6b54aef9f4886aa02853416f595d242ad824089020785f4018c89debeb73fc79

Resubmissions

12/08/2026, 16:00

260812-tfvb7abl2s3

12/08/2026, 15:54

260812-tch5radf453

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/08/2026, 16:00

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
email-html-1.html
Size 73KB
Sample260812-tfvb7abl2s
SHA256 6b54aef9f4886aa02853416f595d242ad824089020785f4018c89debeb73fc79
MD5 39cc1d426801091b4bfc26dacd22cf0d
SHA1 cf1d800df599e6bc59bee4e65dfd9463d530847e
SHA512 23d8fc53a20cc73a1e6dd75453d1a55b401249ff4b4afc6c8f111ca048cc40978bff8238b9b4f99f69c2779e0291167f0f81eb1c8f4f3a14fde954ec340ae1df
SSDEEP 768:z2uhIOvmETrMfKUk2vKyiVlkd+PWJsb8kR8sO:KuhIz6lkcPQsb868sO
TLSH
T14473E791E380191B59EB51CDE2137FBC92F8809B87721BB4EC553A7E926ACB2113537C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4560	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134310240379049446"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-889581200-2041691093-2048517887-1000\{7E891166-6601-403A-B4B8-2E33DF22CF08}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1272	msedge.exe
1272	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 4936 wrote to memory of 4552	4936	msedge.exe	85
PID 4936 wrote to memory of 4560	4936	msedge.exe	86
PID 4936 wrote to memory of 3800	4936	msedge.exe	87
PID 4936 wrote to memory of 3800	4936	msedge.exe	87
PID 4936 wrote to memory of 4640	4936	msedge.exe	88
PID 4936 wrote to memory of 4640	4936	msedge.exe	88
PID 4936 wrote to memory of 4640	4936	msedge.exe	88
PID 4936 wrote to memory of 2028	4936	msedge.exe	89
PID 4936 wrote to memory of 2200	4936	msedge.exe	90
PID 4936 wrote to memory of 2028	4936	msedge.exe	89
PID 4936 wrote to memory of 2028	4936	msedge.exe	89
PID 4936 wrote to memory of 2200	4936	msedge.exe	90
PID 4936 wrote to memory of 2200	4936	msedge.exe	90
PID 4936 wrote to memory of 684	4936	msedge.exe	92
PID 4936 wrote to memory of 1360	4936	msedge.exe	93
PID 4936 wrote to memory of 684	4936	msedge.exe	92
PID 4936 wrote to memory of 684	4936	msedge.exe	92
PID 4936 wrote to memory of 1360	4936	msedge.exe	93
PID 4936 wrote to memory of 1360	4936	msedge.exe	93
PID 4936 wrote to memory of 4112	4936	msedge.exe	99
PID 4936 wrote to memory of 1972	4936	msedge.exe	100
PID 4936 wrote to memory of 4112	4936	msedge.exe	99
PID 4936 wrote to memory of 1972	4936	msedge.exe	100
PID 4936 wrote to memory of 2276	4936	msedge.exe	102
PID 4936 wrote to memory of 3996	4936	msedge.exe	107
PID 4936 wrote to memory of 452	4936	msedge.exe	108
PID 4936 wrote to memory of 996	4936	msedge.exe	109
PID 4936 wrote to memory of 5040	4936	msedge.exe	114
PID 4936 wrote to memory of 5040	4936	msedge.exe	114
PID 4936 wrote to memory of 5020	4936	msedge.exe	123
PID 4936 wrote to memory of 5020	4936	msedge.exe	123
PID 4936 wrote to memory of 1272	4936	msedge.exe	128

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\email-html-1.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x240,0x244,0x248,0x23c,0x214,0x7ff9f3a4c188,0x7ff9f3a4c194,0x7ff9f3a4c1a0
  2⤵
  PID:4552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1772,i,5855242531436154991,15052687110706853413,524288 --field-trial-handle=2272,i,1871987531899867629,5123433341818521662,262144 --variations-seed-version --mojo-platform-channel-handle=2492 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2324,i,9642580502229324696,13614848997246933064,524288 --field-trial-handle=2272,i,1871987531899867629,5123433341818521662,262144 --variations-seed-version --mojo-platform-channel-handle=2500 /prefetch:8
  2⤵
  PID:3800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1644,i,10570403263937372327,18388515277934572978,262144 --field-trial-handle=2272,i,1871987531899867629,5123433341818521662,262144 --variations-seed-version --mojo-platform-channel-handle=2268 /prefetch:2
  2⤵
  PID:4640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3444,i,7394768787436297061,3716242486202554687,2097152 --field-trial-handle=2272,i,1871987531899867629,5123433341818521662,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:2028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3464,i,6402311100304900900,2279968545183177221,2097152 --field-trial-handle=2272,i,1871987531899867629,5123433341818521662,262144 --variations-seed-version --mojo-platform-channel-handle=3540 /prefetch:1
  2⤵
  PID:2200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4232,i,13180407847094939167,5432371572602177344,2097152 --field-trial-handle=2272,i,1871987531899867629,5123433341818521662,262144 --variations-seed-version --mojo-platform-channel-handle=4352 /prefetch:1
  2⤵
  PID:684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4244,i,9240137565531767559,10757666479719025217,2097152 --field-trial-handle=2272,i,1871987531899867629,5123433341818521662,262144 --variations-seed-version --mojo-platform-channel-handle=4328 /prefetch:2
  2⤵
  PID:1360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5060,i,3991787930128108556,2468867443796179897,524288 --field-trial-handle=2272,i,1871987531899867629,5123433341818521662,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:8
  2⤵
  PID:4112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5068,i,17113205845289215532,914920717802079107,524288 --field-trial-handle=2272,i,1871987531899867629,5123433341818521662,262144 --variations-seed-version --mojo-platform-channel-handle=5212 /prefetch:8
  2⤵
  PID:1972
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5524,i,7372383208922727585,10404353590433376025,524288 --field-trial-handle=2272,i,1871987531899867629,5123433341818521662,262144 --variations-seed-version --mojo-platform-channel-handle=5904 /prefetch:8
  2⤵
  PID:364
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5524,i,7372383208922727585,10404353590433376025,524288 --field-trial-handle=2272,i,1871987531899867629,5123433341818521662,262144 --variations-seed-version --mojo-platform-channel-handle=5904 /prefetch:8
  2⤵
  PID:2276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4424,i,4540275952799620010,4221588840701112036,524288 --field-trial-handle=2272,i,1871987531899867629,5123433341818521662,262144 --variations-seed-version --mojo-platform-channel-handle=4348 /prefetch:8
  2⤵
  PID:3996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=568,i,1759565796299519312,11340322209132211125,524288 --field-trial-handle=2272,i,1871987531899867629,5123433341818521662,262144 --variations-seed-version --mojo-platform-channel-handle=4436 /prefetch:8
  2⤵
  PID:452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4412,i,295343713933776955,10931494164598835593,524288 --field-trial-handle=2272,i,1871987531899867629,5123433341818521662,262144 --variations-seed-version --mojo-platform-channel-handle=3592 /prefetch:8
  2⤵
  PID:996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5060,i,6874408384288351137,15627711816539551218,524288 --field-trial-handle=2272,i,1871987531899867629,5123433341818521662,262144 --variations-seed-version --mojo-platform-channel-handle=5344 /prefetch:8
  2⤵
  PID:5040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5404,i,2833299216706754991,15283587201572032012,524288 --field-trial-handle=2272,i,1871987531899867629,5123433341818521662,262144 --variations-seed-version --mojo-platform-channel-handle=5980 /prefetch:8
  2⤵
  PID:5020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5592,i,12231672265951947469,9446699686184193374,262144 --field-trial-handle=2272,i,1871987531899867629,5123433341818521662,262144 --variations-seed-version --mojo-platform-channel-handle=6116 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1272

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2212

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 7fd5bb1f644eb411bb872c67028f304d04057a5f505f768dd5738bf92f707f63
MD5 901e0c5c5c5e916b99665827d31bb171
SHA1 57a3196b505289cd03308057cc32b3b104088d5c
SHA512 1c175f8e40dd8eeeefc86f0d0ea18f5978989bf9543618cbab061619cb764725a61470219c35789489666db39bffa5430e3c178837686c6e22ab5411e0a17e61
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7Q:fwUQC5VwBIiElEd2K57P7Q
TLSH
T1FAB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 11d3c4c52f9fc9cd2b10a22b48769759f994fd6364f9a0fc145f4cd2c2a22e9d
MD5 4751cf705a737c4226029624bf43b9a8
SHA1 fd8cf726ee3f8f75b97147829de5553530caa82c
SHA512 46e3fedbf7fa14bdc2b3aad129f2879a9d24252f5d7bd9b55766bc32a6b82ea77aaf193bcdbdf4423e3b67ef84955e589b6077609344091ef72204c1d50b0dab
TLSH
T17ED09B307A58A58BD14360F1A4114B4115375557205397757521508E9E98055B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 6KB
SHA256 2d0d0e9cbb2427f5c4f15287e5d4e79c24e2b2e7b1cefba9e550ef7a91d82e74
MD5 e2fa919fbc595d1765a572262d1334d2
SHA1 a8a23d82e770bb50e12592c8c810c32b91f07ad3
SHA512 881cfb56281b25452596fba5c13e12e8f96faf98ee9df46829c531abe3ffa2fc6bea81f12023bcbf69f988b19b94045a41ba71db274941ae128735e69a99011b
SSDEEP 192:2ju/ZIIDaVV00vvmmmhhhQQkkkFFFWWf44MjLO:2ju/ZIIDaVV00vvmmmhhhQQkkkFFFWWR
TLSH
T158E1598782E4C79FCF1E518B49A4725E4070374BEBDCFA0853DC8AD9304FC9AB4A2695
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 013f4da95f52ab623739b87053c7970687c1ef5e2b2693a7a9a40039e319cfbe
MD5 7670145c70f45511935f9f3266948e33
SHA1 6780c9a3ee5fd738a3c7f41851f29241a8c48d63
SHA512 f2fdbcd6776340088c47ac65a85d9176b53ec105a3b865df2871756aa376185c0d8a7519a5886899ed50be5d2f7015a59be0afe7f4e98ff6e86b26db0de865e4
TLSH
T1D7515D24C3120D91EB915233C0D02764367AD6D43BC76F94F28868F91E0EF2E5E7E119
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58f19e.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58f19e.TMP
Size 2KB
SHA256 c0a8be02ebdff14c76fffbc027ba3be886a411b51b46f4fbc38cf417487b1593
MD5 2eddacc1d0a9149a4511bdfa54de4598
SHA1 089ee9563f76318e9079bce52612da4bb5c9d8ce
SHA512 8e352e1f00cbc53a9eafd3d7adf4f5486ea6c1fd33f97489782bb4e7c2a6da20cb3b762ba8c33486bf1fd9641fec4fcc668926e44aa4f1fe54e7ba9eda816e67
TLSH
T1AC513D24C3520D91EB915233D0D02754367AD6E83BC76F94F29858F91E0EF2E5E7E119
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 855B
SHA256 1c0ced84a2b86f97f59951b17efa9b5ee5f43492039a8513eb68edf83db3f610
MD5 9f2d2b0d8f78d187461ba45df08f0162
SHA1 8f66869c3ebf71a773e57ddf52ee3e30c572388f
SHA512 7a567eaa94b81712882ffc2dc556a4ca46645901bc27df7b70a4250d383f50ca209f2e614f2ca2a11a00c714caf5ebf89eae8d281c80e9201772747a1b9e5366
TLSH
T19611AFB7C3E49A7F8E0052F0AA18AE2BCE6C0546431C7D5789E4AE2B93F3474D10159F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 ecb853ed5907792f6b75a71770c5d2d322ee822e51c45b316c29a47267317777
MD5 b82c3586c526591b27f5ca5cc46eb236
SHA1 16dd9c3df81424a0bd0e3de0f43947bc95c3b240
SHA512 5abb8574f79353d36f2a28b7d6985163d1324e72fadb962fb9983b184ea21bd0cc96698cfb8a27b4c1629176432b08eae7950cb49f316a6a4e7e4ac82f078a7b
SSDEEP 192:sxZ6RbyM/jK1Ml8MkZ/fRsI41wHIdpdLHW6+WNGY9IKUa8IgrJ:sxZ6bMZ/fRsf1h9HbGz9
TLSH
T17542E8116A346977CCDBD309BA55BF53D6F9053292900E48AAFCCA1C04E7BED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 e3b387d735e6cb544d39395b7fd4bf94182f57e63d696d5ca63f60e0af90c199
MD5 d7d6b278c34ca860f4bb4c9dac1674c2
SHA1 7337b7356ac54c922ecf06feefcbcde07e61720d
SHA512 6af0a6abcc1f7f2d22f29800576640f04ee7e98aeadc56f8ea6871a1703fdad70ca1c7d0ffc054e9da93faff0c7c73e908a82c38eeade42317c318688061a0d9
SSDEEP 192:sxZ6RbyM/jK1Ml8MkZ/fRsD4BwHIdpdLHW6+WNGY9Iwwa8Ig5nJ:sxZ61MZ/fRscBh9HbGX3
TLSH
T10B52D7156A345977CCDBE209BA45BF53D7F9053292900E48AAFCCA1C05E7BED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 a5a2159daf7dea81e2ac1744f31a9ec7adf090fc8cb38b3137bca4b2a56d5bde
MD5 883c15fac9453a6ecc69f891a1268357
SHA1 21ae90495a15a5f9ddd7b2c066ac9ea33e07713f
SHA512 6384e22dc703f9691b7e1cafe1664de2c162ba7ce145e9ceb76715287cc9a8545023918eb4bed9477a8c3608c978a7fe8f0352feeab07f681651b70d16c9ee23
SSDEEP 192:sxZ6RbyM/jK1Ml8UQIkZ/fRsD4BwHIdpHLHW6+WNGY9IGfE8Ig5nJ:sxZ61qrZ/fRscBhrHbGA3
TLSH
T1D852C6156A345977CCDBD609BA85BF53D6F9047292900E48AAFCCA1C01E7BED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 0ab49e5253f9f96663518ea7d7b49f963d7abf0c57bec3bf34d9edcbd7993d51
MD5 2e442eae7efc722126878396fdd5a013
SHA1 c8cb8e41306a797f7f079cb1e2b8c2ab48b5cb3c
SHA512 380bc2867a7f3e856c7d15314154fa9c2cfb6097a977347f2f1af9cf224d94b0f0e60d44388b7186ab604e4694467276c1791b163b1ce7d31645fd3ace94ea7d
SSDEEP 768:jQcv21wWvu+Z+8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjFLlwmWN4roHg6A:jQcv21wWvu+Z+u1jaeFLeRNDHw
TLSH
T1C9D20B2B280CCB7E4F841E9CED2A6F966ED801CB57988D5447FA884C03C77EB511B59B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 abee418a4a7891950c5f63bd229936846768b19c714751672898321ad1f4c6db
MD5 d114fa428e9d537ff297d29e48b1f70b
SHA1 80a4c68f5382822cadf3659f4aaedd6e99628d0f
SHA512 20a62efb8e61990837f847917b85d5656cab064b9275dcabd432e411927b5341d249e1c8d019cacf8fe2b3577768b77448e5bd354fe3ebd826e4e420bbb023fc
SSDEEP 96:KaRklRnHnqlPKZThqKLfTzqHxJSrBD6aEKPaGO1WKO06C4AKFeMYda+YK6:mTfLRl7XYda+YK6
TLSH
T14DC16116B13B4642287E7808A79286374F4535E7781CB4AF7FB800668E6BE115DFE4CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe599030.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe599030.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 11df3c36a31c2bf2cd364c6192b279d137155d92f4c37c6f4a8ac22a7e687f44
MD5 31027441ebbfdd2bbb57f33596496d4c
SHA1 5de3c6dfd57e07ecd004ee77fc477a27a811db33
SHA512 b26e60c2ebece27c189eaf95cc392ab894fd5f1b2f59160c10863de593a1ca4343210045e3052baaf6cdd52974d047f6c48595c969e05c1d02859126befbc32d
SSDEEP 384:7ZcIhsNYTOdfCfxrzi1aHue+CzO4eyfFxMsRnlY8Bb:jhfXfxH1JrOXyfFxhn2sb
TLSH
T14F928E32AD342DB759F6A542F4C636138EB89067E6C53F84A6DCAF0C02DB79C1306D25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 3ed99f8f9af6346632b5f61c4275cfe718140c87cc020f1bf46e8f53669ed083
MD5 bad2b4ecb05e43a0f43090553ac90c8f
SHA1 ea7cec109a15dcae8a954739d8426e6a167624ae
SHA512 ca5428f3be6bbab27f52ecf7644483b41a95b455d0bf3ed650214416907ff0a2668faba1bd4e71dbd2b66a94738acd7eb202dab95a5d82d577d0f0e07f250c72
SSDEEP 384:rZcIhsNYOdfCfxrzi1aHue+CzO4eyfFxMsRnlY8Bb:zhTfxH1JrOXyfFxhn2sb
TLSH
T157928E32AD342DB759F6A542F4C636138EB89067E6C52F44A6DCAF0C01DBB9C1316D25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 4b16db4799e047baa49d956f16ba08a7ec18943b5a3410a5fdab7a8a2f0a87be
MD5 468c7658f8b3c5e2139fc1e94cf59461
SHA1 4cfddbadd3bffd0f21c21f187aa9f10f33b7f3c5
SHA512 81866e7a55c1f27ee325b316a6b4e471427e18c470665799ad0be0b8de9d8b9d383a1672d2f04adcc51db1135990359e45d37ee6801c91dffd73a996a1d157ff
SSDEEP 384:fiFiZcIusNI8TUNTUlIlOdfCfxrzi1aHue+CzO4eyfoxMsRnlY8Bb:qFQu1wgFfxH1JrOXyfoxhn2sb
TLSH
T14EA27D339C64597B6EF69A42F58A3613CEF850A7D5C5BE84E7D8AE0C01DB6DC0306C25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 65fdec659685a0928e3e7c23491c2f236269ee9af61e006798ad6162f676fc07
MD5 2678cd7f047f1c33e94f296430b1d961
SHA1 c7ba1eca0e37378bb3bdfdc43deff90e63e46320
SHA512 6861e77a1b1b0a5d4b2ecfd6aee1f448ac56a01cb1987cf9569243038db82f08bccfebb3fde11dd04f5d11b48f1cfd5e73394039ef129084b855de712e39ce32
SSDEEP 192:JONW6v+YLNQmiUyyrZh+CGSO49oQusqtU6:JONW6vz/3Zh+CzO4eG+U6
TLSH
T17B02E935B9381CBB9FF2AE45F58737279FA82177E9912F44D9E82E1C01D764C2306826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 20929fa7013503b82a7dc59f3d1ecfd182267ee708e90888b4fe35037e6039e0
MD5 dbdbcada8d8601035dd177ec857d1e59
SHA1 aaea31fc8678e52370bc0bd339c32613c06e98f8
SHA512 d50bf4452416eaef21599c495421019be9f663fad286de472812d679fe5ad5b9771856548e752f761971535a9eb754279bf1783cab3fe53c494651a52188c2c4
SSDEEP 192:xONR6v+YLDQmiUymrqh+CGSO49oyfBCHsqfU6:xONR6vz51qh+CzO4eyfGxU6
TLSH
T131122A35B9381CAB5EE2A985F4C73617DFA85167E9853F80D5DC2E1C02DF79C2306826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1490a63f-7a7b-444b-949e-bf547f128109.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\1490a63f-7a7b-444b-949e-bf547f128109.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 513434fcca72effdde79bb00b6baa2c3cd45a6025a7c750473ffca6a4c4a35f8
MD5 ae6f9fe835e4972960302d0f18c35783
SHA1 2e5a08f04f48e4a9f22dd1383bed27c7a67136b1
SHA512 656f671691eafcdf11422bd646f93fe8f10d59e9b2c08f1836785f826eba9bfc6c3ecd51227b77616561ce1cd27282e6800295a993c588d795f9368fad46769d
TLSH
T1CD41F85CA6EA1148B3B36E56ABF768BE447E78772F0BD55D10010E4E4663A00D8A1B37
MD5 SHA1 SHA512 TLSH

Submit Download