1773d71bab19a2d02989556432df321cc7f678a651051e55e0008a978a262e49

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
29/06/2026, 12:03

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
email-html-1.html
Size 16KB
Sample260629-n77hyaet9l
SHA256 1773d71bab19a2d02989556432df321cc7f678a651051e55e0008a978a262e49
MD5 0e50633e9d31ce385213ec1bc68b4358
SHA1 fbae3de256afdc358305b854544a5879752162f8
SHA512 731944e3b30f0dbd4f32c831b92d0592668424d3fc4e0b258801ccb9890f27bb6adfc8c0159d30dcb5c4687472190566c1fa47f68b7450a6607900c8ae50289b
SSDEEP 384:xPiDJsvc9bzJXsLWXXs/XqqHKlAkEdHBYmg:xPilsvc9bqwcTqlAkEZWmg
TLSH
T14872A632EB507227F90FD4A1F333BDA0AD208446C5639AB8FDA67366D9D54711720B6C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1924	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134272082131182597"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-876885714-46325919-1482798410-1000\{62B11866-A316-428F-8389-69B57A7688D5}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3496	msedge.exe
3496	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2720 wrote to memory of 3272	2720	msedge.exe	86
PID 2720 wrote to memory of 1924	2720	msedge.exe	88
PID 2720 wrote to memory of 752	2720	msedge.exe	89
PID 2720 wrote to memory of 752	2720	msedge.exe	89
PID 2720 wrote to memory of 3220	2720	msedge.exe	90
PID 2720 wrote to memory of 752	2720	msedge.exe	89
PID 2720 wrote to memory of 3220	2720	msedge.exe	90
PID 2720 wrote to memory of 1648	2720	msedge.exe	91
PID 2720 wrote to memory of 2616	2720	msedge.exe	92
PID 2720 wrote to memory of 1648	2720	msedge.exe	91
PID 2720 wrote to memory of 1648	2720	msedge.exe	91
PID 2720 wrote to memory of 2616	2720	msedge.exe	92
PID 2720 wrote to memory of 2616	2720	msedge.exe	92
PID 2720 wrote to memory of 4408	2720	msedge.exe	93
PID 2720 wrote to memory of 4408	2720	msedge.exe	93
PID 2720 wrote to memory of 4408	2720	msedge.exe	93
PID 2720 wrote to memory of 3908	2720	msedge.exe	94
PID 2720 wrote to memory of 3908	2720	msedge.exe	94
PID 2720 wrote to memory of 3908	2720	msedge.exe	94
PID 2720 wrote to memory of 3208	2720	msedge.exe	98
PID 2720 wrote to memory of 5100	2720	msedge.exe	99
PID 2720 wrote to memory of 3208	2720	msedge.exe	98
PID 2720 wrote to memory of 5100	2720	msedge.exe	99
PID 2720 wrote to memory of 3528	2720	msedge.exe	101
PID 2720 wrote to memory of 2436	2720	msedge.exe	110
PID 2720 wrote to memory of 1492	2720	msedge.exe	111
PID 2720 wrote to memory of 3888	2720	msedge.exe	112
PID 2720 wrote to memory of 2740	2720	msedge.exe	114
PID 2720 wrote to memory of 2740	2720	msedge.exe	114
PID 2720 wrote to memory of 3496	2720	msedge.exe	115

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\email-html-1.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ffb6119c188,0x7ffb6119c194,0x7ffb6119c1a0
  2⤵
  PID:3272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1984,i,12347949273725452769,9337777527480904015,524288 --field-trial-handle=2764,i,4054758922210557519,7063654398779363605,262144 --variations-seed-version --mojo-platform-channel-handle=2788 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1880,i,8820557968013572613,15238527171897263127,262144 --field-trial-handle=2764,i,4054758922210557519,7063654398779363605,262144 --variations-seed-version --mojo-platform-channel-handle=2760 /prefetch:2
  2⤵
  PID:752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2308,i,5610152931114586679,8943761376413953551,524288 --field-trial-handle=2764,i,4054758922210557519,7063654398779363605,262144 --variations-seed-version --mojo-platform-channel-handle=2800 /prefetch:8
  2⤵
  PID:3220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3392,i,15968451456464962383,16037285182826436976,2097152 --field-trial-handle=2764,i,4054758922210557519,7063654398779363605,262144 --variations-seed-version --mojo-platform-channel-handle=3468 /prefetch:1
  2⤵
  PID:1648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3396,i,1497150773098491236,17343986584582860719,2097152 --field-trial-handle=2764,i,4054758922210557519,7063654398779363605,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:2616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4132,i,14910886395537372631,15001652919848669905,2097152 --field-trial-handle=2764,i,4054758922210557519,7063654398779363605,262144 --variations-seed-version --mojo-platform-channel-handle=4144 /prefetch:1
  2⤵
  PID:4408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4204,i,15753239905183892703,11333670461104420443,2097152 --field-trial-handle=2764,i,4054758922210557519,7063654398779363605,262144 --variations-seed-version --mojo-platform-channel-handle=4216 /prefetch:2
  2⤵
  PID:3908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5096,i,4949253246917725546,4979928722075883172,524288 --field-trial-handle=2764,i,4054758922210557519,7063654398779363605,262144 --variations-seed-version --mojo-platform-channel-handle=5116 /prefetch:8
  2⤵
  PID:3208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5092,i,4467058106303619325,10050814493110261854,524288 --field-trial-handle=2764,i,4054758922210557519,7063654398779363605,262144 --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:8
  2⤵
  PID:5100
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5832,i,13658051235576061512,13405526265614872499,524288 --field-trial-handle=2764,i,4054758922210557519,7063654398779363605,262144 --variations-seed-version --mojo-platform-channel-handle=5864 /prefetch:8
  2⤵
  PID:3172
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5832,i,13658051235576061512,13405526265614872499,524288 --field-trial-handle=2764,i,4054758922210557519,7063654398779363605,262144 --variations-seed-version --mojo-platform-channel-handle=5864 /prefetch:8
  2⤵
  PID:3528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3500,i,5754240657273591987,288224771674674024,524288 --field-trial-handle=2764,i,4054758922210557519,7063654398779363605,262144 --variations-seed-version --mojo-platform-channel-handle=3572 /prefetch:8
  2⤵
  PID:2436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3384,i,14799239132267070296,13453781076765464641,524288 --field-trial-handle=2764,i,4054758922210557519,7063654398779363605,262144 --variations-seed-version --mojo-platform-channel-handle=4644 /prefetch:8
  2⤵
  PID:1492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4256,i,4387195167552420297,15466941446321708999,524288 --field-trial-handle=2764,i,4054758922210557519,7063654398779363605,262144 --variations-seed-version --mojo-platform-channel-handle=4572 /prefetch:8
  2⤵
  PID:3888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5172,i,3208754134797847897,11993370682092778006,524288 --field-trial-handle=2764,i,4054758922210557519,7063654398779363605,262144 --variations-seed-version --mojo-platform-channel-handle=5276 /prefetch:8
  2⤵
  PID:2740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6156,i,13311295875337248602,6841454067743839570,262144 --field-trial-handle=2764,i,4054758922210557519,7063654398779363605,262144 --variations-seed-version --mojo-platform-channel-handle=5656 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3496

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5108

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 994380ffd288a5f1a9acc9eb76a487a55b12cc1daec839d811240f6cbdc4da3a
MD5 f5ed4946834be586ac6410ed88740a7c
SHA1 6108ce368e8b3bb8012956bb25606c3b16835c7b
SHA512 76bf60b37c50422ab125edd3da70629e685408a106655a9b7e5cb6aa7b6a9000c76d8ac2f5dc85e58e893b61bef9b539b9488ac894f1fc1338a58944dc9f4711
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P77:fwUQC5VwBIiElEd2K57P77
TLSH
T1E5B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 6de34b260036ecaa4ce5839bc4a7ff7495e50b7b94349b12d9f840ca0e76da3b
MD5 56d82099872fb501c566d072ae897035
SHA1 2c96501551fc13c09496780960d8e7ccb4957b77
SHA512 c4b4017256caf25e88f146e6104134cddfd15089203e8e74c5196627fc92897f9fe7e3fc5c8305032be88e9409cdbc5dfe1e81017fcd5e38b3579b3d823b4a41
TLSH
T160D0C073378C7C00EA090170D013C3031FA7855824C39F03B100C01C54B43D9738B093
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f5dece638cd89af82b06bd2fcb3d1738eef64d2275be237184ea8bff7af3fdfa
MD5 f19ec2293392af872f10929c41627e26
SHA1 0576f5277c470f5bb8c3f4d3786ca8d967d0a33e
SHA512 4cc85dc71d34bb516f8fe45b565a6a9b4cda255a931f33289247ed84150baf0e2df40fc87109df41771553b92545ed858197cdd3d673694c83458cf9812aa9dd
TLSH
T16CD02272268C6C00EA090170D01383021EA6855824839B03A100C01C44A52D9728A093
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 31974fdc275f80b129cf003e9d693be597be9da0060c2bcb2a4589cbc28b340e
MD5 7210ac330217044da00397ace4b2445a
SHA1 0cf961ad385ab121ae4a5e46752b6ee09bb479b8
SHA512 7e594ee933ea7b2dc51c3a8dd479ba20b264a09dc4cd9db05ab1991a58337c01796b73065582948b05b0bb11944880a6f4db70b87981ba191cf681076e8aed56
TLSH
T18D615D1802C24972EFBE1072C0F196153EF3599F8EDB8E1247E4C4FE6039B5EA9EA004
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58a860.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58a860.TMP
Size 3KB
SHA256 0331dd2bdce27434c953e0a88b3730c42fab2ed6f7ec323bff1721f4a9733109
MD5 7410164a3f7dc93b174d6b582abdafa0
SHA1 a677396d55bb0dd9272cfd004bfb93d9d1b34472
SHA512 45a22cab9e92aaf12ab5d43a9fabb62001aedf57adda41bb7a387b16c0bcc0d0e2aef0ff99bfe7b10f7766253bf6488cb6747cee222de67d4e7d7121b7cb87ba
TLSH
T1B7614C1802C24976EFBE1072C4F196193EF3599F8EDB8E1247E4C4FD6139B1EAAE6004
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 da1656171c1ccba4e9bc63cd8efe29235a9de25562d1c059528af0801d885bc4
MD5 b491dccdd4fb6e1a56a365ba98340cce
SHA1 e0b5dc3a29852fbac3ce6027997f63fb4199bddc
SHA512 d1f551b8c058e2470d29a0545043efcadbfa38dad02c219d8b1e8661373db8ea81fe60fd7058aa7b8e713b6e83d9b43055a340ced14151f67e59181222ecd6a9
TLSH
T1BA21ADF7C2D586BE881556F05B28AE2BCE2D094643283C15C9E5EF1B93E3075E10259F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 93125bbbdaf175f94006ebb7996ffbdfc42e430d63ca37befdd8664ff181f8f0
MD5 13761bfbc97839c744e1c1425a83bc02
SHA1 e747510013de8ceb93fae885902edc09031d988c
SHA512 7bb205d203b0e2dc9e191197667091b122ef14c78d942b25b5938f639dce75c21dee9d58e5f77c3c061d751a362f22360299b835ca5d5da2a821ce57bec09ed1
SSDEEP 192:sxZKRXyM/jK1Ml8Mkk/fnsJBRJZIdpdMHW6+WNGYwKXtz/PIgrJ:sxZKlMk/fnsJBRsuHbGQ9
TLSH
T1D442F9016A34997BCCCBD209FA457F53D6F5453292910D44ADFCDA0C05E7AEC221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 a8850315f4be0ff81ffb87e240f8c42f31323b4e20110f22ca40ec8e111dcd35
MD5 2aed8a9f111ab9a4767f72676c1d2a1c
SHA1 90ef3ea7be6b70d62901184cc6bccb1b7ed38044
SHA512 16cb275144153bd2f3f654cf95d7c3d848214b409106f6cdb8ee5ad56750a94487f3802f46921a751e6af8ad6f1d29ffebdb1c5b48fe2bf8c7cbf35defa07fa7
SSDEEP 192:sxZKRXyM/jK1Ml8UQLkk/fnsXBxJZIdpHMHW6+WNGYwsMZz/PIg5uJ:sxZKlqgk/fnsXBxssHbGTc
TLSH
T10C5209026A38997BCCDBD219FA457F53D6F5457292900E44ADFCCA0C05E7AED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 675d54d4d60d89b36342d4233b543288036cc9f4369893698ef54b16ad684775
MD5 bbfb687ee4b7f14617b12a84fdaa3e5a
SHA1 a36284673ecc006e3d634775cf7742bbbedc3620
SHA512 d876385e614653790bb78022285c4d725b8511bc689b2e5668301fada2d25a60a34ac3c5077d00c481aeec47f31a3a0a979f917b462204d86c58d69443b74559
SSDEEP 768:+z4jeXmWvmKLE8F1+UoAYDCx9Tuqh0VfUC9xbog/OVhPLlrZ+d5rohpc7av:+z4jeXmWvmKLEu1jacPLZQdywg
TLSH
T174D20A3B284CCF7E4F844E5DEC2AAE976DD801CB6A584D5047FA894C03C76EB512B49B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 de2f05e59ec9d24dff68c69b4d831f3bc0498b66a2d4314f03b39164bb42fa8f
MD5 9c9ea1b8986a4eecc8a35d5a594daf3b
SHA1 995a0abf1382672037c344ae551705f3603668d5
SHA512 3911825a3e6fe6150747bdd531857ceec530a15fa1c14afe66227d8185a31a4923e287e0f1c2a01475baf72b85047aeed23beb0c87ade303456b7661adc1954b
SSDEEP 48:KceI3KLKIjy9lI5KGUc6VIVKO4APyZpolJv33+JH2lIEp+KXLfb+Txuey:Kce0KLKeOl2KGUNVGKO4SSOAKbCu
TLSH
T1D0B144A771BB5301783F160D93A4D63B894271A370A9A42B7F6814A65F27E109FFC8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cf89c2f5-4670-4a2b-bf12-4c10b22b4c90.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\cf89c2f5-4670-4a2b-bf12-4c10b22b4c90.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 4701c70b214d09ea08152b2b26fbba87e6c99236b590178dad89da585b7a5220
MD5 1bdd8a0f8a6392e95d4b1fa1f3c4d6d0
SHA1 14e7378c1f2c6e1efb5d022ddf460a00ecf7a363
SHA512 c645686a2dc4931541736118d5aa8af146a336f2709c69bba18bda3bb0b151179da6a0305580e854764140b505bf6878b6b086ddaf8187683f390a380e778e1a
SSDEEP 384:StNn/s3n9SfsNG4BFwz8Xf+j8IMX/+2xFJ93r3XXqld6PYYh:Sj+9Usvj/lLJ9zKX6P1
TLSH
T1E3927E365968AD3B4DD2E685B44F26238EF8816BD6C52F84D9FC5F0D01CB2AC131BA31
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 c50d26d860646df9725db04b48786023686db80e03254bf14478cdf2d08a7fe6
MD5 7a1cee10afadf592fc7d557b55b24d31
SHA1 e995f1c6e67a157e7cc38144e3e3672c0699ef80
SHA512 522036ff01d40a1c765ba6ec5d63c4be5105806eeb476dedaaa8c6d2d1edf30b4fd66fdc42e775167be52e4eb7e0f8b3d6e1a4c28c467b9958f85db3c88fb6fe
SSDEEP 384:XiF1tNn/s3n9SdezsNG8TUNTUlIl1BFwz8Xf+j8IMX/+2rFJ93r3XXqld6PYYh:SF1j+9w+fwgFvj/lZJ9zKX6P1
TLSH
T1C8A25B335958DD3B4DD29A89F54F26238EF441ABD6C26B94E6EC5F0D018B1AC130BE21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 5438341308c0606d705569f05145b2fb60366b4ba23a542f4f6074bf1c2a770a
MD5 73f0eee7a2b30ac82e27701588c9ea5e
SHA1 0922929b819345d068ee561a969b307a994ca972
SHA512 c83b4a7eb44fcd87418c14c18bcab6aca5b45e312528251055ae76a4ef473b8a412f3e8e460a1ccdc5188056726de4a90064bed2e93dc72066533d1208822f18
SSDEEP 192:EONJ6hZ0QmiUyyEpc/+jVRjzorIz5wOZJAhU6:EONJ6oapu+j8IK2ehU6
TLSH
T1A502DB3568687C7B8EE2AE45F48737139FE5116BE9956F84DAF81B1D00C769C2307832
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 d833bcd1e5342f0ce5546d662141086b35958d563dd244dda9f968d8626d070a
MD5 bd20fe3571151091f820c8e6d4881e8f
SHA1 2729b735df2c7e3194cda6ae4ec7cca65e714d0e
SHA512 cab974dc83d8a7c162d13a1ef1616b2fa2650e441e99d689bb0ca826c85f245e1304c4b89e2efe74df6bec229d5b12d6da667644c6969bf6f397eedbb41f036c
SSDEEP 384:XtNn/s3n9SfsNG1BFwz8Xf+j8IMX/+2xFJ93r3XXqld6PYYh:Xj+9UFvj/lLJ9zKX6P1
TLSH
T176927E365968AD3B4DD2E685B44F26238EF8816BD2C52F84D9FC5F0D01CB5AC131BA31
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 3fef1418a25417699dfb67f39d0748467e73aa7e77d58d89dc839d9aff0e72e9
MD5 35a4fd6869a2b30125bb4b1c3264d8f6
SHA1 2ea6ac0c2984a22beeeba63f66c535367b917909
SHA512 f55ca48c9f2a932f951a8e200ca1061178954f7efc4e3de27a1f52f079d3ec47b024bc7ad27005b2728c4bebce05304b36c1d8d3a0175f1a9444c8b957b45276
SSDEEP 192:EONrD6hZFQmiUyRElc/+jVRjzorIMXTr+2b5cOqVqoU6:EONH6nvlu+j8IMX/+2G9JU6
TLSH
T18C12EB366868AC6B4DD2A595F0C732239EE55227DAC5BF84D6EC1F1C05DB66C230BC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

42c71aec-78bc-433d-b7b7-146d3ddb6ab6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\42c71aec-78bc-433d-b7b7-146d3ddb6ab6.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 05b55052fe11f249bafd7b22f9d094a90c84ab821256bf417e3a9e8bc370faf9
MD5 ce4b5c7f937abf9193a6f6fe0f8362f4
SHA1 23cb12cce6a4cd3d8e366fbbc292a52b74b7cc62
SHA512 be6b70b583f2d2022bc50808cecd4b8f36436549ff0f8f06ff4217688f9146c478292d773133d20895616512d4763d7515be568bfb2a9e686e3de74e3c833d5a
TLSH
T1D9412B5866EE1148B3B3AF5A9BF6A96D547FB8732F06945E10110E4F0A23B40D872B33
MD5 SHA1 SHA512 TLSH

Submit Download