5dfa57bf10f02106e404ffb38bc5b2da62eb96b9b02b74d10f1b472a89e6ee5b

Analysis

max time kernel
149s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/09/2026, 10:29

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
attachment20260930-1253-culm7z.htm
Size 194B
Sample260930-mjmyysxthy
SHA256 5dfa57bf10f02106e404ffb38bc5b2da62eb96b9b02b74d10f1b472a89e6ee5b
MD5 0fe53cf75ee2569670f22b4df68cfdff
SHA1 c8ce77fbd6e13476239c598378c612a8b57685c0
SHA512 ee321ac4703144eafd3d4db7deefe08d8aef572e3c67fc9d4203f5349646173caadf91608fd10220a16ea91099657c4a8460e3ca09a781af646cb3a5282db660
TLSH
T121C0C0B7E400620CDB3078D500F172CC00F8819C9C82CA003D8018E8B39696AC9031D1
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3296	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-524788801-3318743092-4051225893-1000\{C08630D8-CA52-48B4-BDC1-473A9DF1F522}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3448	msedge.exe
3448	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe

Suspicious use of WriteProcessMemory 34 IoCs

description	pid	Process	procid_target
PID 4880 wrote to memory of 1432	4880	msedge.exe	85
PID 4880 wrote to memory of 744	4880	msedge.exe	86
PID 4880 wrote to memory of 3296	4880	msedge.exe	87
PID 4880 wrote to memory of 744	4880	msedge.exe	86
PID 4880 wrote to memory of 744	4880	msedge.exe	86
PID 4880 wrote to memory of 5028	4880	msedge.exe	88
PID 4880 wrote to memory of 5028	4880	msedge.exe	88
PID 4880 wrote to memory of 3328	4880	msedge.exe	89
PID 4880 wrote to memory of 3328	4880	msedge.exe	89
PID 4880 wrote to memory of 1804	4880	msedge.exe	90
PID 4880 wrote to memory of 3328	4880	msedge.exe	89
PID 4880 wrote to memory of 1804	4880	msedge.exe	90
PID 4880 wrote to memory of 1804	4880	msedge.exe	90
PID 4880 wrote to memory of 3504	4880	msedge.exe	92
PID 4880 wrote to memory of 3760	4880	msedge.exe	93
PID 4880 wrote to memory of 3504	4880	msedge.exe	92
PID 4880 wrote to memory of 3504	4880	msedge.exe	92
PID 4880 wrote to memory of 3760	4880	msedge.exe	93
PID 4880 wrote to memory of 3760	4880	msedge.exe	93
PID 4880 wrote to memory of 4572	4880	msedge.exe	97
PID 4880 wrote to memory of 4572	4880	msedge.exe	97
PID 4880 wrote to memory of 3208	4880	msedge.exe	98
PID 4880 wrote to memory of 3208	4880	msedge.exe	98
PID 4880 wrote to memory of 4472	4880	msedge.exe	101
PID 4880 wrote to memory of 3260	4880	msedge.exe	114
PID 4880 wrote to memory of 3040	4880	msedge.exe	115
PID 4880 wrote to memory of 1200	4880	msedge.exe	116
PID 4880 wrote to memory of 2492	4880	msedge.exe	126
PID 4880 wrote to memory of 2492	4880	msedge.exe	126
PID 4880 wrote to memory of 624	4880	msedge.exe	127
PID 4880 wrote to memory of 624	4880	msedge.exe	127
PID 4880 wrote to memory of 3276	4880	msedge.exe	130
PID 4880 wrote to memory of 3276	4880	msedge.exe	130
PID 4880 wrote to memory of 3448	4880	msedge.exe	132

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\attachment20260930-1253-culm7z.htm
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x254,0x7ffd1540c188,0x7ffd1540c194,0x7ffd1540c1a0
  2⤵
  PID:1432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1736,i,13810041240941938983,14689961798366830613,262144 --field-trial-handle=2244,i,463527625806045054,11419931920169525982,262144 --variations-seed-version --mojo-platform-channel-handle=2240 /prefetch:2
  2⤵
  PID:744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1936,i,16611923022019810417,12525850819999722916,524288 --field-trial-handle=2244,i,463527625806045054,11419931920169525982,262144 --variations-seed-version --mojo-platform-channel-handle=2296 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2548,i,11414260471593096762,13764910410944453204,524288 --field-trial-handle=2244,i,463527625806045054,11419931920169525982,262144 --variations-seed-version --mojo-platform-channel-handle=2620 /prefetch:8
  2⤵
  PID:5028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3452,i,6707752940330702314,8768359363656938506,2097152 --field-trial-handle=2244,i,463527625806045054,11419931920169525982,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:3328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3456,i,587688302777348865,6624465547889983971,2097152 --field-trial-handle=2244,i,463527625806045054,11419931920169525982,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:1804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4220,i,1727639737686396776,4966339392271597871,2097152 --field-trial-handle=2244,i,463527625806045054,11419931920169525982,262144 --variations-seed-version --mojo-platform-channel-handle=4368 /prefetch:1
  2⤵
  PID:3504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4252,i,269188435430966993,14896469132223092976,2097152 --field-trial-handle=2244,i,463527625806045054,11419931920169525982,262144 --variations-seed-version --mojo-platform-channel-handle=4372 /prefetch:2
  2⤵
  PID:3760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4920,i,9541904732699823304,10643663466100987771,524288 --field-trial-handle=2244,i,463527625806045054,11419931920169525982,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:8
  2⤵
  PID:4572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,1428305548235126098,9077957056647573391,524288 --field-trial-handle=2244,i,463527625806045054,11419931920169525982,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:8
  2⤵
  PID:3208
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5868,i,9472519638516949727,1622023787005810667,524288 --field-trial-handle=2244,i,463527625806045054,11419931920169525982,262144 --variations-seed-version --mojo-platform-channel-handle=5892 /prefetch:8
  2⤵
  PID:2392
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5868,i,9472519638516949727,1622023787005810667,524288 --field-trial-handle=2244,i,463527625806045054,11419931920169525982,262144 --variations-seed-version --mojo-platform-channel-handle=5892 /prefetch:8
  2⤵
  PID:4472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4352,i,7053802672771314189,15340300209845087334,524288 --field-trial-handle=2244,i,463527625806045054,11419931920169525982,262144 --variations-seed-version --mojo-platform-channel-handle=4348 /prefetch:8
  2⤵
  PID:3260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4356,i,9320721177353061148,6221197648714417395,524288 --field-trial-handle=2244,i,463527625806045054,11419931920169525982,262144 --variations-seed-version --mojo-platform-channel-handle=4412 /prefetch:8
  2⤵
  PID:3040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4372,i,6663988057944833531,13281094572691625878,524288 --field-trial-handle=2244,i,463527625806045054,11419931920169525982,262144 --variations-seed-version --mojo-platform-channel-handle=4520 /prefetch:8
  2⤵
  PID:1200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5140,i,15983523691191740891,9396589829443299987,524288 --field-trial-handle=2244,i,463527625806045054,11419931920169525982,262144 --variations-seed-version --mojo-platform-channel-handle=4552 /prefetch:8
  2⤵
  PID:2492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2056,i,17097926535304081020,14910426538872644999,524288 --field-trial-handle=2244,i,463527625806045054,11419931920169525982,262144 --variations-seed-version --mojo-platform-channel-handle=5836 /prefetch:8
  2⤵
  PID:624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=756,i,5046945789322133189,17431238678082505208,524288 --field-trial-handle=2244,i,463527625806045054,11419931920169525982,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:8
  2⤵
  PID:3276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6204,i,8543569063931808531,12290521705512617537,262144 --field-trial-handle=2244,i,463527625806045054,11419931920169525982,262144 --variations-seed-version --mojo-platform-channel-handle=5480 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3448

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4152

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c904cde2439d0f658b6928376273908e18874923ffb5ab0253d91ef97d247274
MD5 71592819d06ab9dfd94505cef3db0b85
SHA1 fa4c610ce7419e5f934db322abc11ec563259b9b
SHA512 f0dccb656458e10495c6728811a1fad970a69f8abb5ce8e9bcba9e93f496cd66fb3ce8ce1065b946203d7912789774c609787e85dd5139479b2562b6f05cfae0
TLSH
T16BD002F8BB950515C5C970F7713BDB8143B6EB218246265D64F21E082D747B23606895
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ad9341a3ad2b263d2be4ffd8a97b10f49a2c167d02a5b66182496dee5e8cf827
MD5 8f79499bd1d234dc030ef99e2f850e0e
SHA1 4dd7c44b8570ce93f3db7df7fe1188f189fa82fa
SHA512 d06aa3eb27c999ba47fce9a170740591ef6bacf188a5d364ad9a567936919e24290b5c0c3a8ad16cae1e37c71c2364d9db3ba42e5914a96b0f1f732c29ff5945
TLSH
T199D022F83BC00800C8C830F3303ACB8003B2EB208202230E20F20E080C303F23202880
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 2dd50d8437d4641564106e6dd1756681a0db668374568ff1b35c21a4f6463bb7
MD5 86e556f0100fc8662965180620645ba1
SHA1 3142c4f1f4de741f7cfdd06eb3dda9a366e10909
SHA512 0d59cbb22eb865830c72cb960c7d4d0dda86a513d9c6ea10c7d8aa3907255101f359b0aebe852ddbbb06f879c12e82f41b89ddad1cb678b619a24bfdc486cfab
TLSH
T1E1E026D44AC8E3AEF618648F42FE570CC2803B0BD2CC6FBA270198857045894B2E66F0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 136700c3aa73b1e11983c6d86bfa78713448bec34d5aaebed14f79199122d45d
MD5 0525a9e2585942bc852f0f2d2732b0d5
SHA1 a7c54fdb42f803bb1cc0ab9b2b345b295b551ec4
SHA512 0bfefe58c34e3fd689092d29d9863ee95920ff4328bb5a6ebf84a70534bcd0e49d2dcac99dd9be035581b133937a8416d49defb873a82afdc9c0c3b65cf4085a
TLSH
T16061C78215440E69FFA8D97889FE17873635A58124872EC2405DECFA580EFD5E33037C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58bcf2.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58bcf2.TMP
Size 3KB
SHA256 78b9a3842040558645693ef7377f8a69591ce8a55b8061647118cd0cfa5bac22
MD5 c81e2e98be9ff24a946fe4f9f748a10c
SHA1 c0fa18e65d4eaf96b1a42c4b484600a802dfbbb5
SHA512 0cbc9c895606a5f02c45e933251be22928345e6ae02764634407ba8a9647a3b02636175366bf42e1d5b30d253a746c616102e7b01498f781b5d776e58f4169f3
TLSH
T14161C68215440E69FFA8D97889FE23873635A58524872EC2509DECFA580EFD5E33037C
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 0f918e619d35fae2d5db56c984a715052738dbf2c3647c3e91f7f0f1b4456ba6
MD5 9eaea63172fbda0794736ede98943ca4
SHA1 685e4fe1a3dcb087b7e4821e62b0caf1739d1c39
SHA512 342d5847349f72f880753ca7be030d2b0954b7f1fdf0b4a7c5fbd5cb53957f38d296ef412d87dea56ce0fb830b50aff413a56391b30686faa9870ac558134753
TLSH
T170117DF3C7D585AEC90116F0AA28BE2BCE2D0506431C7C1989D4EF2793E3075D10259F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 8212de2792e37e4caf01ff429f69e1930881468ae955be68494d479968ce406c
MD5 2a1062d2ddb80e4642c2721d3e124ba7
SHA1 1e44829a1909a079efd0d386c6580700c52b77f7
SHA512 b328de085d0d035371b7c1400a7c9a7211876149522ec6185c1918e0caaed458494a17275ec178f941dce65b326cda3fd5defeae57dc5d729ac20126d26d3cbc
SSDEEP 192:sxZFRnWk/fxsSGIdpdLHW6+WNGYRPRyvIgrJ:sxZFsk/fxsSnRHbGmu9
TLSH
T18612B8526E38A57B8CC7D20DBA257F53D6F9503291D41E48EAFC861C05E66DD230780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 bfbceeb9d991fe2f40439de4e270b4552e262c92f1277be8ea8e9a630494e921
MD5 301551b72fdabe3eeb6933b5a9f16f76
SHA1 71b37d9cdcf023566bb5b99ac2caf8fc20decf88
SHA512 5aa5096efd592f942017156d782b42a84003de39b0899170b758c8d8374c562317d094e7efeb07f4836f0534bfadaa0a7e9640472ccf2112ad0944689ab299c2
SSDEEP 192:sxZFRnWk/fxsTGIdpdLHW6+WNGYRP3yvIg5GJ:sxZFsk/fxsTnRHbGmUg
TLSH
T1FE22B9526E38697B8CCBE20DBA257F53E6F9503291951E48EAFCC61C05E76CD230780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 05837ccbd0c2f767f1d54230a3e0e52a5566d32918463ef602dcea4af0d3e4fc
MD5 0b025083f695824428e69f8aa6284d8f
SHA1 71ab86555e2c73010d70d4e8cef76caeeb2d869e
SHA512 6b0ef7d023e443ebcafaa7c3f1d08a0d89c2a55d89616e5470b3790ed549748b2a09952a42026e5447d9d28c7a526588affb755abeae73460671a12fa27cf502
SSDEEP 192:sxZFRnWk/fxsTGIdpHLHW6+WNGYRPwyvIg5GJ:sxZFsk/fxsTnrHbGmxg
TLSH
T1D122B9526E38697B8CC7E21DBA25BF53E6F9503291951E48EAFCC61C05E76CD230780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 6925275581474dd436d92afd6e6b39194a3d12532fd4bd76495e4a1ec968a443
MD5 2fd30accbea5bd31cb0c52bec3a25da5
SHA1 791da7badd9f5fd26512a68710a2a1635301a9e2
SHA512 7d8755350e93dbd559fe7d7fd54e8ebf105639135d2ec4b850c87da9ff4ae7a455c0228ec61f03a7921cfb98f41deecbdd7827fdc9c9d5acde774aa60193b6bc
SSDEEP 192:sxZFRnWk/fxs3GIdpdLHW6+WNGYRPRyvIg5kJ:sxZFsk/fxs3nRHbGmui
TLSH
T1FC22B8526E38A57B8CCBD21DBA25BF53D6F95032A1D41E48EAFC861C05E66CD230780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 b63d0f08fd8da7c21415c0000518c1b7e0740ba2abe8dfd33fe906b7c9fffee3
MD5 20137cedbf0862408b4133cba1f7a7ae
SHA1 c3d0cd5d4d4c06618c7dad49dad19f084a7413bb
SHA512 03cf6c364fe8e3b7092bbf8dd20f3848e58a066b80efb984c0f2121fed960792cd3fe7deb5c4579b4b12beaf4f3e8b2bbdd3ef3c0ffb0ab34f7a57418934677c
SSDEEP 768:QSK9uzYWvcQWs8F1+UoAYDCx9Tuqh0VfUC9xbog/OVpHLlh7k3vro8+F9:QSK9uzYWvcQWsu1ja0HL7Q388+F9
TLSH
T1CDC2F93F640CCB7E5FC01A9DDC5A6F973E9802D7A6588D4047FA984C02C77EA522A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 3KB
SHA256 eebb0a6b560681c25152d123e2e688423306774b04fc9f666d1035ed43bac565
MD5 71cb6018c402b5bf34dd3b5091651f85
SHA1 71f5cb7991d61f89862fb74c4f087d158670f6de
SHA512 13678667f881350f367fc1d3ce230f41a6000088e4c236dcf9b446e9fdaf8c33ee4d114909895aa99e3f1e1946c4e7d46d3f33c96d2f977c9bdf6dc87486c7aa
TLSH
T15361F485347A0244387D2A0D94AAD62F2645B572B01CEA6B7BFE4071CF6AE490CFD8D9
MD5 SHA1 SHA512 TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe595896.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe595896.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 72ce5153d6c57e2d9c2496b2616d802c35fb6294281d352ede526514328fa363
MD5 03a630d8b0524b9c71747b30b8676fe9
SHA1 e2666ac2ad235f95cc03e1e4649beacbc07b487c
SHA512 18fdc5db321d22c8c82167bee895d0e073f7b47bead517fb29f17e75cf896b5b9dfda288200f46168b508d07f9cc59e62f30eff1dc5778c4254cbf8472dfab16
SSDEEP 384:CZcIhsN2iwGukfOjTVSpOsG5bjkf/jtgOIwZOyFgoS:whemnAOrjkf7XsbN
TLSH
T19F827D32597C5DB76CEBA145F48A32039FB88067D6C56BC494ED5F1C01EB5A8230BD2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 d7a98470e9329a5b8c9141d40d586814e4a5e2151bbd25b3c7b52dd1e169081a
MD5 51ca88ce029b8ed3771e1f2dc2a48834
SHA1 60cb0b55a17c531ee152c5fbccfc118f420068b1
SHA512 dd148bfefaed9f2f7089b39517dcf61752bb0d1a6c326e7107745673498f0eed3675430b5c159adcbd081d8c3ef3204ede754df052412ca222f81f5bf0c63927
SSDEEP 384:NiFiZcIpzsN28TUNTUlIlPwGukfOjTVSpOsG5bjk7/jtgOIwZOyFgoS:EFQJbwgrmnAOrjk77XsbN
TLSH
T12FA26C3348A88DBBADFB9645F58A3203DFB440A7D581AB94E6DC5E1C01A71EC130BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 c8bb998f1ec75547bb8f903bfb01c7e49d36f282f09249cb8e9cc2dcc3892a8c
MD5 f421bb6ccf70317f93ada65ef8590d9f
SHA1 6b253c2eefc56b30ef3ca7ce9625c0a752614614
SHA512 a85a0a289e2df97f24deed72216ae813f6ae822290da9f3bbdd14904376185eae8bd3a20ffeb8499b07266ba7b025c5fe9f27d0554e569bcab23cd135c3cf040
SSDEEP 192:SOND6ygpQmiUyY4tOCTVgFpOsR0XzPrBSU6:SOND6lH6tOCTVSpOsGzcU6
TLSH
T11B02C635B8682CBB8DF3AE46F48B37139FE4116BE9512B84DAE81E1C01D765C2306C36
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 5f72976e775159a04db9e0492ddd50690a7594428fa71b854b372cfcca570804
MD5 d63ce76d9f2ce433d1519da2c950d08b
SHA1 830b563f03089de6bd7003a92076418f140b4294
SHA512 ab8158a8dd0c3e5b1683f1d1a2d1ca815e7d5a25301d9ea68c9470aefc704ef115fa6d5c03d4a0ece71a36baf69274088b72e578fd714a6da13da82038db1a89
SSDEEP 384:mZcIhsN2PwGukfOjTVSpOsG5bjkf/jtgOIwZOyFgoS:0hvmnAOrjkf7XsbN
TLSH
T13B828D32597C5DB76CEBA145F48A32039FB88067D6C56BC495EC5F1C01EB6A8230BD2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 5af7777fb77829528ef346c47d4fbdc88e235f62c8ddd5e857e5036aa9b0d53b
MD5 75cdebad134370478b26f3e3ab8a1ff4
SHA1 a31e2171f935d8d475d69e4fbe441ec24147a2b5
SHA512 9e407671ed1712778502c8d99e49de762170d211b3b5ebbf7f235af6977803f63d1aa6db159c13d94cf09836e6eada25a616d2bd332243dad8298f72392665a3
SSDEEP 192:SONf6yDQmiUyT49OCTVgFpOsR05bjHEf3Uvq0jU6:SONf6OR9OCTVSpOsG5bjks/jU6
TLSH
T199120935B8786CBB5DE36545F48B32139FA44167DA456F80D5EC2F1C02EB6AC234BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b948a16e-f70b-4289-b66c-1992bde1d0f4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\b948a16e-f70b-4289-b66c-1992bde1d0f4.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 3bd26fe7fd72a3ebafc6a146288906b0f78ce78c7a1880726a7266110182c362
MD5 650feac9be8c8bb540684ab81ae9a399
SHA1 23b4bae8d3bfd79970f1c0a23d94c3ba2bf8bf29
SHA512 818578fbf44a5e1b4ea682865b50d10afbaa840d7c92f7d2a97045295426482a54063d725f2626574d41372fd408ade2215f0a7afed10a324d8f3f9114f901b4
TLSH
T1CD412768B6E9214873776F56ABF6A8AD847F7D772E06D49D10110E4F0622B40C8B1737
MD5 SHA1 SHA512 TLSH

Submit Download