10e3bd773a5647bd07df16f763cfb3a164f9b462f44123856518cd340199fcd2

Analysis

max time kernel
149s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/08/2026, 16:03

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
email-html-2.html
Size 24KB
Sample260810-thbmvssdqf
SHA256 10e3bd773a5647bd07df16f763cfb3a164f9b462f44123856518cd340199fcd2
MD5 0fda4ae4992b47c7cb3dd022eca452aa
SHA1 2664e78ec563336f9ce575c685a4303787ed8730
SHA512 44cdb99ea41cdc721d265e3c2b625f39f8588c037669ac95ba96c84abd23be0ff767055baa046afb94065bf3dabf1a91132a719d63d0b00959920ce6a80db85e
SSDEEP 384:4RjNVKRGKRuRERMrJtQtATJ5INmVSW+C55G8B9BPN5shOB9BxBBtEuONpaL0nl2u:+xEAqg/akcLxAPmhjTqg
TLSH
T14AB26631F7080853A1FEA2F9E0BF1B55E091D35CD31315E1B16577A779CA8B22AC238A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
540	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134308513969603369"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1788976790-1541110888-1636651838-1000\{BE2F4EA0-9CD8-49C0-8925-176F9E34F107}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
736	msedge.exe
736	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe
4708	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 4708 wrote to memory of 1832	4708	msedge.exe	85
PID 4708 wrote to memory of 540	4708	msedge.exe	86
PID 4708 wrote to memory of 4376	4708	msedge.exe	87
PID 4708 wrote to memory of 4376	4708	msedge.exe	87
PID 4708 wrote to memory of 4376	4708	msedge.exe	87
PID 4708 wrote to memory of 5052	4708	msedge.exe	88
PID 4708 wrote to memory of 5052	4708	msedge.exe	88
PID 4708 wrote to memory of 4264	4708	msedge.exe	90
PID 4708 wrote to memory of 4264	4708	msedge.exe	90
PID 4708 wrote to memory of 4264	4708	msedge.exe	90
PID 4708 wrote to memory of 940	4708	msedge.exe	91
PID 4708 wrote to memory of 940	4708	msedge.exe	91
PID 4708 wrote to memory of 940	4708	msedge.exe	91
PID 4708 wrote to memory of 4120	4708	msedge.exe	92
PID 4708 wrote to memory of 4120	4708	msedge.exe	92
PID 4708 wrote to memory of 4120	4708	msedge.exe	92
PID 4708 wrote to memory of 1760	4708	msedge.exe	93
PID 4708 wrote to memory of 1760	4708	msedge.exe	93
PID 4708 wrote to memory of 1760	4708	msedge.exe	93
PID 4708 wrote to memory of 768	4708	msedge.exe	99
PID 4708 wrote to memory of 4856	4708	msedge.exe	100
PID 4708 wrote to memory of 768	4708	msedge.exe	99
PID 4708 wrote to memory of 4856	4708	msedge.exe	100
PID 4708 wrote to memory of 3132	4708	msedge.exe	103
PID 4708 wrote to memory of 4284	4708	msedge.exe	108
PID 4708 wrote to memory of 2568	4708	msedge.exe	109
PID 4708 wrote to memory of 2216	4708	msedge.exe	110
PID 4708 wrote to memory of 4260	4708	msedge.exe	119
PID 4708 wrote to memory of 4260	4708	msedge.exe	119
PID 4708 wrote to memory of 3268	4708	msedge.exe	120
PID 4708 wrote to memory of 3268	4708	msedge.exe	120
PID 4708 wrote to memory of 736	4708	msedge.exe	122

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\email-html-2.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2b8,0x7ffad220c188,0x7ffad220c194,0x7ffad220c1a0
  2⤵
  PID:1832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1772,i,4997529703563785663,9922223965436840655,524288 --field-trial-handle=2236,i,6927010889056099276,7835358628823332745,262144 --variations-seed-version --mojo-platform-channel-handle=2352 /prefetch:3
  2⤵
  - System Time Discovery
  PID:540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1644,i,5211723498297965588,10970271367322616805,262144 --field-trial-handle=2236,i,6927010889056099276,7835358628823332745,262144 --variations-seed-version --mojo-platform-channel-handle=2232 /prefetch:2
  2⤵
  PID:4376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2296,i,5877717729493085617,10426493899785058795,524288 --field-trial-handle=2236,i,6927010889056099276,7835358628823332745,262144 --variations-seed-version --mojo-platform-channel-handle=2360 /prefetch:8
  2⤵
  PID:5052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3436,i,6222352397926393840,6581079967821850889,2097152 --field-trial-handle=2236,i,6927010889056099276,7835358628823332745,262144 --variations-seed-version --mojo-platform-channel-handle=3444 /prefetch:1
  2⤵
  PID:4264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3432,i,10511877948100269494,10430971182969890618,2097152 --field-trial-handle=2236,i,6927010889056099276,7835358628823332745,262144 --variations-seed-version --mojo-platform-channel-handle=3708 /prefetch:1
  2⤵
  PID:940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4188,i,18274329495321479878,14897790752352613037,2097152 --field-trial-handle=2236,i,6927010889056099276,7835358628823332745,262144 --variations-seed-version --mojo-platform-channel-handle=4224 /prefetch:1
  2⤵
  PID:4120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4216,i,8872267693197817173,9058143147586684431,2097152 --field-trial-handle=2236,i,6927010889056099276,7835358628823332745,262144 --variations-seed-version --mojo-platform-channel-handle=4252 /prefetch:2
  2⤵
  PID:1760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5084,i,10063322405125273735,1844863199946944289,524288 --field-trial-handle=2236,i,6927010889056099276,7835358628823332745,262144 --variations-seed-version --mojo-platform-channel-handle=5132 /prefetch:8
  2⤵
  PID:768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5092,i,9296395257429069614,1594260448457721632,524288 --field-trial-handle=2236,i,6927010889056099276,7835358628823332745,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:8
  2⤵
  PID:4856
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5908,i,3618514374205916815,429655655411301197,524288 --field-trial-handle=2236,i,6927010889056099276,7835358628823332745,262144 --variations-seed-version --mojo-platform-channel-handle=5480 /prefetch:8
  2⤵
  PID:4196
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5908,i,3618514374205916815,429655655411301197,524288 --field-trial-handle=2236,i,6927010889056099276,7835358628823332745,262144 --variations-seed-version --mojo-platform-channel-handle=5480 /prefetch:8
  2⤵
  PID:3132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4448,i,18208647283762800498,16772037088076311972,524288 --field-trial-handle=2236,i,6927010889056099276,7835358628823332745,262144 --variations-seed-version --mojo-platform-channel-handle=4432 /prefetch:8
  2⤵
  PID:4284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=560,i,3243356625769555975,6418145160194177036,524288 --field-trial-handle=2236,i,6927010889056099276,7835358628823332745,262144 --variations-seed-version --mojo-platform-channel-handle=3816 /prefetch:8
  2⤵
  PID:2568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4376,i,9185448725441036432,7184707722219665057,524288 --field-trial-handle=2236,i,6927010889056099276,7835358628823332745,262144 --variations-seed-version --mojo-platform-channel-handle=5944 /prefetch:8
  2⤵
  PID:2216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5180,i,1138597574022259655,8875604454536526866,524288 --field-trial-handle=2236,i,6927010889056099276,7835358628823332745,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:8
  2⤵
  PID:4260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5676,i,5197466634638294663,5100455434988541459,524288 --field-trial-handle=2236,i,6927010889056099276,7835358628823332745,262144 --variations-seed-version --mojo-platform-channel-handle=5836 /prefetch:8
  2⤵
  PID:3268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6116,i,6278915547323594238,4889196423787882378,262144 --field-trial-handle=2236,i,6927010889056099276,7835358628823332745,262144 --variations-seed-version --mojo-platform-channel-handle=5840 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:736

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3940

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 92b83a0e542b7bb3ed324c35b5f2a40c47a6351981065b804e4d9d80ddd6d7ee
MD5 9ea20a12d0c030ae7f84014f382662b7
SHA1 7912569189cf07c1ce092a268e67e9f391b7c8c7
SHA512 39ca414f13163c8479fe7650ae0dd1607b267fe3f319c09aec7bd5f68448e9ac604351069bf6b166b3f897d3afb5d7f35e609b9fc72b9debbcb05bad8fad7d81
TLSH
T132D02B20FF04E002D1072172540047100E0848902093C140E030441CDCEC804D395307
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7d64d2777f444a09968d6c155732e22d743fcf7c319c222bc06f6bb97808e489
MD5 89bc5edb6bd922f1cf8ec5536b066fa6
SHA1 c50aaf0fe1444780bb68ee7ab6e1c7468c2f303e
SHA512 77a1265c1484940562f1514202a0072e343efb323e1dcdb979fc9b7a2c69d85b814c076828b260c0b86a19e482ebb0a2df850f9b7c130a327861a7c56e26cde8
TLSH
T15CD02B20BF04E402D1072172540047100E0848902093C241E030441CCCED844D395307
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 d47e2131c31104048dbfcec78866fb96ffb370b36ee372908acad95746f186d9
MD5 a6dd4dcfdad0084f321c5b6e0bef98f8
SHA1 62abfb980b1e5a28e184a2391315f564ed4f08db
SHA512 469c6dc1c9c0bceb0ebf382ba101a01792dd35438d528aca778cdaac7f5efa6b76928a5966a615104ca58114d786e8f8554b4a5a88384674b3f112433304fdb8
TLSH
T12D61A4750A9312B1EF14C63294DD025D3777C6F7FA1B6E8990809633761231EF3259AD
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe587143.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe587143.TMP
Size 3KB
SHA256 b344e65b53d611d4cefdacfbfa65ef87312fbcbc5c63fc1f680705bc1ebce730
MD5 149f4593401ac91398a0e56d36b475c2
SHA1 c18eae03d58ed8f88cc8e4829906c154cc4d9366
SHA512 0555ab2eb56372a79c00d23112f1081e4e23f8096e9d3a78c3fe173841bf34ca27ce1cfb58a21911dd21fcfe9f9ac93f5b15968e0b2abacf48009ab1be866c01
TLSH
T19F61A5750A9312B1EF14C63294DD025D3777C6F7FA1B6E8990805633761231EF3259AD
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 195171c4275340f6c0dd89fcc4adfdb65c410ab56a57a315bd863fb6391cda85
MD5 c34e1c833e9cb8a19e0372ed9c639708
SHA1 4139ecb5f7bf35e143464553054198422651c7f5
SHA512 5fc066376d32d2e5d4efb001f4972a83c7e8cdd60e4758d1d0d30dba999fcc1772378e1feb7eebb98568a42d56bbc12c2905b0016ddaa0f9d2592e41ece24778
TLSH
T144117DF3C3E5956E890116F05A24AE2BDE2D0516821C7C2AC5D4FF6BD3E3076D00199F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 1d19586366332f1a2c453e16b0463dd078bccdde8b2abdb4d3ae807bbf05bcda
MD5 f6b002b0fcb2bce1593b0813c7803bae
SHA1 4a0373d78fed472e740d889228122bf74540ab49
SHA512 3a342a27b51f52de62c4bb24df58763d76a00bb20133e1bd7eec85cb4a3bee5c0292a9513c10b7656dc4fa21629f7c0cca21d6390606190f284ddf29c19d03dc
SSDEEP 192:sxZ9JLRzyM/jK1Ml8Mk3/fXsdBdVRIdpdnHW6+WNGYvrFjDlIgrJ:sxZ9hRM3/fXsdBCZHbGGt9
TLSH
T1F842D7116A34A977CCDBD20DFA55BF53D6F91462A2900E44A9FCDA1C04E7AEC2207C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 712036936a6195cbc90275a82c785a31c98d209d55dcdf3647fa89a2f7e7e5a7
MD5 d45bbbac29ee74d7e4f7587bdb5d0244
SHA1 edb2a2d67f75f5bdac960e718228c341d018c1f8
SHA512 42235e2816585937da84105ebcb1aedf91095cf25f82fb1cf9de9891dcaac6c4a4268c6179c354e56f2dca154e6fa49a7fca8d82648070b674ba6cd60bb5c945
SSDEEP 192:sxZ9JLRzyM/jK1Ml8UQ5k3/fXscedVRIdpHnHW6+WNGYvR8jDlIg5KJ:sxZ9hRq63/fXsceCHHbG9t0
TLSH
T19C52B5116A349977CCDBE20DBA55BF53D6F9547292900E44AAFCDA1C00E7AEC221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 8d8ef7c4103d578814a00034dbc7ed03e7abaf62ce99de08c132d6f4ff74c154
MD5 4ac610f824663a4a3b1ef3a33a6a5e9e
SHA1 8494fa68c03cf1eae5d60127c3d85a6e27ef06df
SHA512 f94cb258419935b21c5dd2f6b241b70a6a67a1f07fa09f86e63f6b3fc11732a6cd8deca976b63a1ef488b1f9a9e7b1d65e6da84a8bcc0166ffe6e4320c8b9a2e
SSDEEP 768:3fseJ3xWvhfyn8F1+UoAYDCx9Tuqh0VfUC9xbog/OVYcLly0pp4rovJ:3fseJ3xWvhfynu1jaVcL88pDB
TLSH
T1D7D20B2B280CCB7E4F844E6DEC266F966EE801CB57984D5487FA884C02C77EB51275DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 56d692e6f0a9c0b29f34dd5a2e40c6d827e2b7d91740440d8df0a966e3ffc211
MD5 34ec59b9b3ac82757e164d2f2b601a4c
SHA1 94a8088c30d2a9a061948145758e5604a7086c7a
SHA512 d6d7e57b9462c56dcd591b33a9650a1fc59e1eee170ddd0986d53dbc9316047337b609ff2dd08e2e899dee6c1ac919e036ea3efc77ff0b72950d94233ec779bd
SSDEEP 48:KYHIhKggkXySdIxK+cMjyFpINKawAnydA:KYH+KggmBd+K+ci+paKawqOA
TLSH
T1D3A14206757F13013C7E289CA295E6374E4235E3742864AF7FA810625EAAF150EFE9CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bb86bace-c7f8-4187-baa5-a5c8d39748c7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\bb86bace-c7f8-4187-baa5-a5c8d39748c7.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 116e633c40d2ef15492a13dbc47271f4b7a0375af8daaea105bf7bf18a157a44
MD5 5f6cfe3bd021de007543cfb9669086a2
SHA1 06c5c29431f7837556f3f2a2fdab920631a17a7c
SHA512 f43a6edb39c009256d27ee0c29a647f2debf0974e740eb5a16e2d470bdf74f7246308b49d470521430f64fdbd4c22d4e334d208c0c0cd59b7cbd7d627f2e0b07
SSDEEP 192:uam+xasuheOwQxMGsNneQU7M7gHZQmiU1lcjn4MTobWCIK++Wyio8z1wq+nUCBYy:SZcIhsNnedI7G3Uj4zFIKPlAMn3D
TLSH
T107626CB26C789D7B5DABB145F48A37034FF8902BA2C45B50E5ED7B2D00DB5AC130B91A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 3ca10a60b3cb05d2abb2738d5cefb34093476f1230a41f82906e32be583e1bef
MD5 5c64eb28169aa4cb9aec77fdc760c9af
SHA1 98db8a3de7519431c92ee13e126e51f04eeeb146
SHA512 1320f41d5749363a4d2366fe6dcd97b272da4026a76d18b4a6e8d7957305dc2352082d2e999efd4b0eb775d6c55388b7546ce384b3d2f85855dca9766e133c5b
SSDEEP 192:uqvm+xasuheOwQxMGsNnzQU7M7gHZQmiU1lcjn4MTobWCIK++Wyio8z1wq+nUCBN:SZcIhsNnzdI7G3Uj4zFIKPlAMn3D
TLSH
T1A9625CB26C789D7B5DABB145F48A37034FF8902BA2C45B50E5ED7B2D00DB5AC130B91A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 94dd3b4131102604bc0dbf9f93f197b1e91c2b2247f95d2aaf27c787f00a075c
MD5 9161f4b340ec40c306b1375a9659b624
SHA1 15afadd27f2dbb8d20a3523e18fe4a45b6a1dea5
SHA512 f80ef93303f46feb15d7eb9446270cdc5aca9600cae4466e88c3448555fc2aa39e506e826f3d3e38525a8887efa7c62c7f35e62ef08dd135827f4a79de00f2ff
SSDEEP 384:UiFiZcI+zsN58TUNTUlIlzdI7G3Uj4zFIKPluMn3D:vFQeIwgbIpjKFxlue3D
TLSH
T1D4824B735CA8C97BADABAA85F58932038EF44167D5C4AA60E6DC6E1D00DB1EC130BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 e48f15fd11392a348e0cbcc2a434597454c825fb5cc67657f4388018f9613f69
MD5 a82eb02623a2f075ed370ec3efaa852a
SHA1 9291e6293a0d23d3fc65cbe622c6d7fc5d64e8d8
SHA512 2b176b38cae4980cc29a01596f4767a4f29c5ed0de7e637c22f0371f9a9c313b4be5de93faac27e66a1b3c3c9290861d59ff0adf5fb04ad2536794f9bb7b27b9
SSDEEP 192:lONG6vMtPQmiUy92ThTobWCIKp847FLU/u:lONG6UtRHTiFIKRlU/u
TLSH
T1A0020875BC686C7BAEA7BE49F48E27171FF4116BA5905B50EAE82F1C00D765C2303826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 9KB
SHA256 b4af859dda9563481b91969e5e6912b5689a53bbefad4c669fb203a9a1eedd24
MD5 bb4713d2e1d3f3d2cfa82089211a56ae
SHA1 1a3fc31baff8941985905c7abf9a88ed566a382b
SHA512 4fac6a4822e37f7259e92fe2e59574ee0b56aaf24f66392822e21ddb43216c93bd3655f6eb555da45fa821990be2a9a64c02ea4601b6f19d445ac1e2688838af
SSDEEP 192:vONa6vMZPQmiUyy2shTobWCIK++Wyip80Iwq+nU/u:vONa6UZRSsiFIKPl7MnU/u
TLSH
T17F122B72BC689C6B5D97B555F48E32031FB4826BE6849B50EADC3F2C01EF6AC1307916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

68e7c106-db73-4004-a37b-2acf526f16ad.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\68e7c106-db73-4004-a37b-2acf526f16ad.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 77525dbb7c2a1abe8b535f0ffb9313e4ed5e73e404b6947b387be2466e2bd102
MD5 ae65b405bd9a0fd68fc4c8723dadaa49
SHA1 f6897aeab77e2ebaf65b01138044341296c85903
SHA512 8316ca62a6b4a93f7d4878abf3a771d1a54620f5967cc1a13c50d7092ce48bf7e31d18d30f838140f39556f938896764ea2fae078c6fb5671da1d99f427e35d6
TLSH
T188412758A6E91148B3B77F569BF6A86E887FB8732F07905E10110E8F0A23A40C971737
MD5 SHA1 SHA512 TLSH

Submit Download