3e10b452175f0acbfcda6bc2487e308e0c5f4913f1ca5b0ed77be7a462a066bc

Analysis

max time kernel
148s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/09/2026, 10:50

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
attachment20260930-1253-jdnicp.html
Size 171B
Sample260930-mxlm2sdc46
SHA256 3e10b452175f0acbfcda6bc2487e308e0c5f4913f1ca5b0ed77be7a462a066bc
MD5 e082ebc14f6b24945336f6450b985e45
SHA1 df12ad35c265b0198582e2dc94e0a93048e4de82
SHA512 8dac8fb7101ee6a50ec58409a7d51009d9a3f6b1266377cad6f7f9001bc6f6734ffc067e7cfd0f17a1d0e288803fa8c8d37925590f6421772323ce99a4a9a1bf
TLSH
T1E4C08C7D10C13C150270A93C1DD3B397EC93198E01422B41308180232F35620CED32D0
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1692	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-939655444-3071939294-1401108526-1000\{E354095F-A030-4B4F-A0FE-39DD7A190338}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3548	msedge.exe
3548	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4204 wrote to memory of 1432	4204	msedge.exe	90
PID 4204 wrote to memory of 1692	4204	msedge.exe	91
PID 4204 wrote to memory of 4968	4204	msedge.exe	92
PID 4204 wrote to memory of 4968	4204	msedge.exe	92
PID 4204 wrote to memory of 4968	4204	msedge.exe	92
PID 4204 wrote to memory of 4364	4204	msedge.exe	93
PID 4204 wrote to memory of 4364	4204	msedge.exe	93
PID 4204 wrote to memory of 1228	4204	msedge.exe	94
PID 4204 wrote to memory of 1228	4204	msedge.exe	94
PID 4204 wrote to memory of 4308	4204	msedge.exe	95
PID 4204 wrote to memory of 1228	4204	msedge.exe	94
PID 4204 wrote to memory of 4308	4204	msedge.exe	95
PID 4204 wrote to memory of 4308	4204	msedge.exe	95
PID 4204 wrote to memory of 4544	4204	msedge.exe	96
PID 4204 wrote to memory of 1336	4204	msedge.exe	97
PID 4204 wrote to memory of 4544	4204	msedge.exe	96
PID 4204 wrote to memory of 4544	4204	msedge.exe	96
PID 4204 wrote to memory of 1336	4204	msedge.exe	97
PID 4204 wrote to memory of 1336	4204	msedge.exe	97
PID 4204 wrote to memory of 4280	4204	msedge.exe	104
PID 4204 wrote to memory of 4280	4204	msedge.exe	104
PID 4204 wrote to memory of 2628	4204	msedge.exe	105
PID 4204 wrote to memory of 2628	4204	msedge.exe	105
PID 4204 wrote to memory of 440	4204	msedge.exe	107
PID 4204 wrote to memory of 2012	4204	msedge.exe	114
PID 4204 wrote to memory of 1172	4204	msedge.exe	115
PID 4204 wrote to memory of 3120	4204	msedge.exe	116
PID 4204 wrote to memory of 2012	4204	msedge.exe	124
PID 4204 wrote to memory of 2012	4204	msedge.exe	124
PID 4204 wrote to memory of 3548	4204	msedge.exe	128

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\attachment20260930-1253-jdnicp.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7fff744ac188,0x7fff744ac194,0x7fff744ac1a0
  2⤵
  PID:1432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1884,i,18349250820758095402,6208968751931777028,524288 --field-trial-handle=2292,i,7334172268175597306,10798878475525348016,262144 --variations-seed-version --mojo-platform-channel-handle=2320 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1660,i,15147687765482362814,9774918824374859700,262144 --field-trial-handle=2292,i,7334172268175597306,10798878475525348016,262144 --variations-seed-version --mojo-platform-channel-handle=2288 /prefetch:2
  2⤵
  PID:4968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2456,i,6923975359052423914,7003376708212822750,524288 --field-trial-handle=2292,i,7334172268175597306,10798878475525348016,262144 --variations-seed-version --mojo-platform-channel-handle=2624 /prefetch:8
  2⤵
  PID:4364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3432,i,13274204607125775965,16067685963406636893,2097152 --field-trial-handle=2292,i,7334172268175597306,10798878475525348016,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:1228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3436,i,15887043176967730045,2874979560128782125,2097152 --field-trial-handle=2292,i,7334172268175597306,10798878475525348016,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:4308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4116,i,17919140921623924821,8286357516773523377,2097152 --field-trial-handle=2292,i,7334172268175597306,10798878475525348016,262144 --variations-seed-version --mojo-platform-channel-handle=4480 /prefetch:1
  2⤵
  PID:4544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4140,i,17954634436666453610,1185094710931720792,2097152 --field-trial-handle=2292,i,7334172268175597306,10798878475525348016,262144 --variations-seed-version --mojo-platform-channel-handle=4484 /prefetch:2
  2⤵
  PID:1336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4972,i,17578801275826110795,12469993647220639852,524288 --field-trial-handle=2292,i,7334172268175597306,10798878475525348016,262144 --variations-seed-version --mojo-platform-channel-handle=5060 /prefetch:8
  2⤵
  PID:4280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4976,i,15263652589269941225,579461334301935515,524288 --field-trial-handle=2292,i,7334172268175597306,10798878475525348016,262144 --variations-seed-version --mojo-platform-channel-handle=5088 /prefetch:8
  2⤵
  PID:2628
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5752,i,8479074854587817300,2244708127393036987,524288 --field-trial-handle=2292,i,7334172268175597306,10798878475525348016,262144 --variations-seed-version --mojo-platform-channel-handle=5772 /prefetch:8
  2⤵
  PID:2000
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5752,i,8479074854587817300,2244708127393036987,524288 --field-trial-handle=2292,i,7334172268175597306,10798878475525348016,262144 --variations-seed-version --mojo-platform-channel-handle=5772 /prefetch:8
  2⤵
  PID:440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4484,i,6301628727600388866,5242584123745195042,524288 --field-trial-handle=2292,i,7334172268175597306,10798878475525348016,262144 --variations-seed-version --mojo-platform-channel-handle=4696 /prefetch:8
  2⤵
  PID:2012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4532,i,8913910969505079465,17402229085970831099,524288 --field-trial-handle=2292,i,7334172268175597306,10798878475525348016,262144 --variations-seed-version --mojo-platform-channel-handle=4660 /prefetch:8
  2⤵
  PID:1172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4508,i,6260772647488311736,5333315833739970786,524288 --field-trial-handle=2292,i,7334172268175597306,10798878475525348016,262144 --variations-seed-version --mojo-platform-channel-handle=4652 /prefetch:8
  2⤵
  PID:3120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5136,i,245420875564301025,3590151547070265499,524288 --field-trial-handle=2292,i,7334172268175597306,10798878475525348016,262144 --variations-seed-version --mojo-platform-channel-handle=5096 /prefetch:8
  2⤵
  PID:2012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6080,i,3698788760460255368,7830913791076156761,262144 --field-trial-handle=2292,i,7334172268175597306,10798878475525348016,262144 --variations-seed-version --mojo-platform-channel-handle=5364 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3548

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4572

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 63b3e051645c9957f53c538586c3b5463f3ba4412c230d66eb66f06ad6052604
MD5 0070abe22a07fb36149648973e990688
SHA1 c8a203457b36afa6d0ce9b56d26cb7817d832d37
SHA512 cda9b7179f6f997dac4ee0624ff9f92ed77b7c27218584fb07f6b2ebc24d10fc25d45c3d2781b766d834f82054e29ee150712e7ab7d7a11465c468d0f8a31fd1
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P79:fwUQC5VwBIiElEd2K57P79
TLSH
T175B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 9e411e40b2b1e7f1576e6c2cf3027d590d4c5916b7a5e41c1a711f9117d0f1e1
MD5 f86a69ac894860b8a7e2ac52b3c2987b
SHA1 835d87e07bf2af2a2410d66f27145dd25efdaad6
SHA512 6de1915f0367b482a80195c1b703b1007a524ab2a6815670db955de8dd4235e1faa888dde7fcefe1ccbf4dae73b9d41563a6a2f7e5d8d75bf2ff9783b485b777
TLSH
T1ABD02BF8DBD88120F033383400398283308C660420061120A873114C0C441C34225868
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 18eb5a70b8dc14ee5a30ef2a54b3e14abbda2b2d751a8e8abad286d8e92d8872
MD5 a2b3071ef6468d20d3499dac11b0df41
SHA1 e96a1ba764d6003a0c508557df66dec18df2a1e7
SHA512 144677b38dc2433c6ce2cd569ea8dac3d5f5013e173fcf4e0e6d6d88ad42c12001c58ec8fdf8229ee7476fa921cb946792037c4914570deac4969d9365895b19
TLSH
T113D02BF89BD88520F433383400388283308C660420065221A873114C0C451C34225868
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 6cfb5ceaf256da87d055b0a917b2da0f6862836f31c39ddcb24e0e0794585d46
MD5 b7094e6a5bc6ffbdee56f4aa6a3216c7
SHA1 83ad9ab599905ec998c66f6fa9dbe3426f864e7a
SHA512 d5ee855a74ac7a7b0553c839110aade15497f8664cdd6f1e92bb22a0e1375089fe0e8076fa7c6de0ac987ac69338a357f1da6888a1be46cd3fb856cd4a950bf7
TLSH
T10651CC499698A965F7B81C7942F5A387373869C1DDC72E371C9CF93C7F8A3965102240
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe590863.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe590863.TMP
Size 2KB
SHA256 1b62a69f1cc4b6ecdaeae9f82157bf1ccf9824242c52804d1fbb8a23bd69baac
MD5 adc90835e28741657faecc96475e709a
SHA1 aca13b91563130c47bf92a4beca7192896331815
SHA512 1e430051055c2451dff11006fe90e855620efd76e12eff6a757abb39232bf4f25a795df97c1131671ca642fcf464f5d568beb43f1be3aa02533409041f7f6571
TLSH
T18751CC499A88A865F7A81C7942F5A38B373869C1DDC72E371C9CF93C7F8A3865106240
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 d42add4bf64835bb7188dd116b2805c0c0c8e8a7764c57878a941e32fb839e3c
MD5 f01a8175e0ba2aa637de66dd438795da
SHA1 f813f055dad43bcf6f056e4b1b42b01e04c9fb4d
SHA512 dce83b93e846fbd42521ada05844ba28e4f12f4670eee3a5f17c2aaf1af6a5a34d964a9c81dc8fbbf6d00887a5b3501359be8acd1f81b5411629b6ab1de312b0
TLSH
T176113DB3C7D585AE890156F09A24EE2BCE2D0606421C7C1985D4EF6BD3E3475E10299B
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 392768ce2a3f6d491bf10565ce7fc919fbe2260556d7242da6ca4ee081e5f9c7
MD5 909a76efbbf3d5ce0f0f006e6a9ea5d9
SHA1 76517ab303a629b77bf456a511a5aa69ce3bcf81
SHA512 03021925c94b7322e256084ce587a4962435192984b1434fb337ffbf08e7a0111990513a0e73c492722522242da32776c139220e2ca6f3c9cf573aac8a2e45be
SSDEEP 192:sxZN7RrWE/f5YsNoIIdpdyHW6+WNGYapYSHIgrJ:sxZp0E/fOsNqkHbGJ9
TLSH
T19B22B8526E28A97B8CCBD21DBA25BF53D6F9103691D01E48FAFC861C04E7ADD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 2a2d8e78267f7b89f0ae292e02ce8b35bf551cadec1368cb240c7f0c32d9621f
MD5 d9fd85fc2ac7b7da1ddf35a4bd6ff257
SHA1 99c7350d4a5dd347d95e1679b02d9aa759a782e5
SHA512 528345aff88bb82d7aab335c87957c9ad86e2c6de981f1d65a81f130b84934daa0d3fe87d3d8c159a274ef8bea6e9825f7d6f01e50d54046d26e3ea77cdcf25f
SSDEEP 192:sxZN7RrWE/f5YsQoIIdpHyHW6+WNGYapvSHIg5BJ:sxZp0E/fOsQqSHbGWR
TLSH
T14E22D8526E28A97B8CCBE60DFB55BF53E6F9103251901E48AAFC861C05E7BCD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 33549dd115cf34ca21cbd8bd4ec240ae007219f83948158744a2baaeabde3d90
MD5 13fda6a4ad8bef1943e75eabd5d1a81e
SHA1 b003382f02df47cd66a8ed74783f6e3e4de6fdc0
SHA512 6b7fea6937944b19071ff805239ea4cf93ffe40137f102dcea68c5ac4b1be9b4d03a689646072655acc1c01c73492643c2ad37a6a6d06c34b903823d2796fd01
SSDEEP 192:sxZN7RrWE/f5YsDoIIdpdyHW6+WNGYapYSHIg5zJ:sxZp0E/fOsDqkHbGJP
TLSH
T18F22C7526E78A97B8CCBD21DBB65BF53D6F9103691901E48EAFC861C05E7ACD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 528c6603632972bf5eb1aac6107d3f9af859997bac3578c4107e6eb012d9b6a9
MD5 8e2734d1e01c533c73441bee97362fdb
SHA1 690c8d454622f10b869f892489dd73f40fd67d7a
SHA512 862e0a41fc5b03f3dde558130aee2d3571d1b6ec05f2f12a7605b5268fdd4ad1efc158e0bb435ef9194878d4f1658065f527354a82031c7de8f4524f302e43bc
SSDEEP 192:sxZN7RrWE/f5YsQoIIdpdyHW6+WNGYap8SHIg5BJ:sxZp0E/fOsQqkHbG5R
TLSH
T14622D8526E28A97B8CCBE20DBB55BF53E6F9103251901E48AAFC861C05E7BCD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 21cec286d35c688f2831ee2e4071577f772198f91e5fd57253c0ad9590b0c13b
MD5 e23b865ec2df8e6eefb02dc240ce88b3
SHA1 322bfa573392c19651ff4c32a38640e9251258bf
SHA512 b1acd66b8398c741cbea6e4f052df9c539b5b63c0220ffe8f4bdeafa57c5e04ee937b65b1fe04345111694dcc81269a2745afc077b0eac088e22413e8db259d4
SSDEEP 768:KyWPcLKWvKeEe8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjlLlACy7pro4ffePJ1mRV:KyWPcLKWvKeEeu1jaClLiF7C4fWPLmRV
TLSH
T16EC2FA3B644CCB7E5FC01A9DDC5A6FA76E9802C79A548D4047FE944C02C77EA912A4CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 feab0a9579f6b0a7738c65cb4ab12532b5a93f88a5af261c9ef4cf603c54b6f6
MD5 dec04a1266e71127697e46f31560cb35
SHA1 7cac0299f93bc53e43b2da6620fac0bfdeda5c7f
SHA512 6f931ff0b8744afb13886c88cf27aa86dead13e4bd702b228f556de6a937fc01f714a9d49ac00c8035a3423cdc350011e58b1439dd6d214ea493d3e7afa2f53c
SSDEEP 24:KB7EHsPITKbha1qSSpzSyXwyZPmPqE3w0gQo8GzIFqgKSThqMg1U6wSu+cHMityZ:KsUITKda8/SyFFIlKGQ4XyNbIBKowEEz
TLSH
T1E891BE51327A224038BD29199174872EB2413173361AF62E7FFD60A59A27F194DFE4CA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59a36a.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59a36a.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 18c2f12a4d0abd5818af52c6922f61c1155f8bfce21d3ad3517a8923102da156
MD5 e36ad2aa95ea8d2b38b6f8fa18fa21c3
SHA1 04b17a97a12039e70379794ccd30face600f0d3a
SHA512 b4afc78b9d85aefe34446ba9079a75d597071c9c635fb3cc2f93d33effee2249f2cf5caef9e6a4e6a758407be586f6bf92b3c05511aa3df36a1048c96311a56d
SSDEEP 384:gZcIhsN5TO1GLCuzIGmh/qPwiztgOIwZOy4EoE:ehZczeCYizXs2T
TLSH
T1A1827D728DB8AC7A5EE7D505F88B3A135EB88127D7C46F8495EC6B1D00DB298030B917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 0e7686da1571fa0c76e0628d602be16124ec1bb4dcceeee54f38080cd383da1f
MD5 de5fb7660b191c642af7a4a70d4d1f55
SHA1 2a52bb4b4ec125e65a9fa35caa37b8ece4926d55
SHA512 fb787a59c76ebff2a9c74650cadf8dafa5f63647e6b94740d471894907516e9b40009ffbc8e23b1433c56ecfc25d763f992cc2c1b59961c5572ed36851d479ed
SSDEEP 384:giFiZcIzzsNb8TUNTUlIlOO1GLCuzIGmh/qP0OiztgOIwZOy4EoE:7FQX+wg/czeCcOizXs2T
TLSH
T1CBA26D738CE8D87FAEFB9A45F94A36039EB44177C6C5AB94E6DC5A1C00DB198030BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 d98ec8854e9c7c9cac807eb7a03d9aa667ec66a9e9ef2fafba93d85865660890
MD5 a5a1f0e3ffb0d443fee6a46387e28a95
SHA1 a5c837bf2ee0ea0e8ccfa58b9fd53dc94fa94981
SHA512 4fcc30ec4d2bedeccf9fc748c7e01dc85a6d00c02d2187c116b0591b5fed13bbaaf36a2cb8eb071c6fa7057f3ad927a56fd412be9f245aa0511c78a2a8ac4bca
SSDEEP 192:aONZ6IE7QmiUyXoTPuIGmhQRx4LC7s85U6:aONZ6DtbPuIGmh/UsAU6
TLSH
T1C902F835ECB8BC7B9EB3AE09F4877A236EA5112BA6852F84D5D85E1D00D724C1306927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 cb898334b93ea6405ac58dc07136edf17b53adc46a141198986a0e6ed4a2ef47
MD5 bace709483e53567f9fbc01abc1e6c18
SHA1 d56e20c417eeda7274367ac8c1443e3216ab9fe4
SHA512 28be04e3ab8c4a00efd068f04311864cbdcbf02352dccb3e63c6969967f0c168c8b26257f8016699b1333dee8bf6897967a85bd582651498a0bd090bacff5306
SSDEEP 384:jZcIhsN5OO1GLCuzIGmh/qPwiztgOIwZOy4EoE:7hkczeCYizXs2T
TLSH
T18D827E728CB8AC7A5DE7D505F48B3A135FB8812BD7C46F8495EC6B1D00DB298030B917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 d082847562ef0067ea50624b2755d0fa8b6d3539d7e93130c15362cb7d7a2e34
MD5 0f72bdb55aca8e50780042aa065d7aba
SHA1 12eb41cf015505b06872e4c89ae4613ccc0c81d5
SHA512 543a8330c0052cb157871e7151531f6bc989144bb4d3b86bb99297dc908dc905a099e8399876e17380c5dd235e24d5af0ee7efb75ec3100bd316deee681996d6
SSDEEP 192:aONs6IEVQmiUyioTVuIGmhQRx4qPNeUO27H3qgU6:aONs6DzYVuIGmh/qPVHzU6
TLSH
T139120976E8B8BC7B9EA3A904F48739135EA5422BD7C96F94D5DC2A1C00EF25C130B917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e1be21d5-5622-4ca7-ba9d-9b3c46ce0bd1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\e1be21d5-5622-4ca7-ba9d-9b3c46ce0bd1.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 f06e34f7632b9d04490014e50965b8b74a98c8cfa4a08f3a549c9ee32d6e9f85
MD5 5066bfb7b98c5fee079c4290848e0c87
SHA1 4c424da6c9f11bb87bc01971aa89dbfe892df0c5
SHA512 37091a2173da67c752b331401e638b73c5156278b2ff3341ed5bf2ef51c862379d9f16e5cb338297a9598eeafe69909ac080c788582c8cdb15caeb16d9d88690
TLSH
T14F41FF58ABFA1158B3B7AE5AAFB2A42D487B7D672E06D05D10010D4E4A73E04CC72B77
MD5 SHA1 SHA512 TLSH

Submit Download