3e10b452175f0acbfcda6bc2487e308e0c5f4913f1ca5b0ed77be7a462a066bc

Analysis

max time kernel
148s
max time network
144s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/09/2026, 06:48

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
attachment20260930-1253-djhlqw.html
Size 171B
Sample260930-hlan7ast4l
SHA256 3e10b452175f0acbfcda6bc2487e308e0c5f4913f1ca5b0ed77be7a462a066bc
MD5 e082ebc14f6b24945336f6450b985e45
SHA1 df12ad35c265b0198582e2dc94e0a93048e4de82
SHA512 8dac8fb7101ee6a50ec58409a7d51009d9a3f6b1266377cad6f7f9001bc6f6734ffc067e7cfd0f17a1d0e288803fa8c8d37925590f6421772323ce99a4a9a1bf
TLSH
T1E4C08C7D10C13C150270A93C1DD3B397EC93198E01422B41308180232F35620CED32D0
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2484	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-4154726816-2055034831-2297277433-1000\{276864F5-D330-4D50-B575-2FF40D4C31EE}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1324	msedge.exe
1324	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4116 wrote to memory of 1048	4116	msedge.exe	89
PID 4116 wrote to memory of 2484	4116	msedge.exe	91
PID 4116 wrote to memory of 588	4116	msedge.exe	92
PID 4116 wrote to memory of 588	4116	msedge.exe	92
PID 4116 wrote to memory of 4636	4116	msedge.exe	93
PID 4116 wrote to memory of 4636	4116	msedge.exe	93
PID 4116 wrote to memory of 4636	4116	msedge.exe	93
PID 4116 wrote to memory of 5136	4116	msedge.exe	94
PID 4116 wrote to memory of 5136	4116	msedge.exe	94
PID 4116 wrote to memory of 5136	4116	msedge.exe	94
PID 4116 wrote to memory of 4656	4116	msedge.exe	95
PID 4116 wrote to memory of 4656	4116	msedge.exe	95
PID 4116 wrote to memory of 4656	4116	msedge.exe	95
PID 4116 wrote to memory of 1240	4116	msedge.exe	96
PID 4116 wrote to memory of 4400	4116	msedge.exe	97
PID 4116 wrote to memory of 1240	4116	msedge.exe	96
PID 4116 wrote to memory of 1240	4116	msedge.exe	96
PID 4116 wrote to memory of 4400	4116	msedge.exe	97
PID 4116 wrote to memory of 4400	4116	msedge.exe	97
PID 4116 wrote to memory of 1272	4116	msedge.exe	99
PID 4116 wrote to memory of 1148	4116	msedge.exe	100
PID 4116 wrote to memory of 1272	4116	msedge.exe	99
PID 4116 wrote to memory of 1148	4116	msedge.exe	100
PID 4116 wrote to memory of 5628	4116	msedge.exe	102
PID 4116 wrote to memory of 244	4116	msedge.exe	106
PID 4116 wrote to memory of 2556	4116	msedge.exe	107
PID 4116 wrote to memory of 5236	4116	msedge.exe	108
PID 4116 wrote to memory of 3772	4116	msedge.exe	109
PID 4116 wrote to memory of 3772	4116	msedge.exe	109
PID 4116 wrote to memory of 1324	4116	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\attachment20260930-1253-djhlqw.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x264,0x268,0x168,0x274,0x7ffe6b24c188,0x7ffe6b24c194,0x7ffe6b24c1a0
  2⤵
  PID:1048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2124,i,3479937882256883917,522574570947799945,524288 --field-trial-handle=2472,i,7047629016093638049,11684604271731412570,262144 --variations-seed-version --mojo-platform-channel-handle=2504 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2656,i,1065539465532657783,16736567473822546232,524288 --field-trial-handle=2472,i,7047629016093638049,11684604271731412570,262144 --variations-seed-version --mojo-platform-channel-handle=2664 /prefetch:13
  2⤵
  PID:588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1936,i,157217582546828914,3731753999693571384,262144 --field-trial-handle=2472,i,7047629016093638049,11684604271731412570,262144 --variations-seed-version --mojo-platform-channel-handle=2464 /prefetch:2
  2⤵
  PID:4636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3584,i,10732504884959376259,2001602301258673843,2097152 --field-trial-handle=2472,i,7047629016093638049,11684604271731412570,262144 --variations-seed-version --mojo-platform-channel-handle=3636 /prefetch:1
  2⤵
  PID:5136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3588,i,16375479244693796188,6045827094102613284,2097152 --field-trial-handle=2472,i,7047629016093638049,11684604271731412570,262144 --variations-seed-version --mojo-platform-channel-handle=3640 /prefetch:1
  2⤵
  PID:4656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4348,i,5197960209029935319,12561364155190407876,2097152 --field-trial-handle=2472,i,7047629016093638049,11684604271731412570,262144 --variations-seed-version --mojo-platform-channel-handle=4508 /prefetch:1
  2⤵
  PID:1240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4364,i,1023431332289848991,9758767978942865296,2097152 --field-trial-handle=2472,i,7047629016093638049,11684604271731412570,262144 --variations-seed-version --mojo-platform-channel-handle=4512 /prefetch:9
  2⤵
  PID:4400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5276,i,17026169399314503781,3017501593745354587,524288 --field-trial-handle=2472,i,7047629016093638049,11684604271731412570,262144 --variations-seed-version --mojo-platform-channel-handle=5308 /prefetch:14
  2⤵
  PID:1272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5272,i,2810875697205424689,16657468317233411218,524288 --field-trial-handle=2472,i,7047629016093638049,11684604271731412570,262144 --variations-seed-version --mojo-platform-channel-handle=5336 /prefetch:14
  2⤵
  PID:1148
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5824,i,8848794299404850789,14874255115148424417,524288 --field-trial-handle=2472,i,7047629016093638049,11684604271731412570,262144 --variations-seed-version --mojo-platform-channel-handle=5840 /prefetch:14
  2⤵
  PID:5228
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5824,i,8848794299404850789,14874255115148424417,524288 --field-trial-handle=2472,i,7047629016093638049,11684604271731412570,262144 --variations-seed-version --mojo-platform-channel-handle=5840 /prefetch:14
  2⤵
  PID:5628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1248,i,9451711097096700563,350078895489354864,524288 --field-trial-handle=2472,i,7047629016093638049,11684604271731412570,262144 --variations-seed-version --mojo-platform-channel-handle=1368 /prefetch:14
  2⤵
  PID:244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1200,i,16541939343435975847,6360331111395683854,524288 --field-trial-handle=2472,i,7047629016093638049,11684604271731412570,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:14
  2⤵
  PID:2556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1260,i,8324821993806507793,13855587478588485944,524288 --field-trial-handle=2472,i,7047629016093638049,11684604271731412570,262144 --variations-seed-version --mojo-platform-channel-handle=5144 /prefetch:14
  2⤵
  PID:5236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5620,i,4397924902051912371,6639177747248528693,524288 --field-trial-handle=2472,i,7047629016093638049,11684604271731412570,262144 --variations-seed-version --mojo-platform-channel-handle=5544 /prefetch:14
  2⤵
  PID:3772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6364,i,14524887289002367585,6239045348558257570,262144 --field-trial-handle=2472,i,7047629016093638049,11684604271731412570,262144 --variations-seed-version --mojo-platform-channel-handle=5096 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1324

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4168

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3164

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 63b3e051645c9957f53c538586c3b5463f3ba4412c230d66eb66f06ad6052604
MD5 0070abe22a07fb36149648973e990688
SHA1 c8a203457b36afa6d0ce9b56d26cb7817d832d37
SHA512 cda9b7179f6f997dac4ee0624ff9f92ed77b7c27218584fb07f6b2ebc24d10fc25d45c3d2781b766d834f82054e29ee150712e7ab7d7a11465c468d0f8a31fd1
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P79:fwUQC5VwBIiElEd2K57P79
TLSH
T175B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a201096456be1e380b7687844e70aa8e2d987a06740acf66db0d56e000a3b50d
MD5 36c9bdf74494657a1636bbc59af48eb0
SHA1 aea8177ffde7e43fa1b4cc5ce6c7cf68c2431306
SHA512 2cf6da34ccb1c58e4f6d50681952d27ffc828c4ede6f38ca0a5e429a4f520e426913b04469e4272eed54102a541263bbb54c2628f542fbe357a4afac921bb49e
TLSH
T143D02B79E7DC8512C0C2207C015811A231B37E00EB0802C00905400C18001C20323F0D
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4123fa2cc2e73053b7602d1d53a57b01f3a6cd8872729fcd7ed66886082b1b99
MD5 5100dc5469c5151f9ac793573116a7fa
SHA1 a8ffca7210c348bef0d710a66e334809b7f58988
SHA512 ead3d81382dc13f1d89e928af9189e5eec6cf3fabfb91ed18d73f1fe38b5e9f76e77fae594633baf6da19747d70fbb17eb97a8a36df60510a930f6006986acfc
TLSH
T1F4D02B75E7EC8412C0C2207C015911A231A37E00D70802C00A05801C18001C20322F09
MD5 SHA1 SHA512 TLSH

Submit Download

77f8beb9-80b0-4fc0-8d3e-128a6ee88515.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\77f8beb9-80b0-4fc0-8d3e-128a6ee88515.tmp
Size 11KB
SHA256 37f8b88b90fac57abf1c500970d5da38df7af17ea2efa2f5bf2382919fa96564
MD5 58fb93e0bd69b56e28b8cdb649d49e8a
SHA1 9cd2affa7f199392bf2ce6f4da815a3a6312ad0a
SHA512 ed48c359a7ae654072c6fa62050087af891b1897641f03007d09ffbe16ea1a82ddf4bcccde6a33a9994dcc987d51db9f4bbfa2d246c99fcc39640fdcced84c6d
SSDEEP 192:sxR0REbv/f3svCCK7xjRzoA8p4Q/g6+WNIYDFW+GUIgIJ:sxR0Av/f3svx6qh/5IvOs
TLSH
T1F932B715AD68A93B8CCBD219BB65BF53D2F95132A0D41E48F6FC861C14E7ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 7a807bafd5f91ae895612023e1619be3412326b30e5ed4941c413e58ce0fa58b
MD5 a7e8e284ed61bfa426955b33b9379b89
SHA1 a1b2c735453ef05d4a99682804114ab8f9010478
SHA512 d6ba420e2b04d8187a9c3f67001eedfc6703196600cf3199dda846333c288564d956a2bf968a3843aa43772b467c5d68ae748d7c400d824d53b5bbb714c835df
TLSH
T15D415148FAA800A5FBF41171B8D7A3A7FB306AB2CBFB5E462478C1F9A7463204118056
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5983cc.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5983cc.TMP
Size 1KB
SHA256 0d68b3a205400797f4ae0f82c6476345f3f561615e9ee68a4097b9ec26b335d0
MD5 129b816f5df26345b006951f68144e8d
SHA1 e6f8e79ed1c3316f2cf94784b62bb4dfdde061c3
SHA512 59ed44faacff082f09b516c0a14ada3d84de2b9a818faa905db8f6932d65e168e429a1343575a77030db1a2d18b6a9de3e2b638c436beac462cf9a741afbc9a7
TLSH
T173415148FAA800A5FBF41571B4D7A3A7FA306AF2CBFB5E462478C1B9A7463204158056
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 7ad306b85719da9ff249b8896f07cb5453f1762e09cd86754df12c063b789812
MD5 35662f7f2ac0c9e27288ea2d00997332
SHA1 357d831167ee6c563bc678ebd294206ac96097f3
SHA512 7a06a9fdd6f271fbd4a2413f019d3b6b98325d641acf5bbb51d3528b111be8c77e185dc8a856615f8309e843eabdb7341c02e88f6a0b53bf45b338e71d27554b
TLSH
T11441AFF7C3E8867D890156F4AB186E1BCE1D0955832C3C5AC9D4AE2B93E34B1E14199F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 20503080edee55b02bbf52548b4a85d38e62edb9cf8d6557cb25f1c9a85fdbdd
MD5 502112647e46dd8fecf69420c2bc7a1b
SHA1 c6c310d305683fd60f25a6d86dc0a90f93885b66
SHA512 8de9279ecda055bb5493acc657a2fb47b3046ff9f7c97fb7a186d3c93cdec1144c708b146560720ef2e9c8a86becaef5b073d967584693a6fdba54a48b35c233
SSDEEP 192:sxRvREbv/f3sH8CCK7xjRzoA8p4Q/g6+WNIYD4W+GUIgD+J:sxRvAv/f3scx6qh/5IKOu
TLSH
T11832C715AD68697B8CCBE219BB55BF53D2F95132A0D41E48F6FC8A1C14E7ACD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 1eabb925c17aaff153caa3d4dacd1959fa7c0114365df49c2f8c31ca2f06f924
MD5 3ad2436953b1c91ad75ef1a0a4cc93b8
SHA1 7150fafe424b266751002777819cec1e62ab34a5
SHA512 911b8d72e7a505be341ce00e104eb4ccaf00cb5014da2c5c08aad9f43e6d1634a452e575d1ccdff9f97c05cf5c6575c87c6d5151469a9dc97175b7db9530b864
SSDEEP 192:sxRvREbv/f3sHdCCK7xjRzoA8p4Q/g6+WNIYDFW+GUIgDcJ:sxRvAv/f3s9x6qh/5IvOU
TLSH
T1B032C619AD68A97B8CCBD219BB55BF53D2F91132A0D41E48F6FC861C14E7ADD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 4885dcb9ccb343522267a8be7e3dbf7af98ca8154ddf94e7f877c3ef06d01dad
MD5 1ce3060732656d967310678236a3fa49
SHA1 f8d18832793022d9045203eb82c93cfcab529194
SHA512 d829fca6d55c7ece4966049c2ec2466e58a5d24bc1a4efb553adef6b119859066ca95efee5d435a7f8a28919acff992871f21f91b846f2f94b19b0098f82b2b0
SSDEEP 384:ScwYbpGfCtgaEFfA6KhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVO+9W+R9UroTyM:SzYbpUWgasfA68F1+UoAYDCx9Tuqh0V4
TLSH
T150B2DA2B640CC77E4F805AADAC196F977E5802C796988D4047FE994C03C77EBA21E4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 f588f85011e89ebe5a8ed1ab01986691c427b0ca81f6d3d37297a66969d0462a
MD5 148021f265596b3fa84fe9e8340c4da0
SHA1 ffe763363aff1d0ce8535d664f2eff517f0ce12c
SHA512 b115a4a58657a0da720fcb946be25097df9edaf9f0bab0dc4a6d87102a403f9394ab55e6091db13ce3146776d9c371da0f03939629bacce907b749cc11cf3890
SSDEEP 48:K0jGnDtFVWbtltot9IStjt2K9tT1tBFx+VYvws+yLKV4kKIYJbUzEIScJK9A16JP:Ks5bI9Lx2KjTL7iOpOKi89gAKxKiE
TLSH
T1E2913451717B838038BD3D5880B5877F224271733129EA2B7BBC50A64E6AE589DFE4C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5a1d1e.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5a1d1e.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 a95f1f5079906a3ca3908f9db22b20039bd4871236a26ed77ae3b892586b8b78
MD5 1c7574f8a35c8da59329ae022d72a35d
SHA1 6346bfc04a507db208e18a4fd962ac98c8d7bef7
SHA512 d2a96406b016051b302526a118db0583d0fbc9571fcd61c6ebc43db743007f19d685c98264018666c4702fb5ee5d461af9edfd00de0e75cc99c6f9d365070dc1
SSDEEP 768:v/UxvxjgC+f39c5iybNbNvmtiuOeRFZD1fTos7Rjy4YGHVM/u:CZj3+f39coeY1fT/Rm4YU2u
TLSH
T15D03BF3BB8E46D338CF6E284B20A7A87BFF4556385C919D845DC6E0E05CBBAD1307856
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 9bb2896b8a82f0990adcd7f8915bc04529122e76fa471652dd4a48705b0b6ecc
MD5 e7e82c34266fcd8c9d8b9ea244a2339f
SHA1 a2f0483175ba6730f040d4f51d08887dcbbd17fe
SHA512 7e394a1fabd4e086cd2c7ae6bccf5bc2527eec645ae978120b2b91af1534a391ce31c09dc3318601c7c7afb991b60bd1d0259e88b4c71f7ae0035887b477919b
SSDEEP 768:DK3WcAiybNbNvmtiuOeRFZD1fTos7Rjy4YGHVM4U:DK3WcJeY1fT/Rm4YUFU
TLSH
T1D4F29E36F8A49D734CF6E285B2067A476EF45263D6CD09C485DC6F1E058BFAA130782A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 6493e8853b06bf9c044a685254837d6caf76c35d6074a30ed4f887ed8dd5165f
MD5 95b97be21807b895075fd221e5f0853f
SHA1 adb307a5b03b63388806f1f6fc911da81359fd25
SHA512 8a5d65dca2eb8ce6790591a67e6c3f15b18d47a617c07d7e67c1de56bf0e2ded2d4ae92a6ae68dca4dbc2ccc2386c5d56efae3698df61ed21b29b8c434d0e1d3
SSDEEP 768:kK3xcAiybNbNvmtiuOeRFZD1fTos7Rjy4YGHVM4U:kK3xcJeY1fT/Rm4YUFU
TLSH
T107F29E36B8E49D734CF5E285B2067A477EF49263D6CD09C485DC6F1E058BFAA130782A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 5a765c89d8ba4ec5161bbf7fb5ad3d565751fffe81370d900f618809357c04a1
MD5 be043c2e9ce2eff6559fa08a1a330b6f
SHA1 c6557050e584c3e6012c08a82435b8069c5e8840
SHA512 7d8403da5e0cb2801d09392db4de83345294b60f943ac5ab727de613a79299d65cacbf1a02e77cad6656ac7a628d392adb161fe21ca9076fbab921d33d5d6e5b
SSDEEP 768:QFQl3TwgNcAiybNbNvmtiLOeRFZD1fTos7Rjy4YGHVM4U:Dl3TcJDY1fT/Rm4YUFU
TLSH
T136F29E37ACD48D779CFAD685F2093A07AEF442A3C5C999C492CC6E1E0097AED1307C65
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 a4af75ded6debe6d1409b317e21b6f2bc1dfe0893368a747a663542e1b12c54d
MD5 e37aac6f09e88d9d131b868c953f72be
SHA1 08b0b69f3d08cf247f37873e04b87373b6722b0c
SHA512 ac4c9dd3267a1a185c322b7ca0183ee15a5f4629929f8ca79bf23cf6c3424311380614b13b21c2af56a0a058a2d403ea3a72534c5f739c19c4201a61bf133248
SSDEEP 768:z/UxvxjgC+k3+f3ybNbNvmtAOeRFZD1fTos7Rzs/+Pu:GZj3+k3+vBY1fT/R4Ku
TLSH
T1DD03BF3AF8D86D338CF6E244720A764BBFF455B385C91A9809ED2F0E158BB9D1307856
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ef240e25-2090-4036-a909-fa7cf64f86b7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\ef240e25-2090-4036-a909-fa7cf64f86b7.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download