efd4595fecc095473a8a523dc934dfcbc565075ce46a4c662563112f0f878839

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/08/2026, 14:29

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
email-html-14.html
Size 106B
Sample260810-rtpyhsbk8y
SHA256 efd4595fecc095473a8a523dc934dfcbc565075ce46a4c662563112f0f878839
MD5 e44de33b775a6ca866776145aafd3c78
SHA1 a9079dab1e89170b39c1da665c53e733b00c498d
SHA512 a54a60a1b1f2e04fcff54ccc8641bbe5d0aaa1d1395e7ba515609afe36dbab28a910cc7522abfc8c2f7afd18914f27f0210fc6046aad8a04912ae09bc05a6bdc
TLSH
T16DB092F56412000AA620ABA089DAF20849408511E0098C40A49031EC848C609D8A3690
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4688	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134308495810281072"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-889581200-2041691093-2048517887-1000\{FBE06226-6A80-4F5C-A718-50B2A781E0BA}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3508	msedge.exe
3508	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3856	msedge.exe
3856	msedge.exe
3856	msedge.exe
3856	msedge.exe
3856	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3856	msedge.exe
3856	msedge.exe
3856	msedge.exe
3856	msedge.exe
3856	msedge.exe
3856	msedge.exe
3856	msedge.exe
3856	msedge.exe
3856	msedge.exe
3856	msedge.exe
3856	msedge.exe
3856	msedge.exe
3856	msedge.exe
3856	msedge.exe
3856	msedge.exe
3856	msedge.exe
3856	msedge.exe
3856	msedge.exe
3856	msedge.exe
3856	msedge.exe
3856	msedge.exe
3856	msedge.exe
3856	msedge.exe
3856	msedge.exe
3856	msedge.exe
3856	msedge.exe
3856	msedge.exe
3856	msedge.exe
3856	msedge.exe
3856	msedge.exe
3856	msedge.exe
3856	msedge.exe
3856	msedge.exe
3856	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3856	msedge.exe
3856	msedge.exe
3856	msedge.exe
3856	msedge.exe
3856	msedge.exe
3856	msedge.exe
3856	msedge.exe
3856	msedge.exe
3856	msedge.exe
3856	msedge.exe
3856	msedge.exe
3856	msedge.exe
3856	msedge.exe
3856	msedge.exe
3856	msedge.exe
3856	msedge.exe
3856	msedge.exe
3856	msedge.exe
3856	msedge.exe
3856	msedge.exe
3856	msedge.exe
3856	msedge.exe
3856	msedge.exe
3856	msedge.exe
3856	msedge.exe
3856	msedge.exe
3856	msedge.exe
3856	msedge.exe
3856	msedge.exe
3856	msedge.exe
3856	msedge.exe
3856	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3856 wrote to memory of 2904	3856	msedge.exe	84
PID 3856 wrote to memory of 4688	3856	msedge.exe	85
PID 3856 wrote to memory of 884	3856	msedge.exe	86
PID 3856 wrote to memory of 884	3856	msedge.exe	86
PID 3856 wrote to memory of 884	3856	msedge.exe	86
PID 3856 wrote to memory of 4888	3856	msedge.exe	87
PID 3856 wrote to memory of 4888	3856	msedge.exe	87
PID 3856 wrote to memory of 2164	3856	msedge.exe	89
PID 3856 wrote to memory of 2164	3856	msedge.exe	89
PID 3856 wrote to memory of 2164	3856	msedge.exe	89
PID 3856 wrote to memory of 4564	3856	msedge.exe	90
PID 3856 wrote to memory of 4564	3856	msedge.exe	90
PID 3856 wrote to memory of 4564	3856	msedge.exe	90
PID 3856 wrote to memory of 4460	3856	msedge.exe	91
PID 3856 wrote to memory of 3108	3856	msedge.exe	92
PID 3856 wrote to memory of 4460	3856	msedge.exe	91
PID 3856 wrote to memory of 4460	3856	msedge.exe	91
PID 3856 wrote to memory of 3108	3856	msedge.exe	92
PID 3856 wrote to memory of 3108	3856	msedge.exe	92
PID 3856 wrote to memory of 2916	3856	msedge.exe	96
PID 3856 wrote to memory of 2220	3856	msedge.exe	97
PID 3856 wrote to memory of 2916	3856	msedge.exe	96
PID 3856 wrote to memory of 2220	3856	msedge.exe	97
PID 3856 wrote to memory of 4792	3856	msedge.exe	99
PID 3856 wrote to memory of 5000	3856	msedge.exe	114
PID 3856 wrote to memory of 1540	3856	msedge.exe	115
PID 3856 wrote to memory of 4992	3856	msedge.exe	116
PID 3856 wrote to memory of 3304	3856	msedge.exe	124
PID 3856 wrote to memory of 3304	3856	msedge.exe	124
PID 3856 wrote to memory of 3508	3856	msedge.exe	132

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\email-html-14.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ff97482c188,0x7ff97482c194,0x7ff97482c1a0
  2⤵
  PID:2904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1772,i,13082684064036131076,15203275985987824090,524288 --field-trial-handle=2296,i,5983577595381598300,7075743395568359052,262144 --variations-seed-version --mojo-platform-channel-handle=2320 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1692,i,6737285931281052476,4414586310735814419,262144 --field-trial-handle=2296,i,5983577595381598300,7075743395568359052,262144 --variations-seed-version --mojo-platform-channel-handle=2288 /prefetch:2
  2⤵
  PID:884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2444,i,13069246431073791860,7780947374940227741,524288 --field-trial-handle=2296,i,5983577595381598300,7075743395568359052,262144 --variations-seed-version --mojo-platform-channel-handle=2512 /prefetch:8
  2⤵
  PID:4888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3424,i,15548989722189679699,6071480737556671633,2097152 --field-trial-handle=2296,i,5983577595381598300,7075743395568359052,262144 --variations-seed-version --mojo-platform-channel-handle=3464 /prefetch:1
  2⤵
  PID:2164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3448,i,11084063710937794340,6469590038785105129,2097152 --field-trial-handle=2296,i,5983577595381598300,7075743395568359052,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:1
  2⤵
  PID:4564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4188,i,13203467580418184958,13495343094222804405,2097152 --field-trial-handle=2296,i,5983577595381598300,7075743395568359052,262144 --variations-seed-version --mojo-platform-channel-handle=4292 /prefetch:1
  2⤵
  PID:4460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4204,i,5599883015144288950,16826679130968614431,2097152 --field-trial-handle=2296,i,5983577595381598300,7075743395568359052,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:2
  2⤵
  PID:3108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4972,i,2196262407249487506,1944342024201878120,524288 --field-trial-handle=2296,i,5983577595381598300,7075743395568359052,262144 --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:8
  2⤵
  PID:2916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5116,i,15195414979275866116,8310401667269695272,524288 --field-trial-handle=2296,i,5983577595381598300,7075743395568359052,262144 --variations-seed-version --mojo-platform-channel-handle=5208 /prefetch:8
  2⤵
  PID:2220
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5712,i,10330431879277970912,5836692483265544567,524288 --field-trial-handle=2296,i,5983577595381598300,7075743395568359052,262144 --variations-seed-version --mojo-platform-channel-handle=5860 /prefetch:8
  2⤵
  PID:3004
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5712,i,10330431879277970912,5836692483265544567,524288 --field-trial-handle=2296,i,5983577595381598300,7075743395568359052,262144 --variations-seed-version --mojo-platform-channel-handle=5860 /prefetch:8
  2⤵
  PID:4792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4200,i,13765185655690315475,8603830643143007309,524288 --field-trial-handle=2296,i,5983577595381598300,7075743395568359052,262144 --variations-seed-version --mojo-platform-channel-handle=4316 /prefetch:8
  2⤵
  PID:5000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4216,i,676095302777848583,3435542008533695658,524288 --field-trial-handle=2296,i,5983577595381598300,7075743395568359052,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:8
  2⤵
  PID:1540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5008,i,884429291827026148,5872704014038469297,524288 --field-trial-handle=2296,i,5983577595381598300,7075743395568359052,262144 --variations-seed-version --mojo-platform-channel-handle=6316 /prefetch:8
  2⤵
  PID:4992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5224,i,8802503687528711687,11140728791219583825,524288 --field-trial-handle=2296,i,5983577595381598300,7075743395568359052,262144 --variations-seed-version --mojo-platform-channel-handle=5460 /prefetch:8
  2⤵
  PID:3304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=2096,i,15951585322576819992,9342314212178757157,262144 --field-trial-handle=2296,i,5983577595381598300,7075743395568359052,262144 --variations-seed-version --mojo-platform-channel-handle=6364 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3508

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1220

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 8bc9096622ad67087091ff7fca94be692d0b614dbde1b022f2749b66b510ae2b
MD5 e137387fedaeb97d0c9ff021c470ff72
SHA1 bbdd5a1b74596c7a2306e5e7596a61f913a74baf
SHA512 bf49f2e7d519b4d03a3fd2282183c9ada8b8a480e84c795b07597ec70c3c13cec2ee464023d21217dd48c95133d3a928268dad9581c005c11482df1f972fd052
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7G:fwUQC5VwBIiElEd2K57P7G
TLSH
T1FAB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 9aeab2c92c5f26a8ca39382cf1bb4652de05a24b8d0a9ed661920c6197bf4c98
MD5 722151c3c2c9d1bf9273dad578c24b92
SHA1 8c73ee2f65f9c7a61550c77f0ff7f3b2e262dbdd
SHA512 2d701005e69967e2b1d86e637b7e1011658167d340aa89a1d8a3826c1a0cd883f9a6d2e8ff8530362b27f034273eb9c1e432fc1a63348092e3fcfc9ecd12dada
TLSH
T19ED012323A18644AE656A1F0A413CB411637516624535B21B215949D9AA80D562C6192
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 46246483d08868ff03d5f9bb48e547ca61f651c3e59a4138f5a5da74c69b3ae0
MD5 c70fc44a424269679b1300a5be3376a5
SHA1 6162f1576d71e2726435c2e688415ae394c1369f
SHA512 c7fe73655fb22ef9d6d3620fa11cc8586300f67f906224e15b5de9802f495a10b66f3fdb475a44e7ed7af1a7d84be1c87f05f52d39641755f33237ede51a6e35
TLSH
T1F9D012323A58684AE656A1F0A412CB411637516624539B21B215949D8AA80D562C6192
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 e3c8f8e90399714e7320f8d26e49c35f0d2270001ef36fc5e7eda847739d18de
MD5 bd1c4241667a5384268aceeceddadd87
SHA1 29a40f1eea094321e9b514dfeca09f71f03608d0
SHA512 5a445e7f1071cecfde87df313a7de3b8ececdef5d92a9b00dc767cde2d82d2e3f1e5b66c472c004933712670638be7f99657231e8b6734f57fd18e0397a97cf4
TLSH
T16A61F93912CD359DEB603D33ECC31100787195D8FA33AEF966AC68BD7A01B5946D9D50
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe589a86.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe589a86.TMP
Size 3KB
SHA256 c3e0f2ac7929fba733a945e0cb685d47d89819893262aa2673ff9a9b0c71f107
MD5 1a5f9c88dd76a34fce8645aef80a6fb8
SHA1 55ce1824b177e80d31e0d618cd1fb36a80933498
SHA512 0bdde2d551b5526579af65fbb20b502f4ba9800ea4d3ef036408fadecf0be97fe9cc1a437277baf4564ae4dab8aac5b880fdc1eef070293b4e5fca1979ab44f4
TLSH
T10F610B3912CE355DEB603D33ECC31500787195D8FA33AEF966AC587D7A01B5546D8D50
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 694B
SHA256 077cd37b411d8c8b7dacb13f83f900da2d6f6a4444d023a9cb57d776d030b7f7
MD5 c673b8e4e718a79fb2dab43ec964acef
SHA1 6074c3b70b764e53baa0637c9dcb950632d9ff7c
SHA512 cc71ec4e404c647352bc59acb5ac31c4c2c2277e5dd568efac7121c52d2c224d2669f82c21d62e41fc1499a5b304f4f7ebe0a8877b56084f3fa7b96c0b8c557c
TLSH
T13D0170B383D5966E894553F05924EE17CE2D0505421C7D25C5D4FF27C3E3065E00295F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 1a4adcb3d17269c69655a94188ead24cb84825cf567ef1ffdcd670b1ab933bfc
MD5 db4fc021653a61e8ed2d4c51c3a60510
SHA1 4a7954cbe5d83e2f498c9bfd3264f90a0b74f362
SHA512 db9234caad03dd3b20fea5ba01d5695fb846bc31f200c486b4289140a669a08aa72e07541b98cc87bd2bf9b4ef35194baaeb02cf5d80ad5559ab94aa945bc3f2
SSDEEP 192:sxZE/yM/jK1Ml8UQXk//f8scUStIdpH4HW6+WNGY9IIiNHIg5IJ:sxZE7qU//f8scURYHbGLO
TLSH
T15152F7156A345977CCDBD209BA45BF53E2F9047392911E48AAFCDA1C00E7BEC221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 27efa8c454758f4c72ed460044569ec5d280ff09e27853ed43ff72f804f3d2da
MD5 bec94c909a48a1c7efad343fce9a80e6
SHA1 6855a8e1cbc5bfec4ebf3e7003a509eec786f9a2
SHA512 b1d05036184cf6604ba9fdfc0be1dbd7c03bdeb659296ec62de057974cf5ba7675d174748f7f9409c7dc320d5397b8e9ada5f0ad47d7962f9d2156ecca6fa0f5
SSDEEP 192:sxZE/yM/jK1Ml8Mk//f8svWStIdpd4HW6+WNGY9IKLEHIgrJ:sxZE7M//f8svWRGHbGt9
TLSH
T16442F7116A346977CCDFD209FA45BF53D6F94473A2910E48A9FCDA0C04E6AEC221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 716b40531f91a97deadb1250173bac7f3c613499e8afff370188d4150ce34b4b
MD5 fd42cdb841cb2c8d3ad51bc591630a84
SHA1 4e977cdcd17c8955d9b33bbd2f5b450c307e28a7
SHA512 1a689b2efc59f52047a101d267f000468d1a694d02d39d3c382a7750b0f5a7c3bd60a5e2a9e178885cc55e4c07be4eaa559234e8896bbf8c5d4ebfd7992922c4
SSDEEP 768:incv21wWvu+Z+8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjFLlwmWNZrofg6/:incv21wWvu+Z+u1jaeFLeRNSfv
TLSH
T14CD20A2B280CCB7E4F841E9CED2A6F8A6DD801CB57988D5447FA894C03C77EB511B59B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 eff1c0ec4a737e4987ea022cdf9e509473ea848e5107c0f0febd57d3425d3fc8
MD5 2533f73603e1414fe7052a4d42679924
SHA1 fa7c9bf421a93beaf2bcd6ff1266db9b4ec32687
SHA512 aa4d2a50b49f843450fec9d7abffbcf661e5c2de461701812e88311b6abf5d1c392663bfb592641874ac42489eeaf407d2a531a70a39791fea832489faf187e0
SSDEEP 96:KaRklRnHnqlPKZThqKLfTzqHxJSrBDyeAKTi2+IQZC2QSyhjWD8B+hKZIBQh1YAR:mTnDyBXQ
TLSH
T195D15212313B02423DBE3908A262CA778E4231677818E97F7FB911A25E67E111DFC5DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

475f9b10-c7ab-4700-89a0-4a890c6dd66f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\475f9b10-c7ab-4700-89a0-4a890c6dd66f.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 80b02c86101f500b3b4b620d8c65658bb2b68337dab9636a97779c688c030bf3
MD5 366180047b58e99bdf0db0336ef04cd5
SHA1 2d0b9216312e94027732291635129b2c728b17b5
SHA512 cde736725399691d4dbf1834fe5911cc29c79ee66f291197323d46c938f43963fefab566d0439d768bb9d717ce304941c5cbc2901fd7323a4ea02ce340fbde82
SSDEEP 384:qZcIhsNmVSniPziWNDe+C9O3+roS+2KB66HlytEDq1ECUD:IhyONiFO3CLlKB6oy6DqiD
TLSH
T1E7928D3599B41C379AFBA145F88B39135EF84033E6D96FD4A1EC6F1C05DF6A8230A816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 b1f06ec1eafb8674eaa564a8be64fddcdd8f13dd0e4c5334112ac62d1f2fe310
MD5 fccab94d1ad86977682a81116fa8ea1b
SHA1 5c8ea4db029667fb518a2fd0451145735c00d824
SHA512 4f989e221603cdcd1a6d3a970d22591f8371856b318d39e80b2e33e087abe953b29a4679bf1427565d0110b195cb85810fbd8120e6e72d943a87b814435b7fc1
SSDEEP 384:FiFiZcIgzsNm8TUNTUlIlmSniPziWNDe+C9O3+roS+2Ka66HlytEDq1ECUD:MFQ8TwgJONiFO3CLlKa6oy6DqiD
TLSH
T1B7A26C3299A4883BAEFB6A45F94E35139EF84073D9D5AAD4A2DCAF1C01DB1DC130BC15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 758a5532955b37e4f7cf5c9f3e1d3a8a3cec94c919b2cbb2b62705c2a2ddb01f
MD5 10f84f60cf4b04a652574c53252a44d6
SHA1 04ad5431485bb70a4587f6b72bebcacf4a2fc76d
SHA512 d313892b05d44aac7416532f55a0bf06f203f591b72bfcc4219c499e540fa19414eb631cdc943f4338b4e1fb4023f1df6e916ff589a49705900d02a31e1854e2
SSDEEP 384:5sNmISniPziWNDe+C9O3+roS+2KB66HlytEDq1ECUn:5fONiFO3CLlKB6oy6Dqin
TLSH
T1ED724A35A9B84C374AF76145F44F3913AEB80077AAC92ED4A5EC6F1C01CF2DC234A916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 15b052cd3251c7c5e2b3299c3c14ec52d812d2c3ef53dc3ae7a15a2db1adfdad
MD5 3f8443ddfb0a92279ee3cb1804abd02f
SHA1 2f3774a9d6a331cb189705da377d5668e3b9660f
SHA512 bceb4f7edc9df45a5c768a75b782b707b98e7cbd390500558763f63c2998c1a664d986f7e730f1f1dd57f82fd230674e17199c8b6880280661168824ca16357c
SSDEEP 192:JONX6v+YLNQmiUyZAZh+CGEOcs+tVus60uU6:JONX6vz//Zh+C9O3+ziU6
TLSH
T19102E835BD281C7B9EF26E45F58B3B275FA8217BE9912F90D9D82F0C01D765C2306826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 c46faa903ce44200e3ac6fa48f492e06c9de7002b4b97b7d0c538013fb3193ed
MD5 b374a9a3b8e4a76f669df9414d5e2278
SHA1 2956cfff731319fd69ee9017af87262a3e153545
SHA512 5248da82938ce3e6999d0da186752f5342db05c5ebbc69eb32962b36e76f9de2fdf7394fed43b4d9f930d61b393bf1f75994128c7c99771171907e59cee99ef8
SSDEEP 192:iONX6v+YLsQmiUyFARh+CGEOcs+t1sFS+2KiCH3qpU6:iONX6vzIFRh+C9O3+roS+2KL6U6
TLSH
T1BF121936B8785C2B5EF3A544F44B36139EA81137EA867FD0D4DC2E1C02DF69C234A816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 325e8eaf0eae009768b5f55d64985173f618bba9086ffa4f4420ec813705a21e
MD5 349759662182117c6db3ae3788e3ada9
SHA1 8f341546ab6e788e998741b8ac5e0f63982e958c
SHA512 f05a71a5fa73dc907894261409f893a07f42302e00e9865ada549f06c04836108d610775380cf7ba8d2767966da98fa7186d975beffb9edb109e3ff0d4a5fbbd
SSDEEP 384:DZcIhsNmmSniPziWNDe+C9O3+roS+2KB66HlytEDq1ECUD:bh1ONiFO3CLlKB6oy6DqiD
TLSH
T13E927D3599B41C379AFBB145F88B39135EF84033E6D96ED4A1EC6F1C05DF6A8230A816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

92deee89-dc4d-4b4a-882e-afaad4a18fec.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\92deee89-dc4d-4b4a-882e-afaad4a18fec.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 bc053fee7dc0faa5bcbc3d932225152e7b8d32fade19e8dfabff614623293013
MD5 4ed3fba8d8e9bdb98cd2481db1738dd8
SHA1 7293d710f0c119b2bdb3a94d6da908b77e6cb852
SHA512 061eb79d9a6e6ac159f4259552323104a95d653b4ad3111eb02a9a11b9f2dc0a4c4863be9eadea4728258a8451815b33723c081503e03aa317f51363affaf0c3
TLSH
T17D410958A6E91148B3B76E66ABF7B86E447F78372F06D09D10110E4F0A26B40CC71B37
MD5 SHA1 SHA512 TLSH

Submit Download