c731b996ada2ffe2ec959b8d89a8c27496831a2
SSDEEP 192:sxZ+R6Wb/fIsG/5/IdpdoHW6+WNGYapde+pIg5PJ:sxZ+Db/fIsG/2KHbGCqL
TLSH
T1B822A7226E78A97B8CC7D20DBA55BF53E6F9503291911E48E6FCC62C05E77DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 6e914712b3d12514d689ad9f257c5c5e67c6685f122a777fee53e6ff6563ed46
MD5 2747a7c5c0d1838d98ca8052e033ef81
SHA1 50d2cc9fc9a340deedbe3d7ecd1e490932ab3819
SHA512 49dc7b21ca6456a81589b20e04aaa18a4fc65de1d26049da3a698aa07cf0992a90c3302f701d52d66e3e08839da1ed2f37dbfdf38e36f752895edb5eba23e21a
SSDEEP 192:sxZ+R6Wb/fIsGZ5/IdpdoHW6+WNGYapYe+pIg5lJ:sxZ+Db/fIsGZ2KHbGVql
TLSH
T1F522B7216E78A97B8CC7D20DBA55BF53D6F9503291D11E48E6FC852C05E77DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 2fd1fb917ac42d831409468c574650d05c7a77b8d68950ad7d095af5748b3481
MD5 3fd4351124f1dca828c6a0078c6b1211
SHA1 ba361ffb16d1a6847b70c3fcfe064fce1d67b573
SHA512 de035a5d39fa8c2f0bdf37ee0e89f7dda367879b8e453ac94d45de8c082ea919e3412051a1f0a14ccd51da4613803a274b8e2aded515ad98ecc09823e4d22af3
SSDEEP 768:aiWPcLKWvKeEe8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjlLlACy7Zro4tfeSmRY:aiWPcLKWvKeEeu1jaClLiF7S4tWSmRY
TLSH
T1DBC2FA3B640CCB7E5FC01A9DDC5A6FA77E9802C79A648D4047FE944C02C77EA912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 09da1153caa2fe2931916c403624cb23d10dd2c52c645bec7526d9e7fde903a1
MD5 b9e4bf1f56621c52a9d8ddc1b45a349a
SHA1 7d0c52f0e5ebc8e9684d380beca15ddcec9db8ff
SHA512 dbaa5b92d55aae6105e3cba23d94aed8256737e807251f4971a5370de55340e938e82f6121ed24ae3e0c375712c4ce1ff9c2f209fd3c8582ff15e46bf55cfc03
SSDEEP 48:KMIIbKZa0fyFPIlKoEYLk/YU+aWkmahPIhMkKAB42k800PB+05yj5+9pb3jkz3QC:KMIAKZa+2PSKoEjt+K+AqK6a
TLSH
T125A1E11132BA024238BE651981B58B2E525135B3751AF62F3FFD44A28A6BF184DFD8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe597e5e.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe597e5e.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 b229418557c381cbe1f2cec28483cfe92c8aaed74fc0a0476ebb70ed42485cc9
MD5 c1c6f89a6e0a0c48b34f5b6b60c6584c
SHA1 a7bb63e10c1309fdef88580702fd98dc1688800a
SHA512 0aeb1001880d633d31e80c26538c8fbd5cb729d4a98986c443579d4b18121ad559ccf5fa619e7bed2b372d39a6628adbbf83252288d7272499a13587d8a10291
SSDEEP 384:rZcIhsNdUxWaK1JymzIGmFAk9wXwiGtgOIwZOy1Xoe:zh+3uwCTAwiGXsMp
TLSH
T199827D7298B8AC776EF7A148F4873B135EB88067A6C86B80D5EC9B1D01DB258130BD17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 a2ea95eab0fdcc00a27b2817bccb6e0e24c7accca12867c609487cbbee11e554
MD5 e7e604d466271f14fd4b4ecbf488f099
SHA1 d54a02f9c9a3781be59fddf68c13093690f99a53
SHA512 cd8d8a047f12a4fe1273d7b25a8387d9f3a7a3b1a22c1931751e6bf43489a06d202b4ab46c6b6c6abfca3ed262d40b45d68b61abea27b4109a717239a4e036d0
SSDEEP 384:RiFiZcIozsNO8TUNTUlIlaWaK1JymzIGmFAk9wXoWiGtgOIwZOy1Xoe:4FQU3wgZ3uwCTAoWiGXsMp
TLSH
T199A27C3388B8DC7BAEF79A44F98A37139EB44067D5C4AB90E6DC9A1C01DB19C130BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 f55b1c925b4209ccfc3abb91a1ed2cca6cd6a30be02fe8035b4e521d40715dc7
MD5 966b5103e49e51f121df4f113f8fd960
SHA1 c2dc07a15bfd05f74e56e66731cebe7e71cda3af
SHA512 17abae9322ae255779b641cb8459504a3e149dcbbba09e136b80fdb4c0836d9ed3e384f8944fcae7e47ae3c666ec1557a32aa56d68499910d4eb7949c6b9c1e5
SSDEEP 384:ZZcIhsNdUaWaK1JymzIGmFAk9wXwiGtgOIwZOy1Xoe:xhR3uwCTAwiGXsMp
TLSH
T179827D7298B8AC775EF7E148F5873B135EB88027A6C86B80D5EC9B1D01DB258130BD17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 8dd573d61bc50e26e11aba1baf2d7fb8421c817e7b4ead4bbdb80df3a29626d0
MD5 786f46876a90d53cded70f753a204e63
SHA1 46301019d8e3bd066082c7545683f171c81ed0ec
SHA512 abf02b4bc425d473f2c24f946bb21d30b8b71a4cf838c7b5db452b4d3ac0c10402c7b7a2347af1c3f67a54688dbc5fe3340f592cdc1a224e602dab5afac2b963
SSDEEP 96:3qONkgQsjpfe/tyng7X5ih/cIPURHl8h4otop52YDRNBnP9ZvEI0IG2jbg00Lx6s:aONI6IE7QmiUyLRTPuIGmF0LVC7sBbU6
TLSH
T18F02F939ACBC7C7B9EF3AD48B4872B236EA5112BA5942F84D9E81B1D00D720C1306D22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 355d01d4e845876248c5b74ed7021377288fc985f03b6fff71ed8ef9df38692d
MD5 e977ce21df5da1b753c7ef6e30f06204
SHA1 dffcef05507ebcc132ee3a76ad223eea2a0a6063
SHA512 274dcbd49a23c40977161411f35d23f664942bf9f3c9e3a5c0666ffdd3365abc872f6806eb17c09680405bfa10a0b775d1a07df273bba5d91e07620e6cc4d13d
SSDEEP 192:aONv6IEUQmiUy5RTyuIGmF0Lk90FXo27HgqUU6:aONv6DkgyuIGmFAk9wXRHGU6
TLSH
T130120A36A8B8BC775EE3A854F4873A235DA54227EA887F80D5DC1A1C01EF25C130AD56
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4cca4c80-d197-4897-86ed-d5cfea31d90d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\4cca4c80-d197-4897-86ed-d5cfea31d90d.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 bcda8ecd679f6ec7a2050bbc4f8f7aa2db9f6be1235a6493c73f49f3551816ac
MD5 71aa170fdd6f399a1c335eae0efca8a5
SHA1 197ebaf4447cfd246767edc102990ba58836d57a
SHA512 2bbb0bcadd1b7b92cb08db70c502efcaca34ca63e00731671a3b58dc2adf20e0297076e9c3e589180857d3c18319fe32eb820add1412393270e7370e5368128c
TLSH
T1AE41D669B6EA1158B3B76E46ABB3A96D487EB9372E0BD45D00110D4F0673A40CCA1B33
MD5 SHA1 SHA512 TLSH

Submit Download