0b311448aed5b76921d50efeb6c4851f931f900a3f9ed0530fe85c5ca6915204

Analysis

max time kernel
899s
max time network
800s
platform
windows10-2004_x64
resource
win10v2004-20260513-es
resource tags

arch:x64arch:x86image:win10v2004-20260513-eslocale:es-esos:windows10-2004-x64systemwindows
submitted
29/07/2026, 14:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
email-html-2.html
Size 2KB
Sample260729-rwpershh45
SHA256 0b311448aed5b76921d50efeb6c4851f931f900a3f9ed0530fe85c5ca6915204
MD5 1b8f83c737739141fc19ee8f689ab960
SHA1 68c02fb3c17ac7c1594bc55b26c2fea45fafa620
SHA512 b09c458c97bd1ef7caf29a01c8ac37db11f1a1101a93e63b01d747a02e01ee641b9e96f316d01fc57b0c03b9becc037ff07217f5d927be54dd10e317262f882a
TLSH
T139512FB787530C3A8D6608B372325B4DD9E1B59A7236964431B763FB00C2118CEB7BC6
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2168	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134298091851988944"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3053180483-1881419501-3594244048-1000\{653B32F3-53E8-467F-BD96-133E2AC716E1}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
6028	msedge.exe
6028	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
948	msedge.exe
948	msedge.exe
948	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe
948	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 948 wrote to memory of 5112	948	msedge.exe	85
PID 948 wrote to memory of 2168	948	msedge.exe	86
PID 948 wrote to memory of 3736	948	msedge.exe	87
PID 948 wrote to memory of 3736	948	msedge.exe	87
PID 948 wrote to memory of 3736	948	msedge.exe	87
PID 948 wrote to memory of 2888	948	msedge.exe	88
PID 948 wrote to memory of 2888	948	msedge.exe	88
PID 948 wrote to memory of 4852	948	msedge.exe	90
PID 948 wrote to memory of 1532	948	msedge.exe	91
PID 948 wrote to memory of 4852	948	msedge.exe	90
PID 948 wrote to memory of 4852	948	msedge.exe	90
PID 948 wrote to memory of 1532	948	msedge.exe	91
PID 948 wrote to memory of 1532	948	msedge.exe	91
PID 948 wrote to memory of 5888	948	msedge.exe	95
PID 948 wrote to memory of 5888	948	msedge.exe	95
PID 948 wrote to memory of 3468	948	msedge.exe	96
PID 948 wrote to memory of 3468	948	msedge.exe	96
PID 948 wrote to memory of 6052	948	msedge.exe	98
PID 948 wrote to memory of 4724	948	msedge.exe	111
PID 948 wrote to memory of 4736	948	msedge.exe	112
PID 948 wrote to memory of 4700	948	msedge.exe	113
PID 948 wrote to memory of 5208	948	msedge.exe	115
PID 948 wrote to memory of 5208	948	msedge.exe	115
PID 948 wrote to memory of 6028	948	msedge.exe	118
PID 948 wrote to memory of 6112	948	msedge.exe	119
PID 948 wrote to memory of 6112	948	msedge.exe	119
PID 948 wrote to memory of 3944	948	msedge.exe	120
PID 948 wrote to memory of 3944	948	msedge.exe	120
PID 948 wrote to memory of 3808	948	msedge.exe	121
PID 948 wrote to memory of 3808	948	msedge.exe	121

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\email-html-2.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x264,0x7ffab404c188,0x7ffab404c194,0x7ffab404c1a0
  2⤵
  PID:5112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=es --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1808,i,865829767775269573,3667743062944042471,524288 --field-trial-handle=2092,i,10367385833123981221,6043953599348477592,262144 --variations-seed-version --mojo-platform-channel-handle=2144 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1648,i,14442997181709672530,7228785471564774824,262144 --field-trial-handle=2092,i,10367385833123981221,6043953599348477592,262144 --variations-seed-version --mojo-platform-channel-handle=2088 /prefetch:2
  2⤵
  PID:3736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2584,i,4856803587862284287,8801710296708476029,524288 --field-trial-handle=2092,i,10367385833123981221,6043953599348477592,262144 --variations-seed-version --mojo-platform-channel-handle=2748 /prefetch:8
  2⤵
  PID:2888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3452,i,10857169478386674826,3072146753942728050,2097152 --field-trial-handle=2092,i,10367385833123981221,6043953599348477592,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:4852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3440,i,9991431607666797341,8723038234329763051,2097152 --field-trial-handle=2092,i,10367385833123981221,6043953599348477592,262144 --variations-seed-version --mojo-platform-channel-handle=3536 /prefetch:1
  2⤵
  PID:1532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=es --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4968,i,14162791240606057941,12075855009867934236,524288 --field-trial-handle=2092,i,10367385833123981221,6043953599348477592,262144 --variations-seed-version --mojo-platform-channel-handle=5052 /prefetch:8
  2⤵
  PID:5888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=es --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4960,i,11996162286108516278,16000940245971559493,524288 --field-trial-handle=2092,i,10367385833123981221,6043953599348477592,262144 --variations-seed-version --mojo-platform-channel-handle=5020 /prefetch:8
  2⤵
  PID:3468
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=es --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5876,i,1657869862263770888,6166487997828185881,524288 --field-trial-handle=2092,i,10367385833123981221,6043953599348477592,262144 --variations-seed-version --mojo-platform-channel-handle=5768 /prefetch:8
  2⤵
  PID:3016
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=es --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5876,i,1657869862263770888,6166487997828185881,524288 --field-trial-handle=2092,i,10367385833123981221,6043953599348477592,262144 --variations-seed-version --mojo-platform-channel-handle=5768 /prefetch:8
  2⤵
  PID:6052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5932,i,2245476269762688787,11531477459574252205,524288 --field-trial-handle=2092,i,10367385833123981221,6043953599348477592,262144 --variations-seed-version --mojo-platform-channel-handle=6048 /prefetch:8
  2⤵
  PID:4724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5948,i,17899249793536984667,16103550453350338219,524288 --field-trial-handle=2092,i,10367385833123981221,6043953599348477592,262144 --variations-seed-version --mojo-platform-channel-handle=6024 /prefetch:8
  2⤵
  PID:4736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5912,i,18160681708688119287,13806040691209043731,524288 --field-trial-handle=2092,i,10367385833123981221,6043953599348477592,262144 --variations-seed-version --mojo-platform-channel-handle=6292 /prefetch:8
  2⤵
  PID:4700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=es --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5400,i,6537659645857344537,5407955981609917573,524288 --field-trial-handle=2092,i,10367385833123981221,6043953599348477592,262144 --variations-seed-version --mojo-platform-channel-handle=5228 /prefetch:8
  2⤵
  PID:5208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=2220,i,10719572415814965342,14575100824009376845,262144 --field-trial-handle=2092,i,10367385833123981221,6043953599348477592,262144 --variations-seed-version --mojo-platform-channel-handle=6220 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:6028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=es --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5364,i,10388066394765206721,9638548228220658310,524288 --field-trial-handle=2092,i,10367385833123981221,6043953599348477592,262144 --variations-seed-version --mojo-platform-channel-handle=4048 /prefetch:8
  2⤵
  PID:6112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=es --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5264,i,9503293664914850114,14899492697433682893,524288 --field-trial-handle=2092,i,10367385833123981221,6043953599348477592,262144 --variations-seed-version --mojo-platform-channel-handle=4016 /prefetch:8
  2⤵
  PID:3944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=es --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3396,i,970341717104888022,4253652849902041069,524288 --field-trial-handle=2092,i,10367385833123981221,6043953599348477592,262144 --variations-seed-version --mojo-platform-channel-handle=4052 /prefetch:8
  2⤵
  PID:3808

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3480

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:216

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f89d096d4931f102ed0d846cf7c00628e918bf6ece6e67672df102a3827d7001
MD5 df26a001d19a02865f3796364cdc5da9
SHA1 eaa88c3939bdb0b5f62c93b1a8a962eb7578ec6e
SHA512 e881032fa0b755ffaa5bfe96f40ab025af45de1280276abb3fc0c11281f633356a804feb4a4869cda2d7d425bdd5f22b67272724472a7610f8665ca0dfad767b
TLSH
T1D5D012B62A4A7110F2694A31B456CB00776D15A12852A705E22D944CA9A90B562C62C6
MD5 SHA1 SHA512 TLSH

Submit Download

7677f628-1dff-4b40-a1e4-627da80959d2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7677f628-1dff-4b40-a1e4-627da80959d2.tmp
Size 414B
SHA256 d92854d534a1d3d92e0e77e27d68ff2c7eb4d16a30ef805591848c713840b850
MD5 aa2218f061f95f2976ac163c664c0818
SHA1 e6ce3a64b8f67d155d064c28c2d81df6037ec83f
SHA512 61a6379f47083c4d6754391b06aa17b0a5638e93d511b50984acd16694d5a8cc7975695531bb001bf7a56f8e1e515a8642f6b7077725d34092635d48e7e14d27
TLSH
T138E022BACC22EC3708FD1758A00D8696E70013272A50895FBB3C82088FB473A86C6C5C
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 5KB
SHA256 1fa6e735c35659d1de520f366092e95fbb8c5fe49e0749464a595b3cd032ff1e
MD5 da9467799dfd4ce23ad97550566febdb
SHA1 e7ba8b6bcf67aead4caeda55e3b65851ac4316ae
SHA512 d2d2986e028b06aba2810c9e2108f98aeac37e8ea949269113af3546edf3a40a1038aa8cb8292061c876e7443cb1a5649657881a7b532dc7aae4f97e9e8416d2
SSDEEP 96:LmJjomJcmJJmJDmJ+mJCmJgmJ1mJ1mJTmJ8mJRmJqmJqmJfmJfmJ9mJImJ2mJ2m7:6jhlUyL/ZwwiF8HHee4BDDqtK3xh
TLSH
T10AB17E4A82D4C39B9B6550CB4AE4726C10703B09FBDCE508474C8EEB714D4DBE9FBA90
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 612688fb1273be4322fea7b9d7bd5517816b9bdd9b9a01bb1f96f2f7e40bf5ea
MD5 eeaebc3ced8a0a5106729f0682800a43
SHA1 ced63d1f809b81d27e4d8e30875ca0d2d085cefe
SHA512 9886b29ee2e10c4e911fd621e85f00555a172a988f2ec565511d16f07f32edc859700d1c606903892ecfd795526ab8e4782265c778ab09b20686406b3cabab65
TLSH
T1FCE020C805D5C32F9154A547917D970CA350360ED3C4A945372589D53101040E7D5B50
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
Size 151B
SHA256 638fc7e45a745683ad16c83c4be835e65031503a39b5c456ce140c71d890910e
MD5 00a76bdd21b71faf50b8ecdd6027696f
SHA1 1e4e7650207c1941c05d1eda32fed3a6de831ad4
SHA512 263500319a5bd0ee03b7aa67af740ba8dfc0c9724a4ccff796526f04be4f699eccb58c2cd738fe74cb967c8096a9d5e6ac7d4ebc11dc1c72a2e721a58da4a4f2
TLSH
T1E3C08C7938DD681AEAA8287AA34AA0040FB042052022FC2642B8EE847A815A40A5A124
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 891c727c7cbeb33d3e374c023c2f066a02baf45a761db5247dda4ebea31c3d38
MD5 c140d6523da90584f1fc0e2292607403
SHA1 d21891351875e880a849d05f6047ffef1c9b1341
SHA512 22b9bcd11a4e3f5c978405974f098fd22f2726e12975a00ffac5e4dd9f5bf4d39f5b04828b4cfb52ee464d8c694538339846e03ee3d85b3a3bec4bdc112785f1
TLSH
T1F031CFF743B4856E9B0096F0AA18BE2FCF6D0511432C7DAAC5E0AE27D3E3471E041A5B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 fde00e9bce3b0fc7c85a3d1a76f0f0d62dfe7e7dabc9208eb609619b055c06ed
MD5 eba0b9785f9b7ff7662c2c1267f9aa55
SHA1 b5e6aec7641e8772d268870cb8145a5b813e7a1a
SHA512 4f8e7d1d7a2e84a2475a0efabaaad9533a13607308a91d20ed8142a4d5fada144b416b3764ee6c18bcc7ef6995ae4b3f8ff5cb1c3637cb2d8570abb20ea2c72b
TLSH
T1DB31A1F783F4856ECA1196F0AA18BE2FDE1D0511431C7DA985E0AE1793E3471E042B5B
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 0f1d0854583b476384b4c518f7bf8d2af8aec581997c6b55df5d656b88a50049
MD5 1568d2d441df23c177d6dc7937d1b70c
SHA1 b02c129acc5d3124ecb41a46768683ddc3195982
SHA512 1aa00b7107cf5e6d7fd6dd2e70af254ee2f38adbe5c33937def7c9995cc247cb9b0bfd0bdb6957f5b6866e7f7faf7436b30dc3d665e45985d6bdb7f1353a0015
SSDEEP 192:sxZbRc7ywFXNKOMl8Mkg/fKssCkuaZdczodpH4HW6+WNGYvIugn847IgjCEJ:sxZbaIMg/fKssCkuaz/YHbGd/j3
TLSH
T14162D8167A2899778DDBD219F6457F53D3F81533E2905E44AAFCCA0C04E6AEC220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 3f7c50c605f893042675dc2fa2228deaacf9edbbf10f224dee100cf48c3b5312
MD5 e709562e1e6f19a039fee94e4d3c0416
SHA1 7fa6590d4c88bfb3db39a13bcfb2e4a61937bf15
SHA512 600af36e274c79bac9f33ff9235e37359544c7db8ddb9082a8f2863663a2b485fa207b283d75a4e99c99cfa78225c91fafaad08a3848c88a2a712a83702bf29f
SSDEEP 192:sxZbRc7ywFXNKOMl8UQbkg/fKsWk1ZdczodpH4HW6+WNGYvFgR847Ig5TCEJ:sxZbaIqwg/fKsWk1z/YHbGP/13
TLSH
T10A62D81A6A2899778DDBD219F6457F53D3F81572E2905E44AAFCCA0C04E76EC220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 d3ed28410c95bcdd49b775e999633ec95a9fd79e43121075d441a0e078c22041
MD5 f69e750b13c549c16996bde771106f07
SHA1 f3ce7bce220e59cf4ead817ef6423038f0d78324
SHA512 f942c9f08562a4828ba0e5eddd4688fc3995511e90fac2e939ef5f22ba5105f580b294d4c4e56e3adef92b0304627a7501a96a18e13b795a929ffee8b420600b
SSDEEP 768:ZYsv8Od/hWvFvmX8F1+UoAYDCx9Tuqh0VfUC9xbog/OVA0LlEe9NsQroIRLO:eY8Od/hWvFvmXu1ja10Lm2NuIq
TLSH
T19BD20B3B680CCB7E4F840D9DEC2A6F966DD801CB66984D5447FA884C03C77EB521B59B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\cdf12dee-6673-4e91-954c-23b338c514e6\index-dir\the-real-index
Size 1KB
SHA256 132d82cca6c6a9ee7c6e2d9ae0b382587aa352040c03a61c7eeb7698ba76a94c
MD5 0c371181d9a7fd678c70cb4b6294bd5f
SHA1 c87e07e0162b73921a9fedbc42a373d95ab6b012
SHA512 38f66584e83bbf5396ec9714c5275b827b45a1094e069727e1e390b6c6d1b790314dacd61d7d21a891282e008683999fae7d9e0a7bce30ccadcd1a7df8117ea5
TLSH
T1DB4183898EA0CE7BFC9140B114B660A832B4C8CE1726A2175C7C36366D2332E364B5EC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5cbcfe.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\cdf12dee-6673-4e91-954c-23b338c514e6\index-dir\the-real-index~RFe5cbcfe.TMP
Size 1KB
SHA256 e09e4a17977a8b15de38578fab2ae8e07e8370bc3666d5e07a5e762e70577acf
MD5 1725b66e0024cc92f147f3ac54fb7cab
SHA1 f26b3d6214c04264c375d683c2ccba79764e4133
SHA512 61cc75a05c2122f6ddf2c2dc40d4f81bcc3631c6deef497a3d69484c58eaeb606ff986c755a5c945325534ebec55f004308a83899e11aa35bce6b3dbe3c82b36
TLSH
T12341874A4A918A1AF8D440770AE7A4B87336C84053227787A87C6539BD317EE2A4F0DC
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 2680a631e243f8f435612c279eda4885c0ebf593e2364b279c1e72e23751b7f3
MD5 cea385028c35a5539bf2668387f7c916
SHA1 0bc43b7744e75cafe47bc1e59e120644f7724231
SHA512 889515db7a783eb77b29098e1102e90098b202696fe810b0b2926664b4a106e4b57496992db3549b3ea0a259ba55d2ed0f1424bd4ee8934e4ffd5ee27c343562
TLSH
T1C2E068B37EFB1850FCBF93C6213008A00006755498809D0F642AA2C324A13192056CA6
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 26KB
SHA256 e3d637cb80398fee37003869d31b6ee54720db9a4ead617a6e4cfffc3c64955c
MD5 265c767cbc2f06ae35dabdf6f7d15b11
SHA1 17070fc2d4bb165eac725d92df2ca4b17ce1a0bf
SHA512 06dc708c8fc77325270722658f42d01380afba2f261d5084b649fd9310fa344f3c6fec357aa08b1de9f6704fa66039621d88714f2b8318e3f8e479512af97526
SSDEEP 96:Ko7iKcsW23iKoM7LKKc026WEKjKkAAK9Gq+xGKqkJ7yKkc++dmKWI94gK966GbG4:05ppxnY753RNBvRJJdt7ph5X2lfszly
TLSH
T149C28916713A0212397E3948B79696364F4235A33068E4BF7FB810A14F67E225DFD8ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 f3835eada20c69d51349681bf6aa6f9d5d2b2b5eb196571375b45d2df6c2b624
MD5 d892d11b8020aaf9bea62dbd67b4c004
SHA1 15d96033a63014c653c361966e56eb57b35d4d56
SHA512 a96d09f9aca00280f3efd220bdc7ce1f6e10b21b7426ffad7ea51a3317d3a09c4244b7361d3777fd4509cc763668367d1c5fdcb86f5da4982033276013485afe
SSDEEP 384:nIiFiZcIi3sNO8TUNTUlI4oQckCrqF8phifGG9iOqBNFT6CPg+/VjScjmwdty/7k:TFQi33wg3k/KFG5gNJjPgYVj1j9
TLSH
T1E7D25C36EC64CABBFDEA8B99B64A3A12DEE44163C5CC9AC4D5D95D0C00D71ED030BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 ea93f3f1858a6a0da24f99708136d42ed2889f4c9b53333663795e31d8b66485
MD5 3596f87b67bace4d1733424ac5a6c8dd
SHA1 28b6e4a64d84c718ac06362216707cbbabb2df85
SHA512 882e67cc52e4e732a551dd440bed79c41664e6a4db6c8e8479bb2744bcab6eb4ad46e00e9fc3701d5a0095558b54938d97d638e821a98a4237f2c8656c146845
SSDEEP 384:nppiF9CcmyWCs3sNQ8TUNTUlIm2QckCr9l1KphifGG9iOqBNFT60m5pfe4KV8p0v:pAFccps3JwgbkUDkFG5gNJ14I8p0v3
TLSH
T1FBB25B36EC58CABBFDEB4F99B74E6A07DEE05167859889D8DADC1D0C009719D030BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 9b3453a6c17abd8d837d5f93c6341d23d08c71fc9481f64d5851c534a998ca90
MD5 6ee870bd975c7ca536427834f352822b
SHA1 1c68a750a93c44ed66fe98d0332933eca244f294
SHA512 40914f2dcde1594b58480e453edb9edbd74d9f089b9c1e9239bf20fb3d8e4039d24e909e057d98f699741ca49d7605f002b4641e141303251dae2738ac44c103
SSDEEP 768:prFccps3HwgbkUinFG5gNJjPgvVjI8p0v3:9s3BwWhFI8p0v3
TLSH
T163C25B36EC58CABBFDD64B99B64A3A07DEE44257C5CC9AD4DADC1E0C009B1AD430BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 2f6ff00cee49e394f2bd5d4e64a7888c12fd93a39f413845e81426eb81f47e53
MD5 3ed38f2299986abc8d9ef96c188315b3
SHA1 f30a02b673b3c80ee491295da9100705b35869a8
SHA512 983d200a248bd239b84ea6f849ae80d9615e4c6c30ae2039264bd46ca4a702973a52f83118415a79b8a1596c3be648ce6c01fd378ed63d7f3280645a6dceccc1
SSDEEP 384:npfiFiZcIi3sNO8TUNTUlI4oQckCr7F8phifGG9iOqBNFT6CPg+/VjScjmwdty/I:pqFQi33wg3kAKFG5gNJjPgYVj1j9
TLSH
T1E3D25B36EC64CABBFDEA8A99B64A3A12DEE44163C5CC9AC4D5D95D0C00D71ED030BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 8e88bbee7fc3d5251b6971ac7e1a47dd1ad1eff6a3b4989a0bec4834a4587718
MD5 d29189b6aa4236e0d597d978b5256d91
SHA1 3e3f1b17cbc717320fe3f28eb8ef89235cf106b5
SHA512 ad43eaf7b1437e5a75cb826939f4a8d0d7275a01ac90cb3df7ef7342de3ccbb38a9d16dfe2f64e0651b8f3eb1c386a43b2393069e9549c607d6ddd6018ef1a58
SSDEEP 384:n3iFiZcIYI3sNO8TUNTUlI4oQckCrqF8phifGG9iOqBNFT6CPg+wVjScjmwdty/I:yFQV33wg3k/KFG5gNJjPgpVj1j9
TLSH
T1C4D25C36EC64CABBFDEA8B99B64A3A12DEE44163C5CC9AC4D5D95D0C00D71ED030BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 e15454152cb500866661702263dd0b93c3236a9ac790a97467a3370b305da355
MD5 9963950077bf47999f9df63cc2c086e2
SHA1 e8683d81534f46d817cdc0952f381a7f361fb3c9
SHA512 475316de94d67c55b3a7baa352d0b5000b2102ac37392760db2816fec25007b293c87804fe124af5b75bab56476aac6b9d8f1adeff369cd90600ae7f533733dd
TLSH
T1E641145CAAFA114973B77F169BF6A86D847F78732F4B955E00010D8F0A26A41C861B37
MD5 SHA1 SHA512 TLSH

Submit Download