5d6004c82e2d7244aad68bb00365d03353aa2ac2d87ec93b28b59b029543fde2

Analysis

max time kernel
149s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/09/2026, 11:16

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
attachment20260930-1253-8enb7u.htm
Size 1KB
Sample260930-nc4tkasfqh
SHA256 5d6004c82e2d7244aad68bb00365d03353aa2ac2d87ec93b28b59b029543fde2
MD5 3a134f40128e3382caf68c7037564ce6
SHA1 d53f727b1b15ed1d2286e65613578331cb2a01f7
SHA512 7dc021062e3dd4f2601fa8291c6c7370bcb1b579bc09aac01ed304c2dfe255c0a67248a2e7b90940563d9c914749f0488d85f55208a5f48bf413f651b735d21e
TLSH
T1FD11CCDB03E23DA45493333764434B8EDF380175E7724F753475211A138A29AD4239F4
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4772	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-240542094-4193773837-3211495583-1000\{82E76884-2561-44C8-8E1D-69B90387B62F}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1312	msedge.exe
1312	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe
760	msedge.exe

Suspicious use of WriteProcessMemory 34 IoCs

description	pid	Process	procid_target
PID 760 wrote to memory of 5008	760	msedge.exe	86
PID 760 wrote to memory of 4772	760	msedge.exe	87
PID 760 wrote to memory of 2000	760	msedge.exe	88
PID 760 wrote to memory of 2000	760	msedge.exe	88
PID 760 wrote to memory of 2000	760	msedge.exe	88
PID 760 wrote to memory of 2120	760	msedge.exe	89
PID 760 wrote to memory of 2120	760	msedge.exe	89
PID 760 wrote to memory of 3404	760	msedge.exe	91
PID 760 wrote to memory of 4064	760	msedge.exe	90
PID 760 wrote to memory of 3404	760	msedge.exe	91
PID 760 wrote to memory of 3404	760	msedge.exe	91
PID 760 wrote to memory of 4064	760	msedge.exe	90
PID 760 wrote to memory of 4064	760	msedge.exe	90
PID 760 wrote to memory of 4008	760	msedge.exe	93
PID 760 wrote to memory of 4008	760	msedge.exe	93
PID 760 wrote to memory of 4008	760	msedge.exe	93
PID 760 wrote to memory of 3288	760	msedge.exe	94
PID 760 wrote to memory of 3288	760	msedge.exe	94
PID 760 wrote to memory of 3288	760	msedge.exe	94
PID 760 wrote to memory of 3192	760	msedge.exe	102
PID 760 wrote to memory of 1464	760	msedge.exe	103
PID 760 wrote to memory of 3192	760	msedge.exe	102
PID 760 wrote to memory of 1464	760	msedge.exe	103
PID 760 wrote to memory of 952	760	msedge.exe	106
PID 760 wrote to memory of 4552	760	msedge.exe	118
PID 760 wrote to memory of 3216	760	msedge.exe	119
PID 760 wrote to memory of 832	760	msedge.exe	120
PID 760 wrote to memory of 2832	760	msedge.exe	123
PID 760 wrote to memory of 2832	760	msedge.exe	123
PID 760 wrote to memory of 2292	760	msedge.exe	124
PID 760 wrote to memory of 2292	760	msedge.exe	124
PID 760 wrote to memory of 4536	760	msedge.exe	127
PID 760 wrote to memory of 4536	760	msedge.exe	127
PID 760 wrote to memory of 1312	760	msedge.exe	128

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\attachment20260930-1253-8enb7u.htm
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ff84a39c188,0x7ff84a39c194,0x7ff84a39c1a0
  2⤵
  PID:5008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1960,i,17359243569626416054,16544341086265065947,524288 --field-trial-handle=2176,i,13634836027714819776,2811218606030505833,262144 --variations-seed-version --mojo-platform-channel-handle=2252 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1680,i,3859078623674057865,15728912525090132095,262144 --field-trial-handle=2176,i,13634836027714819776,2811218606030505833,262144 --variations-seed-version --mojo-platform-channel-handle=2172 /prefetch:2
  2⤵
  PID:2000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2520,i,17907289405711409135,16795091872063916991,524288 --field-trial-handle=2176,i,13634836027714819776,2811218606030505833,262144 --variations-seed-version --mojo-platform-channel-handle=2708 /prefetch:8
  2⤵
  PID:2120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3488,i,6174401860304462766,9932572525827036446,2097152 --field-trial-handle=2176,i,13634836027714819776,2811218606030505833,262144 --variations-seed-version --mojo-platform-channel-handle=3532 /prefetch:1
  2⤵
  PID:4064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3504,i,17208082649859168996,5543172182501219520,2097152 --field-trial-handle=2176,i,13634836027714819776,2811218606030505833,262144 --variations-seed-version --mojo-platform-channel-handle=3556 /prefetch:1
  2⤵
  PID:3404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4248,i,5992545279975084566,8755938963128944183,2097152 --field-trial-handle=2176,i,13634836027714819776,2811218606030505833,262144 --variations-seed-version --mojo-platform-channel-handle=4256 /prefetch:1
  2⤵
  PID:4008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4272,i,2586371941026405280,16941611512676758864,2097152 --field-trial-handle=2176,i,13634836027714819776,2811218606030505833,262144 --variations-seed-version --mojo-platform-channel-handle=4308 /prefetch:2
  2⤵
  PID:3288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5116,i,5973809866543119837,12257988606449679760,524288 --field-trial-handle=2176,i,13634836027714819776,2811218606030505833,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
  2⤵
  PID:3192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5088,i,8317671135356397934,18318153538119772626,524288 --field-trial-handle=2176,i,13634836027714819776,2811218606030505833,262144 --variations-seed-version --mojo-platform-channel-handle=5204 /prefetch:8
  2⤵
  PID:1464
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5848,i,14356600506983431213,18369199858565866948,524288 --field-trial-handle=2176,i,13634836027714819776,2811218606030505833,262144 --variations-seed-version --mojo-platform-channel-handle=5864 /prefetch:8
  2⤵
  PID:888
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5848,i,14356600506983431213,18369199858565866948,524288 --field-trial-handle=2176,i,13634836027714819776,2811218606030505833,262144 --variations-seed-version --mojo-platform-channel-handle=5864 /prefetch:8
  2⤵
  PID:952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4284,i,14279224265995780170,4219154420209766627,524288 --field-trial-handle=2176,i,13634836027714819776,2811218606030505833,262144 --variations-seed-version --mojo-platform-channel-handle=6244 /prefetch:8
  2⤵
  PID:4552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4500,i,3605359215875383308,15530231550049108076,524288 --field-trial-handle=2176,i,13634836027714819776,2811218606030505833,262144 --variations-seed-version --mojo-platform-channel-handle=6256 /prefetch:8
  2⤵
  PID:3216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4504,i,746080125306678440,9491113112180042500,524288 --field-trial-handle=2176,i,13634836027714819776,2811218606030505833,262144 --variations-seed-version --mojo-platform-channel-handle=6296 /prefetch:8
  2⤵
  PID:832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5468,i,9371207663573010549,9963629291157280840,524288 --field-trial-handle=2176,i,13634836027714819776,2811218606030505833,262144 --variations-seed-version --mojo-platform-channel-handle=6348 /prefetch:8
  2⤵
  PID:2832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5948,i,7276584357725895562,5453574647747592654,524288 --field-trial-handle=2176,i,13634836027714819776,2811218606030505833,262144 --variations-seed-version --mojo-platform-channel-handle=5244 /prefetch:8
  2⤵
  PID:2292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=752,i,3549148807969050237,3053358246646056854,524288 --field-trial-handle=2176,i,13634836027714819776,2811218606030505833,262144 --variations-seed-version --mojo-platform-channel-handle=5656 /prefetch:8
  2⤵
  PID:4536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6508,i,12919679812417023056,12984448825272912531,262144 --field-trial-handle=2176,i,13634836027714819776,2811218606030505833,262144 --variations-seed-version --mojo-platform-channel-handle=6152 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1312

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:8

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 98f220c14bd3d385f1dd482d8b868745c75685e4a2573b4336f235cf3bdce6c1
MD5 6ce50f5d79ab86d6489a63e08ead9ec4
SHA1 d52fb22446c08230d0edc8374b1dcaed1af585ea
SHA512 fd66aaada3f82de40a9236f167ecb23bc285a49f72374f567e078118a8bdb229e4fadc26c639553cfacaa7d7ba44e0419f17b4bb4a9a8999b51bdd037a28783a
TLSH
T189D02BF4E69455E4D441283C11130304314CC4001C033010C46141D21D8D7C2009A068
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 02cf6c2debe9573f3713554c359339f3deb6fa4abd8c14fc6d2577e42ce2d830
MD5 eec56aca3717cde66f2f4d578de1d4d9
SHA1 965ee07ac77588f49d8c4fdf547b37349747a74f
SHA512 90d05594a407bba8ca844c3df6d127aec4c8ecb87f3d2106da447965d8445c3863cdc5a376c90818be642f5dbacedbbb845f24cc640f422e049733d24470df99
TLSH
T163D02BF4A6D459E4D841283C11130304314CC4001C037111C46141D20D8E7C2009A068
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 328B
SHA256 ac2aacc1ef46db34f1de7de1a2aef91599171d01ab8d322aff92346e85211dc7
MD5 597a25084063d9413da3149389d7f408
SHA1 f3fac5a36e2d12de80ebaa897d5ce7e43fbf74ee
SHA512 e6bc2062774a7b3436b21e7d3795b5df84cd1fa385dd27488ad01ebb906363ee28b770474b1a138853698f6d5ca5a55787e31a235668d75ea2c63701a66ff001
TLSH
T198E026D886C8C3BEE64868C7817C6B0C82803F4A93CC7E0A6F08CD88F002450F7C26D0
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 9cfdaaaab0334b4577455eb861401e4d346f762c00a8f670ea8999920b2ced4e
MD5 b0d3d665f26d5b7bd0312cfeb5ad3bbe
SHA1 9e7679c143e5d6d0f3220ea31bb2716fcd4cee08
SHA512 3c710be6a4cb1a44ba4e22e5f8dbf6eb9065e0bfaeb8a7d8e9e48049fe61a89b38108da08262023f5f503b476b2e259d5ed672a46696c92a39b8f00f276115de
TLSH
T1AB51E78D92702350D7AD7033B6E11183FA7BB9B167935F523095C9B88B4A374B10803F
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58ff0c.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58ff0c.TMP
Size 2KB
SHA256 60e7ab88901d37a6b402bd8cb4735928637285cf1c2110b8e10a9c3369badff0
MD5 d74e40519bc118c4f1fa75a2b7ebf103
SHA1 95eb6df11a99c727807403053327067710bf43a1
SHA512 6016b1210a264ef1cacfa1c0f589a39c1ea58e7e865f59a7c81601f8efdef6e793722b741e2ad59782af4422ced0be00d1a4a8e00d1eebf3f975a666dd9744c9
TLSH
T10951E78D92702350D7AD7073B6E11283FA7BB9B167935F523095C9B88B4A374B10807F
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 0ed21a04fa00f7e2414ec53305475bb46f5a5f20f9802faedaec729897864f8d
MD5 d124777d6fa7f13c61a01406518cb5de
SHA1 dd873be7a4d9ebc346b7d86816d686075064497a
SHA512 8fc94741ba53ff08ea65ff93fd4bb8dd557d0ceb40a078612ba767dc32dbea0f9beffc2f54719c18f98ddad898d59c2a8e9033cca0a859e1928d49bbdb2eacd7
TLSH
T164115BF3C3D585AE891516F09A24AE1BDE1D050642187C1985D4EF6BD3E3079D00199B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 6220ba9ac9261ee8548014f5e0e8fb17680b9622e5487ba2dac550c0a20b1ef1
MD5 d0fa09f2c60e9bf477486ce9c136ba8d
SHA1 4f6797ce0e9fe992049bd4c5c84bf69982ff4d0c
SHA512 adf8db2672afec92067038fec112cbf2c3a2f4c5fbd207e0c038d146f985a619352acfaa6a2a1c3943ffabde19e12fc96041a5118bd2c9b1893dfdb488aed0aa
SSDEEP 192:sxZTmRoWUY/f0Vs8lGPIdpdXHW6+WNGYrbekIgrJ:sxZq1P/f8smjZHbGQ9
TLSH
T1B71297526E28A97B8CC7E34DBB15BF13D6F9503251D51E58AAFCC61C04E7ADD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 8f5e25623ae5704bb834629a43195186e8d083f4b576fecf5928fb84b272d3e3
MD5 a114e8f9f0742a6ef279fda88c8681a5
SHA1 ffd709c6ab5ed98987c5d8c46d76e07d7ad7de5c
SHA512 794511a3b296206a9a4a59eac2c3f68742ee008b427eac75bd5040abdf6d44edd31daed463c91acd89502c968d725dc7472559e774aac602efc0bff4d6cefcf5
SSDEEP 192:sxZTmRoWUY/f0Vs7/GPIdpHXHW6+WNGYr9ekIg53J:sxZq1P/f8sLj3HbGwn
TLSH
T1B422A7526E28A9BB8CC7E24DBB15BF13D6F9503251D51E48AAFCC61C05E7ADD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 fc7a1dc2554b984fa592dbb6e8c0df7eadf896455e7943ec8221933fd174e69d
MD5 dabfa1598838aba2263bae84d22210b7
SHA1 416a06f2c1d8c98f19c289493687151f49d3d61b
SHA512 dcc3c6cdbeecf115ac17dfa7fedbbaf77c7c0329be99e8b4c6d4f0c32b7b256c80ca01373c39c4173bcaf3f6489231b7cb75b7616a404eeaafd80f8347671f92
SSDEEP 192:sxZTmRoWUY/f0Vs7lGPIdpdXHW6+WNGYrbekIg5dJ:sxZq1P/f8sxjZHbGQB
TLSH
T1BC22A7526E28A9BB8CC7E30DBB15BF13D6F9503251D51E98AAFC861C04E76DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 28802ca5bc969648e06ad310643596e48a4b6c69a8572135186a6d1407be5663
MD5 48c0d72a1739feab8e0a9ccb4f521b3d
SHA1 497281acbbaee20ff1c84e3fb7226f5a55239950
SHA512 15f6180083d359749cf8332ed2407d7512a821e293ea4c3e3e05c22eecdc9efb18aa9d898c4a07eb440a93bb63185e8fc8855dfe4e9817867179bcd5844c3aaf
SSDEEP 192:sxZTmRoWUY/f0Vs7/GPIdpdXHW6+WNGYr5ekIg53J:sxZq1P/f8sLjZHbG8n
TLSH
T1BA22A8526E28A9BB8CC7E34DBB157F13E6F9503251D51E58AAFCC61C05E7ACD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 0860581fc159d77a27797156f32c9e1b548b47ed53e27c930db0b7ff843dffb3
MD5 98876a9a9c234a0a5585fd916fac85e2
SHA1 0be1ba8277d46ac7e3fe75f4977892b4d8c548c8
SHA512 82560820a64ef028988c60d79dcabe3f5b37ba6cd81aaf168b6c4d4b55424f12ad6a714fa66670a66921ebd0df172b8a9277b7399d9fe993b59e8eafb58b0106
SSDEEP 768:/My4J/DWvbtBh8F1+UoAYDCx9Tuqh0VfUC9xbog/OVCiLlc2Tb0roRKv:/My4J/DWvbtBhu1jajiLm0bfMv
TLSH
T116C20B3B784CCA7E4FC00A9DED5E6F973E9802C796948D4047FA994C02C77EA91264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 11adba0c88aedb19dbb7cceaacaf1d46cab74aac849927ec061b3d2565939649
MD5 e00e54f861e87a12ef8b15a2f670bec8
SHA1 a999022b25493091895a92ec4b8f56afbcf113f6
SHA512 11b3135a14d01ee73a1055ccaa79441e86d297850c4af0dc95d372a7f78b1d529bf973f3fa6a269ee0c804c2934d52b09d6f134c3603769373faec3ad1df5630
SSDEEP 96:KIDCKs0+u/+KEUqed2Ku8BycK7yCe7aHbJhh+bxwl57+KBL5F+NT7Y1F:E5xdhxfjd
TLSH
T19FE1E55231B7060038BD258C8175876E524132737059FE6FBFBD44A59E2BE489EFE8CA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe599a42.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe599a42.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 139517695abff6692f9edb83739bd173a14cbd7276f830cdc080cc8724fd1317
MD5 1e76085b0c0bcd6b0dd490c39854aaf2
SHA1 964eb9a46ce894804859cf684330cd1ff0cd2c13
SHA512 57130e1a0e24962131bcf022fc408f1440aadcaf51048708eecf451b0558d503530d74cc4a8069b61b5dd3eed70982518f4c6c0608231e5fe88a428507a677be
SSDEEP 192:1ONw6wlDgQmiUyvZW4X58gZAOKmyDlnZUU6:1ONw6kguW4X58EAOtyyU6
TLSH
T10202EA38B9B87C7B8EF26E09F58727139FA4102BEA516F44CAE85A1D00D739C1307923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 9457796c3ac0b6d67ed96cc9b9d64e9467a76f9009a12cc8de7fe3600a6a90d0
MD5 9f790627047793bf63ce18ad878da951
SHA1 19cd0ae9610f90d3742918813370a178696d33f7
SHA512 d19f7fab9fe641b00ae90b0c152ef39dfc123e31ae3fb4e882144b077557da334783ff60ece06da1245c4eadc611ae98420de83c92a45d0168ea983805a6c6be
SSDEEP 192:1ONi6wlDQQmiUyCZ34X58gZAOK6BveBqDU6:1ONi6kQL34X58EAOrQ6U6
TLSH
T19B120935B9A8BC275DF26544F48731139FA9512BEB8AAF90C5DC6A1C01DF2AC130BD17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 fc8d8764d85516d4fb8905d4ae4b7cdce49560d1aedc0fd09a46688a2f35cdd5
MD5 f225b4723ae1f44f1c03b949fafed84a
SHA1 fce06fd74cfbcb37f7ad131483355dacff7f34ac
SHA512 bbe651aae664432db965a68cfce326a23b0227cfd037c390729d966346809f9b9a4c6c27fc5c11c77cbdfe305801f9b7db91430f53eeb7553592ac2772e9591c
SSDEEP 384:iZcIhsN/ZlIjZxOFHX58EAOrL6tgOIwZOyjjoK:Qh2Y6xaDOrL6XsG1
TLSH
T19B827C72A9B8AD765CF6A144F54732039FBC502BE7C56B84C5EDAB1D019A6AC030BC07
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 7db164571ed12aba3cad794ce4f551fdc8d65b534c40225869b191d11206f2f0
MD5 d2cb14da587ab27934ea5de363c67594
SHA1 981da71cd8f26c765db0794ca9edbb39e6c3143b
SHA512 1fb70e0a1c5f5bf61234baf88fca269c896180524817222d8f88a7edada25e0af38ee89811b33b3c4fb2736fab7b1394c6504e836c968200f6ff34c49d6bed16
SSDEEP 384:viFiZcIqzsNh8TUNTUlIlslIjZxOFHX58EAOr26tgOIwZOyjjoK:6FQiMwgaY6xaDOr26XsG1
TLSH
T136A26D7399A8DD7B6DFB9644F54A32038FB8407BD6C5EB90D6D9AA1D009B1DC030BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 a493609ae078c98fc3d12b4eee9b53ce7b250bb0d437bb30f662a760d75ebfc8
MD5 07d1a7f9b67e1c64de1c8e445f368059
SHA1 43d21269d8658ec11763d88347be4d2ddc371bf1
SHA512 ae29f66dca011e110ead36036a0bf2b44ee996d1f0339cf22a1d08da4696b3f7be6ca7435347f466f9133159511aa73eef7b0058cc7121dea6378c6cb04e868e
SSDEEP 384:kZcIhsN/slIjZxOFHX58EAOrL6tgOIwZOyjjoK:ChHY6xaDOrL6XsG1
TLSH
T17D827C72A9B9AD775CF6A144F54732039FBC502BE7C5AB84C5EDAB1D009A6AD030BC07
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bb2e5e15-fa4f-447d-a29b-9ba2c9a299ff.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\bb2e5e15-fa4f-447d-a29b-9ba2c9a299ff.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 919b403de661e2ed80d5a7b2048b6cdf2bcc1452ecfe9d518f88fef643d9bf1a
MD5 ad848297fdfffd324c4358e0f3231c53
SHA1 934ba28342bb1e4ab67a8aacbf89127845df60a9
SHA512 508c286f197ddb494f31d1d211cd3a8d757df08a43ad38ab01f62c7d57902f7c480e29ae32c6b296dfe4e9f02525751753d3b70520acf734ab96d452c69023f9
TLSH
T13D410B58A6ED115CB3B77F1A9BF6646E447B7D332E0AD09D10110D8F0A22B00C871737
MD5 SHA1 SHA512 TLSH

Submit Download