5d6004c82e2d7244aad68bb00365d03353aa2ac2d87ec93b28b59b029543fde2

Analysis

max time kernel
148s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/09/2026, 17:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
attachment20260930-429995-50tmjh.htm
Size 1KB
Sample260930-v28mdaea95
SHA256 5d6004c82e2d7244aad68bb00365d03353aa2ac2d87ec93b28b59b029543fde2
MD5 3a134f40128e3382caf68c7037564ce6
SHA1 d53f727b1b15ed1d2286e65613578331cb2a01f7
SHA512 7dc021062e3dd4f2601fa8291c6c7370bcb1b579bc09aac01ed304c2dfe255c0a67248a2e7b90940563d9c914749f0488d85f55208a5f48bf413f651b735d21e
TLSH
T1FD11CCDB03E23DA45493333764434B8EDF380175E7724F753475211A138A29AD4239F4
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3432	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-240542094-4193773837-3211495583-1000\{C60C2E48-E2AC-44EE-9F3D-DF279A4C9801}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2864	msedge.exe
2864	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe
4740	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 4740 wrote to memory of 2168	4740	msedge.exe	86
PID 4740 wrote to memory of 3432	4740	msedge.exe	87
PID 4740 wrote to memory of 3772	4740	msedge.exe	88
PID 4740 wrote to memory of 3772	4740	msedge.exe	88
PID 4740 wrote to memory of 3772	4740	msedge.exe	88
PID 4740 wrote to memory of 4204	4740	msedge.exe	89
PID 4740 wrote to memory of 4204	4740	msedge.exe	89
PID 4740 wrote to memory of 1992	4740	msedge.exe	92
PID 4740 wrote to memory of 456	4740	msedge.exe	91
PID 4740 wrote to memory of 1992	4740	msedge.exe	92
PID 4740 wrote to memory of 1992	4740	msedge.exe	92
PID 4740 wrote to memory of 456	4740	msedge.exe	91
PID 4740 wrote to memory of 456	4740	msedge.exe	91
PID 4740 wrote to memory of 3308	4740	msedge.exe	93
PID 4740 wrote to memory of 3308	4740	msedge.exe	93
PID 4740 wrote to memory of 3308	4740	msedge.exe	93
PID 4740 wrote to memory of 2216	4740	msedge.exe	94
PID 4740 wrote to memory of 2216	4740	msedge.exe	94
PID 4740 wrote to memory of 2216	4740	msedge.exe	94
PID 4740 wrote to memory of 920	4740	msedge.exe	102
PID 4740 wrote to memory of 920	4740	msedge.exe	102
PID 4740 wrote to memory of 4464	4740	msedge.exe	103
PID 4740 wrote to memory of 4464	4740	msedge.exe	103
PID 4740 wrote to memory of 4492	4740	msedge.exe	105
PID 4740 wrote to memory of 552	4740	msedge.exe	114
PID 4740 wrote to memory of 1384	4740	msedge.exe	115
PID 4740 wrote to memory of 4880	4740	msedge.exe	116
PID 4740 wrote to memory of 2116	4740	msedge.exe	119
PID 4740 wrote to memory of 2116	4740	msedge.exe	119
PID 4740 wrote to memory of 4464	4740	msedge.exe	124
PID 4740 wrote to memory of 4464	4740	msedge.exe	124
PID 4740 wrote to memory of 2864	4740	msedge.exe	126

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\attachment20260930-429995-50tmjh.htm
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x218,0x260,0x7ffa3250c188,0x7ffa3250c194,0x7ffa3250c1a0
  2⤵
  PID:2168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1856,i,16170951662883102773,12138193640769069463,524288 --field-trial-handle=2264,i,12822072904252802796,840475827531334085,262144 --variations-seed-version --mojo-platform-channel-handle=2296 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1688,i,14098877469698786316,8358203354694301164,262144 --field-trial-handle=2264,i,12822072904252802796,840475827531334085,262144 --variations-seed-version --mojo-platform-channel-handle=2260 /prefetch:2
  2⤵
  PID:3772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2480,i,15179557759572004121,12593739180507049437,524288 --field-trial-handle=2264,i,12822072904252802796,840475827531334085,262144 --variations-seed-version --mojo-platform-channel-handle=2660 /prefetch:8
  2⤵
  PID:4204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3440,i,18119626269277854001,2383861982515615221,2097152 --field-trial-handle=2264,i,12822072904252802796,840475827531334085,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3444,i,5545691545641594930,2532062901780169700,2097152 --field-trial-handle=2264,i,12822072904252802796,840475827531334085,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:1992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4156,i,18189547882022105858,7515124782745272570,2097152 --field-trial-handle=2264,i,12822072904252802796,840475827531334085,262144 --variations-seed-version --mojo-platform-channel-handle=4160 /prefetch:1
  2⤵
  PID:3308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4220,i,9543694176320738659,3127067093348204293,2097152 --field-trial-handle=2264,i,12822072904252802796,840475827531334085,262144 --variations-seed-version --mojo-platform-channel-handle=4224 /prefetch:2
  2⤵
  PID:2216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,14181703669032853343,13908578783092255408,524288 --field-trial-handle=2264,i,12822072904252802796,840475827531334085,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:8
  2⤵
  PID:920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,8964397465762599095,11514865184986342850,524288 --field-trial-handle=2264,i,12822072904252802796,840475827531334085,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:8
  2⤵
  PID:4464
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,2338734002253142817,10659141237614322055,524288 --field-trial-handle=2264,i,12822072904252802796,840475827531334085,262144 --variations-seed-version --mojo-platform-channel-handle=5920 /prefetch:8
  2⤵
  PID:4236
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,2338734002253142817,10659141237614322055,524288 --field-trial-handle=2264,i,12822072904252802796,840475827531334085,262144 --variations-seed-version --mojo-platform-channel-handle=5920 /prefetch:8
  2⤵
  PID:4492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=752,i,3379665427793177884,15578849313156863814,524288 --field-trial-handle=2264,i,12822072904252802796,840475827531334085,262144 --variations-seed-version --mojo-platform-channel-handle=4268 /prefetch:8
  2⤵
  PID:552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=748,i,10046132804706315082,14508543134526972677,524288 --field-trial-handle=2264,i,12822072904252802796,840475827531334085,262144 --variations-seed-version --mojo-platform-channel-handle=3408 /prefetch:8
  2⤵
  PID:1384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5088,i,863917385004712516,17274041126633621551,524288 --field-trial-handle=2264,i,12822072904252802796,840475827531334085,262144 --variations-seed-version --mojo-platform-channel-handle=5976 /prefetch:8
  2⤵
  PID:4880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5424,i,16754619579011422452,10918584858310841592,524288 --field-trial-handle=2264,i,12822072904252802796,840475827531334085,262144 --variations-seed-version --mojo-platform-channel-handle=2168 /prefetch:8
  2⤵
  PID:2116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4980,i,9615100553770420232,12624343070959512869,524288 --field-trial-handle=2264,i,12822072904252802796,840475827531334085,262144 --variations-seed-version --mojo-platform-channel-handle=5812 /prefetch:8
  2⤵
  PID:4464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5152,i,5697356397415456910,16901860112236044163,262144 --field-trial-handle=2264,i,12822072904252802796,840475827531334085,262144 --variations-seed-version --mojo-platform-channel-handle=6168 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2864

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3564

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

8bac167f-5893-433b-91ef-ccf298d3aefb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\8bac167f-5893-433b-91ef-ccf298d3aefb.tmp
Size 8KB
SHA256 a71dd28c2aced93528f6c7634a94c0bbbb82ce080e9b148f877862e364a0245a
MD5 930585b2a63b6639cbe0ba1814e19e30
SHA1 1660bd8ab0e1441c1bed4842e5ccb10ea2a10ddc
SHA512 4b48e3c982a1cef0f9dcce652fc0c4e7cbb19b1d866880bb96a358c4cc596136f3c35f34e2d804968f2ee33d70c24f2ef9aef9f27ab7ea67beada2bcace3dd59
SSDEEP 192:1ONq6wlD7QmiUyf4Y4X58gZTjzor2cX77R+2rzxveqqzSU6:1ONq6ktBY4X58ED8pXR+2/AGU6
TLSH
T15C121935E4A8BC2B5DE2A445F08B31139FA9512BDB896F90D6FC1A2C01DF66C534BD13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 98f220c14bd3d385f1dd482d8b868745c75685e4a2573b4336f235cf3bdce6c1
MD5 6ce50f5d79ab86d6489a63e08ead9ec4
SHA1 d52fb22446c08230d0edc8374b1dcaed1af585ea
SHA512 fd66aaada3f82de40a9236f167ecb23bc285a49f72374f567e078118a8bdb229e4fadc26c639553cfacaa7d7ba44e0419f17b4bb4a9a8999b51bdd037a28783a
TLSH
T189D02BF4E69455E4D441283C11130304314CC4001C033010C46141D21D8D7C2009A068
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 02cf6c2debe9573f3713554c359339f3deb6fa4abd8c14fc6d2577e42ce2d830
MD5 eec56aca3717cde66f2f4d578de1d4d9
SHA1 965ee07ac77588f49d8c4fdf547b37349747a74f
SHA512 90d05594a407bba8ca844c3df6d127aec4c8ecb87f3d2106da447965d8445c3863cdc5a376c90818be642f5dbacedbbb845f24cc640f422e049733d24470df99
TLSH
T163D02BF4A6D459E4D841283C11130304314CC4001C037111C46141D20D8E7C2009A068
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 538c2b7a886914abab20287ccda0c84cc823baddcd8370ab12a069a664d66f87
MD5 1ee41a9d51c4d08edd78dc27b3c6065a
SHA1 026e3650b7611a12263dbc71b012071b56011770
SHA512 27b8215ffa3d9b5c7a54b6b6fa8e74ec5c8ffa0678ea620ca8b86af56f3d23d54f70fd7150f7a7e0a730a3bbadd91fa4edde6ac0016ff91c92b72d433d53031d
TLSH
T1F461A64516F08159F7987032D7D803B7BB307CB23AB79E31A2A8F67898663797128083
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe590e8d.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe590e8d.TMP
Size 3KB
SHA256 81380f2d11fff3132e417a51771c38fc4f71b57e4e89ae0e062c264d728dd28e
MD5 5c84890c826e12513c84039683767028
SHA1 a8dc4ee042de4f5db8def7680dbe737834989988
SHA512 2a187740d93f0ee1987cce3c38be0a422ca31f5563dd6e148cf8bbda661bdddae658ea4f0d85df67425bd231b5152f3ee919c81b8991961ed61b77a376079ca4
TLSH
T17461974556F08159F7987072D7DC07B7B7307CB23AB79E32A1A8F57898663757128083
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 9cf31911b7c6630d221c171877b5e197bfb21f160ae1bc6becefeb47f7d1dd1c
MD5 b61feb58df08ef8aebe5f9e837c01715
SHA1 4ae070cba55155df7a06d691acbd75bbc00c16c5
SHA512 18951dfe4e333fe8e860fff7071c3a9e42011cedb466d0b941420647a145f7219e5c12231c285d2d28f7f562c42c9b7fd129eaaf2c6dee6c9d72cea456b9c837
TLSH
T132117DF3C3D585AE890156F05A24AE1BCE1D0616421C7D1999E4EF2793E3475D10299F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 b4b27f34f4c6c4ce763017342a076880e380b0031207f3edc6e7cb5fdf3cf7c5
MD5 9c43ac7f03228e68e1866bb529b0a215
SHA1 c2976ea94a0b482372eb48c29060fd0bed674f10
SHA512 49f8b1da1aa06fd76d7234ef21161c4add1c846b906e54f32b7dfb07d23d90a785364ba52a8c091bdba00426bf2584218c5a84a15833614eecfbe0cac3761e71
SSDEEP 192:sxZBR0Wr/fDsB6IdpHdHW6+WNGYrhWOIg5gJ:sxZB9r/fDsBT9HbGW+
TLSH
T13D22C7526E28A97B8CC7E24DBB55BF53E6F9503251D41E48ABFC861C05E7ACD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 6ab4ce074aef822d1e4fec30e983ba1a6fec80bc8a6fd3601dba75cf8383300b
MD5 052f9562980df80d88629ac6c226bd48
SHA1 68e3011354b8071445d543edb2b9894bffd03a13
SHA512 750ef537d093e1d198be5d32d73cb83f1f19bd8d4cf50a4cf3ff26f52a197a9cd90542637550165809208639065ebb4d3ca083b50834d52b5f1be7b3cc844007
SSDEEP 192:sxZBR0Wr/fDsN6IdpddHW6+WNGYrbWOIgrJ:sxZB9r/fDsNT/HbG69
TLSH
T17E12B7526E28A97B8CC7D24DBB19BF53D6F9503251D41E48EAFC861C05E7ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 f1b5923f23b0bc9013431721031a740cd94739256608d265fb589ca1b3664f75
MD5 34d1ba4e04a018e5a6dac87e2911dff5
SHA1 b84331393d4149774abbd3f3986783241b9a4403
SHA512 694396ece68610b7a2d0e3b7b3bea82d3e4148a3067c60dfe08a8ab54f0fb3627275c73eb6fa5c77922d835bb9d16d4e31912900a2f8a78b68500455c5027706
SSDEEP 192:sxZBR0Wr/fDsB6IdpddHW6+WNGYrwWOIg5gJ:sxZB9r/fDsBT/HbGV+
TLSH
T1FE22C7126E28A97B8CC7E20DBB55BF53E6F9503251D51E48E6FC861C05E7ACD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 127afd9cb6116ef6b0b18e901533822d83576f418f85d19cc93443c1f232b707
MD5 5138be1f31915941386ea4fa9beccc9d
SHA1 f2565cf704e650bc649242933d24df96a7c2bf46
SHA512 4f36cb61264028f4a97f721614bb2f33308b474b9178529ecd7936113db00b6b62c16f11601e48607bb61a9d8d9f5a04eb7031e1075d6e1c5d36d97977e559b3
SSDEEP 192:sxZBR0Wr/fDsQ6IdpddHW6+WNGYrbWOIg5KJ:sxZB9r/fDsQT/HbG6U
TLSH
T1DE22A6526E28A97B8CC7D209BB59BF53D6F9503251D41E48EAFC862C05E7ACD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 820712231f4a72d8b58aff3e1b634f36ad290704857ff08a053725ccce0130c6
MD5 b9263383e5c4cc0317af560221cf3b80
SHA1 b29508807586adf2640a3be430c3ff59ab40d876
SHA512 845e55d5415259ed863bdfdac3c7b7b94d4290f8c7a4a7bc20ac8e843902ac7f18455c062c9f729fe74e8c0d4b1c4a1e13435db27622baa12aad360f506e4d6a
SSDEEP 768:P0y4J/DWvbtBh8F1+UoAYDCx9Tuqh0VfUC9xbog/OVCiLlc2TbGroRGJ:P0y4J/DWvbtBhu1jajiLm0b9EJ
TLSH
T1E1C20A3B684CCA7E4FC00A9DED5E6F973E9802C79A948D4047FA954C02C77EA51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 df796b1b5be7669b66a1f8f6e84f2696d1da25f5a355ca3a39762805efeae8f5
MD5 89122c2683b3bebd0f9d27a686880002
SHA1 6179bb937d850a4292936061a03e1b9b59d5ba39
SHA512 b5d5517c1e8bf929c7b6133a74eee03725421db0a6cbd9730131658e67c30e5be9cc03d77ec02f91b2e7fd0ff52065d2e05b140cee7f8e7b81795fcd628d5b93
SSDEEP 48:KIDI1Ks04jyLUjiu8+SbbiRqISGbK9i1wbxULY5ayoyLaFoUaYoZbED0ISMZK9wk:KIDCKs0+eLGKYk6WViK2MV
TLSH
T16F91ED9830BF124138BD258881B5CB2B525132B7755CEA7AFFBC50615E6BE081DFE8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c2d99440-eb02-4771-951b-ff98ba31fabf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\c2d99440-eb02-4771-951b-ff98ba31fabf.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 8ee7ea4705410888b168efe243660761c68c924893011220ed262a87a9c84de9
MD5 825de860363c64b72e20cd9b0fcd174f
SHA1 3e77a0cf506b288b0c3c9cc7a0453e235b60e606
SHA512 d09f9c1c6cfd608288e0d12fd3569c51c2eaa502a990589404ee6768002264649c8a4ee7da21ef7eee8256dda0079dcf113e35db943c78f1bb55499c160fa05e
SSDEEP 384:GZcIhsN3awstNZRLNuHX58ED8pXR+2/VGVZh6DKhHVo/:UhjtNHGa5Rl9GfYGHV0
TLSH
T11D828E329878AC765DF6E145F04736038FF89157E3896F90D6FCAB2D009A6A81317E27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 e64b4dc30d4898f50e2a4bb46a95eacaf8c679f62fd11564666a146b780f2f24
MD5 aac9776441c791c061b0da7bc7bafae4
SHA1 4ef2ca667bcdaec33685b870014f1582503dcac8
SHA512 e8ced08cd1871f163393334303f99fd80d51989141f86565ce458259cf429641f9a9afa1bd1a99c6594bf3c033bb6bf62ecbd1fbdb8f7152def908fe5d35e862
SSDEEP 192:1ONV6wlDgQmiUy44W4X58gZTjzor22Dl0DU6:1ONV6kg8W4X58ED8xaU6
TLSH
T13102EA34B9687C6B8EF36D09F44636139FE8112BEA556F44CAEC1A2D00DB65C1347923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 9568a380b2b23019635bbdb4823d8205e5217bdb9ca650d2ced94c3fe1b0434a
MD5 b5f4ef44e488544ff5fa9b9ce190a6c8
SHA1 d7e58583cc428564734bd483b3de4d7c0f411498
SHA512 114b62c1ce76be861da4c78edb99a36bd621f1912e9f0673d116a748acfaa936ca9abb0c0469e87c5cc0bca0efd79e085720c0701e307972bedd11cd87089b44
SSDEEP 384:biFiZcIbzsNJ8TUNTUlIlrwstNZRLNuHX58ED8pXR+2/EGVZh6DKhHVo/:2FQPgwgDtNHGa5RlMGfYGHV0
TLSH
T1FFA28E3398A8DD7BADF6AA85F44A32038FF45167D689AF90D3EC9E1D009B19C1307D12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 90dc9afb541395c41e61c3694f08fe0f95d4ec8853d2a65caf7097e8fea7f261
MD5 9bf2dba85bf871cde481c4517c841b23
SHA1 929a0ee08411dbc8482f68a2f01d34669520c2a1
SHA512 68f882a99597626869c3c62ee5fcacc34e485cf2bdd8417a10293c71a5877064822765413289edc31c596c31e53a245874d8b1077b48db86eaae15f22bd6d3cd
SSDEEP 384:gZcIhsN3rwstNZRLNuHX58ED8pXR+2/VGVZh6DKhHVo/:eh6tNHGa5Rl9GfYGHV0
TLSH
T1A4828D329878AC765DF6E145F04636039FF89117E38D6F90D6FCAB2D009A6A81317E27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8cb95f3d-c1a6-4fc4-b12a-d77972a5b1f1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\8cb95f3d-c1a6-4fc4-b12a-d77972a5b1f1.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 a50c088855c9b53c61273d899a5d67642ef4d67757953bdea2e75eceef53104b
MD5 561e1f4eec202ebc1e63dd98c405d76b
SHA1 e30af3ab8c54ae6aa739926ce1a27eb977b0f6ed
SHA512 9d1c1f08e702fbe1ed3d77ef0fda4b5d72599359a0b224f7260cab50d3df9ece514365385231f1873481696e27a466afb22767015893503575fa2454010cd955
TLSH
T14C414D59AAF91148B3B7BE5A6BF6A86D487FB9732F06D45D00110E4E4A62F40CC72733
MD5 SHA1 SHA512 TLSH

Submit Download