2f9288275bb98461dcb1b2f7ef742264e3022ad953ab31e55ee729e144c8056f

Analysis

user interaction
yes
max time kernel
149s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/07/2026, 07:03

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
email-html-2.html
Size 69KB
Sample260710-hvcvxae16k
SHA256 2f9288275bb98461dcb1b2f7ef742264e3022ad953ab31e55ee729e144c8056f
MD5 b6d0719b3282f393660022cbcc9bda49
SHA1 7a15617b78f41393b3ffdd442c7bd8038d052153
SHA512 8705de1c9be3f9fd2c88889f6506bcedac6c2f14499bf5dccc9d8cca8fdfe72c1b369e9db303e3c30f6e17a2e0a1a0d7d30b5155514eb507321430915727aab5
SSDEEP 1536:Q7BmOTcUOTAuUeAbwdTQnce/eX1oP4NeSpdVPXc:wSMusPmX1I4Na
TLSH
T11A637523F7C21C59D7768A70B1536BBCBB7002DA4B6109BC9892673B664CCD748E5F88
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5056	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134281406009630149"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-889581200-2041691093-2048517887-1000\{D334DB1E-3FB2-4B2E-BE4B-4138CDCF70FB}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2620	msedge.exe
2620	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2184 wrote to memory of 648	2184	msedge.exe	82
PID 2184 wrote to memory of 5056	2184	msedge.exe	83
PID 2184 wrote to memory of 3764	2184	msedge.exe	84
PID 2184 wrote to memory of 3764	2184	msedge.exe	84
PID 2184 wrote to memory of 3764	2184	msedge.exe	84
PID 2184 wrote to memory of 5008	2184	msedge.exe	85
PID 2184 wrote to memory of 5008	2184	msedge.exe	85
PID 2184 wrote to memory of 3428	2184	msedge.exe	86
PID 2184 wrote to memory of 3428	2184	msedge.exe	86
PID 2184 wrote to memory of 3428	2184	msedge.exe	86
PID 2184 wrote to memory of 3552	2184	msedge.exe	87
PID 2184 wrote to memory of 3552	2184	msedge.exe	87
PID 2184 wrote to memory of 3552	2184	msedge.exe	87
PID 2184 wrote to memory of 872	2184	msedge.exe	89
PID 2184 wrote to memory of 3372	2184	msedge.exe	90
PID 2184 wrote to memory of 872	2184	msedge.exe	89
PID 2184 wrote to memory of 872	2184	msedge.exe	89
PID 2184 wrote to memory of 3372	2184	msedge.exe	90
PID 2184 wrote to memory of 3372	2184	msedge.exe	90
PID 2184 wrote to memory of 4924	2184	msedge.exe	95
PID 2184 wrote to memory of 4924	2184	msedge.exe	95
PID 2184 wrote to memory of 5084	2184	msedge.exe	96
PID 2184 wrote to memory of 5084	2184	msedge.exe	96
PID 2184 wrote to memory of 1820	2184	msedge.exe	99
PID 2184 wrote to memory of 1528	2184	msedge.exe	118
PID 2184 wrote to memory of 972	2184	msedge.exe	119
PID 2184 wrote to memory of 4936	2184	msedge.exe	120
PID 2184 wrote to memory of 412	2184	msedge.exe	123
PID 2184 wrote to memory of 412	2184	msedge.exe	123
PID 2184 wrote to memory of 2620	2184	msedge.exe	126

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\email-html-2.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ffbe706c188,0x7ffbe706c194,0x7ffbe706c1a0
  2⤵
  PID:648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1764,i,2933360045253721326,1301834829695847396,524288 --field-trial-handle=2136,i,15839747242658976197,4616137024460287797,262144 --variations-seed-version --mojo-platform-channel-handle=2236 /prefetch:3
  2⤵
  - System Time Discovery
  PID:5056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1636,i,10445145159396800998,10878272477326417538,262144 --field-trial-handle=2136,i,15839747242658976197,4616137024460287797,262144 --variations-seed-version --mojo-platform-channel-handle=2132 /prefetch:2
  2⤵
  PID:3764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2612,i,3868745464991499310,9687772439009987901,524288 --field-trial-handle=2136,i,15839747242658976197,4616137024460287797,262144 --variations-seed-version --mojo-platform-channel-handle=2628 /prefetch:8
  2⤵
  PID:5008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3444,i,18361538772256025421,5772875872964583651,2097152 --field-trial-handle=2136,i,15839747242658976197,4616137024460287797,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  PID:3428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3448,i,4723896116848633575,2391330238631720998,2097152 --field-trial-handle=2136,i,15839747242658976197,4616137024460287797,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:1
  2⤵
  PID:3552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4248,i,18054266351149876260,1399212387894032688,2097152 --field-trial-handle=2136,i,15839747242658976197,4616137024460287797,262144 --variations-seed-version --mojo-platform-channel-handle=4260 /prefetch:1
  2⤵
  PID:872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4316,i,552039188935017825,3511899571688572679,2097152 --field-trial-handle=2136,i,15839747242658976197,4616137024460287797,262144 --variations-seed-version --mojo-platform-channel-handle=4356 /prefetch:2
  2⤵
  PID:3372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5116,i,6940001606669924432,6846943462204838264,524288 --field-trial-handle=2136,i,15839747242658976197,4616137024460287797,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:8
  2⤵
  PID:4924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,12173799928751390420,7212630168265248424,524288 --field-trial-handle=2136,i,15839747242658976197,4616137024460287797,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:8
  2⤵
  PID:5084
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5832,i,17726295515987793347,3195619433128584955,524288 --field-trial-handle=2136,i,15839747242658976197,4616137024460287797,262144 --variations-seed-version --mojo-platform-channel-handle=5864 /prefetch:8
  2⤵
  PID:2028
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5832,i,17726295515987793347,3195619433128584955,524288 --field-trial-handle=2136,i,15839747242658976197,4616137024460287797,262144 --variations-seed-version --mojo-platform-channel-handle=5864 /prefetch:8
  2⤵
  PID:1820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3684,i,15458436296681092389,14140773015369979024,524288 --field-trial-handle=2136,i,15839747242658976197,4616137024460287797,262144 --variations-seed-version --mojo-platform-channel-handle=4356 /prefetch:8
  2⤵
  PID:1528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4348,i,16807618884478770749,187954211297755452,524288 --field-trial-handle=2136,i,15839747242658976197,4616137024460287797,262144 --variations-seed-version --mojo-platform-channel-handle=4556 /prefetch:8
  2⤵
  PID:972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4352,i,5431957649889359932,2159114922767766819,524288 --field-trial-handle=2136,i,15839747242658976197,4616137024460287797,262144 --variations-seed-version --mojo-platform-channel-handle=5868 /prefetch:8
  2⤵
  PID:4936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5280,i,9549541278749690573,17621696362334899557,524288 --field-trial-handle=2136,i,15839747242658976197,4616137024460287797,262144 --variations-seed-version --mojo-platform-channel-handle=5472 /prefetch:8
  2⤵
  PID:412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6148,i,4697839432133010976,14671091851671936199,262144 --field-trial-handle=2136,i,15839747242658976197,4616137024460287797,262144 --variations-seed-version --mojo-platform-channel-handle=5824 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2620

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2008

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 11d3c4c52f9fc9cd2b10a22b48769759f994fd6364f9a0fc145f4cd2c2a22e9d
MD5 4751cf705a737c4226029624bf43b9a8
SHA1 fd8cf726ee3f8f75b97147829de5553530caa82c
SHA512 46e3fedbf7fa14bdc2b3aad129f2879a9d24252f5d7bd9b55766bc32a6b82ea77aaf193bcdbdf4423e3b67ef84955e589b6077609344091ef72204c1d50b0dab
TLSH
T17ED09B307A58A58BD14360F1A4114B4115375557205397757521508E9E98055B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 701082e4ac35f878dc5ff6eb27989aae9d20d9b5662643e20b3acd1720b367fc
MD5 2b3686986ce1fd99f079eb226e8b0a8b
SHA1 0d2cdee36351378b91ed7f6ecdb43457fe4d7b5d
SHA512 937da61c495fd21a02bb76a63556dec83ce132f1d1830ff8d9af6212d15f1844766dd4abadd15ea61b48f8ae03b52baca44c99117714c705da840dbff8f116dd
TLSH
T182D09B303A58A98BD54360F1A4104B41153755572053D7757521508E9E99095B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 bfaef01e6e2c86263fcc0d5f2e98cb0b9ba00a53b32ae40fd5389475238dda18
MD5 761d8d84cea94203d894f213ae2d3a6d
SHA1 72392b4a5f07e4b5fa45d02a14cb12a0f8a9fb56
SHA512 1c3cb46dc7f34abd0d1a141ad654d1fe9d86ec10d94154f91f1d07ccb8a8ad81722ff090dc53d74fa05fdb39d76f33e1cb0b8489056addc8bb4a206eaef327a8
TLSH
T12C612D3800555C53E7C52133D4FFC94074B585DAFBA3DE2691336CBD660E725814DAD8
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58d6f2.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58d6f2.TMP
Size 3KB
SHA256 c1c2c62dea872744d4813cc63b2d24cdcc58986f719eb79c2b5d52789549f497
MD5 e6ed9f84fc5a14194c8132cf7f7b46c0
SHA1 a420fed39c0087ac7729970745bc72f8be7a465e
SHA512 14f0c028dc2d8dd33c6bf565e6118858fd9dec7586aa0a35482006c9509c5d61e31b27d7b0a12321301f1fffb4ed9c4e9498be186db06cf5af1bb98258ef657a
TLSH
T146613B3800454C53E7C52033E4FFCA4074B985EAFBA2EE2691336CBD6A0A729804DAD8
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 482c63142b6ec316cd1789bfddb8570cb7db9da12272808d0cfcd4a3483bc196
MD5 62a609a86771d0aa79ebd65fab6c0c4a
SHA1 4d29480e65d92aa020b097c337b951ea45bd3f41
SHA512 d048c452cda4f7d126b7b44f6557270aba7f4212e52771ac0a51b18caed7a9ab84f787e6bbca1af3b6d5c788d715410baa61c3a5097794b9fd7d49211b7b3a1c
TLSH
T111419BF7C3E4866ED92156F4AB247E1BCE1D065652283C5AC9E4AF4BA3F2070E10169F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 6f09ee889f82f234ad9a7f8cc881fbe8371890514060abe4fe89588d83038db4
MD5 95497bc2a73f5b8629a01f37124ea5af
SHA1 d39e478479b75dcc48ce11b4384fb5778d1c1b13
SHA512 61a8232e50318778765d6906a360456262dd50abf2ea919d6da51be27f356d5535a1b8918829e25aa26524e54c20201547b07e0b14795e3ba925681202bf0ed2
SSDEEP 192:sxZYRNyM/jK1Ml8UQqkJ/fdsDBNnIdpHgHW6+WNGY9ItkzbqIg5GtJ:sxZYFq5J/fdsDBKAHbGTA3
TLSH
T12D52E812AA349977CCDBD609FA55BF53D6F8557292900E44AEFCCA0C04E6AED220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 0e32a8a8d555e8e1ef66413ebe9991a5da8e392b80e5794506c47a1ba3f9be89
MD5 1ac0faef622bdcbbf4885e467cbe5542
SHA1 ce313fdd675c794246a3a7422ae6c25b3712b120
SHA512 18bf9ed8859b4ca0e00268f18c51a7fbbbb093a7663aee82b082fdbd0ff727f43ad978f66f035b5d44f566277925e57fc126b29ac3a8526d150e06046c1cec33
SSDEEP 192:sxZYRNyM/jK1Ml8MkJ/fds7dNnIdpdgHW6+WNGY9IKpzbqIgrJ:sxZYFMJ/fds7dK+HbGr9
TLSH
T1A842E9126A34997BCCCBD209FA55BF53D6F9457292941E44AEFCCA0C04E6BED220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 707721d3aaf82cc0d7d447ddc465ac70cb6efb6b288e0e27482a5b428dcdea35
MD5 c40eb45535742b1b2a0e3dc74d4a181c
SHA1 69ec01b215d1f3435e076770d8dc8c7349f82a92
SHA512 b04eb80ef71e46627b775b01f0fa66b3fd49d3c5993daea88812d81cc961b7583b421aa183fe0598c3a86bb0c8f710421c54637d02ac66c210725d333b735f33
SSDEEP 768:/Ecv21wWvu+Z+8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjFLlwmWNEroOg6K:/Ecv21wWvu+Z+u1jaeFLeRNPOa
TLSH
T18AD20A2B280CCB7E4F841E9CED2A6F866DE801CB57988D5447FA894C03C77EB511B59B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f2161cd9-6bab-43a4-930b-e1768327bc89.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f2161cd9-6bab-43a4-930b-e1768327bc89.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7f4af7ae-d8e2-416c-9128-88813e0769d0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\7f4af7ae-d8e2-416c-9128-88813e0769d0.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 805cdcf960e50a8c1d64c080dca6440deedb62bd37492afeab9818dd078727a9
MD5 32c17d035a6ee79a7504e1ef25e312b0
SHA1 2e1b2c5346f507da862dabd2f995077901b13978
SHA512 56ccd0487fa85bb8925526b9d8d4ca38f132869f94141ad78d34850dcc1e312fd07b8e878dd82528a513cd2753ed357c566eea8c78428c2895da5f273fa68164
SSDEEP 384:KiF1tNn/s3n9SVzsNF8TUNTUlIlxMwjzig+ie+CeODejhuPDVcl1lIO7w/RAv0O:BF1j+9eMwgFoV2OijhuPDVcLCO7w/R8
TLSH
T157A26C3298648D7BADE69F99F50731079EF88177CAC66E90E6CC6E0C01CF29C1306D14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 28aed281f539590f6602a4a28f6867d72a4e1724acb528ab6f8b1f3fa286f265
MD5 02e5cedd079a97eeb8f90619a5e55a44
SHA1 dc81bdb35ee033d5c711518b2b7569326266a759
SHA512 450b522bee57f74441df77a886fa59045bd55e3e54247bc3c8c30e33a61a0a32a71c2acfb72971edce618d55c5156c5ce287e8c3934ed7cc45660506cdf4c23c
SSDEEP 384:HtNn/s3n9SfsN7IMwjzig+ie+CeODejhXPDVcl1lIO7w/RAv0O:Hj+9UBoV2OijhXPDVcLCO7w/R8
TLSH
T13E928C31A8395D266DE2AA99F507350B9FFC90739AC62F80D9DC7F0D02CF68C1306929
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 366c901ae7aeb030d349613a86b2b86d2be8174b3f07f13a2378cf55716ed3b7
MD5 c998bebeb3c19eadce38f76c0df829e3
SHA1 9270604042b58e52422c53c21c4a577ef7adf35c
SHA512 c8519997bcbd3e3b5cf9a9361ff58126b15948bbc5bea55dcd4f911bdce17493fb9716542b567c98438357cc0b2b052958fd47464210f1ee901cad9e5dbcc2f6
SSDEEP 384:PtNn/s3n9SfsN7xMwjzig+ie+CeODejhXPDVcl1lIO7w/RAv0O:Pj+9UqoV2OijhXPDVcLCO7w/R8
TLSH
T1DA928C31A8395D266DE2AA99F507350B9FFC90779AC62F80D9DC7F0D02CF68C1306929
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 d1e6f39c87debd3d52d6b759df193fa06e6c1ec10bec94164e1f7144d1e74fd9
MD5 77baeb033f29dfaea90abaa80bd2bc2e
SHA1 87da662b35dfcdc9217d220ef32032bd91ffca6a
SHA512 06e7778730ecb18b1d05664370c313f51aae1f28427cedee3e6402eaa18a8d7b844ddb938a086c52b3fdf22a834a8292fa333737dd87fa45b1ec446e73f8bdaa
SSDEEP 192:JONj6v+YLNQmiUyXsZh+CGLOD9oqusNZU6:JONj6vz/BZh+CeODeMTU6
TLSH
T1FC02E835BD281C7B9FF2AE45F98736239FA8117BE5952F80D9E82F0C01D765C2346826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 8d7aca74deb19b14b6dec6357a3006ff1b6e687794e60a6abb54f281c918aeec
MD5 e83b829009d350ffe00269a3adeef0f0
SHA1 5930541a857c9617da9e493dd018928c7a1b9c3d
SHA512 15f61425717ac7a7c15a3d54079a2af2ad7a7d3685dd18f7de83ab1305a9bab10995dc1a060a79ea8205f0b8710db8aec08d949699575e32929ba23724649f89
SSDEEP 192:dONm6v+YLHQmiUy1s+h+CGLOD9ojhcCHaq3U6:dONm6vztj+h+CeODejhVPU6
TLSH
T110122C36BC385C676EE25995F48731139EA95137EA8A7F80D5DC3F0C01DF69C234A826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cf06cc72-9495-40bd-ae97-6348a68f195e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\cf06cc72-9495-40bd-ae97-6348a68f195e.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 0e74010b2144522f1a66bbcb53280c7a3245e877dddbf05d7023ed30daa59d76
MD5 11332c5b64173af7cfc5ff6010c99171
SHA1 183da35b3606316990ed900cbbacca72aecde925
SHA512 46ea1cd76104292eef92b70e6d90d5fd26192c35d4942c378191417d6ed9d4e5dde6d46181157befa241d2f2ff26fdbbafdf190921d2748aa0e069812c714d97
TLSH
T1C1412A98A6E91159B3B76E46AFF6A86E487FBC372E06D55D10010E4F0A22B40CDA1737
MD5 SHA1 SHA512 TLSH

Submit Download