af6f2b66f13d44d2ec1a96fd2846b3339c52234b98d44fc0fc8d72eaf817bf20

Analysis

max time kernel
148s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
01/10/2026, 10:38

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
attachment20261001-527357-jdj29s.html
Size 214KB
Sample261001-mpmkdaad95
SHA256 af6f2b66f13d44d2ec1a96fd2846b3339c52234b98d44fc0fc8d72eaf817bf20
MD5 ca2c96be8ad4c1b27afc858a639eb1f4
SHA1 34bcbb32e3946883cf26447531ab98af52bcab62
SHA512 3437202655e3eb3621e7f896424eace53f0c5f24acf844be2b9d563d88009e6cf5a37bcddba9c2cbaba921fa3f1b6b8b256eb36e35e548489e0a5a04be7cb99c
SSDEEP 3072:opm0WkXwgEweVFmk0RHyEoCmetxWnm6t6b9U9QfyA7cxGTdTbLayQsH:oglIYWRHyrCunm6t6i947gGTx3pQ4
TLSH
T13024023459202B0E3B9246B4B26575A40EF90CB3E95F96227BC801F5EFED1F29049CE7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4300	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-895009113-1202185046-1686627690-1000\{8756ACB9-D119-494E-999B-FD29760241B6}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5020	msedge.exe
5020	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 452 wrote to memory of 4308	452	msedge.exe	87
PID 452 wrote to memory of 4300	452	msedge.exe	88
PID 452 wrote to memory of 4344	452	msedge.exe	89
PID 452 wrote to memory of 4344	452	msedge.exe	89
PID 452 wrote to memory of 4344	452	msedge.exe	89
PID 452 wrote to memory of 408	452	msedge.exe	91
PID 452 wrote to memory of 408	452	msedge.exe	91
PID 452 wrote to memory of 1200	452	msedge.exe	93
PID 452 wrote to memory of 996	452	msedge.exe	94
PID 452 wrote to memory of 1200	452	msedge.exe	93
PID 452 wrote to memory of 1200	452	msedge.exe	93
PID 452 wrote to memory of 996	452	msedge.exe	94
PID 452 wrote to memory of 996	452	msedge.exe	94
PID 452 wrote to memory of 2360	452	msedge.exe	95
PID 452 wrote to memory of 2360	452	msedge.exe	95
PID 452 wrote to memory of 2360	452	msedge.exe	95
PID 452 wrote to memory of 864	452	msedge.exe	96
PID 452 wrote to memory of 864	452	msedge.exe	96
PID 452 wrote to memory of 864	452	msedge.exe	96
PID 452 wrote to memory of 3944	452	msedge.exe	99
PID 452 wrote to memory of 3808	452	msedge.exe	100
PID 452 wrote to memory of 3944	452	msedge.exe	99
PID 452 wrote to memory of 3808	452	msedge.exe	100
PID 452 wrote to memory of 4708	452	msedge.exe	102
PID 452 wrote to memory of 4376	452	msedge.exe	114
PID 452 wrote to memory of 2824	452	msedge.exe	115
PID 452 wrote to memory of 4824	452	msedge.exe	116
PID 452 wrote to memory of 5100	452	msedge.exe	124
PID 452 wrote to memory of 5100	452	msedge.exe	124
PID 452 wrote to memory of 5020	452	msedge.exe	126

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\attachment20261001-527357-jdj29s.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x264,0x7ff96c5bc188,0x7ff96c5bc194,0x7ff96c5bc1a0
  2⤵
  PID:4308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1828,i,1448074732473598202,17269396061477605585,524288 --field-trial-handle=2368,i,3993822714534572789,1467435266456715144,262144 --variations-seed-version --mojo-platform-channel-handle=2396 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1652,i,17771540680241794619,8043028965000254299,262144 --field-trial-handle=2368,i,3993822714534572789,1467435266456715144,262144 --variations-seed-version --mojo-platform-channel-handle=2364 /prefetch:2
  2⤵
  PID:4344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2644,i,6880554788323430715,7261848114488812884,524288 --field-trial-handle=2368,i,3993822714534572789,1467435266456715144,262144 --variations-seed-version --mojo-platform-channel-handle=2780 /prefetch:8
  2⤵
  PID:408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3452,i,3864046149308400923,11955737618732416792,2097152 --field-trial-handle=2368,i,3993822714534572789,1467435266456715144,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:1
  2⤵
  PID:1200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3456,i,7946280792402996733,10873794734855540578,2097152 --field-trial-handle=2368,i,3993822714534572789,1467435266456715144,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4240,i,11217866472908863576,16304358496037146875,2097152 --field-trial-handle=2368,i,3993822714534572789,1467435266456715144,262144 --variations-seed-version --mojo-platform-channel-handle=4244 /prefetch:1
  2⤵
  PID:2360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4296,i,16745629835179283049,9067883661466230709,2097152 --field-trial-handle=2368,i,3993822714534572789,1467435266456715144,262144 --variations-seed-version --mojo-platform-channel-handle=4308 /prefetch:2
  2⤵
  PID:864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5196,i,2406895191007872312,17606830143069492319,524288 --field-trial-handle=2368,i,3993822714534572789,1467435266456715144,262144 --variations-seed-version --mojo-platform-channel-handle=3648 /prefetch:8
  2⤵
  PID:3944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5200,i,10240154310844685072,10998608856470994842,524288 --field-trial-handle=2368,i,3993822714534572789,1467435266456715144,262144 --variations-seed-version --mojo-platform-channel-handle=5236 /prefetch:8
  2⤵
  PID:3808
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5876,i,8105569059299862503,5682326637435710499,524288 --field-trial-handle=2368,i,3993822714534572789,1467435266456715144,262144 --variations-seed-version --mojo-platform-channel-handle=5892 /prefetch:8
  2⤵
  PID:2972
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5876,i,8105569059299862503,5682326637435710499,524288 --field-trial-handle=2368,i,3993822714534572789,1467435266456715144,262144 --variations-seed-version --mojo-platform-channel-handle=5892 /prefetch:8
  2⤵
  PID:4708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4412,i,6809548151447772098,1467271580363984642,524288 --field-trial-handle=2368,i,3993822714534572789,1467435266456715144,262144 --variations-seed-version --mojo-platform-channel-handle=2652 /prefetch:8
  2⤵
  PID:4376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4496,i,8540663049044522053,1131530370830182408,524288 --field-trial-handle=2368,i,3993822714534572789,1467435266456715144,262144 --variations-seed-version --mojo-platform-channel-handle=4484 /prefetch:8
  2⤵
  PID:2824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4480,i,13645898125135762015,6935236779545667595,524288 --field-trial-handle=2368,i,3993822714534572789,1467435266456715144,262144 --variations-seed-version --mojo-platform-channel-handle=6396 /prefetch:8
  2⤵
  PID:4824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5460,i,15130481383212416989,8083093984214433679,524288 --field-trial-handle=2368,i,3993822714534572789,1467435266456715144,262144 --variations-seed-version --mojo-platform-channel-handle=5436 /prefetch:8
  2⤵
  PID:5100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5224,i,5922195688036995490,11941570813478430060,262144 --field-trial-handle=2368,i,3993822714534572789,1467435266456715144,262144 --variations-seed-version --mojo-platform-channel-handle=6124 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5020

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4840

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 21916bd4ff5d8352c56dee6a81be174493beaf79015a1cd73bf87d3641937777
MD5 3c64d7d928426c0990a1d275b3d712c7
SHA1 ee73164dabf406188415054f8478e3e0a735499b
SHA512 8362ae4d667e7f8e36014d289a1d224e820d3aa7afde9c1a3cbb3f608d045c8478266170b54db3988b0ce2ef11cec1d52e8dc8464fb773f77e3f48575752d729
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7q:fwUQC5VwBIiElEd2K57P7q
TLSH
T15EB3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 04d384e503ac7726cb96f043e69cad98489c2eafc2665c80e33cb016d873b6e5
MD5 c5a323aac1462c81d1642ed0f7b1b5a2
SHA1 c07fc90a5c5d549ecbf33b4bc8cb6cb9ca204f88
SHA512 222a743460a5faf30304aa1d67f0e10e2db3eb1a339b1bbf5ca524b4a2fcaa1361289e4358333bae502b5bb38029cddb6902b4cd64293b0ad42b474cee75f892
TLSH
T1B2D02BA4A3D839C9E112183602214366348D40A15057E010CCA0518907C91538281460
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0e249170bbcfe30a2a7f421f287b6f81c1c4b71b07e845351f15d008b660ff09
MD5 81d112607d82fd2070ddb7aeeb981683
SHA1 14d14f6413d240f3629ae2eba8f5d1139dc415d0
SHA512 983c5ff8fde2dccf9dc8cf1c11f0008f124b59c2922b2ae470dc2c7595c82289abfd0b4819d73f1bf062a77e62e9ed53318e5f62978a688554f46d0a6c41cbfb
TLSH
T1CFD02BA463D83DC9E512183602204366348D40A15057E111CCA0518907CA1938281460
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 a6b1a127c7617a4720afea363efe345e07d5aed033dfa170bfac89f3c8e8d142
MD5 d4b9d6a66ec524d5557f8f909ed5df96
SHA1 09e51d1d54d6874c5337b479ec8e9e1b5016a4fa
SHA512 5f30868177a2b6f9f3c517eac042803eeb8ba92c04a921af5d33aeefeb4c28415af3a1223dfea8d3d296079a9eec3ef7de4f5eac140f9fc3eeca2e9bec2cf4bb
TLSH
T1CE5193440EAB71A0DB884634D2DF35C7B6F069BC31A3AE651797D8786BCEB47ACC4054
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58d973.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58d973.TMP
Size 3KB
SHA256 6d26d63f972191fa0f19af1324c7bf5b91ba769a802da0b89ade7e5dcc20d363
MD5 4ab0bd37f8ceb3ec3304049a64eb375d
SHA1 d6b756e6e8dbd23971df6624f31abe5ee588601b
SHA512 6846aa99d35a37cec7879d66dda7b5edcc75c427c4045dba03d958e3aaf318d1f967ac4e3a94f985652d51710de38a74cbdf328485b76ea4f9b03002783b7e58
TLSH
T12E5182440E9B71A0DB884634D2EF3187B6F069BC31A3AE651797C8782BCEB47ACC4050
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 2475aca6201a7abbe199a34dbbdc3513f1e1d881bbac81abead2461e77746890
MD5 6fff35a89b7462b6d0d558ddfe57ec4f
SHA1 8dfbed2d83366c2cd5ff11e6be5f0de84d7521d5
SHA512 e7a2585a3cd49a24ec2136bfd92f7cc6b489c9ac51e074e4ac2b676807bbb771961a96696acd895e17db1fcd41b5c2550c7e6b8023ae6bd8ba1ff6bf92bfe162
TLSH
T1CE2198F3C3D5856E891516F0AB28AE2BDE2D061582283C19D9D4EF6BC7E3471E10265B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 942c97c0b352ac302c22f390e94db907f48ebbafc2e284f68d07ff00b4da897c
MD5 13c2cde853f0761926fb761bb1c26ce5
SHA1 83b0de37d6f4813901d7cf2b61c2cb878efff72d
SHA512 d4add3e0d74e550cde1934bd56dc88dcb31ffee93be94e7585f8c71553804a93fa5444a18bd65c22d95e0ba87ebda160b5b013f13a93168945d04806505a0ed8
SSDEEP 192:sxZaRxWc/fjstIIdpdmHW6+WNGY36aYbIgrJ:sxZaKc/fjst5AHbGXh9
TLSH
T19A12A6526E28A97B8CC7E209FB65BF13E6FA503251D41E58FAFC861C05E66DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 ce978db15ae1b76630e5da5805fd327ee8b75da1d5cb528a81070614e2edcfa7
MD5 2503640cadae6ba3ef65987a20cf9a38
SHA1 3d665af941b6a74d14a6c633ad398b83f9fd7f66
SHA512 c47548deaa3e3b69684df9b489a3075bae4dafd2e606441181ae61c747c33537352fb87a7cde5be42a05dc7527cb7c9d30ebd95e6a605d4c54c89679d5105cc2
SSDEEP 192:sxZaRxWc/fjs9IIdpHmHW6+WNGY36cYbIg5cJ:sxZaKc/fjs95GHbGXPu
TLSH
T17222A7526E28A97B8CC7E209FB55BF13E6FA503251951E48FAFC861C05E76DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 e1bfca46fd15c0361ab925411994bd61a10ae45c082250ba0a810e2db0e539b1
MD5 accbd1616a041bdf41adcf3865c98cac
SHA1 54eda8880d2a5fa676ee7bba20da61c67f77041c
SHA512 21485304406bfa6a197ed0083b002e31928011c09a053b54695f82a7e550a685908e7c3424d25da06805b165f103c2bc487fe2c4bd70f0ab77d94d10c320e5a1
SSDEEP 192:sxZaRxWc/fjs9IIdpdmHW6+WNGY36bYbIg5cJ:sxZaKc/fjs95AHbGX6u
TLSH
T16E22B7526E28A97B8CC7E209FB55BF13E6FA503251951E48FAFC861C05E76CD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 a89eb5910ba7dcc2e92ecbd5f397f56348fa893e6084265f8e5d5ccd887ae39d
MD5 c7ea4fa59467f30025523148fb3fdcc4
SHA1 1c7abe86339405c5194d23927c5834c3560b88c8
SHA512 b444ec9e2869b62da449fade529e2d1f0355babaed942f74e09e4c044deb43bfa2a7fb71cfd92fe1b804a40c105bfbeb7a73b7774952710e4000f82744f9b49c
SSDEEP 192:sxZaRxWc/fjsXIIdpdmHW6+WNGY36aYbIg52J:sxZaKc/fjsX5AHbGXhE
TLSH
T13722B6526E28A97B8CCBD209FB65BF13E6FA503251D41E58FAFC861C05E66DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 6293afb4e48c9c8947c673a46be74c5b71da7a95ba908da8d7ad0d10e8c328e5
MD5 2b3ca917c3f14dfeafc2b97bd91cec1a
SHA1 861ca309e5ab8776df4fb703ed4d1fa9d83e0a83
SHA512 4916601ed18817d59c8cf7b43c8af00558c97e735ba392dee0e0be57bfd07af395b5d1cfac7d467847412f0691bc68626797360e801f41e2251fbfd239979212
SSDEEP 768:P/Klm7QWvUYe08F1+UoAYDCx9Tuqh0VfUC9xbog/OVh/LlpPs/0rov5:P/Klm7QWvUYe0u1ja8/L/E/fv5
TLSH
T148C2FA3B640CCB7E4FC05A9DDC5A6F976EA802C7A6588D4047FA984C02C77EA512A4DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 0d4e5f2f8e576e945c8b25519476228a3565e48a8a9507bca33596867f87291b
MD5 9ce61b421307b08305164ac938a90898
SHA1 200d8d5fb1edd917da062bc50e729925c8467195
SHA512 e6acda588a5fc12a8bfde6311d909982966c827fd8a99008e34e4b44c4bc00571c1e4f6b454730c0ebbd7ef2f35ef24b9d7677493617e36eb0a72e9502d34787
SSDEEP 96:KkOoKvaqBKD+6YkQkgkZPeykKmBewkia65Ya5ulSK+Y9RsVxrL1:uHJVlSRsVxrL1
TLSH
T19691C11130BB024038BE39AC9574976A564235B3301AE52BBFBC40A55E2FE484FFE8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe597286.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe597286.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 35260cdef9d5952118ed8b77aa35b99fc5f2cf3a9472bddbf274602369c1398d
MD5 0c32b0cd0d90f320e25802f01a9ab67f
SHA1 9b01b7d1f5d7a2608a35a67da10f00fa8d9afc35
SHA512 956a89c4a3abb6f40fdc883bda4e489d0fbf5b08972e13eca6a4f4b9a5c05f1cb6a25ea2ba35617368e681c25b7a3ca811d7232528a02c757578f9a865aca3a8
SSDEEP 384:+ZcIhsNVQcezbZnZh//0ZbQwJBVZh6DKhHG/Ton:8h5X/sZzJBfYGHKc
TLSH
T1D3828D32AC78AC73ADA6A585F44376138FB880A797C95F94D5CCBB1D01DA1A81307D2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 65008b7c65249de2479e6a9cee2f127736a6dbedca9b1e9ffc50ca129050f385
MD5 e3107c650c4699705b4374bf3f29ed1f
SHA1 5ae5392685a04aa85705bec88477a0a9fffed23f
SHA512 62acd54a12196903294c7e2864564a809dfbd99815374909515c987bc94f062293674e39f859ef9ba8a93e9abcdd227f85b57011950984ab7ad43e6d4987fbfa
SSDEEP 384:1iFiZcINzsNv8TUNTUlIltcezbZnZh//0ZbQwfBVZh6DKhHG/Ton:8FQ1ywgfX/sZzfBfYGHKc
TLSH
T147A26C339C68D87BEDB69A84F5463613CFB480A7C6C59EA4E6CCAB1D01DB1D81307D26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 db7064c785a1f0780cb992edb116ff4189a6372bbafefc82623a01350eae6567
MD5 d4a03125893402da325943cd7c7b2fb4
SHA1 dec3e7509bf2e0bc1298dac8766b8a783f736240
SHA512 dabc4c84e5e5cb6885322934be091447ce499279ecaede0a2d4f8ac2afbcac43d5f885a9cc4cf8e844a6b2c9d0f6a36cdf6b65200604d64ed6a8c627023ebc9d
SSDEEP 96:KqONk4QsjpfbUmjH5ih/cIPURHl8h4otop5TaDsBKP4v+Y1xf//ojd6xlYtYqsoz:BON86JUm0QmiUyAgso//0ZeBCn/U6
TLSH
T11D02D938BC78ACBB9EE3AE45F48777239FA4106B96915F84DAD86B1D01D715C2303C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 085ae2ef29c4fc135ce4cfad9a05862a65f3465d151329e89360434d6e2b1c09
MD5 f718681d0b40f52e8918a141ba44bbd4
SHA1 60dc5d56010bd983cf3de7505ac748af4864c945
SHA512 bdec4223bf7038f95837a5b680ffecfd4381bc0e254cde78463afc719bb6f98feeeeb71f4f48f6796ed8f18c606a85709bd2569b8a14d6ba1241535b65e039a4
SSDEEP 192:BONI6JUkQmiUyHgbo//0ZbQLcHNxhqwU6:BONI6+0bbo//0ZbQwLBU6
TLSH
T1B7121A35B868EC775D93A594F08376239FB44167DB895F94DACC2B1C06DB16CA307C22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 d45e4a3a616b36cf65dc09105e4928dde479ae93e939cbf584c9e8dde23cdfa2
MD5 bc83776680635007c518efc4a1b9b203
SHA1 b2d9927159b481879e39b623c321fc1d0de97b66
SHA512 9ecd3a5b8238dcd1e6c5c8ed87405e0bdc58e3481f51cf97aefb69d92bc13e0821bf904858b0a38e06b0596af5a87428440d2622ed8051c68b12653c010d8759
SSDEEP 384:LZcIhsNVtcezbZnZh//0ZbQwJBVZh6DKhHG/Ton:ThIX/sZzJBfYGHKc
TLSH
T16C828D32AC78AC73ADE6A584F44376139FB880A797C95F94D9CCBB1D01DA1A81307D27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 be97feaeda55b5dedb95d1a6a9221a23cb7a62d5f2befba3375185169c2dd93e
MD5 d61b975d0df31c278d57cb66f0ddfd7b
SHA1 01ce4d65bc8d579b2d2cb43a8551c8e27f7dbbcf
SHA512 a907cd0682da835d42a5daff74be8069a56ed7697e7d2604d3633e7a26ed18e6949d61d90f6ac0346533ae5ce6dfb2eb2aed8e4737a7ead51fbecf2d58e78b84
TLSH
T19B412D5CB6E91148B3767F56ABF6A86E487F7D732E06C55D00110E4E0A63A04CDB1B37
MD5 SHA1 SHA512 TLSH

Submit Download