3e10b452175f0acbfcda6bc2487e308e0c5f4913f1ca5b0ed77be7a462a066bc

Analysis

max time kernel
148s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/09/2026, 16:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
attachment20260930-429995-p2rj8i.html
Size 171B
Sample260930-tsm4mscf52
SHA256 3e10b452175f0acbfcda6bc2487e308e0c5f4913f1ca5b0ed77be7a462a066bc
MD5 e082ebc14f6b24945336f6450b985e45
SHA1 df12ad35c265b0198582e2dc94e0a93048e4de82
SHA512 8dac8fb7101ee6a50ec58409a7d51009d9a3f6b1266377cad6f7f9001bc6f6734ffc067e7cfd0f17a1d0e288803fa8c8d37925590f6421772323ce99a4a9a1bf
TLSH
T1E4C08C7D10C13C150270A93C1DD3B397EC93198E01422B41308180232F35620CED32D0
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
412	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1846164713-4096795028-774071693-1000\{18292CE9-9655-4BD5-987B-E67A882FEB13}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4052	msedge.exe
4052	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe
2712	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 2712 wrote to memory of 1800	2712	msedge.exe	87
PID 2712 wrote to memory of 412	2712	msedge.exe	88
PID 2712 wrote to memory of 3616	2712	msedge.exe	89
PID 2712 wrote to memory of 3616	2712	msedge.exe	89
PID 2712 wrote to memory of 2908	2712	msedge.exe	90
PID 2712 wrote to memory of 2908	2712	msedge.exe	90
PID 2712 wrote to memory of 2908	2712	msedge.exe	90
PID 2712 wrote to memory of 4708	2712	msedge.exe	91
PID 2712 wrote to memory of 4708	2712	msedge.exe	91
PID 2712 wrote to memory of 464	2712	msedge.exe	92
PID 2712 wrote to memory of 4708	2712	msedge.exe	91
PID 2712 wrote to memory of 464	2712	msedge.exe	92
PID 2712 wrote to memory of 464	2712	msedge.exe	92
PID 2712 wrote to memory of 4676	2712	msedge.exe	93
PID 2712 wrote to memory of 4676	2712	msedge.exe	93
PID 2712 wrote to memory of 4676	2712	msedge.exe	93
PID 2712 wrote to memory of 1728	2712	msedge.exe	94
PID 2712 wrote to memory of 1728	2712	msedge.exe	94
PID 2712 wrote to memory of 1728	2712	msedge.exe	94
PID 2712 wrote to memory of 1964	2712	msedge.exe	99
PID 2712 wrote to memory of 4692	2712	msedge.exe	100
PID 2712 wrote to memory of 1964	2712	msedge.exe	99
PID 2712 wrote to memory of 4692	2712	msedge.exe	100
PID 2712 wrote to memory of 3836	2712	msedge.exe	102
PID 2712 wrote to memory of 1712	2712	msedge.exe	113
PID 2712 wrote to memory of 4068	2712	msedge.exe	114
PID 2712 wrote to memory of 1328	2712	msedge.exe	115
PID 2712 wrote to memory of 748	2712	msedge.exe	123
PID 2712 wrote to memory of 748	2712	msedge.exe	123
PID 2712 wrote to memory of 800	2712	msedge.exe	126
PID 2712 wrote to memory of 800	2712	msedge.exe	126
PID 2712 wrote to memory of 4052	2712	msedge.exe	128

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\attachment20260930-429995-p2rj8i.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ffc6bfcc188,0x7ffc6bfcc194,0x7ffc6bfcc1a0
  2⤵
  PID:1800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1804,i,10767884794032042805,15852498758693727349,524288 --field-trial-handle=2528,i,12356749628904825500,13442164534621657382,262144 --variations-seed-version --mojo-platform-channel-handle=2564 /prefetch:3
  2⤵
  - System Time Discovery
  PID:412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2336,i,9934796308001348225,15454558278713118370,524288 --field-trial-handle=2528,i,12356749628904825500,13442164534621657382,262144 --variations-seed-version --mojo-platform-channel-handle=2588 /prefetch:8
  2⤵
  PID:3616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1664,i,5526142672835066875,10086365181930637859,262144 --field-trial-handle=2528,i,12356749628904825500,13442164534621657382,262144 --variations-seed-version --mojo-platform-channel-handle=2524 /prefetch:2
  2⤵
  PID:2908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3452,i,17988209266533513643,330247371507840020,2097152 --field-trial-handle=2528,i,12356749628904825500,13442164534621657382,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  PID:4708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3448,i,8850218619511235848,3214426599352138273,2097152 --field-trial-handle=2528,i,12356749628904825500,13442164534621657382,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4212,i,2184697647412850695,4541114229490374526,2097152 --field-trial-handle=2528,i,12356749628904825500,13442164534621657382,262144 --variations-seed-version --mojo-platform-channel-handle=4248 /prefetch:1
  2⤵
  PID:4676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4224,i,16347402518965915425,17028925763558047618,2097152 --field-trial-handle=2528,i,12356749628904825500,13442164534621657382,262144 --variations-seed-version --mojo-platform-channel-handle=4356 /prefetch:2
  2⤵
  PID:1728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5100,i,8609342108887712407,16205781613880494041,524288 --field-trial-handle=2528,i,12356749628904825500,13442164534621657382,262144 --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:8
  2⤵
  PID:1964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,9418888092385535653,17279132226659517758,524288 --field-trial-handle=2528,i,12356749628904825500,13442164534621657382,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
  2⤵
  PID:4692
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5872,i,12211534289878392336,14721900407151829470,524288 --field-trial-handle=2528,i,12356749628904825500,13442164534621657382,262144 --variations-seed-version --mojo-platform-channel-handle=5920 /prefetch:8
  2⤵
  PID:4268
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5872,i,12211534289878392336,14721900407151829470,524288 --field-trial-handle=2528,i,12356749628904825500,13442164534621657382,262144 --variations-seed-version --mojo-platform-channel-handle=5920 /prefetch:8
  2⤵
  PID:3836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4468,i,4349929722523697064,4355046127223461768,524288 --field-trial-handle=2528,i,12356749628904825500,13442164534621657382,262144 --variations-seed-version --mojo-platform-channel-handle=4464 /prefetch:8
  2⤵
  PID:1712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4232,i,18342850927329016037,12648603378853480389,524288 --field-trial-handle=2528,i,12356749628904825500,13442164534621657382,262144 --variations-seed-version --mojo-platform-channel-handle=4392 /prefetch:8
  2⤵
  PID:4068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4984,i,13513971757153616879,6219428622487180399,524288 --field-trial-handle=2528,i,12356749628904825500,13442164534621657382,262144 --variations-seed-version --mojo-platform-channel-handle=6252 /prefetch:8
  2⤵
  PID:1328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5256,i,1475854264531299630,6214118137817638472,524288 --field-trial-handle=2528,i,12356749628904825500,13442164534621657382,262144 --variations-seed-version --mojo-platform-channel-handle=5696 /prefetch:8
  2⤵
  PID:748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4504,i,8027191201065457110,6339916623170009294,524288 --field-trial-handle=2528,i,12356749628904825500,13442164534621657382,262144 --variations-seed-version --mojo-platform-channel-handle=6224 /prefetch:8
  2⤵
  PID:800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6188,i,10009079688682189699,8513506819843790852,262144 --field-trial-handle=2528,i,12356749628904825500,13442164534621657382,262144 --variations-seed-version --mojo-platform-channel-handle=5100 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4052

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2304

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 33216cc8094343b1e673d6d0ce51864cf882b00961e3411c47b6a0cf1488a291
MD5 67f6e997d9180458e1a8c1eb8facdbb8
SHA1 ba71d9acfdbf5ad19e98c71c4ff3936488e5302e
SHA512 cc39dc134ebb79f6ba88453b88057a692c89209ccaada0ea03ca92512d41d4b9cea1179950cf85647315f4dd3a45c3553a403d01ea2891cbdb3b8df87cb294a1
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7z:fwUQC5VwBIiElEd2K57P7z
TLSH
T16AB3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c1d24032e322bda4aa4f943eeee5c1be2eee903b8fa00c6e40c3ae3aab1d6e57
MD5 cf18b86051311e5d4cb3435637b32441
SHA1 81808c10d3ea99d837ac73ca978bbac4af2b14c3
SHA512 d8f6d4f7cc0a9a322acccdf645cd0eaf7d236c68d82f2fd25c2d01e1e6ce323c3d584edd204b1c68ced260f3cf67a5be22a62de64511401735df9213129ac8f0
TLSH
T1EFD02B02FE898A6CD4921C34012E811D36CDF40049027041C0B023974C04701102CC64
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7ba460c9f5a00478279781ba3317975fb747ea7519f30b24bac67a94df77c22d
MD5 be02dc26a22f37196d8a2ed1f90604b5
SHA1 0d4f49e0f6b152530b0ff133dac678914194c470
SHA512 74fcddf19d34dc2b1dc8ec59c0f57f326e68c7c9b62fb89494b07e2bd52522d6f7662a05f91a2d0787fba43ac2646fc3214bc591a45f14862aa715bcd9206f88
TLSH
T1EBD02B02FEC98E6CD8921C34012D811D36CDF4004902B142C0B023974C05741102CC64
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 93441869834608d8bba54c500e38e4fd32e49a00c5fbe408dbfcfe251087a90c
MD5 9e75885dceacf390c13aac23f2cefd0a
SHA1 39dd6bcfb4ff8dfce2f8de022875707bf10d1d31
SHA512 35ea9134102f86e149991968a8f2bb3e8e4b98df988470fc6ca1fe84790ebc264260ce66c8df2e46f222d1fcbd219a2d26d869f33ccf698a6ba1ec6123a7a587
TLSH
T1A74175875A804C82FF94C5FDFCD41A9F3BB0996F5C8B2E0B04AAC0B699B6B10510C034
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe591582.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe591582.TMP
Size 2KB
SHA256 ad5d0614e3765d3ff228c0b4ddde24016fdf0eaec77e08ee0e3a9b479fc44a32
MD5 71d2628290f3094527125526f0261147
SHA1 b3fc40c8bcda153161ac506e02851f34752204fc
SHA512 419c74b0b0abc7a0ed02b11e348c62e535e9bd4e26056721ab6c99d5ed7949d10f36982069b978451c3b61dd82d037815e76dc76a530ecc6734e667492b5922f
TLSH
T1D54175475A804C86FF94C5FDFCD41A9F3BB0996F5C8B6E0704AAC4B599B6B10510C034
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 c3ecd97ce242b3baa69f5e8184b8b7287a2164bd3aca9dc58f5458e316ae8792
MD5 c52fc251107d0433a4a1670d3d39d04f
SHA1 99cbc88628acd316b6dbc4294f921887c50ffc9b
SHA512 938ee2ef6fbe85272c34feb88c87bbca8b1dff37cb3bc5dc9d44f0a2c678eb6aada6c3fcf051586720124c7cb45686aa67a0a86f07a5a4aab36708744a738b58
TLSH
T10C117DF3C3E585AE890116F09A24AE2BDE1D0605431C7C5985D4EF67D3E3475E10159F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 5dcabe8cd78c7dcd6f3befd7046dafcbcd2414c5f20c0a1a226c55632f81c52b
MD5 0b556742aefc914f838e19e818cc84eb
SHA1 ff94bf36c59c490a909c6bdb1568463b2fa9c2ce
SHA512 6866ba4082adef765fb110d15931373ccb66bf7c31e0fabb8bf8bde98a357b58d010e731846a5f2599b17530aa1e2d733820ee04df90cc248f9f66db76510cc7
SSDEEP 192:sxZSRkWz/fAslhd3IdpdZHW6+WNGYYBaMiiIgrJ:sxZS9z/fAs7CDHbGfH9
TLSH
T11622A7126E28B57B8CC7D209BB15BF53D6F95032A1951E98BAFCC51C05E76DD220B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 f217e44b8d81803fae4a15f7bf91d21ad8daf92fdbab2b488b9c5d841306a740
MD5 c3a164bda808dcef9d5d516de69556b4
SHA1 74072ffd1381ad32b2f92bb5e1385426e76b3524
SHA512 21ae8f487c8fdefa594b5dea3b7fe319944897466b9fad64bd7aeb4796501c98a9513f12f8f7d3c7abe1b2153da181edbea688ab30afe677a726ef8ace0f6451
SSDEEP 192:sxZSRkWz/fAsCgd3IdpHZHW6+WNGYYBEMiiIg5zJ:sxZS9z/fAs1C5HbGf1f
TLSH
T15B22B7526E6869778CC7E20DBB55BF53E6F95032A1901E88BAFCC61C05E76CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 301ad8e4a351f2afe5f0abbd4ba4c78e2b1c3fb6936f14d36623616ca83618d9
MD5 2e4cb2ede822096560e0af75b77591bb
SHA1 b99405149b6d132d256d0f3ac6a32a0fdf0cd116
SHA512 b250fe8e639a7ec7962b0f78eed3be53cc81aad2d3d8cb3d810bf9348bfbed5c27ab241ef72fba95d93c62e1729d639fa8bc4fcc00a20b82e066142357c4ca70
SSDEEP 192:sxZSRkWz/fAsCgd3IdpdZHW6+WNGYYB+MiiIg5zJ:sxZS9z/fAs1CDHbGf7f
TLSH
T13222B8516E68697B8CC7E20DBB15BF53E6F95032A1911E98BAFCC61C05E76CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 bf1b7308417e3b7ea97b8bd64187395e1a17d290db8d1550fca2dd6e87cd55af
MD5 9e25fee1a4e1ba286228f635f55ae916
SHA1 5c58ba44b1469510c221bf4d2a0c93c5d0dd4978
SHA512 2a0047b1a50716a4010bae2cfccc151404ccb16b9c169fdf7bbe2aeebec395ae35edaa4c4b6caf5e98adff81d47e1f9c75d6a18d466103fdba28523a04848bd4
SSDEEP 192:sxZSRkWz/fAsChd3IdpdZHW6+WNGYYBaMiiIg5JJ:sxZS9z/fAs8CDHbGfHJ
TLSH
T14D22B8126E38B57B8CC7D219BB15BF53D6F95032A1911E98BAFC861C05E76CD220B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 78eabe665a8de8658e8dcb74044de78e6de5ba700c9858fa060c6998e816c601
MD5 e320beeb23383461617c68fabd9bce99
SHA1 9537a34d23359db8fbc3365b5ac9547621f9fbb9
SHA512 0e33fd16a570366d8dd6b079aab105b0112715fe49d7613d409992ec83e56874adf7e9f97521d4f907b860c73d428ae79cf9b04cdb20e58d9b422c5c86acec47
SSDEEP 768:jUyYR7jWv3NpB8F1+UoAYDCx9Tuqh0VfUC9xbog/OViCLlGcvXIropz/O:jUyYR7jWv3NpBu1ja/CL8OXzo
TLSH
T12FC2F92B644DCB7E4FC01E9DDC5A6F9B3E9802C796548D4047FA944C02C77EEA12A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 e8f16526442082b8c5c51b19f0016915aefe9533d5c208661c96a0984874049e
MD5 5bca64dabe87593decc155bbffa3aa21
SHA1 1eca028d27934b2843e4df417e2a62572c0bb03b
SHA512 9b5eefa8a8edacce12d1897e7ff988f0a2c44554e3d268e17856b9e101b56b178c11f06b634ed0a4043e431eea4a8ed366fb51370b68350849d788fa9fffac14
SSDEEP 48:KgdcRtfLPwbD2jISlwK9l1Hwx1gYmnddyLmBcJ4FZDHb0bni/ISx0K9x1b0xZkYv:KwWYKHKiW+YKTiWSwwK5uZ
TLSH
T1B991C410327F420238BE29C88675CB1F125132FB7154E52BBF7C1496DA6AE586DFE8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59af22.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59af22.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 520b946c5635676c287fdaa6b1469dca658a97357de9c809fb8f61d33fe9ce35
MD5 a58d3b7894752a28a445de31bbf9bffd
SHA1 10178f9e0c317a950e6f355db69422f2c06c5c24
SHA512 c680a0b22cd991292a0c95e45576be8e36e1fd25bd0954475123571a4b4daa854dddd30d201b1b6f5f1ac149b2c9408b918f9963dada6ee998be0ba561e33e5f
SSDEEP 384:xiFiZcIVzsN58TUNTUlIl70Bick0QX5+DtF8iL7XX2dVZh6DKhHZvoN:YFQtwwga0fkD5X2dfYGHZva
TLSH
T1CEA27E339C98A97B9EF6AA45F55A32039FF45063D1C5ABC0E7DCAE1D009B59C130BD21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 2862579003042350fca5458d6d17c619267dd322a02daaf7bf4ddedb242c4285
MD5 03e7d9781d31b40904464bb2bc83e212
SHA1 956b7ace41bbc3671e78de1527c894bf17257090
SHA512 cd362ee39bd7119fa015fc014fc2ed36029d5b6378a1572b9a00f8c161ab9df57770922753d8ad9d7bb88acf677c5736a02e1f321699276556733e924d5dada9
SSDEEP 192:EONk6nnHGQmiUyf9QYcX5hQDP1JjzoriLwMcQKvU6:EONk6nC2QNX5+DtF8iLk9vU6
TLSH
T1A402EA34BCA87CAB8AF76D45B48633139FA4203BE5956BC0DAF85E1C10D765C230AD23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 9c44c471bdb9e773184850ed06a66b6f9260628956430020e87f9e04bbce05f1
MD5 e94fce624ceabf6a5c2e751170e2f361
SHA1 4f05f7cb52da4ccca5376e2b7bc8749e59a386ba
SHA512 b2cf258fb933611669cc0d5fa0c7c2be6f1588822b36a74c3603e03bd9601be5563b8c9509bb76e2ea1164f92bcc57515d31b28a60ebedb364dc9f90f944a2d9
SSDEEP 384:aZcIhsNn70Bick0QX5+DtF8iL7XR2dVZh6DKhHZvoN:YhB0fkD5R2dfYGHZva
TLSH
T145828E329CB87C775DF6B545F58632039FB45063A2C96FC0D6ECAB1D01DA6A8131BD22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 e68bbfd8cb4aedb94c3de455d827bc79e30f2157bf2449067012bbc990a54b8c
MD5 2c16ce4b3c91670b253eafee86a3e878
SHA1 59abff996092f2139f12720f57ae0ce204ed532b
SHA512 669d65e69b318cb7fa8a1fbc3c7cfd21ca2c43f90bbf1c0af7021b07f596b5e932ed05eb42b62b285120898fd137e577172c5bdaf32b5263df161b3608a683b4
SSDEEP 192:EONzW6nnHWQmiUyY9UYcX5hQDP1JjzoriL7XNeNg3lq5zJU6:EONK6nSfUNX5+DtF8iL7XX2dU6
TLSH
T1C4120C35A9A8BC6B5EE27995B08731139FA51127D6887FC0D6EC6E1C01DF66C130AC23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 1e1b33e516805fceee4bddc7d15f258b6fd1d52138164fe4c5c848ee5daa6c9e
MD5 6196cf8378503996979616d384244eb6
SHA1 3f0a7c35b3d8396d4f51fc8e4299564d54984988
SHA512 75a1e99447f210f2b66a1d88a69dc39080162ad146805bb61ca1e3042f5a37f0434d44462b8acc1184fd8b84a549863d7399a8f6f771138e978870220b5ff443
SSDEEP 384:vZcIhsNn60Bick0QX5+DtF8iL7XR2dVZh6DKhHZvoN:nhK0fkD5R2dfYGHZva
TLSH
T187828E329CB87C775DF6B545F58732035FB85063A2C96BC0D6ECAB1D01DA6A8131BD22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

26075f75-f62c-4557-806f-9c16ed723c70.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\26075f75-f62c-4557-806f-9c16ed723c70.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 44d3477f404377c42938f670ac390bf4ac43a4d5bbb5622f074313c17075244f
MD5 133fd8b70f72fde7671d8914a515ab2d
SHA1 8c15cad508a0532de09db27782d92129ef0cca32
SHA512 41397148cc20e7c429f06cb7c9c94809bfe4646e38f3ffb4cc772010baf0a729c9d909bbf72e7bbffbdc79316923430b52ea4759c0bce0d03406ed6679d6fb42
TLSH
T11A41FC58BAEA1108B3B76F5B6FF2A82D447ABC772E4AE45D10150E4F0667B00C961F37
MD5 SHA1 SHA512 TLSH

Submit Download