ef4188197de92af29916a4da56f10d831e807ffdc63fdb7f8a9a41a332301bef

Analysis

max time kernel
148s
max time network
144s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
24/07/2026, 04:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
email-html-2.html
Size 7KB
Sample260724-e1q3yagk2v
SHA256 ef4188197de92af29916a4da56f10d831e807ffdc63fdb7f8a9a41a332301bef
MD5 e0d272c5a9a95fbd68b918893c550d6c
SHA1 639db76327d3a7f7074034554f881018fb090e3d
SHA512 2b3dd737850ce3aa76b082c01e8804e0d1b34196c52c8ba021e02d0b657cfc754c4f6add09b073ed7a930ffccd713b7e6e9bcf1a3a5c07700ecc8641178dbaf0
SSDEEP 96:2ustkxdhKbvloJyVJODiLg9u5FVNKKHjOLOk6HKYL6k5uLBrDmtX/CG5IVa5ZTR4:E+EbvOoa9um2kPYL9SrD0XqGUaDR4Xsq
TLSH
T190F1D671C680210F5A67A491F020FDDBB247436B9B9F0A1CFDAA1B2FFC5887124027AD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
560	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134293407088091257"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-876885714-46325919-1482798410-1000\{BE3341A0-7C80-41FB-A794-0A62B665762E}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4104	msedge.exe
4104	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe
1104	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 1104 wrote to memory of 3708	1104	msedge.exe	86
PID 1104 wrote to memory of 1620	1104	msedge.exe	89
PID 1104 wrote to memory of 560	1104	msedge.exe	88
PID 1104 wrote to memory of 1620	1104	msedge.exe	89
PID 1104 wrote to memory of 1620	1104	msedge.exe	89
PID 1104 wrote to memory of 2368	1104	msedge.exe	90
PID 1104 wrote to memory of 2368	1104	msedge.exe	90
PID 1104 wrote to memory of 4512	1104	msedge.exe	91
PID 1104 wrote to memory of 4512	1104	msedge.exe	91
PID 1104 wrote to memory of 4512	1104	msedge.exe	91
PID 1104 wrote to memory of 4656	1104	msedge.exe	92
PID 1104 wrote to memory of 4656	1104	msedge.exe	92
PID 1104 wrote to memory of 4656	1104	msedge.exe	92
PID 1104 wrote to memory of 2252	1104	msedge.exe	93
PID 1104 wrote to memory of 2252	1104	msedge.exe	93
PID 1104 wrote to memory of 2252	1104	msedge.exe	93
PID 1104 wrote to memory of 2692	1104	msedge.exe	94
PID 1104 wrote to memory of 2692	1104	msedge.exe	94
PID 1104 wrote to memory of 2692	1104	msedge.exe	94
PID 1104 wrote to memory of 2608	1104	msedge.exe	101
PID 1104 wrote to memory of 2608	1104	msedge.exe	101
PID 1104 wrote to memory of 2884	1104	msedge.exe	100
PID 1104 wrote to memory of 2884	1104	msedge.exe	100
PID 1104 wrote to memory of 4512	1104	msedge.exe	104
PID 1104 wrote to memory of 944	1104	msedge.exe	117
PID 1104 wrote to memory of 632	1104	msedge.exe	118
PID 1104 wrote to memory of 4824	1104	msedge.exe	119
PID 1104 wrote to memory of 2824	1104	msedge.exe	122
PID 1104 wrote to memory of 2824	1104	msedge.exe	122
PID 1104 wrote to memory of 4104	1104	msedge.exe	124

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\email-html-2.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x25c,0x7ff8c69ec188,0x7ff8c69ec194,0x7ff8c69ec1a0
  2⤵
  PID:3708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1984,i,16205156409684865077,15146127635556251084,524288 --field-trial-handle=2388,i,11850844344870721038,5108801473114491218,262144 --variations-seed-version --mojo-platform-channel-handle=2620 /prefetch:3
  2⤵
  - System Time Discovery
  PID:560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1788,i,11652845571859781350,6526643431738039625,262144 --field-trial-handle=2388,i,11850844344870721038,5108801473114491218,262144 --variations-seed-version --mojo-platform-channel-handle=2384 /prefetch:2
  2⤵
  PID:1620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2284,i,7692452691151854046,836399523661380539,524288 --field-trial-handle=2388,i,11850844344870721038,5108801473114491218,262144 --variations-seed-version --mojo-platform-channel-handle=3144 /prefetch:8
  2⤵
  PID:2368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3444,i,14843062523760385280,14385743938901032335,2097152 --field-trial-handle=2388,i,11850844344870721038,5108801473114491218,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:4512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3448,i,5769182227033581156,18100073203825122481,2097152 --field-trial-handle=2388,i,11850844344870721038,5108801473114491218,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  PID:4656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4180,i,11613739549666724678,15131042052579704604,2097152 --field-trial-handle=2388,i,11850844344870721038,5108801473114491218,262144 --variations-seed-version --mojo-platform-channel-handle=4220 /prefetch:2
  2⤵
  PID:2252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4172,i,6083211095757272737,1103789271915663454,2097152 --field-trial-handle=2388,i,11850844344870721038,5108801473114491218,262144 --variations-seed-version --mojo-platform-channel-handle=4208 /prefetch:1
  2⤵
  PID:2692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5136,i,828603134166457595,12510578251161490112,524288 --field-trial-handle=2388,i,11850844344870721038,5108801473114491218,262144 --variations-seed-version --mojo-platform-channel-handle=5192 /prefetch:8
  2⤵
  PID:2884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5156,i,8613850411353450134,11556434788134494570,524288 --field-trial-handle=2388,i,11850844344870721038,5108801473114491218,262144 --variations-seed-version --mojo-platform-channel-handle=5212 /prefetch:8
  2⤵
  PID:2608
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,1491757333319163214,336791912495422528,524288 --field-trial-handle=2388,i,11850844344870721038,5108801473114491218,262144 --variations-seed-version --mojo-platform-channel-handle=5904 /prefetch:8
  2⤵
  PID:4428
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,1491757333319163214,336791912495422528,524288 --field-trial-handle=2388,i,11850844344870721038,5108801473114491218,262144 --variations-seed-version --mojo-platform-channel-handle=5904 /prefetch:8
  2⤵
  PID:4512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4432,i,1045828408041903451,10570311837120568782,524288 --field-trial-handle=2388,i,11850844344870721038,5108801473114491218,262144 --variations-seed-version --mojo-platform-channel-handle=6364 /prefetch:8
  2⤵
  PID:944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4416,i,9313133481528811702,1939883154937531191,524288 --field-trial-handle=2388,i,11850844344870721038,5108801473114491218,262144 --variations-seed-version --mojo-platform-channel-handle=6376 /prefetch:8
  2⤵
  PID:632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4420,i,6212247003214931307,14987943563587431961,524288 --field-trial-handle=2388,i,11850844344870721038,5108801473114491218,262144 --variations-seed-version --mojo-platform-channel-handle=4356 /prefetch:8
  2⤵
  PID:4824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6376,i,7650140249270471550,5613425852181122517,524288 --field-trial-handle=2388,i,11850844344870721038,5108801473114491218,262144 --variations-seed-version --mojo-platform-channel-handle=4360 /prefetch:8
  2⤵
  PID:2824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5980,i,8776886031694718927,14260846248665587640,262144 --field-trial-handle=2388,i,11850844344870721038,5108801473114491218,262144 --variations-seed-version --mojo-platform-channel-handle=6148 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4104

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2172

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 083d78ea5ea69126b24164f2e05fc467ce21fdcdf2ec67f8e94c4366a1284886
MD5 da79f81681859af2b76762aa37a5f73e
SHA1 53d69c959eb46848bc7ed7b5c480df864295389e
SHA512 f647681c342e36fa2f41fb9d54d089303f98b802703a42609226ef5755aafc91ef00af41a82f980c0f2819709322c59ef6cd1c18725ef5133691894902fc44c1
TLSH
T1FCD09B7077CDAC11D5450471D45547535D96CA4C24D7DB076011801D68557D9B35E067
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 965e5ede1dd95e7182bc6ed8b645e4796c53616af10fe7a02b411984e0f5fca1
MD5 252c38f22d645a5fc39fa9f1fdd92b34
SHA1 70c6079cc3ffdcb0efb6f56834b64311e1e951bc
SHA512 e23e1b164567d933593229d39744ddacb3330f715193f293c7aee9a5a95fc433809933ab830a7a1c5cdf37824965c32650c227083092c2a6488a2ab768744ad1
TLSH
T110D09B7077CDAC11D9450471D45547535D96CA4C24D7DB076011801D58567D9B35E067
MD5 SHA1 SHA512 TLSH

Submit Download

462629c9-7c43-45bb-83f3-1cd509c3d32d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\462629c9-7c43-45bb-83f3-1cd509c3d32d.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 a15aa72500b0e15de333d9792ced5117067fc2722ca088dba45b4ae559563485
MD5 b17fa0100a8f909a18a246dccefc3f91
SHA1 7f3dbd40a9debfed4bbdb0f67cc1199bbb02c81b
SHA512 1f033e5ae5796a54aa10d19aede14b62c571e169b4bdda9d77b821c8007cf32a635890cff60f775475713a783b52ec1af1bcc94a5ab6ec4b427bc15d62f14356
TLSH
T10A61D52A02B35797F322323CD4E34A13F3738484197B8E77464445FE7A39B229729A6C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58d8f6.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58d8f6.TMP
Size 3KB
SHA256 0cf25832b929703aceca9cf1940a0a8ff1bd4eacef5cc34bd26e9168a5609401
MD5 c83cc8968cc34ed02d8cd7b18afb0a50
SHA1 d2611e89d7fb49c9e43893831425db35b24a55b8
SHA512 b3862c8f435cfb7a6e3d45a92be0e12b7352de8b44a4f4a208757d0c34d2cf072a93bec41e286ec8c53fa32c82b6ac18dcc1ab5da442a7f0f2ce3f5cb229712e
TLSH
T1D161D62A02B35797F322363CD4E30A13F3338484197B8D77464405FD7A39B12972966C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 92b0ffa5b359a1a3eb041b1125b229f3fb2ee7e3ccb7693d89df91e6c12e6537
MD5 ea93ae2b37c297614a8e1fb7e1bf7d04
SHA1 6d2d35ad74c4e1f7f3f9ec3fedf562a958524c5a
SHA512 b5c43374a9be2bb6a7724280f0e3a04ca7e82600ce8bc76892501a30034d238726624b9d8c05436391cbc65c9fa28bea8227166f1544e898da550a4a424c5076
TLSH
T192214FF7C3D5956E890156F06A18AE1BDE1D0546822C3C16C9E4FF1B93E3475E10159F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 5d41ad53db31e2a2b89fc420db481893e040392b66c501dc6a8d767d30132680
MD5 fad82a0c4e6cef675a338cb6f27fe775
SHA1 2b64b6b8938b0623397b4e88aa74e364b4b18237
SHA512 55d608f30c7fb0e2dd6c8652661f40a2d8db1536c8d5c587b902501bde3c475eb792570311e6d33bb115fae2872c5b7d055403dbcebae90c572ba16655520836
SSDEEP 192:sxZORkyM/jK1Ml8UQxky/fDsHqtIdpHAHW6+WNGYwaDiJIg55J:sxZO6qCy/fDsHqOgHbGlp
TLSH
T1B552D6166A349977CCDBD209BA41BF53D6F54472D2901E44A9FCCA0C05E6BED231782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 0691f2dbfe6b76018c60aeb362fec802e552f9e8864e98f823636d040fa52f6f
MD5 a6597cc3aba95119796050df16aae928
SHA1 3596f047d4de1b27c36fdcc93d9a77ed6eac3026
SHA512 de38ec96f6394f12590c0fb19d02f74c186075bc46d169d6a6a6f5cc2ec68fc92daa1bf3f3f186cd8beca24930271918bc99009ba60efdb1001022b448fb8e4e
SSDEEP 192:sxZORkyM/jK1Ml8Mky/fDsbRtIdpdAHW6+WNGYwK2UJIgrJ:sxZO6My/fDsbRO6HbGI9
TLSH
T18942F7166A34997BCCCBD209BA41BF53D6F50472D2940E44A9FCCA0C05E6BED230781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 87e0e9845a395f5f3805ffb5eb49a2f095b1e6bd88bd0ff8160d8c104c6a80bf
MD5 be96090a1206c1aa9d33f3cf068e2741
SHA1 8c9c6b4da00b850e329221b56d43f091508093c1
SHA512 e844ef8b42eed986594ea58c950618464fc36801f4a7c81d3c0c4697f86bff7bb2c2bd38e54bfba12e2b638b5886188588879f2c2206a41bf9b974de6d53930c
SSDEEP 768:J24jeXmWvmKLE8F1+UoAYDCx9Tuqh0VfUC9xbog/OVhPLlrZ+dyroh8clam:J24jeXmWvmKLEu1jacPLZQdp9T
TLSH
T18ED2093B280CCB7E4F844E5CED26AE976ED801CB6A584D5047FA894C03C76EB512B49B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 49a61b3d7041f96ad8958041177a7464cd64adc7ba03c35747a9caa357e22df9
MD5 bcd7a337c493c0cfc74d039da0efbf2b
SHA1 5c0c5dab561c65bb5962f40d23b6f7278356dfaf
SHA512 4e50f3d37ad0608f641c18e6358145a71c512bc20e78fc65f5f585cfaa2ecdc68edde6cafb56bdebdc8740a1614e650d25b7f6da62bb4099abf8a2f71bf185af
SSDEEP 24:KdKf9G3asdAc44o0+rIji4KibhaU41EioSmWM/8qVyXYof/sdaCdK6W4KG+dIjAZ:KAzIhK0YMHy1JIhKa88+HINK4EYLy/
TLSH
T11591011734BB93513C3D6A0D935996668E81B1A37114E57B3FAC10720E2BE618EFE8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe597565.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe597565.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 74909049666e1f95eb70057fc649d451b297031af3b0a54f2f01f5a92d43e576
MD5 6fa284b50c9d1c474c0ea7b97232e0e0
SHA1 bb248b8e76807da3c38fc9d43b88a2abd2954266
SHA512 b523d1ac6dfb8438879423d505aafd78b24bf5b4fcd7027350f8fb06b7105499eb543b64d5612d7574e99f593d0f82229ad2d2a0e1ad935b561f39ee294ea563
SSDEEP 384:YZcIhsNK6NfcHf+2/d9Y45QFmOObjI9G6w7At:mh3/b+m29MAt
TLSH
T1B0928E326C385D374A97A551F48736238FF4817BD7D47F84E5EDAB0C019AAAC130A816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 d54406bc73e67590d79fe61f7910844642ff958cab836ecd73627d1fb3578e90
MD5 a3b9fcc25dd7851f2d0a0d46bf8508df
SHA1 b7aa0ba41d491ed6495c8e20fb19986644f2826b
SHA512 947748eaaf61f6021962396d839783bdb806f7b97f553d16cf507ad3a14204614da8839797121c68da1862026150bb9abd470397cba62e2b6d7b90c9e2eb0733
SSDEEP 384:ziFiZcIzzsNS8TUNTUlIl6NfcHf+2/d9Y45UFmOObjI9G6w7At:eFQX3wgP/bym29MAt
TLSH
T112A27D335C68993B9EA79A51F48A32138FF44177D6E5BB84F2DDAB0C019B5AC030AC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 9af268bb6dce1a5c4e037311f190260e773de5d336ebe698138cfe17d7052c9d
MD5 c22c47977b56a336b94dd0b8480a1198
SHA1 3c62590c2c0cf927248747cdf95e6295947569b5
SHA512 caf0caf3f367f5cebae626620ac906c158a610f39580d92f36d486ef57cd28f8984f60a7815546ec2a2c107cf719ccd3bc0f703867477145c192a1e61a33b267
SSDEEP 384:uZcIhsNKbNfcHf+2/d9Y45QFmOObjI9G6w7At:MhM/b+m29MAt
TLSH
T154928E326C385D374A97A551F48736234FF4817BD7D47F84E5EDAB0C019AABC130A816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 71b3dedddc1cebcb200c1fb141043e9da84859cd033e8c19e619aa603b8e1d90
MD5 2d61e7cfd99f9a75d0ec9f46c1e65eff
SHA1 ca1b5bcb27a6d3b509234467fcfaec646d41ab0f
SHA512 420d546c89b14ef7df4ce5f5cf3da5987dda092674e589d34f7bc3d924b6358f917979f4f6296ff844ec982a30e9eee99f1a6bdccc7399c9736f22064b6a5f3c
SSDEEP 192:EON+V6hZ0QmiUyVFpc/+jV40+Fd9YDJ5wOZseU6:EONw6o8pu+2/d9Yk2DU6
TLSH
T14102E835AC686C778EE2AE45F48777235FE4112BA9E56F84DAEC1B1C00D765C2306836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 02d00b3bcc25142a8e79731c78dbb93d4c89aac3ad8c6a66872d7864b3b02fb2
MD5 0407db840ac58e3996f7d1163e362800
SHA1 c154c1403b920c3796d657b62940699092ce5d23
SHA512 dbef0a3f04e8bb425bc5a31d81a3f381f5be375cfc5a5084ea1284887016e83277bd6339111224ffae4c9d9ce6b512821b9e8fabe07d5b66bd14e63012578bb7
SSDEEP 192:ZONL6hZnQmiUyiF1c/+jV40+Fd9YD804Nk5cOqBrqPU6:ZONL6d91u+2/d9Y45X9mU6
TLSH
T19E12E935AC68AC274ED2A641F08736134ED4523BDED57FC4E6EC6B1C01EE66C230A826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e693e5d3-3918-489c-9931-eecadd8db94b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\e693e5d3-3918-489c-9931-eecadd8db94b.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 c20ab03cd58722b90d87de92ad9c0262969b61790939883a9240edc939b08945
MD5 4abb73ce9d85cb90403dd0736bde674c
SHA1 d6a327e14d770a86c389f92ffc0f7480faaab168
SHA512 1fd5be0d327dc562680e8e4ae759b684b45e6919443bac3883a5d6b9b6983590f32cd04d6d8c7ae144486e60b74323574a0226dfcfc0616fb2dcccc9713b2a68
TLSH
T1F9414B58A6F91148B3B76E5AABF6A96D447BBC772F06D45E10110D4F0A33B40C8A2B37
MD5 SHA1 SHA512 TLSH

Submit Download