6d47baff519b6d709dd5269b3c02cdd9e4691529902e9bb05dc9e1a988fbc3b7

Analysis

max time kernel
148s
max time network
124s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
15/07/2026, 16:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
email-html-2.html
Size 13KB
Sample260715-tsrf3aby4x
SHA256 6d47baff519b6d709dd5269b3c02cdd9e4691529902e9bb05dc9e1a988fbc3b7
MD5 5d47916378bee74b4c87f4b7e46d9840
SHA1 d0564561165c81708559a6057bbe13904a88fc94
SHA512 8448a4c8dac04213acb56871c5fd3d38133f67a9bd3e10580b128cbe8ed8b8533e74f013be5f1c44dbba0d91e8ba75f2978e64426c584bb5cb624d23576d9161
SSDEEP 192:w3DkWwP7fzrSabTaHpwGiN0b6uSabwa69a6SabWYaPQmZKJiQTN/1iJ2HPaFC:SweabTaJw/JabwavBabJaiJ1icCU
TLSH
T1B3521C07C3847A1A51338059B212975CFDF243876B50BF91FAEC716667CFCA21A62E89
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4800	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134286059874843249"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-189034102-168398478-1159367937-1000\{53E07A15-B9B7-4C59-A065-130ED26C0FF4}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2244	msedge.exe
2244	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe
3416	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3416 wrote to memory of 1900	3416	msedge.exe	87
PID 3416 wrote to memory of 4800	3416	msedge.exe	88
PID 3416 wrote to memory of 1540	3416	msedge.exe	89
PID 3416 wrote to memory of 1540	3416	msedge.exe	89
PID 3416 wrote to memory of 1540	3416	msedge.exe	89
PID 3416 wrote to memory of 3396	3416	msedge.exe	90
PID 3416 wrote to memory of 3396	3416	msedge.exe	90
PID 3416 wrote to memory of 5840	3416	msedge.exe	92
PID 3416 wrote to memory of 5840	3416	msedge.exe	92
PID 3416 wrote to memory of 4976	3416	msedge.exe	93
PID 3416 wrote to memory of 5840	3416	msedge.exe	92
PID 3416 wrote to memory of 4976	3416	msedge.exe	93
PID 3416 wrote to memory of 4976	3416	msedge.exe	93
PID 3416 wrote to memory of 5028	3416	msedge.exe	94
PID 3416 wrote to memory of 5028	3416	msedge.exe	94
PID 3416 wrote to memory of 5028	3416	msedge.exe	94
PID 3416 wrote to memory of 4608	3416	msedge.exe	95
PID 3416 wrote to memory of 4608	3416	msedge.exe	95
PID 3416 wrote to memory of 4608	3416	msedge.exe	95
PID 3416 wrote to memory of 3516	3416	msedge.exe	97
PID 3416 wrote to memory of 1252	3416	msedge.exe	98
PID 3416 wrote to memory of 3516	3416	msedge.exe	97
PID 3416 wrote to memory of 1252	3416	msedge.exe	98
PID 3416 wrote to memory of 6072	3416	msedge.exe	100
PID 3416 wrote to memory of 3680	3416	msedge.exe	104
PID 3416 wrote to memory of 4372	3416	msedge.exe	105
PID 3416 wrote to memory of 4612	3416	msedge.exe	106
PID 3416 wrote to memory of 2508	3416	msedge.exe	107
PID 3416 wrote to memory of 2508	3416	msedge.exe	107
PID 3416 wrote to memory of 2244	3416	msedge.exe	109

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\email-html-2.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2d4,0x7ff915dac188,0x7ff915dac194,0x7ff915dac1a0
  2⤵
  PID:1900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1836,i,5199178222479166109,17573110109450842638,524288 --field-trial-handle=2660,i,3803196111472946522,419775945187343749,262144 --variations-seed-version --mojo-platform-channel-handle=2688 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1568,i,5134718339921221388,12013198304260997231,262144 --field-trial-handle=2660,i,3803196111472946522,419775945187343749,262144 --variations-seed-version --mojo-platform-channel-handle=2656 /prefetch:2
  2⤵
  PID:1540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2236,i,5417075815340724455,7785935448696155757,524288 --field-trial-handle=2660,i,3803196111472946522,419775945187343749,262144 --variations-seed-version --mojo-platform-channel-handle=2772 /prefetch:13
  2⤵
  PID:3396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3608,i,7043835723229305161,10617877528522294398,2097152 --field-trial-handle=2660,i,3803196111472946522,419775945187343749,262144 --variations-seed-version --mojo-platform-channel-handle=3640 /prefetch:1
  2⤵
  PID:5840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3612,i,18092186141555202176,14715159807487621778,2097152 --field-trial-handle=2660,i,3803196111472946522,419775945187343749,262144 --variations-seed-version --mojo-platform-channel-handle=3656 /prefetch:1
  2⤵
  PID:4976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4332,i,3045265279936257714,8146114740216544751,2097152 --field-trial-handle=2660,i,3803196111472946522,419775945187343749,262144 --variations-seed-version --mojo-platform-channel-handle=4468 /prefetch:1
  2⤵
  PID:5028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4344,i,10108124956960006755,18216454317644992134,2097152 --field-trial-handle=2660,i,3803196111472946522,419775945187343749,262144 --variations-seed-version --mojo-platform-channel-handle=4532 /prefetch:9
  2⤵
  PID:4608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5352,i,14714088572724128613,926944107950916409,524288 --field-trial-handle=2660,i,3803196111472946522,419775945187343749,262144 --variations-seed-version --mojo-platform-channel-handle=5384 /prefetch:14
  2⤵
  PID:3516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5356,i,6417743101762898846,2309952266561150084,524288 --field-trial-handle=2660,i,3803196111472946522,419775945187343749,262144 --variations-seed-version --mojo-platform-channel-handle=5424 /prefetch:14
  2⤵
  PID:1252
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6012,i,12706038992645450155,299381416429107123,524288 --field-trial-handle=2660,i,3803196111472946522,419775945187343749,262144 --variations-seed-version --mojo-platform-channel-handle=6028 /prefetch:14
  2⤵
  PID:1184
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6012,i,12706038992645450155,299381416429107123,524288 --field-trial-handle=2660,i,3803196111472946522,419775945187343749,262144 --variations-seed-version --mojo-platform-channel-handle=6028 /prefetch:14
  2⤵
  PID:6072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3600,i,11536481127512474059,14871735422978509658,524288 --field-trial-handle=2660,i,3803196111472946522,419775945187343749,262144 --variations-seed-version --mojo-platform-channel-handle=4908 /prefetch:14
  2⤵
  PID:3680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4524,i,16104892527167352130,11506806105181041561,524288 --field-trial-handle=2660,i,3803196111472946522,419775945187343749,262144 --variations-seed-version --mojo-platform-channel-handle=4588 /prefetch:14
  2⤵
  PID:4372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4528,i,10576400363258013364,9358706483297893106,524288 --field-trial-handle=2660,i,3803196111472946522,419775945187343749,262144 --variations-seed-version --mojo-platform-channel-handle=4852 /prefetch:14
  2⤵
  PID:4612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5476,i,3609647977932419758,804709168693195126,524288 --field-trial-handle=2660,i,3803196111472946522,419775945187343749,262144 --variations-seed-version --mojo-platform-channel-handle=5596 /prefetch:14
  2⤵
  PID:2508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5588,i,2765792913003799089,5325266253089781020,262144 --field-trial-handle=2660,i,3803196111472946522,419775945187343749,262144 --variations-seed-version --mojo-platform-channel-handle=5484 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2244

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2824

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2348

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 ae10af80c983ecdad438965cb208911f945e43bc36fe488247e2cd8bad97b450
MD5 f5ccd04bc3cab603843f2aa41a035cdb
SHA1 a4745772a8bc8f2c6e201e674b2ae558abaeb5f0
SHA512 e655264449a4bb6b25d28102be4b80887fc34a446f6baa3f02657035b3c41c200becbfdfe3947962121baf11f7b7315d8b709736af52453e82162331001d4608
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7A:fwUQC5VwBIiElEd2K57P7A
TLSH
T121B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7add6572365d752d8c3a090b9a256c43e3c5ff716f29ed7aa3c53dc57a08ba60
MD5 0da70f521ac5aee3489abf6e3eb4e375
SHA1 0f3cd9919820116ecc86bab93f4712c08485dc56
SHA512 a9cddd04863b2ac842fe4f91265c19a41d8b7442be8f07a91747705beca52c1e1d563e3c46cf68e1b73606695624f13ca69a8246653c2535d0684ced42c37d33
TLSH
T182D09BD479045D78C4C1353231A673155A616435DA5C46481051F3AACD65141667F5AD
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ffe13798c5910685872d371e84c30baa9eefaaa5db1419603eb30d473d7b2e37
MD5 03c111f9396889c77f6d9883c5df333f
SHA1 be65300843096dba92c5695fd35e2dffcbb7eb0a
SHA512 a77dfe3b48fcb72648f1adfafbf0d0fcd4d88690dcf41609a03e1d6b645d1336b6e322931b2205673283b920d20ed0225c6aa320a83a2d3a410771f18d120c19
TLSH
T1B1D09BD079145D78C4C1353231A773155A516435865C46481151F3BACD65141667E59D
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 1f22939cec183fa4c4c386f9237ddd6f540f47cb6d2fc4fe183f288fb29358b6
MD5 0683c74f7f2bd686a66298cbadc6eef3
SHA1 461b920b3ccfe1a81422d31548e0c1fa875f6ae9
SHA512 0b770d249b30267ddc11d2d0f6b8e6c7e022cc8bc84b8718f7a1101743a8221bd3cde362711ef23adb73fab22c99f9fae3f320f47ee111a63595f93f76bd6134
TLSH
T1B261F8143F2109A2E726F7B360A6D468F9E4476526037E22B0B05FF4B616E1464D07F3
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59210b.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59210b.TMP
Size 3KB
SHA256 40b45d21390b231c353a1eac01cd388aa3da1e504d16402e9c4cbd1d0ea0f97c
MD5 6dd0731ff3857439e3733abee45ca666
SHA1 c381a8f3d380cd72808ca8a0e0f70fae52d4a9b6
SHA512 01760d9f45bfc900649a38f9737e00b1b9c0f7afb4ee260e245eff469a65f22b014d823b50c62e02a412a8bbf9ab21f6463aba695634a51810e1004576f90d72
TLSH
T1F861F8143F2109E2E726F7B360A6D468F9E4476626037E22B0B45FF4B616E2464D07F3
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 064d148a83bb2a07920cf24b363783dfd33ed2baf3e747d4b76c1040780936a5
MD5 035324e944502937a28f86c627e0ca6b
SHA1 63aafc0844f5ae7a7167b5ad252b668b7dc628f2
SHA512 9391f1e53a231fbe3a43abc40e7852c17c1b9439285b25511e9275bc61b07b645b50254aa366f48e444e3edcff62508ca149d56934def1ebe02c77417c7f174a
TLSH
T1BF51CEF3C3E4967E8A0156F4AB146E2BCE1D0915432C7C6A89E4AF1BA3F2471E14199F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 9010aee39d09a10c1d695d3ae80c5df382cfcf55014d5e14025f3fa52607ed65
MD5 3fcbed48977d7b67c1b6df2beb549f3d
SHA1 2826e78250a0ce45f5b0825798711df826764b8d
SHA512 b1600f9289b1702624fe604b43c2a8ae2f8522858ffedc70c47f4a3bd4a19fc870ad8741ec3ffe21c87bd287cfa4f4d589e22e68f3d5639f717aae3ecc06c3ee
SSDEEP 192:sxRwRCyM/jK1Ml8UQIb//fvsWYj8bN5TzoA8pe6/g6+WNIYlzixGhIgDKJ:sxRwMqG//fvsHj85C1/5IbCy
TLSH
T10D62C616A6289D77CCDBD20DFA457B93D6F95473A2941E44AAFCCA0C00E6ADD221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 b95f6ed23a208ea05c10928f3b6a453671e5fdf266c0c8c5e6f5a2d17f49bb27
MD5 0ae3c1bbc1341dd33538ff87abb5535a
SHA1 465725c0bcab0729450c56c0d5ebb649be44cdc7
SHA512 ce460ac07cfa2610022e90a9ae23f2d437a6e29e2d049ee18ba167168af326d1b7ac252bcc93608f2908a005b8644dbb3af07d0893990cf8d418cd54371925ad
SSDEEP 192:sxRLRCyM/jK1Ml8wb//fvs7Yh8bN5TzoA8p46/g6+WNIYlBixGhIgIJ:sxRLMl//fvs0h85C3/5ITCs
TLSH
T14652D8166A249D77CCDBD20DFA557F93D6F95473A2901E44AAFCCA0C00E6AED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 48d3eed5da54f6f5818b654a703d6d8149f209f859d8043f1e1d3c459f9e9147
MD5 793e6db935e59e793c25736f76534c4a
SHA1 307c16f059ad87934742b5f0e7a9ccd73857e8b0
SHA512 0967beb6bf2779d0b99ca880b3622299459d12d961c3dcdb1f9e4e43e3df63e6a2007fc5cfe75f310dbcdfed02efd6bb4e16d219502ff4e4238d59d7e5eafcc9
SSDEEP 192:sxRwRCyM/jK1Ml8wb//fvsWYh8bN5TzoA8p46/g6+WNIYlBixGhIgD4J:sxRwMl//fvsHh85C3/5ITC4
TLSH
T17F52D816A6249D77CCDBD20DFA457F93D6F95473A2941E44AAFC8A0C00E7ADD221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 ac382ec7587c281dd91159ea04f6d9154b3dd41d8a9582ee97a94557b187b0b2
MD5 d54f3bb7871d7fc08c0be733e92d0f92
SHA1 a92ea910e07c8f79ddc4ade14cccb00a6e2a6387
SHA512 6d5d866bdd17090fcbfe12f7366cb6fcafb472817f25d75adcc960292286367b3f4e2d1c4eeff29327f7095f03c629cce18737027ff13eafb0d0849546f5477d
SSDEEP 768:dhRACxWgg+fAJ8F1+UoAYDCx9Tuqh0VfUC9xbog/OVL13fQroPc/u:dhRACxWgg+fAJu1jaulf70/u
TLSH
T1EAC2FC3F540CCB7E4F844A9DEC29AE976DD802CB97988D5447EE890C03C67EB521A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 f2e48a71f3c03ff165c8165d7ecaf664eae7fb6e772ba05c023087f4cf6609fa
MD5 1f2e6599abfc770c184995baa0cda031
SHA1 06da454d12b1f32be19300150ac90aa3f4aa3c54
SHA512 89c4cb687f1043740e25b71d4482775b575c7fca54ccc9a1dc79d1cfbf3c00d86eca1f4329861b28b04289f406d19ea8c5d153305bb035813065c7a07b4d1e4e
SSDEEP 96:KRxOf7JrvbWf8qgjbK4igtbcx50HPoH0VAE+imkWivPgMkK4BgGkckEP+XMwKVeM:CxOf7Jrv6f8bjhigtIx50HPoH0VAE+iE
TLSH
T1C8910811313A1A40387D6E4885F9A92A96D1B8B33059AC7F3BF801B51F2AE174FFD5C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59c039.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59c039.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 5b5431a4af74099e3bf787c50f980ab1b72f42f25ef45918a093e42017863622
MD5 0fb25941b9aeecef6050024c0ac8a13a
SHA1 a827c52524cceaaa00327ced41fff67bb306da25
SHA512 7f275ab451032f28543c5b0932c0a15c3279d3264ad0afd6b4ec94541925b40565264134bf5f9e2d1562c6193260d94db671d64541d484279572d61f6b085013
SSDEEP 768:Aj+9u3nPN8iJNl7NHXmTWTbc+HLG44Z71PCO:/9u32S9eWn1rG44B16O
TLSH
T13EF2BF71DCA79E27ADE686D8750B3F52AEF8027388C41D54C9DC6B4E01C7A9C035B92B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 06489001f71caa3b72fc51ce03566f3fe26e673b218db5ca4f6f64d308cb3b5e
MD5 58b761b2b7d4d2a6e3ac8ca092619685
SHA1 c6766671cf5d4672ccdf200271b8baa2db9d992b
SHA512 144c7b62172ca0821e58011776c138992275bf9f07e7573600643d615c87d1a46776ea4621a24afd777522b0598f5db5353423a44ef8e1d11e3f552104cf1871
SSDEEP 768:0rv+4UNbdM3xPi8iJNlgNHXmTWTbc+HLG44Z71PCpU:0bsby3PSgeWn1rG44B16pU
TLSH
T1AA13CF71ECAADA37ADF686D4B44F3A437EFC126385C40994C9D86B8D018789D131B92B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 1f40b5396eaad2e744fdcb2810243061e41aaf8c18b6014eb98a800aaa9520c6
MD5 4b9050d62e9097639221ee61ee5569f4
SHA1 e7be1fb3b553124009da3ede68f14102d092af3e
SHA512 c6cfaa26184286a2321aeb26e0828c17262b00a07884b04c05f51e6648ac39053a7f24bd79529b599ac3a084208451162b0959c96e4db2f537a02238062d178a
SSDEEP 768:1j+9u38PN8iJNl7NHXmTWTbc+HLG44Z71PCO:A9u3/S9eWn1rG44B16O
TLSH
T1B0F2BF71DCA79E27ADE686D8750B3F52AEF8027388C41D94C5DC6B4E01C799C035B92B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 c1e32ddf2ee4810211db452fae4479be78b54a60e98dc6567073781ad8fc6156
MD5 ba4f9a5b5d393442d8130f983208e3c6
SHA1 a2d0eca6c84846436d0e3055d66ac79fec464e79
SHA512 ace034facb28df4b20952468d4ae0aa53137cbaaa1c997c1c8d22da64902ca61eabe5531e64332499b0443f2d16dd0618a70d255737a081e7281644c42ea6382
SSDEEP 768:+9F1j+9I3FwgdPN8iJNl3NHXmTWTbc+HLG44Z71PCO:+U9I34SBeWn1rG44B16O
TLSH
T16C03B072DC96CA3BADF68BD8B51F3B51AEF402B388C42954D6C86E4D118759C0347D2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 30f9803eef42ab9ef419d77accf9041f0057e62e40f1d4a4628af8289afb6d74
MD5 09d53bfa57b10527fc1045d854b1ef84
SHA1 170ef16b220b9a30c1fbb85eec26ea666b5b7a6f
SHA512 05e8d43b0ad8262050c3fa5b8891d14de2b24f30b5deceec344652b243df92ddde49d2b62f3bc9b6c33343737daac33ad624b9f787f8080e228afc9283c5f5c0
SSDEEP 768:arv+4UNbdM3M9+iJNlINHXmTWTbc+/PeVH1SvyZ:absb+3pSoeWn13EH1dZ
TLSH
T13D03CF729CA98E37ADF69788754B7B573EF8116389C40AC4C8D96B4E428748D130BD2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download