af6f2b66f13d44d2ec1a96fd2846b3339c52234b98d44fc0fc8d72eaf817bf20

Analysis

max time kernel
148s
max time network
136s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/09/2026, 04:05

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
attachment20260930-1253-hm9gl0.html
Size 214KB
Sample260930-enlyfswajf
SHA256 af6f2b66f13d44d2ec1a96fd2846b3339c52234b98d44fc0fc8d72eaf817bf20
MD5 ca2c96be8ad4c1b27afc858a639eb1f4
SHA1 34bcbb32e3946883cf26447531ab98af52bcab62
SHA512 3437202655e3eb3621e7f896424eace53f0c5f24acf844be2b9d563d88009e6cf5a37bcddba9c2cbaba921fa3f1b6b8b256eb36e35e548489e0a5a04be7cb99c
SSDEEP 3072:opm0WkXwgEweVFmk0RHyEoCmetxWnm6t6b9U9QfyA7cxGTdTbLayQsH:oglIYWRHyrCunm6t6i947gGTx3pQ4
TLSH
T13024023459202B0E3B9246B4B26575A40EF90CB3E95F96227BC801F5EFED1F29049CE7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1168	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2251218687-1689653882-3767565116-1000\{7BA1D764-1504-4A99-B134-2232011B0089}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4568	msedge.exe
4568	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4336 wrote to memory of 1516	4336	msedge.exe	89
PID 4336 wrote to memory of 4960	4336	msedge.exe	90
PID 4336 wrote to memory of 1168	4336	msedge.exe	91
PID 4336 wrote to memory of 4960	4336	msedge.exe	90
PID 4336 wrote to memory of 4960	4336	msedge.exe	90
PID 4336 wrote to memory of 2548	4336	msedge.exe	92
PID 4336 wrote to memory of 2548	4336	msedge.exe	92
PID 4336 wrote to memory of 4164	4336	msedge.exe	94
PID 4336 wrote to memory of 1156	4336	msedge.exe	95
PID 4336 wrote to memory of 4164	4336	msedge.exe	94
PID 4336 wrote to memory of 4164	4336	msedge.exe	94
PID 4336 wrote to memory of 1156	4336	msedge.exe	95
PID 4336 wrote to memory of 1156	4336	msedge.exe	95
PID 4336 wrote to memory of 3224	4336	msedge.exe	96
PID 4336 wrote to memory of 3224	4336	msedge.exe	96
PID 4336 wrote to memory of 3224	4336	msedge.exe	96
PID 4336 wrote to memory of 5832	4336	msedge.exe	97
PID 4336 wrote to memory of 5832	4336	msedge.exe	97
PID 4336 wrote to memory of 5832	4336	msedge.exe	97
PID 4336 wrote to memory of 4324	4336	msedge.exe	101
PID 4336 wrote to memory of 4468	4336	msedge.exe	100
PID 4336 wrote to memory of 4324	4336	msedge.exe	101
PID 4336 wrote to memory of 4468	4336	msedge.exe	100
PID 4336 wrote to memory of 2988	4336	msedge.exe	103
PID 4336 wrote to memory of 1932	4336	msedge.exe	107
PID 4336 wrote to memory of 1332	4336	msedge.exe	108
PID 4336 wrote to memory of 5640	4336	msedge.exe	109
PID 4336 wrote to memory of 4872	4336	msedge.exe	110
PID 4336 wrote to memory of 4872	4336	msedge.exe	110
PID 4336 wrote to memory of 4568	4336	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\attachment20260930-1253-hm9gl0.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x284,0x7ffdf4bac188,0x7ffdf4bac194,0x7ffdf4bac1a0
  2⤵
  PID:1516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1688,i,12654307022663170194,14061590682701977107,262144 --field-trial-handle=2132,i,6538764381784876564,8781683816938484481,262144 --variations-seed-version --mojo-platform-channel-handle=2128 /prefetch:2
  2⤵
  PID:4960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1900,i,294800685895430136,16843761888562001308,524288 --field-trial-handle=2132,i,6538764381784876564,8781683816938484481,262144 --variations-seed-version --mojo-platform-channel-handle=2168 /prefetch:11
  2⤵
  - System Time Discovery
  PID:1168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2532,i,11663736930218644987,12672058881106695845,524288 --field-trial-handle=2132,i,6538764381784876564,8781683816938484481,262144 --variations-seed-version --mojo-platform-channel-handle=2596 /prefetch:13
  2⤵
  PID:2548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3596,i,1295300248814150421,16855155292525209800,2097152 --field-trial-handle=2132,i,6538764381784876564,8781683816938484481,262144 --variations-seed-version --mojo-platform-channel-handle=3632 /prefetch:1
  2⤵
  PID:4164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3592,i,365089726284376807,807570414877035610,2097152 --field-trial-handle=2132,i,6538764381784876564,8781683816938484481,262144 --variations-seed-version --mojo-platform-channel-handle=3628 /prefetch:1
  2⤵
  PID:1156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4332,i,14512295676793016242,6525559194219908970,2097152 --field-trial-handle=2132,i,6538764381784876564,8781683816938484481,262144 --variations-seed-version --mojo-platform-channel-handle=4376 /prefetch:1
  2⤵
  PID:3224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4344,i,4425079844270909451,11825420758184371491,2097152 --field-trial-handle=2132,i,6538764381784876564,8781683816938484481,262144 --variations-seed-version --mojo-platform-channel-handle=4824 /prefetch:9
  2⤵
  PID:5832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5072,i,8204884693485285290,8728866687738970717,524288 --field-trial-handle=2132,i,6538764381784876564,8781683816938484481,262144 --variations-seed-version --mojo-platform-channel-handle=5404 /prefetch:14
  2⤵
  PID:4468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5308,i,10952789805249757003,15219946721137584105,524288 --field-trial-handle=2132,i,6538764381784876564,8781683816938484481,262144 --variations-seed-version --mojo-platform-channel-handle=4804 /prefetch:14
  2⤵
  PID:4324
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6112,i,3484795027892329113,10063769813345623952,524288 --field-trial-handle=2132,i,6538764381784876564,8781683816938484481,262144 --variations-seed-version --mojo-platform-channel-handle=6140 /prefetch:14
  2⤵
  PID:1504
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6112,i,3484795027892329113,10063769813345623952,524288 --field-trial-handle=2132,i,6538764381784876564,8781683816938484481,262144 --variations-seed-version --mojo-platform-channel-handle=6140 /prefetch:14
  2⤵
  PID:2988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5020,i,319034495719803683,4006614342677705683,524288 --field-trial-handle=2132,i,6538764381784876564,8781683816938484481,262144 --variations-seed-version --mojo-platform-channel-handle=4992 /prefetch:14
  2⤵
  PID:1932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5004,i,13759427654630721193,3812408335904782722,524288 --field-trial-handle=2132,i,6538764381784876564,8781683816938484481,262144 --variations-seed-version --mojo-platform-channel-handle=4980 /prefetch:14
  2⤵
  PID:1332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5008,i,11999882062144675442,7509645091980996323,524288 --field-trial-handle=2132,i,6538764381784876564,8781683816938484481,262144 --variations-seed-version --mojo-platform-channel-handle=6132 /prefetch:14
  2⤵
  PID:5640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5644,i,9661315785335249325,16623538159655643654,524288 --field-trial-handle=2132,i,6538764381784876564,8781683816938484481,262144 --variations-seed-version --mojo-platform-channel-handle=5652 /prefetch:14
  2⤵
  PID:4872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=804,i,10145866322379371830,8870136811452754261,262144 --field-trial-handle=2132,i,6538764381784876564,8781683816938484481,262144 --variations-seed-version --mojo-platform-channel-handle=5004 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4568

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1944

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1268

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

1b616308-9d8e-4bc1-8d8d-d7aa9235990f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\1b616308-9d8e-4bc1-8d8d-d7aa9235990f.tmp
Size 33KB
SHA256 0326e8be848a114696ed3fdb68eef487a12e72677a7c5bb058d38537f184ee4f
MD5 1fdadc4cd169954be48e03c07f3ba6ba
SHA1 06c2f72eada2147d599255fd1896e1a6a251a35c
SHA512 8fe3d21e354cb8aa200e0184263aed40d97b3250b9d4e02dfe48724952adf583d1a0dbb819994143248038b928e95ff70c7316f9d12d880902847bee2e9bd11e
SSDEEP 768:cZ3E7iUSFajBwt2nqMwQi5BgK5/CwYcZy4YGH0yi:cZ3EzFZVmBg8/d84YU5i
TLSH
T18EF2BF32DCF18DB75CF9A245F6427742AEF49253D588094884EE9B0E0297AEE2307C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 7331d61b72578f10058ae20f1a7351dc99070a754006884c0b775bb57bffd9cc
MD5 df1098b0a62fea8609e624a81ae2865a
SHA1 eb148addd613d8dae155058eacdf967eae295b15
SHA512 0ec5916b4d090394f668a1ee0ca76c2125146f8b8507c9e7dd1bb90a8aed21e61551b85c2a32b975aea241df7bda238c513a58ebe378cd3af3d77e71803ef6d8
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7s:fwUQC5VwBIiElEd2K57P7s
TLSH
T1D2B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ae4519203ea4a71f8bb5a86dffca3b288f02f1bf4cb8d6f78e8a591b676414b1
MD5 1293a304484c7d4be275f1eb20c69a28
SHA1 b568174debe43e00bc9d8880e0c5166dc6720312
SHA512 ffd84ca0277d7fb25239662676bdc1988ee3267dfd6a7a17da4c4ab32edd7fa146f36c8d8b2c5f1b06efedf5cf636eaa55943e5f89902c62e6a914ebbc3ae1b7
TLSH
T143D02BB1E0DD8473C0503078000581815215F842BEC555801F25D07C091014C234B10C
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a23025f4d05b749cd64019222483e40f71e2bd4380052e2b64a234eb0323dd12
MD5 f2999f57642ce17248d9900b8034961f
SHA1 5a92b97bdc3c0e5222e917e766218a9ee7568f1f
SHA512 001c4dde433f6d4b3121bd2e5736ab1443818c9c8ef22f8298c411039f23f15532e8510ef806e0f54b26c4ef31db9b77ed6c750a42b27167e98f8b691edafe8f
TLSH
T1F4D02BB1E0ED8473C050307C000681815205F8426AC555801F25D07C091014C234B108
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 a66e87300b4993e6dac3f9244fc2d1748152715348915994c141624877f8e4d7
MD5 36d982c0609afc0328843a56dcbb1972
SHA1 9bb7cb83f10c06b19963dd8f35e3e504931c1576
SHA512 897c51a915c295ab9fa090dfd6722860cb880fd1b6fcd214457b29486a2065d98950164fe607f7f4458ad72cda3dec9e9eda26426830adee82fb886c211a5b6e
TLSH
T19D61A6A502D870E9CB584A3293D341E335FC967596D35E0203DCC77DBB4E3AAAA6D044
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59ae28.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59ae28.TMP
Size 3KB
SHA256 94118eba6542a30b691ca1488bf0322092f48254996b55b686d6fb2d1e8e157c
MD5 14448d28a549b34cc4b06f9e8eaca1eb
SHA1 51661253bfae142480531dac7516da37aa912e1e
SHA512 ffe982dc31de533e45b6e40f3276b501395052f8ab8ff0787b1cd24df41650f417b8e3bc0eba7f2176d837b5599c472e8a0538a626c47f68ee8197a8bd70d186
TLSH
T18861A6A502D874E9CB584A3293D341E335FC967496D35E0203DCC77DBB0E3AAAA6D044
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

70af43d1-29a6-4566-b529-a8c81d6f674e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\70af43d1-29a6-4566-b529-a8c81d6f674e.tmp
Size 1KB
SHA256 b79680dfea271194da65f7cfcf6d819368bc4ee9f841c3d61036bdce345c3f68
MD5 754b0772d353b249c97cea7b1a3c82e5
SHA1 7888c6ae3d071bfa13ce25844621901ef044a438
SHA512 1553d7e80985f2a1f4f49ddc98b183b81462819b3587aa7d7dcfe966cc5df7e13b476b27a159ac6c7382ea1bdec4756aba1e56e5d9437b3cbf7b34ed3feb4c5e
TLSH
T1454190F7C3E8867D8D0156F4AA186E1BCE2D0915432C3C5AC9D4EF1B93E24B1E14195F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 5c7ee68ca5d0710808be883e4f0bb4b2a56a7363bc361f5fbd17fd46e94d334a
MD5 9e8f4caa4405cd02f3bdc8ec6158f5cc
SHA1 308481688289e5ed329cc9cef7156289ce540532
SHA512 ce1b5184b1dd9c72eb6d23a8cee454cb44ad218b6330e0bb8c71af2541e799a28033467630bcd915746b4705998ea9ddbc698c361b2a4d7ea06ce32ca8499d43
SSDEEP 192:sxRKRXb2/ffsu7Q7R7I7zoA8p4m/g6+WNIYlac3FG4IgDeJ:sxRKZ2/ffsu7y7Ian/5IA2
TLSH
T1CD32B615AE68A97B4CD7E21DBB65BF23D6F91033A0941E48A6FCC61C04E76DD221380B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 33aeff16ad361767b35ca0b90ae6a419eb36c8424a34c9f3931ab953d856b9a7
MD5 ac4e582645d5c99030d8f10878abb132
SHA1 018f906b6da3e3cf7e26dc3b1f1e85761b206a39
SHA512 351a12b08c83a9aaaf52f84b1bdbe93b0be3e25978344cec8e0a5a139d56e843b39f6f582df4dec7a01cce2ed4035032d023aac7a4ed5448c9428da981eed4b7
SSDEEP 192:sxRlRXb2/ffsDQ7R7I7zoA8p4m/g6+WNIYlac+FG4IgIJ:sxRlZ2/ffsDy7Ian/5Ihs
TLSH
T1CD32A5156E68A93B8CD7E21DBB65BF23D6F91033A0941E48A6FC861C04E66DD221780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 07360bb65edebb5e1e4393a80fac1690ecc8916c6fda68ac04611077989dc2cd
MD5 f186b6bd450edf895e758d96a202e61a
SHA1 91a5cf79cfbfb691d10327bc8bfad3e36e83f83d
SHA512 9673d87ea54d26ed98d37d44357e5493f1bd86e623c1376dd7cc6c12e18834508c3aca344909e82612a8b234f82e58d0693f0ab7e41d729589311e0689bbb670
SSDEEP 192:sxRKRXb2/ffsoQ7R7I7zoA8p4m/g6+WNIYlac+FG4IgD8J:sxRKZ2/ffsoy7Ian/5IhM
TLSH
T15732B715AE68A97B4CD7E21DBB65BF23D6FD1033A0941E48A6FC861C04E76DD221384F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 7e36e6d1dbb56a343c658496e2e3eed9e489fddac24e9e73a2ec8f6b81c67200
MD5 9f7aaf8db0e0596441b16dd190313b18
SHA1 f69c17aac86f3b456852ae903583338aade22b5f
SHA512 493bd3d6cc2d91d04aebb334996411bbbd724c8f2778121ddb1e59fe4becb6c4df95e8c1488cf501dbd271430a1c20a16162b139e18378e66585b5116c435d4d
SSDEEP 384:kWdRdcVfCtgSQFffTKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OV4A9+mRfcroe2t:ksRdcJWgSwffT8F1+UoAYDCx9Tuqh0VU
TLSH
T1EFB2E92B640CCB7F4F814AEDDC196F976E9C02C796588D8047FE994C02C77EA911A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 033935d7cbb328cf288535c39038a92a7934e118c5107164afe1a543e044ce38
MD5 3b78ea6743c5cd76071a48ae5aeb2480
SHA1 1792794088b7e7ff421842144296d4db469e3ed3
SHA512 b4b0dcaade886c40890bd82ea376fd33320708ce35645d23241f10501ea08212d367b1e043728bc2db49105a9d4fbd03f52d59ef5a36f2701fe8cee03e57d2e5
SSDEEP 48:K08rKWkmKzb6ZCISOzK9q1IzxsuJkomscVbgnoISAVK9k12VxOFYfgcuyLo3uyY+:KwDmKUYetuKeEquf+KgALxE
TLSH
T148910441717B021038BE75488174872E528135B3342AEA2BBFBD44659E6FE584FFECD9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5a4613.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5a4613.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 ffeec210a49974a93172340ad76aebe3a6a3cfd5370323e3b6f7a91e5cf3d739
MD5 4d689bdfa079fdf5654091aacbd67a22
SHA1 5fd447075cc45928956820f0c4642509155dc839
SHA512 29069df6791efd8089c66aee7aae644a314d77fb9122cb528f5bee6da6a65a47eb882695d94e3bcf03e5c76d4292db3783dc1d77e6b2974c681832a85f6660bd
SSDEEP 768:r/UxvxjgC+k3hziUSFajBwtInqMwQi5BgK5/CwYcZyidY:eZj3+k3hLFJVmBg8/d8KY
TLSH
T1FD03BE32ECB59D674CFAA240B2867387EEF0565398C809A845EE5F0E06C7AED1307C06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 02c6e5968a91ad0429977d437b810a5b9d11b85dc36f9a20c100c61e9e757552
MD5 60faf78bafc8073e3b33d24479708874
SHA1 35f033085983dfd01994f73f1984275af6a45685
SHA512 f8d881b7e36a2e0d32dde95d1ef555fa73744a5434b7f7b12b32abdcbf4482d9be804ae4b58b7ec897fefd374a28bbf89f26c7e8413f65fe4295f6106dc84171
SSDEEP 768:nZ3h7iUSFajBwt2nqMwQi5BgK5/CwYcZy4YGH0yi:nZ3hzFZVmBg8/d84YU5i
TLSH
T11AF2BF32DCF18DB75CF9A245F6827746AEF492539588094894EE9B0E0297AEE2307C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 89d78d8c49bb12bc5347b74b5d9ba8389ea707254d1ec8d6b0d199092c018854
MD5 46bb32db5f06f83ec1b276118751c1f8
SHA1 3f3a7681e52bd244ec3303803a6e96edff005708
SHA512 3a172c9aceb2752eec2036f854e6e4b0422fd6994ff3ed839bff54d6cc07530e1493bca91b0e62102a121fce7916440df7df7e68cff22d14fe7acd3dcfffeb51
SSDEEP 768:XFQx3iwg57iUSFajBwt6MnqMwQi5BgK5/CwYcZy4YGH0yi:qx3izFNMVmBg8/d84YU5i
TLSH
T1E5F2BF33DCF0CABB9CFAAB84F6467702EEF45253C899459491DE9A0E01979ED2307C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 9cd51bb45a98733ff7706d08c7c5d2a11105efe150d725a5604befff41b9c1fa
MD5 b7c3bd495a14e6e932dc528c7b0acb52
SHA1 1f56321747530ca42b3784eb4210f153ce44db19
SHA512 07bb19a72bd2ce4f5df0723082f2a975d9967943a33fcc3d8d47bbe35d39ba7b1c823a4aae6ba8177c6e3e0fce0adc994df1afcfa49ae2163973bfb87d6b709c
SSDEEP 768:O/UxvxjgC+Ft3r1dSFajBYnqMwQi5BgK5/CwYclWA8Dea:DZj3+Ft3rtFYVmBg8/dwA8Sa
TLSH
T1BF03C036ECB59DB78CF69240764A639BEFF45253D581099489EE1E0E03C7AEC1307C56
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e66cbb1e-743d-4929-b0bc-b6f04c3d1ba9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\e66cbb1e-743d-4929-b0bc-b6f04c3d1ba9.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download