3e10b452175f0acbfcda6bc2487e308e0c5f4913f1ca5b0ed77be7a462a066bc

Analysis

max time kernel
149s
max time network
140s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/09/2026, 01:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
attachment20260930-1092870-m9s6rs.html
Size 171B
Sample260930-bj1dhazzbv
SHA256 3e10b452175f0acbfcda6bc2487e308e0c5f4913f1ca5b0ed77be7a462a066bc
MD5 e082ebc14f6b24945336f6450b985e45
SHA1 df12ad35c265b0198582e2dc94e0a93048e4de82
SHA512 8dac8fb7101ee6a50ec58409a7d51009d9a3f6b1266377cad6f7f9001bc6f6734ffc067e7cfd0f17a1d0e288803fa8c8d37925590f6421772323ce99a4a9a1bf
TLSH
T1E4C08C7D10C13C150270A93C1DD3B397EC93198E01422B41308180232F35620CED32D0
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4704	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-747854149-4118156852-591593384-1000\{09D976D3-234F-48EE-9496-D0528E21C9E5}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4892	msedge.exe
4892	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 728 wrote to memory of 3464	728	msedge.exe	86
PID 728 wrote to memory of 4704	728	msedge.exe	87
PID 728 wrote to memory of 4760	728	msedge.exe	88
PID 728 wrote to memory of 4760	728	msedge.exe	88
PID 728 wrote to memory of 4760	728	msedge.exe	88
PID 728 wrote to memory of 4676	728	msedge.exe	89
PID 728 wrote to memory of 4676	728	msedge.exe	89
PID 728 wrote to memory of 3340	728	msedge.exe	90
PID 728 wrote to memory of 3340	728	msedge.exe	90
PID 728 wrote to memory of 3340	728	msedge.exe	90
PID 728 wrote to memory of 3524	728	msedge.exe	91
PID 728 wrote to memory of 3524	728	msedge.exe	91
PID 728 wrote to memory of 3524	728	msedge.exe	91
PID 728 wrote to memory of 4868	728	msedge.exe	92
PID 728 wrote to memory of 1224	728	msedge.exe	93
PID 728 wrote to memory of 4868	728	msedge.exe	92
PID 728 wrote to memory of 4868	728	msedge.exe	92
PID 728 wrote to memory of 1224	728	msedge.exe	93
PID 728 wrote to memory of 1224	728	msedge.exe	93
PID 728 wrote to memory of 3872	728	msedge.exe	99
PID 728 wrote to memory of 2708	728	msedge.exe	100
PID 728 wrote to memory of 3872	728	msedge.exe	99
PID 728 wrote to memory of 2708	728	msedge.exe	100
PID 728 wrote to memory of 4296	728	msedge.exe	104
PID 728 wrote to memory of 1240	728	msedge.exe	114
PID 728 wrote to memory of 5048	728	msedge.exe	115
PID 728 wrote to memory of 2724	728	msedge.exe	116
PID 728 wrote to memory of 4672	728	msedge.exe	124
PID 728 wrote to memory of 4672	728	msedge.exe	124
PID 728 wrote to memory of 4892	728	msedge.exe	127

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\attachment20260930-1092870-m9s6rs.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x20c,0x248,0x7ff84de3c188,0x7ff84de3c194,0x7ff84de3c1a0
  2⤵
  PID:3464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1812,i,3066433413083648181,4812948466632144305,524288 --field-trial-handle=2264,i,13622005296527646017,12062129060375185076,262144 --variations-seed-version --mojo-platform-channel-handle=2308 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1636,i,6829972258740258938,15172463897451295920,262144 --field-trial-handle=2264,i,13622005296527646017,12062129060375185076,262144 --variations-seed-version --mojo-platform-channel-handle=2260 /prefetch:2
  2⤵
  PID:4760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2592,i,12066624233438548245,17989240727397733866,524288 --field-trial-handle=2264,i,13622005296527646017,12062129060375185076,262144 --variations-seed-version --mojo-platform-channel-handle=2724 /prefetch:8
  2⤵
  PID:4676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3428,i,2759155570280649941,9527170078602334007,2097152 --field-trial-handle=2264,i,13622005296527646017,12062129060375185076,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:3340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3432,i,14378899260085521319,16564275320687364938,2097152 --field-trial-handle=2264,i,13622005296527646017,12062129060375185076,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  PID:3524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4192,i,16259241741330467878,724005443009344309,2097152 --field-trial-handle=2264,i,13622005296527646017,12062129060375185076,262144 --variations-seed-version --mojo-platform-channel-handle=4204 /prefetch:1
  2⤵
  PID:4868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4264,i,3389826813874117431,12247989971384793032,2097152 --field-trial-handle=2264,i,13622005296527646017,12062129060375185076,262144 --variations-seed-version --mojo-platform-channel-handle=4228 /prefetch:2
  2⤵
  PID:1224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5104,i,4438034807999721875,13833239149985578386,524288 --field-trial-handle=2264,i,13622005296527646017,12062129060375185076,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:8
  2⤵
  PID:3872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5108,i,6351315879218164290,18036605066416043644,524288 --field-trial-handle=2264,i,13622005296527646017,12062129060375185076,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:8
  2⤵
  PID:2708
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5932,i,12420292727753403161,4573149784324256078,524288 --field-trial-handle=2264,i,13622005296527646017,12062129060375185076,262144 --variations-seed-version --mojo-platform-channel-handle=5948 /prefetch:8
  2⤵
  PID:3916
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5932,i,12420292727753403161,4573149784324256078,524288 --field-trial-handle=2264,i,13622005296527646017,12062129060375185076,262144 --variations-seed-version --mojo-platform-channel-handle=5948 /prefetch:8
  2⤵
  PID:4296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4532,i,16926829531242496014,12817811441504117167,524288 --field-trial-handle=2264,i,13622005296527646017,12062129060375185076,262144 --variations-seed-version --mojo-platform-channel-handle=4292 /prefetch:8
  2⤵
  PID:1240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4516,i,7418822568676435871,409625588916422473,524288 --field-trial-handle=2264,i,13622005296527646017,12062129060375185076,262144 --variations-seed-version --mojo-platform-channel-handle=4228 /prefetch:8
  2⤵
  PID:5048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4520,i,6698974850150280703,1443184079165278333,524288 --field-trial-handle=2264,i,13622005296527646017,12062129060375185076,262144 --variations-seed-version --mojo-platform-channel-handle=4536 /prefetch:8
  2⤵
  PID:2724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5436,i,8634936708792471822,12166668208535250578,524288 --field-trial-handle=2264,i,13622005296527646017,12062129060375185076,262144 --variations-seed-version --mojo-platform-channel-handle=5404 /prefetch:8
  2⤵
  PID:4672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=780,i,1549042041912264862,6885343048337854563,262144 --field-trial-handle=2264,i,13622005296527646017,12062129060375185076,262144 --variations-seed-version --mojo-platform-channel-handle=6048 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4892

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1992

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 7331d61b72578f10058ae20f1a7351dc99070a754006884c0b775bb57bffd9cc
MD5 df1098b0a62fea8609e624a81ae2865a
SHA1 eb148addd613d8dae155058eacdf967eae295b15
SHA512 0ec5916b4d090394f668a1ee0ca76c2125146f8b8507c9e7dd1bb90a8aed21e61551b85c2a32b975aea241df7bda238c513a58ebe378cd3af3d77e71803ef6d8
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7s:fwUQC5VwBIiElEd2K57P7s
TLSH
T1D2B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 27f6aa5d39c98b4843eaed7972cf93d10e75e08f497afafa54ccf4057f6d52c9
MD5 a91eafa1aeb7b35d5c7abac6d2c83384
SHA1 a76b97105496dbfe28857282f5b661789a032b25
SHA512 4bebba8a121156a8e7e31bb49955c0375f1ca3be7dcd3c9b113d261a4618ecdf6781fce438d8e56020e438286e1619d3844f48e91b2b2c3cbb4a55d4c199972a
TLSH
T17AD02B24C9E41E90D0131434002241453F8CC03858023012D0B812AE15419D60A21020
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0e364ae2365b95ee5142a1a0abe3ee5065b85c554bc5cb9fcb1f31bcd0a1af4e
MD5 75bc6f9debcf49d2312740dfba56733a
SHA1 af0f5dfe4b330cf62c24c0003f6c57159b23e268
SHA512 c0a6cf9272c224460d1e7d25cf8159aa43733ebfb5f2761293ec6a5f2b4d71e061daa60092335856322f566a072c79184d7ad45d2b04b7cf8f3628e3a4bd4d35
TLSH
T176D02B2489E41E90D4131434002141453F8CC03858027113D0B812AE05429D60A21020
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 413311182cd65fcdbf4c85312c6db01741624bb445a2efd6359638cf00db22d4
MD5 871d11d316f18bce94fc606651b52445
SHA1 eb332baf6e686613be17aae5b3684f632bacfa38
SHA512 8d4ecd3a673d447fc54916803657f7ddd7d3e34cf0ce9be442c6ef6ff604da6c61e26fa353f8718418019e6c18f8f259566ec54eae71c80a003c9935c1339c55
TLSH
T18D618241D0C1846ADFD44230A5F6A1A7F23176B4C5A7BDB9814CDCBE9B07F3D226B990
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58f826.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58f826.TMP
Size 3KB
SHA256 14e0e163b766929f096ad2d75ad240c0c4d0c1d6cac10ba6e2b2eb0d83674b2c
MD5 3fe87d1db41804d90a9759aa6e2f2662
SHA1 c38fb4c459c6deb6d2081d6bcab7e988274cf0f0
SHA512 5129863f6da0d819d94cd1a166587e0cc656531264e82427ba16ad6f01d40c6eb0a3d2b24ceb27f83ad725d5f9e28a0cdfe52484a432e2b50e84e37c28ebf2d6
TLSH
T167618241D0C0846ADFD44230A5F59197F231B6B4C4A7BCB9814CDCBD5B07F3D226B990
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 a24e2e801cea6faee3986de7cf782ac289250204d7842b50b757f6ef61fc4037
MD5 a5516454183ce065541e9bf6a1108099
SHA1 ef9a58d15601ce8a7e3168ceecb12d0638d6db42
SHA512 57c308828b4628b6b7c2b82f8b7a0a8ce6641b592704809927466c2a2e6fb2083423b07cb2690aa959661b3fc8dbea6d85ab42b97ab86fe9f4b724c0fb88e250
TLSH
T118113DF3C3D595AE890116F06A24AE1BCE1D0905421C7C1A86D4EF27D7E3476D10299F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 6b3030be785a7f3ba260f8406d01c0f830ca34d4b0ba232d022de7a9e7ccddf5
MD5 55e04789bd3cbfdf243e4c49aeac90a6
SHA1 c2aa781e296551537f3b413a1857a85b3a2e7872
SHA512 e753580533cb057964ea0aa43201897dff9954aaab68829a9d49d32b7ca6ba10f776baac03972742f2a49fdae04cdaa5cebfded1b8d5bd2cb7d92a205c84b537
SSDEEP 192:sxZ5R+Wj/f1sI5IdpdGHW6+WNGYgU1xIgrJ:sxZ5Dj/f1sISEHbGs9
TLSH
T1DC12A7117E38A97B8CC7D20DBB15BF53E6F95032A1941E48EAFC862C05E6ADD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 1d9fc810e39b0d5c612fd1a99e77955372b1e95728af2f5098a15a4f689f5d8a
MD5 719d9835f617ed8076d0c56f68c7e0a7
SHA1 a3a87c268a900f79cd160a9c5ce851d872f95078
SHA512 95f7c6a4e247d51a7d72935a0fe6fd8d730c6eb3039dc615781683bd1dcf3451f35bbf97797dcdb3a7c65a9c30d780bbf9261f8a3f2ea3171ba4eec135b79c9d
SSDEEP 192:sxZ5R+Wj/f1sZ5IdpHGHW6+WNGYgk1xIg5GJ:sxZ5Dj/f1sZSmHbGoU
TLSH
T14222B8527E38A97B8CC7D20DBB15BF53E6F9503251901E48AAFC862C05E7ACD120784F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 3bb85f99a2090ee9229399486980600370ec396f0bac30a42ddf7dd3df55860e
MD5 6e740c63c0bb9036a369278e8347c934
SHA1 12af7a64e97fb59a4b9302f77fe3998089801851
SHA512 fd7efdeda2e721c62e743c21eff421a4b89d31ffea5cd015f2617946b95470d06cbe38b3dc734fba10f74b140ca513a18c85eb76171414b6f2f8ea3c5664adf1
SSDEEP 192:sxZ5R+Wj/f1sZ5IdpdGHW6+WNGYgm1xIg5GJ:sxZ5Dj/f1sZSEHbGWU
TLSH
T18522B7517E38A97B8CC7E20DBB15BF53E6F9503251951E48AAFC862C05E7ACD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 895674f503e3d8a8447b9613c70f862c334c400fa072d7b7cbf6be996a894a0e
MD5 df2f29c949614512950a2369221a70b6
SHA1 67680f329f2fb48ff1644b5347d1f45fffb46ee9
SHA512 07e06bceb3991e9207d861152dd38186e5be8546897f068cdbb0b939c5c8d1286bab0603fe8f7d742be9468be9ca2954dc094ad6e0e26862374e717c1c0c7c9c
SSDEEP 192:sxZ5R+Wj/f1sa5IdpdGHW6+WNGYgU1xIg5kJ:sxZ5Dj/f1saSEHbGsW
TLSH
T12422A8117E38A97B8CC7D21DBB15BF53E6F9503291941E48EAFC862C05E66DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 b60e29e4071d6bd51246e426572b0bb1ab3e8c7d73d5b76668a6bea94999f549
MD5 87cd20d574f41d6f1fe8e5874d1a7960
SHA1 c6880ad5246c46dec72af9f2b8180fe448f74518
SHA512 530015b4ce3b48d42965bd09d4acd1a0020e7e9633758dca7a108a2def93f4a74eea0408bc533fe4e514858eb7826e7608516d7920bec576f4579f124f955c24
SSDEEP 768:UxichfPWvPZpl8F1+UoAYDCx9Tuqh0VfUC9xbog/OVu+LlEKXzEroKsB:UxichfPWvPZplu1jan+LKgzPDB
TLSH
T1AFC2E93B644CCA7E4FC05A5DDD1A6F9A7EA802C7A6588D4047FA984C02C77EE51264CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 2add6e382bbbf88249ca7cda51eeb8fae46329436c8188f31e5fa04c723dd7c4
MD5 434485099e9c33c3d867e6447cfcb64c
SHA1 97cbf68c7534cea48df5551e8cb8da8938b7d9d9
SHA512 c13975ea5969fffb833575adf28174ff8109a452d380590ab5026fb7d149e5e6b5b3509b04b1addbd73f6b3de993cd5d447eaa9db601e6ea5c096f2afc71472b
SSDEEP 48:K0cLq2EGqTba5iISuTK9K1oTxMDYBSqwyLWRsQO00tbYvAISotK9M1OtxG9Yn4Ur:KAzmKo0ye5WKyoCOduKu8T
TLSH
T1D591FD0134BB125078FE7DA995B4871B02813577351AF62ABEBC50668AAEE484CFF4C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe599282.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe599282.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 a9b1fe481bf40fae34562f090656999632df1ab72efd4fd92002fdfe98cb731b
MD5 be12e3ab17901d45f00c24430b298b92
SHA1 ac40e3ca0eb3448a56762c194df10ebef00e24b5
SHA512 cc297af1cb9072e1fcc726efcda061e6b04e15cfd295df9fe0146382b5059defde586cd18c9d91e42281b7d33f843a26c418cb06bfb5f37c1f6b4f941431f719
SSDEEP 384:IZcIhsNycGh1k58SiBGYX5EaV84YXThbtgOIwZOyT4o+:2hQJMGYua7Y1bXsx9
TLSH
T195827E76ACB8ACBB2CE6A194F44B32035FB8942BE7C46F54D5ED5B2C01D9598130BC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 5fa26fd417d7b79ccff7ae3aa3170d3c1fec3f87e301001f918dbb1b1f994958
MD5 f0668686031c48e74733d77355b33d6d
SHA1 cc1c0941161cc7d1d2a38d4e1f2b6068ad406877
SHA512 4494824a05c3f0afcfe5c3b5b913c28ccdf4d45f28d2276f7cb0347cdc6f93af95a1ed2490e01b9a27afe784bcb365cdab22c4c2c709affd438a133efdfe0de2
SSDEEP 384:4iFiZcIwzsNK8TUNTUlIlFGh1k58SiBGYX5EaV84YXTpbtgOIwZOyT4o+:DFQsLwgBJMGYua7YFbXsx9
TLSH
T164A26C739CB8DDBF6DE6AA84F54E32039EB44067D6C5AB50E3EC5A1C01DA1D8130BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 c800adbb9e00073ec4042ff5290e1a275ee18d9544fad9fba188d990f02653c9
MD5 589e2bc5b990933a4cb1fe895f78f466
SHA1 ec0af755abb83a38098868c02ec7888123156cca
SHA512 7e18f78af0141f79d0fdf855bd8af699dbd7ee5fa83aa2a200bd2abebd9f289c1eeadd1ea3e35fb8679e46ffcb7a798a13ca3477bc7b820c2a59febf66f8162a
SSDEEP 192:LJON76DphmqQmiUypiq8wGYX59ezTC5jzor3mL9kk7nFU6:lON7619fRwGYX5EaV8CFU6
TLSH
T16702D935AC787CAB4DE3AE45B48B27139FE8212BAA542F44D6E81B2C01D765C2306937
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 d661663628267a42f811a0c6026c8e506a793493d62a78210f926d166d36f3b7
MD5 8008952e3f095fbba8722b6ebe2990aa
SHA1 cc271d8364aca7596471383402a1dc4f832e991e
SHA512 f665aa639abcb21e7956846e79030e8a0f79452fe7e4b42978d7434f2008df50bd42089b2aafd06683a0389f5cf71c6fcad04c9d6806676a810a948b653034dc
SSDEEP 384:QZcIhsNyFGh1k58SiBGYX5EaV84YXThbtgOIwZOyT4o+:uhlJMGYua7Y1bXsx9
TLSH
T123827E76ACB8ACBB18E6A194F44B32039FB8942BE7C46F54D5EC5B2D01D9598130BC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 2af8a3cc20a97cdcc1168c6a8d7fba7f177a413f9b25ec0147c0e28ce799e409
MD5 60eb566e30423cc301647f8b85e3dd67
SHA1 306335f5c667137c0ceb626255e86a4994cf418a
SHA512 a26d4785df03de7c12f7e9d232e42889e84430b59a10ca52394a7f250103b080abc1e60095e0af0e20e12050b8161cd792decee80612870665338431a7fab356
SSDEEP 192:LJONj6DphSqQmiUy8i+wGYX59ezTC5jzor3mLrYXT+QkIIoq5LU6:lONj61B4+wGYX5EaV84YXTMbU6
TLSH
T11E12FA36B8B8BC6B1DD2A595F48B35139FA8512BEB847F50D6DC1B2C01DF658230AC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6f1d7ca6-793b-4f23-ba46-6b7323a1b5ff.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\6f1d7ca6-793b-4f23-ba46-6b7323a1b5ff.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 6bb0fd24a0d30751a87582394cf200941923e0ee96317b942f74e199167207b0
MD5 c8318b9781229d0902ae8727319f799b
SHA1 88d60e75850a5c321e95247d4557d0c64a6135b7
SHA512 81b12b47661368776a8a081e9eda5b441d63f43215004716a8bdca5210754b45de51d29da6e749fa37b609ebd8e7711a362b9323fdfb879e8d98341ec5d938c9
TLSH
T12441F858A6E91148B3B76F5AABF6A86E487F7C372E06D49D10110E4F0A73A41C871B33
MD5 SHA1 SHA512 TLSH

Submit Download