af6f2b66f13d44d2ec1a96fd2846b3339c52234b98d44fc0fc8d72eaf817bf20

Analysis

max time kernel
148s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
01/10/2026, 13:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
attachment20261001-527357-fbp01y.html
Size 214KB
Sample261001-qlcsjsce94
SHA256 af6f2b66f13d44d2ec1a96fd2846b3339c52234b98d44fc0fc8d72eaf817bf20
MD5 ca2c96be8ad4c1b27afc858a639eb1f4
SHA1 34bcbb32e3946883cf26447531ab98af52bcab62
SHA512 3437202655e3eb3621e7f896424eace53f0c5f24acf844be2b9d563d88009e6cf5a37bcddba9c2cbaba921fa3f1b6b8b256eb36e35e548489e0a5a04be7cb99c
SSDEEP 3072:opm0WkXwgEweVFmk0RHyEoCmetxWnm6t6b9U9QfyA7cxGTdTbLayQsH:oglIYWRHyrCunm6t6i947gGTx3pQ4
TLSH
T13024023459202B0E3B9246B4B26575A40EF90CB3E95F96227BC801F5EFED1F29049CE7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1364	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2101206053-1414382737-268919432-1000\{A30500AB-AA55-4D13-9B00-58752803A923}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4032	msedge.exe
4032	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4308 wrote to memory of 2364	4308	msedge.exe	84
PID 4308 wrote to memory of 1364	4308	msedge.exe	85
PID 4308 wrote to memory of 3052	4308	msedge.exe	86
PID 4308 wrote to memory of 3052	4308	msedge.exe	86
PID 4308 wrote to memory of 3052	4308	msedge.exe	86
PID 4308 wrote to memory of 4880	4308	msedge.exe	87
PID 4308 wrote to memory of 4880	4308	msedge.exe	87
PID 4308 wrote to memory of 1528	4308	msedge.exe	89
PID 4308 wrote to memory of 1528	4308	msedge.exe	89
PID 4308 wrote to memory of 748	4308	msedge.exe	90
PID 4308 wrote to memory of 1528	4308	msedge.exe	89
PID 4308 wrote to memory of 748	4308	msedge.exe	90
PID 4308 wrote to memory of 748	4308	msedge.exe	90
PID 4308 wrote to memory of 2292	4308	msedge.exe	91
PID 4308 wrote to memory of 4420	4308	msedge.exe	92
PID 4308 wrote to memory of 2292	4308	msedge.exe	91
PID 4308 wrote to memory of 2292	4308	msedge.exe	91
PID 4308 wrote to memory of 4420	4308	msedge.exe	92
PID 4308 wrote to memory of 4420	4308	msedge.exe	92
PID 4308 wrote to memory of 560	4308	msedge.exe	102
PID 4308 wrote to memory of 1580	4308	msedge.exe	103
PID 4308 wrote to memory of 560	4308	msedge.exe	102
PID 4308 wrote to memory of 1580	4308	msedge.exe	103
PID 4308 wrote to memory of 4268	4308	msedge.exe	105
PID 4308 wrote to memory of 5000	4308	msedge.exe	111
PID 4308 wrote to memory of 3608	4308	msedge.exe	112
PID 4308 wrote to memory of 1632	4308	msedge.exe	113
PID 4308 wrote to memory of 3432	4308	msedge.exe	122
PID 4308 wrote to memory of 3432	4308	msedge.exe	122
PID 4308 wrote to memory of 4032	4308	msedge.exe	126

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\attachment20261001-527357-fbp01y.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x238,0x264,0x7ffbe024c188,0x7ffbe024c194,0x7ffbe024c1a0
  2⤵
  PID:2364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1876,i,1209928510317041805,2970988319054287267,524288 --field-trial-handle=2264,i,11862748523268574604,7282562297834506632,262144 --variations-seed-version --mojo-platform-channel-handle=2296 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1672,i,11665587718576948699,9444159675578170586,262144 --field-trial-handle=2264,i,11862748523268574604,7282562297834506632,262144 --variations-seed-version --mojo-platform-channel-handle=2260 /prefetch:2
  2⤵
  PID:3052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2020,i,17991524344904878660,3559401155873904075,524288 --field-trial-handle=2264,i,11862748523268574604,7282562297834506632,262144 --variations-seed-version --mojo-platform-channel-handle=2768 /prefetch:8
  2⤵
  PID:4880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3440,i,8614459062359523340,9858249536023067043,2097152 --field-trial-handle=2264,i,11862748523268574604,7282562297834506632,262144 --variations-seed-version --mojo-platform-channel-handle=3452 /prefetch:1
  2⤵
  PID:1528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3444,i,4858924251543832324,16174258324813327501,2097152 --field-trial-handle=2264,i,11862748523268574604,7282562297834506632,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4264,i,398479269416186680,490299689622213768,2097152 --field-trial-handle=2264,i,11862748523268574604,7282562297834506632,262144 --variations-seed-version --mojo-platform-channel-handle=4312 /prefetch:1
  2⤵
  PID:2292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4292,i,2734891755357296865,11121287942297513604,2097152 --field-trial-handle=2264,i,11862748523268574604,7282562297834506632,262144 --variations-seed-version --mojo-platform-channel-handle=4332 /prefetch:2
  2⤵
  PID:4420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5012,i,7632405221131361476,6615716578309173471,524288 --field-trial-handle=2264,i,11862748523268574604,7282562297834506632,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:8
  2⤵
  PID:560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5008,i,3482686736770283104,11947082560799043700,524288 --field-trial-handle=2264,i,11862748523268574604,7282562297834506632,262144 --variations-seed-version --mojo-platform-channel-handle=5220 /prefetch:8
  2⤵
  PID:1580
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5804,i,4162285976266013007,444844372028016524,524288 --field-trial-handle=2264,i,11862748523268574604,7282562297834506632,262144 --variations-seed-version --mojo-platform-channel-handle=5824 /prefetch:8
  2⤵
  PID:4180
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5804,i,4162285976266013007,444844372028016524,524288 --field-trial-handle=2264,i,11862748523268574604,7282562297834506632,262144 --variations-seed-version --mojo-platform-channel-handle=5824 /prefetch:8
  2⤵
  PID:4268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4384,i,8439957614742114894,297263416589717156,524288 --field-trial-handle=2264,i,11862748523268574604,7282562297834506632,262144 --variations-seed-version --mojo-platform-channel-handle=4476 /prefetch:8
  2⤵
  PID:5000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3148,i,12661983319555994319,4576863862074086043,524288 --field-trial-handle=2264,i,11862748523268574604,7282562297834506632,262144 --variations-seed-version --mojo-platform-channel-handle=6244 /prefetch:8
  2⤵
  PID:3608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4908,i,9050222217012031743,10105648423339187871,524288 --field-trial-handle=2264,i,11862748523268574604,7282562297834506632,262144 --variations-seed-version --mojo-platform-channel-handle=6220 /prefetch:8
  2⤵
  PID:1632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5432,i,14005700305119422369,8136358776194444588,524288 --field-trial-handle=2264,i,11862748523268574604,7282562297834506632,262144 --variations-seed-version --mojo-platform-channel-handle=6240 /prefetch:8
  2⤵
  PID:3432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6112,i,5922052429420338559,12062308339197648293,262144 --field-trial-handle=2264,i,11862748523268574604,7282562297834506632,262144 --variations-seed-version --mojo-platform-channel-handle=756 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4032

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1756

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 0526a2a51e51d4fabd0b1d17ef03f5340c42a3dfcb2119ece19ca3fb7900a64d
MD5 844a3eca2c89c5806ce623a8aaa667a4
SHA1 92425b0bd5ebe6baf101dd06c4c2d65b1cabbe97
SHA512 19fb4fa602526e6121d2bbb2984c8130d972906c815cef03a10d6c046e88bc013fabfd2daed35ac6fc10b90eb453c529c4fb4c4b465fb957c45a55ec67aa247f
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7u:fwUQC5VwBIiElEd2K57P7u
TLSH
T1D2B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 61a97be736e0441d45644d31b38bd9bef6c1bd260fa1ecbb5d099fa493fee6b4
MD5 99bbd8400adc948f85ebd87cb24b3fcb
SHA1 c8fb9564ede7ecb06cef446bdb527025127a796e
SHA512 75b3ee70eca487cbbfb3d5b4b25bae158ff99188ab36d55f391e9f80c51ce9fa433897d79a0ae37ad64698bc3eb5aa9a10a49116fb8f7f35ed0a6e98aa8321b7
TLSH
T109D022C8F2A0300CE00C3233A02BCE022B88CEA8F0032BCA000E8C80E8800C80CF2C8E
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 a4f82fd4b246d9a305cfc38096e462a802a35122c5caeba222c913142daf0fe2
MD5 cca007e5d05618c8cc201ddc2a63ae36
SHA1 463c4878bab5b71cee7c46f47642f0b0d93e3b34
SHA512 edd2d6a71e5355c1ec9b458ba4f42e29fb051935833684cdbbbab29c6653f5ddd7963df31aa0593d6bbaac377ce9c9a91fc18d81f694d5693bdd1c2dc59fe6cf
TLSH
T17961C7F571A341E9FB98467393D6948B317065B0A9831F6230E9F4789CCA7158CF784B
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe591f46.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe591f46.TMP
Size 3KB
SHA256 15a00ab4cb3f6869ae1ae973c5ea48ec82ea0733d327b4b9fb97dabe01c09ae9
MD5 5eb19c13f662a3a668aa355f70a5e74d
SHA1 44d18a8b68f759423683c15126286b7f943defe1
SHA512 5664a9e4a91c80c6f062187d8e64a56f772b794af44ade2e08d29954417e4e9521f859ef3e2ff9f478d15eb9a7f075fa49002c499b30f1fe9eeede615667bf8d
TLSH
T1F461D8F5759341E9FB88467393D6948B313465B0A9831F6230E9F4789CCAB158CF780B
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 733B
SHA256 ef690aca19e50430cd844ed27ba1eb3606c266f3660ce4d714e7a24d10b348ae
MD5 de5c62f5369e163864369f75ebf0a900
SHA1 644ae67c4963672d67d59a8152f6a1251c91de67
SHA512 0e056b700ece0ff3f25639aff11dc0f6e505b99ae29da53de36c2be7bc178aaa5a5edd1b5ec21d4905ec5b9cc8f95a6550751912a039e8a6d93dc9ec6fe2648d
TLSH
T1E6019CB3C3E4A9AE8A0456F06A18AF2BCE2C0602431C7D5AC5D4AE2B93F3475D10189F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 ae72ec241000390c7373cbf150397bb730b02c066be8cb73695d561758818037
MD5 0ead04f7fb6a96b5aabe070cae53f09f
SHA1 91871d09f8ac85b3a6df228fd56ab9a98bee6dab
SHA512 5ee8ac769af834fc94febb2f6c1d64c2a8dbc72acfedc9464f4082111014c2567bc2dc52bce645dbc53e61e92e68bf9dffcf38e8cdad981c21e517caa1aaaa0d
SSDEEP 192:sxZcRXW5b/ftsr2lkIdpdG4HW6+WNGYaQx7IgrJ:sxZcc5b/ftsr2l9xHbGe9
TLSH
T18622B7116E38A97B8CCBD20DFA69BF53D6F9503251941E48AAFC861C05E7ADD130780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 b20b7388f79ecd307adbf592fe52552d4da29f93ae72170c7058a32123f02e67
MD5 01f0e1fa3756803d0de189ac824900af
SHA1 17efe5b45e0898c0c8e175bd2af1caf2d23f5c97
SHA512 fe6e186167b824eeb8027d54d0938203c061ea17ebbe3aa5328b5dd577fb65bd9f26e7aae722ff8bf8e95cc79bc41b33e45bba25ca6fac887354768a7e5ba917
SSDEEP 192:sxZcRXW5b/ftsBSlkIdpHG4HW6+WNGYagSkx7Ig5SJ:sxZcc5b/ftsBSl9bHbGISSg
TLSH
T14622C8556E38A97B8CCBE20DFB55BF53E6F9503251901E48AAFC861C05E7ADD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 3576cb954235ab87eedd4eeedd5be12c04ebcc525e2905526a9de9ab6a866a3d
MD5 b87597db99afdd686fc41faa3c9a1283
SHA1 723e2634f7a1385f5507492216b2bc2de1e13b84
SHA512 c09566b197a32477c50edcd348069d9f440a39f61399bd6f2aac8a1b7d2af281b66b4a16957f615cff6a56731c84b5647200ff06ad11984bda64d64e86e7c665
SSDEEP 192:sxZcRXW5b/ftsBSlkIdpdG4HW6+WNGYa9Sfx7Ig5SJ:sxZcc5b/ftsBSl9xHbGVS1g
TLSH
T10322B7156E38A97B8CCBE20DBB59BF53E6F9503251941E48AAFC861C05E7ADD130780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 e8ce8b7daf63ed845f76fbdc632ad563b3f4fe71da892348494894549a922c72
MD5 1ddbdac555eac5b94cfeb29862a7442e
SHA1 6b05927821d1565ee8c864beb5d6d0cf082c7092
SHA512 551e07d8b4e4d61cbec153919b673ea2213fe7f0b42daf283adea1843a7d46b1fc63ed59ba551f23002325604b27fbab192eb17c752d46283e56cf6fc737eb30
SSDEEP 192:sxZcRXW5b/ftsB2lkIdpdG4HW6+WNGYaQx7Ig5gJ:sxZcc5b/ftsB2l9xHbGei
TLSH
T17822A6156E38A97B8CCBD20DFB59BF53E6F9503291941E48AAFC861C05E7ADD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 6be7ee4074942020fc9d84910ef5d166eceb47818611517e68b7d26b35e3edb3
MD5 4ba4dc1aadc994c64e584bf366801775
SHA1 a6913e507d87c58e327edd837c9348c2baec3b92
SHA512 21fddc2505e840245406e8b862bb1f850e9ef918ea53332a9a348cceb14bafbf1035fa19fc5ab3e795264ead269ac62394ae25bab448855da1bf66e259fc697d
SSDEEP 768:yDyQRbrWvvlpZ8F1+UoAYDCx9Tuqh0VfUC9xbog/OVaKLlRXH3dro1ZQL:yDyQRbrWvvlpZu1jaXKLf33W1ZQL
TLSH
T17DC2F93B640CCB7E4FC01E9DDC6A6F976EA802D766588D4047FA984C02C77EE512A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 0cb3954d13c22ac9de6985aa5b084a87133e67622cdb5011c6b9bc9917761da7
MD5 5df391a178fc75e4005b126e5d0e86b8
SHA1 3614f2c8229a4c3570c0ccbd593721a0a71cae8b
SHA512 dffbbc3bffde5c076ab69f18ae26ea34212ef4662746c4bfaea2bb1abb12116b389b39e766b17b9283bca60a336c44b1e6668f3de43e3a59900f9e6ff5bcba58
SSDEEP 96:KMIQKxiGOhWKSs6B6DGq8gcY4INL6CYKi960YuCi90Hq:izp9B6DGq8gc5IN2CO960xCi90K
TLSH
T13A91136531BB0A0538BD294883759B6A524231F37019F52BBFBC50E25E6EE044EFE9C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3c888231-ccc9-4ae8-9415-b1f80a4d5699.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\3c888231-ccc9-4ae8-9415-b1f80a4d5699.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 e7530fe273bce6f7a0620f9e5aee716228980163df215b8e4632dc4d1f0f1dc5
MD5 0d50bd1e2b99c0385cff44af101efa34
SHA1 0874d516a06ebf66dac533721d5a6e424e271a44
SHA512 9bafc3b938ee6f2e5b6fcfbf50b9973f12df42c76856f57f1f33f1c4f3626eed2b8c70350cb2ecaab76920f8a829d7ad2807f05ad2baab95003066caa56076a0
SSDEEP 384:sZcIhsNXMec0Ck8Yp5u8iEm+M2VZh6DKhHbioC:6hB3E8SkEG2fYGHbi5
TLSH
T129828C32AC786C7A6CF7E645F9473A034EB8812793C96F80D4DD671D41EB6A81303917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 055551a9339ed8b264a95258952a102cb685afe3afb3e197b832b3236a7cf5c9
MD5 cf4cf6daa83bbcf3e90e8431d6d1f65c
SHA1 eae68a55d674eb5e0d70088b58617df2043d3c1a
SHA512 b90576bdee2846645eae0aacd4b24d2b205660fb53a08a989fc9c61681ec3285b4b4e221d3ab31a07d35d2741da1e1d8473f5cbd11ca232cf4b3121e78d172fc
SSDEEP 384:yiFiZcIwzsNp8TUNTUlIlTec0Ck8Yp5u8iEm+h2VZh6DKhHbioC:5FQsAwgB3E8SkEj2fYGHbi5
TLSH
T1A7A26C339CA8987BBDF79B45FA4B36038EB44167C6C5AB80E6D99A1D00DB1EC1307D16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 dc48d4d292bc1d6126bd84b4702d7a28d35a7b54616f02ca22022e3ae38c7d5d
MD5 f255deaa49bae54db2e6d630d7c30815
SHA1 7dc3dd45b5498e2501ad0cca7d7d6fb2f74a7b61
SHA512 bfb9d367e988583ff326450552d3692b57a7750ab4d3b07955a228a521e8d507783652677fdc8dab7f0d6c039488848d2d5939f3524c74cdbfcbd83d78a8bc81
SSDEEP 192:SONk6iDCQmiUyGsHq5u88P1uhfSqbIlU6:SONk6/EHq5u8iEjUU6
TLSH
T1AC02E839AC783C7BAEF3AD15B58777275FA4012BE6942B84D9E81A2C41D729C1307923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 17d6df0c1d1f81201062db2810d23f7d7afbe4c137451a4e37d48ac0c46cb743
MD5 20334ee3d868f04c679f3d82ec6ec5e6
SHA1 e2e34ecd684d6fa6f75a23b265c1ca17deffba53
SHA512 1e7d8b1700a4e418b02bf495e311b7589e4eadb917be75c942edc019883786f852e25db76aeeb2129c72fbc7554ddbdcd02ba3c767f9f3d3ca81bba897ffe469
SSDEEP 384:bZcIhsNXTec0Ck8Yp5u8iEm+M2VZh6DKhHbioC:DhI3E8SkEG2fYGHbi5
TLSH
T121828D32AC786C7A6CF7E645F9473A035EB4812793C96F84D4DDA71D01EB6A81303917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 41b0fbccd0be75fb9099b91ac153adbeaa72281a5ec0451321626d3d74a1d63a
MD5 b14801baa0e1d367dd8b604bbfd4889d
SHA1 95e6afb40595a4b90eb9614db69e58d40d1daf9c
SHA512 9ff727378f5beb4447ffc8f0f9b1056c457c489f6847911de277b13b1d2ca688359a06028bb95f68a4f712a23f48b00b6b8c59816a81bdfb2280afc39324d575
SSDEEP 192:SONq6iDYQmiUyIAsoq5u88P1uhYoetAluZyqGU6:SONq6d3joq5u8iEm+82U6
TLSH
T194122A36AC786C7B6DE3A924F98736135EA5422BD7887F84D9EC161C01EF2AC130B513
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0f7bf664-99d4-4f28-999c-54df8510d6b5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\0f7bf664-99d4-4f28-999c-54df8510d6b5.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 3410847f7671406044d33808e72c01accb60f8f7d253c7181e9dd144b7f688fe
MD5 b85af4e4bdc7dbe159cd1d21f84041e8
SHA1 7beefc582cd7a0de58f5b5060638a766be57298f
SHA512 257be5b6c9c184b3f127f35cd884c627d84efd57f7fc99b855b636c8439e56f7903a3ab9559fb1068c1d696a272cd333c0d9e50c5bb4cae9a010abf77bca4333
TLSH
T12F41289DA6F91158B3B77F5AABF7A46D487BBD232E06945D10010E4F4663B00C8B2B37
MD5 SHA1 SHA512 TLSH

Submit Download