6ba372357efa26a04e1c8eb59f29e9867b04ed241c4665f06e78d1ebe6ab8e5b

Analysis

max time kernel
148s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
01/10/2026, 13:39

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
attachment20261001-527357-iz3e5t.htm
Size 34KB
Sample261001-qx73tsstdv
SHA256 6ba372357efa26a04e1c8eb59f29e9867b04ed241c4665f06e78d1ebe6ab8e5b
MD5 764f5df3b8d286714635f98cdaff2174
SHA1 6f65b07d81db9dcfdfe1482f1ba7a14977d87aa2
SHA512 323c8e03eabf4884fba35ca5253c79f370c09e0156bea23ca0e2c10d948e608a65b47dc8cca9450afb3a81a9c61ccb77d3ff7acd935d3658b61c415597cf2e13
SSDEEP 768:9srfAOHdia5Qe2E4rY0H1UeH+NypaNKiA9b:9QAOHdl5TkY0HeNVKJ
TLSH
T1DFF2D65356D19D37067396F4BCB8BE2C95CA8D0FC248AC04743CA90C5FE4EA06EA7679
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2980	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-240542094-4193773837-3211495583-1000\{83C9E7F7-2ABF-49D5-B550-3B4661AB4E89}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2896	msedge.exe
2896	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe
4688	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4688 wrote to memory of 1556	4688	msedge.exe	86
PID 4688 wrote to memory of 2980	4688	msedge.exe	87
PID 4688 wrote to memory of 2264	4688	msedge.exe	90
PID 4688 wrote to memory of 2264	4688	msedge.exe	90
PID 4688 wrote to memory of 3724	4688	msedge.exe	88
PID 4688 wrote to memory of 3724	4688	msedge.exe	88
PID 4688 wrote to memory of 3724	4688	msedge.exe	88
PID 4688 wrote to memory of 4672	4688	msedge.exe	91
PID 4688 wrote to memory of 4672	4688	msedge.exe	91
PID 4688 wrote to memory of 4672	4688	msedge.exe	91
PID 4688 wrote to memory of 4656	4688	msedge.exe	92
PID 4688 wrote to memory of 4656	4688	msedge.exe	92
PID 4688 wrote to memory of 4656	4688	msedge.exe	92
PID 4688 wrote to memory of 4160	4688	msedge.exe	93
PID 4688 wrote to memory of 4160	4688	msedge.exe	93
PID 4688 wrote to memory of 4160	4688	msedge.exe	93
PID 4688 wrote to memory of 4380	4688	msedge.exe	94
PID 4688 wrote to memory of 4380	4688	msedge.exe	94
PID 4688 wrote to memory of 4380	4688	msedge.exe	94
PID 4688 wrote to memory of 4904	4688	msedge.exe	102
PID 4688 wrote to memory of 4904	4688	msedge.exe	102
PID 4688 wrote to memory of 2280	4688	msedge.exe	103
PID 4688 wrote to memory of 2280	4688	msedge.exe	103
PID 4688 wrote to memory of 404	4688	msedge.exe	105
PID 4688 wrote to memory of 1224	4688	msedge.exe	112
PID 4688 wrote to memory of 4568	4688	msedge.exe	113
PID 4688 wrote to memory of 4420	4688	msedge.exe	114
PID 4688 wrote to memory of 1440	4688	msedge.exe	123
PID 4688 wrote to memory of 1440	4688	msedge.exe	123
PID 4688 wrote to memory of 2896	4688	msedge.exe	127

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\attachment20261001-527357-iz3e5t.htm
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ff93580c188,0x7ff93580c194,0x7ff93580c1a0
  2⤵
  PID:1556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1828,i,14549717450985402348,17562100960867173410,524288 --field-trial-handle=2476,i,9270904769924617418,2217090509982285924,262144 --variations-seed-version --mojo-platform-channel-handle=2504 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1620,i,17476805818859099938,10024108266256997658,262144 --field-trial-handle=2476,i,9270904769924617418,2217090509982285924,262144 --variations-seed-version --mojo-platform-channel-handle=2472 /prefetch:2
  2⤵
  PID:3724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2300,i,15292909435713083368,13358785760385369390,524288 --field-trial-handle=2476,i,9270904769924617418,2217090509982285924,262144 --variations-seed-version --mojo-platform-channel-handle=3012 /prefetch:8
  2⤵
  PID:2264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3416,i,9942021979217672851,12307436991049894115,2097152 --field-trial-handle=2476,i,9270904769924617418,2217090509982285924,262144 --variations-seed-version --mojo-platform-channel-handle=3448 /prefetch:1
  2⤵
  PID:4672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3436,i,1487842836163547840,13055288410425094747,2097152 --field-trial-handle=2476,i,9270904769924617418,2217090509982285924,262144 --variations-seed-version --mojo-platform-channel-handle=3464 /prefetch:1
  2⤵
  PID:4656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4100,i,8037784256053972616,18312888709128377228,2097152 --field-trial-handle=2476,i,9270904769924617418,2217090509982285924,262144 --variations-seed-version --mojo-platform-channel-handle=4148 /prefetch:1
  2⤵
  PID:4160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4140,i,6800854520246614489,7421923493047750981,2097152 --field-trial-handle=2476,i,9270904769924617418,2217090509982285924,262144 --variations-seed-version --mojo-platform-channel-handle=4200 /prefetch:2
  2⤵
  PID:4380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5056,i,2214958325243666155,2494379172394804869,524288 --field-trial-handle=2476,i,9270904769924617418,2217090509982285924,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:8
  2⤵
  PID:4904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,1537546631961953646,5375421208261546357,524288 --field-trial-handle=2476,i,9270904769924617418,2217090509982285924,262144 --variations-seed-version --mojo-platform-channel-handle=5192 /prefetch:8
  2⤵
  PID:2280
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5864,i,6382646818290205571,12072940292991410836,524288 --field-trial-handle=2476,i,9270904769924617418,2217090509982285924,262144 --variations-seed-version --mojo-platform-channel-handle=5876 /prefetch:8
  2⤵
  PID:432
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5864,i,6382646818290205571,12072940292991410836,524288 --field-trial-handle=2476,i,9270904769924617418,2217090509982285924,262144 --variations-seed-version --mojo-platform-channel-handle=5876 /prefetch:8
  2⤵
  PID:404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4908,i,4522977142005770247,7633249354274493539,524288 --field-trial-handle=2476,i,9270904769924617418,2217090509982285924,262144 --variations-seed-version --mojo-platform-channel-handle=3608 /prefetch:8
  2⤵
  PID:1224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6252,i,544335520931159049,4106928737493663197,524288 --field-trial-handle=2476,i,9270904769924617418,2217090509982285924,262144 --variations-seed-version --mojo-platform-channel-handle=4160 /prefetch:8
  2⤵
  PID:4568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6264,i,15438819727978053372,2643648352499783785,524288 --field-trial-handle=2476,i,9270904769924617418,2217090509982285924,262144 --variations-seed-version --mojo-platform-channel-handle=4848 /prefetch:8
  2⤵
  PID:4420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4844,i,12773260551134406259,18287251694127274026,524288 --field-trial-handle=2476,i,9270904769924617418,2217090509982285924,262144 --variations-seed-version --mojo-platform-channel-handle=5428 /prefetch:8
  2⤵
  PID:1440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=4988,i,8407401794294701690,8232964402845830232,262144 --field-trial-handle=2476,i,9270904769924617418,2217090509982285924,262144 --variations-seed-version --mojo-platform-channel-handle=748 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2896

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4484

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 21916bd4ff5d8352c56dee6a81be174493beaf79015a1cd73bf87d3641937777
MD5 3c64d7d928426c0990a1d275b3d712c7
SHA1 ee73164dabf406188415054f8478e3e0a735499b
SHA512 8362ae4d667e7f8e36014d289a1d224e820d3aa7afde9c1a3cbb3f608d045c8478266170b54db3988b0ce2ef11cec1d52e8dc8464fb773f77e3f48575752d729
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7q:fwUQC5VwBIiElEd2K57P7q
TLSH
T15EB3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 58b461967016818ce2213ba739aa830e079c4747cc98baea5feaffc8b09c915d
MD5 8800a672498272bad98dd79644e30101
SHA1 14a42c33d6271869cc680cadc5ae061e7092e3ae
SHA512 a17f90c73859841f3e0a3211d7f8d1027a7f8ec3a4ef87ddc96b1a39e0b52bc65decb3dd694a7092e22f06f2124864535e2e8632387dd42184abe2d3e22d7e12
TLSH
T135D022F2F32200E8C8C02A3C20030B080208C8000C833220C832C0C23ECCBC0A88F08C
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7b81d8521f4289b1259fa60587a7bc7131f06581c3a734224a7de2fe2669bfb7
MD5 46bc1ee7f1b3386bbc305d48ade31614
SHA1 b5e469cf75c16715fb850bd86db01e329da2928e
SHA512 09a97914c725107f4c125aa0ff0826f0410030841011f0bc5c9eed9e023261ab13abc5f59c9c311d02baf1b25e7398de5ea81438c8a8ede3cc60ca3906edfce9
TLSH
T152D022F2B3A208E8CCC02A3C20030B080208C8000C83B320C832C0C22ECEBC0A88F08C
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 6a786cccf935c5174948de9deebe5ac68e7f0ddf3f6fe95cc87d038994cda130
MD5 e8d22fc3760109b59df8c37a5bd4ab1c
SHA1 427d69946eefa66def3e410ec230bb85abed7635
SHA512 80668369058e8a960c8725b977af39a0a8f54b4bb1070e3f10bb9720f57b69b291b7e42868b5437e47bde41c487f06f5140b681380806c62a8238f26593f6fb3
TLSH
T14151D8B755606CD3FBA651317FD384A33E3E8D8454874E9125A4F8F8FA5A79C9072014
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe593e57.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe593e57.TMP
Size 3KB
SHA256 c2fdf6e88b64c57defe15d9292f23d5e25c2da43d96f09347103e5f546f69e69
MD5 4159ce0b4adb213c9fd2b276dbfcfd0f
SHA1 231e9f58d00e73ebd8e34f4a986b5f7f4f2bac94
SHA512 69981539ccb6cd5b119b714fc31d03ee790c10b78da3c22748920cc40f0a39bc6bece2d073e9187ebaa6e7ba10c6a05c031e563105ac05b3e1c4c63bb293206b
TLSH
T1BA51D8B756606CD3FBAA51317FD384A33E3D8D8454874E912594F8F9E91A79C9072014
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 e8416fab0bf25372f3215d2db5ec83251119de347003f4216633bb80c1573a1a
MD5 73db68810ce2e55df4fee27bba5522f5
SHA1 0db62cc01b286ef8ec7709d0d7f32458fd4d6dcd
SHA512 b061b2269c38a4ac14c956809496c9414b87804150eb05b4151448ca58a4a15755200f10c7e32d0279fda82c31b1b4d0420747ff7fb2d913cf3271d69907fce2
TLSH
T1C611BDB3C3D595AE890516F06A24EE2BCE1C0606822C3C29C5D4EF2B93E3475E10299F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 f733d4e66d944c75730e39a217ce4358c50702434d8750d869fb666d4a955ef1
MD5 eb8800d26ca1d2da3e3612fbd66550cc
SHA1 361467b0473fad3c64d3993c2b7d2ec5fd27ca41
SHA512 f3202ed1412f31e8c03bfd420e900e8765237977fc54ab0b20346df3f35f4b88b4972ecc2cb4465be6ac15842d27af0ab8cf8008e89eea9d7415de4a9dfede58
SSDEEP 192:sxZkwIR7MWLEZ/frLs4kSEqIdpdk84HW6+WNGYrbC7egFIgrJ:sxZIhoZ/f3s4SjR4HbGN9
TLSH
T13C12B7526E28A97B8CC7E20DFB19BF53E6F9503251D41E58AAFC861C04E7ADD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 64e5a45714cbd92f1da431dc77885050ab9e6b84830eb145ae9cb10906a61f14
MD5 aae40f7759b90750c499f01fd6019c03
SHA1 cd25dfbec9ec595cc79c0cb1fe537f8ff50c74e8
SHA512 3ceb03b3abf89c0d90a693aa24d5af70ddb22de1ac0e8fbcb01901c0d97003b4a28f77c4a47fe22fc8a6063a5970771170f1f20e25aab43639b26c74a0109dfc
SSDEEP 192:sxZkwIR7MWLEZ/frLsLE7kSEqIdpHk84HW6+WNGYr4C7egFIg5CRJ:sxZIhoZ/f3ssSjX4HbGGU
TLSH
T12022B8526E38A97B8CC7E20DFB15BF53E6F9603251D51E58AAFC861C05E7ACD120740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 5438f92eec0d8cb9c9b57114d18d81a4d9abe078ebe2a6ae331620c36384c620
MD5 c7d588d0f2af7e86cbc4b7f05a284f43
SHA1 c1b644137def57d64b59f8ed8c88cdbb163e96e2
SHA512 180041276196330815f96e7953c4af54a1502aa426559d93b1b2239a7a35080a7d44fbf153976fd643b953c84596a397bcfd5f1b60d60bb65bf6f25ec3a4a13a
SSDEEP 192:sxZkwIR7MWLEZ/frLsLE7kSEqIdpdk84HW6+WNGYrRC7egFIg5CRJ:sxZIhoZ/f3ssSjR4HbGVU
TLSH
T12B22A8526E28A97B8CC7E20DFB15BF53E6F9503251D51E58AAFC861C05E7ACD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 3424bb18f410d1374bb78ee0c5f21ec08b16e1faa66a0873336bb03fcb992a39
MD5 c071440370ec89276e568ca861aa8710
SHA1 5a74e58eb0f75ebe32b54f187c035c34d1f017db
SHA512 b394d367f03f1f5fb42bf4eb78025996089246b73e3a96b289f05aed841632ced2477fb520380c666766470e2a3ab0052a533c9f5d862ffae5165e0ebb0cb806
SSDEEP 192:sxZkwIR7MWLEZ/frLsLRkSEqIdpdk84HW6+WNGYrbC7egFIg5CDJ:sxZIhoZ/f3stSjR4HbGNW
TLSH
T1CD22B8526E28A97B8CC7E20DFB15BF53E6F9503291D41E58AAFC861C05E76DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 f13476fed7639a11f1c6b8f399301c8f39f27617813500078f57eecdcca50ad5
MD5 c5290b1a8667fb365110b22098349dce
SHA1 9106f624fed03562005dd7e7b88f874f71e82b0f
SHA512 acf552c802701a83f2dbe11c28599f7d53860ff3ae40000f559050c9d2cf56dd34f9d005d0f1d528ccf32895795a933b0c59cb5a6d9e0213dbfe4424b3638669
SSDEEP 768:1qy4J/DWvbtBh8F1+UoAYDCx9Tuqh0VfUC9xbog/OVCiLlc2TburoRun:1qy4J/DWvbtBhu1jajiLm0blkn
TLSH
T15FC2FA3B644CCA7E4FC00A9DDD5E6FD73E9802C79AA48D4047FA994C02C77EA91264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 ee843b5e851c955a0546452510c84c01c1f6bc499117eb8de4cf5a975605f589
MD5 01695fcec989151f1a4043827f49a891
SHA1 93f3867ce04347e7eddac7bfa9f4c474fdd3e2b8
SHA512 0d32ba3688e9072970e0bab6b1da20a2800cab9bb02ec2eee1a0742a0f3354c5ea946856d9b2345032073ffa234bbad4e1d33cc871956d81b5042b4b00fe885f
SSDEEP 48:KIDI1Ks04jyL7+/bldd+bNglIS7+K9L1J+xTuYIZrfyLWRsQO00tbYvAISotK9Mh:KIDCKs0+iQgKNOaW5eKyoU
TLSH
T10891104030BF060539BD294C88758B5A524232B77169E63B7FBC40AA5E6BE046FFD9C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

25de6c24-afd4-4d25-90ce-3db537423697.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\25de6c24-afd4-4d25-90ce-3db537423697.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 048bae39d1c70619fd578c1330297a897b1f11c6f350963a3938944c55a54290
MD5 1e3d5dba527b29c69ceb914383393d6f
SHA1 1ee9d8a1c0811bb9e9e92f8bc8b31836e0878268
SHA512 8c5138725de7e064057c169ff2f66ec95585abd5ece15b518bd2229cec619816a17e8f281d6c3e530fdc2333aee14c4392ff7d0f00ef1091a4c492e67681eb0d
SSDEEP 384:cZcIhsNbnjTWZsJZHX58EEO0yb7VZh6DKhHDTor:Kh2autafO0yb7fYGHDT0
TLSH
T1EC828C32A8BCAD766DF7E145F94636039FB89067D2C96F84C1DC6B1E00DA2A81317D1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 2ba58eaf0fc2b8a1cbac70299938a193f49969ae2b6e53b1ed22cfeb6d82e446
MD5 39ad496d95fde231eb0b5239f3b854dc
SHA1 2ce1901e6de4fe1c2e20916ad25e87798040cac7
SHA512 860e4a3c6d94d28c8df6d3ef604da350d263a8be49c807e2c7ec061fd14032a88c5a3c26e938a3d3709bf19fa77b6193dda0c0cc2f8f6ba07222c14738268efc
SSDEEP 192:1ONl6wlDgQmiUykKkSW4X58gZEOK2owDl9S5U6:1ONl6kgeW4X58EEO0kQU6
TLSH
T16402E834B9B87C7B8EF3AE49F5872613AFA4102BD5452F84CAE81A1D00D779C2347927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 6a1fd8ebb2f44b054e83c0f816c5d35a199745421735937fef63fac60d82c26a
MD5 3a6504fb8a945e7dd320e1e913cbc76f
SHA1 be6e6cae5b3e40390c796ef3ada917ea78489e46
SHA512 da95bf26e3927a2c8ec59a24b8c9fc2e69335a59594dd30e470e7042f307604aa7c8172beb0813416c6f804f386a9965be7922897d4db669fd40de71823e52de
SSDEEP 384:HiFiZcI3zsNl8TUNTUlIlKjTWZsJZHX58EEO0yu7VZh6DKhHDTor:CFQjAwg2autafO0yu7fYGHDT0
TLSH
T15CA27C7398A8DD7BADF79A45F94636039FF89063C6C5AB90D2CCAA1D009B19C1307D16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 79de7e94c3f9c6e639c4c01dc18b9dc6095ba641c276f32da0c66d67eadad1dd
MD5 f8298ff48eae8202d9eee5f9a367a1a3
SHA1 978ba600336a5563d412ba4630e29df503b446ed
SHA512 20bd264e9e0946a3ba5a7b5683f2a66daaa98de7e046b01999711301667252dd4e709b3aae12585c36a09e9b8fc44114822db885db67cb53112ec9d937fbbb71
SSDEEP 384:eZcIhsNbKjTWZsJZHX58EEO0yb7VZh6DKhHDTor:chnautafO0yb7fYGHDT0
TLSH
T157828C72A8BCAD766DF7E145F94236039FB89027D2C96F84C1DC6B1E00DA6A81317D1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 600e35669b2f548bf06676456e895cbc2d5c6199cad65e299cf7d485460119d1
MD5 10ef8aae40e1a8fa045148755fe86651
SHA1 69393068145a79de83ee4e3804afbc1e97192dc2
SHA512 dbfbbe4149daccf98e7305792d5b21086a8c75808ddb6dce6f5db68c69073d5f2ea3483a27c7f1860e7225ff0a8f1995169194635fcd9b6731dbf7947847be5a
SSDEEP 192:1ONar6wlD9cQmiUykJkSG84X58gZEOK2oyTve9fqaU6:1ONG6kehb4X58EEO0yS7U6
TLSH
T14B12F935B9A8BC3B5DE2A545F48731039FA5512BDA49BF90C6EC2A1C01DF26C130B917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 0c329a7665431bd8929f822efd1be420fb65bf6ec2cbd85ec9c39eb7c5fb3083
MD5 eb8a6fa94b4278335f112988e23f2cf2
SHA1 8acad76ba04c1ce52e240d923e162eb91ae129bd
SHA512 401ccc45e2a88f408be4786c74ead3567a9b2cc8000dbedea98b678e87f601905da320666dd9340c8d31fcc90840f05ec8b34a260819cf28726d1358f7793561
TLSH
T14D41465CA2ED1148B3B7BF16ABF2A86D88BB7D372F17805D00420D8F0662A00D9A1737
MD5 SHA1 SHA512 TLSH

Submit Download