5ff0bbfe1937a184525897fc319f0aeaf6fe06f8648c803577cede0fbcd5df04

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
17/08/2026, 14:29

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
email-html-1.html
Size 980B
Sample260817-rtms6as1ds
SHA256 5ff0bbfe1937a184525897fc319f0aeaf6fe06f8648c803577cede0fbcd5df04
MD5 fb6ca1cac04aa530c0ca451c593f6cce
SHA1 c9edca8fc13104894651654f4016308fa770bb2a
SHA512 02a406ebcac995d05e0a7f37f2df5b53b30ceeb9cf35427e6192c672a67eb6bfac6b362f4d67d2fca3eb4807c093bd05927349df5dd8ca332543cf34a2145b80
TLSH
T1741121F224843565AB2B33EE342A139D7B5E246E77810CC0F5E381369DC5B6382368E4
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3940	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134314505635917017"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-204488895-2999877624-296153668-1000\{30019FFB-05E8-4F88-9457-3ACF12235FE4}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2576	msedge.exe
2576	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3624	msedge.exe
3624	msedge.exe
3624	msedge.exe
3624	msedge.exe
3624	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3624	msedge.exe
3624	msedge.exe
3624	msedge.exe
3624	msedge.exe
3624	msedge.exe
3624	msedge.exe
3624	msedge.exe
3624	msedge.exe
3624	msedge.exe
3624	msedge.exe
3624	msedge.exe
3624	msedge.exe
3624	msedge.exe
3624	msedge.exe
3624	msedge.exe
3624	msedge.exe
3624	msedge.exe
3624	msedge.exe
3624	msedge.exe
3624	msedge.exe
3624	msedge.exe
3624	msedge.exe
3624	msedge.exe
3624	msedge.exe
3624	msedge.exe
3624	msedge.exe
3624	msedge.exe
3624	msedge.exe
3624	msedge.exe
3624	msedge.exe
3624	msedge.exe
3624	msedge.exe
3624	msedge.exe
3624	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3624	msedge.exe
3624	msedge.exe
3624	msedge.exe
3624	msedge.exe
3624	msedge.exe
3624	msedge.exe
3624	msedge.exe
3624	msedge.exe
3624	msedge.exe
3624	msedge.exe
3624	msedge.exe
3624	msedge.exe
3624	msedge.exe
3624	msedge.exe
3624	msedge.exe
3624	msedge.exe
3624	msedge.exe
3624	msedge.exe
3624	msedge.exe
3624	msedge.exe
3624	msedge.exe
3624	msedge.exe
3624	msedge.exe
3624	msedge.exe
3624	msedge.exe
3624	msedge.exe
3624	msedge.exe
3624	msedge.exe
3624	msedge.exe
3624	msedge.exe
3624	msedge.exe
3624	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3624 wrote to memory of 4952	3624	msedge.exe	86
PID 3624 wrote to memory of 3940	3624	msedge.exe	87
PID 3624 wrote to memory of 4832	3624	msedge.exe	88
PID 3624 wrote to memory of 4832	3624	msedge.exe	88
PID 3624 wrote to memory of 4832	3624	msedge.exe	88
PID 3624 wrote to memory of 2160	3624	msedge.exe	89
PID 3624 wrote to memory of 2160	3624	msedge.exe	89
PID 3624 wrote to memory of 696	3624	msedge.exe	91
PID 3624 wrote to memory of 696	3624	msedge.exe	91
PID 3624 wrote to memory of 696	3624	msedge.exe	91
PID 3624 wrote to memory of 4144	3624	msedge.exe	92
PID 3624 wrote to memory of 4144	3624	msedge.exe	92
PID 3624 wrote to memory of 4144	3624	msedge.exe	92
PID 3624 wrote to memory of 2924	3624	msedge.exe	93
PID 3624 wrote to memory of 2924	3624	msedge.exe	93
PID 3624 wrote to memory of 2924	3624	msedge.exe	93
PID 3624 wrote to memory of 1012	3624	msedge.exe	94
PID 3624 wrote to memory of 1012	3624	msedge.exe	94
PID 3624 wrote to memory of 1012	3624	msedge.exe	94
PID 3624 wrote to memory of 564	3624	msedge.exe	98
PID 3624 wrote to memory of 2208	3624	msedge.exe	99
PID 3624 wrote to memory of 564	3624	msedge.exe	98
PID 3624 wrote to memory of 2208	3624	msedge.exe	99
PID 3624 wrote to memory of 4840	3624	msedge.exe	101
PID 3624 wrote to memory of 1528	3624	msedge.exe	105
PID 3624 wrote to memory of 4604	3624	msedge.exe	106
PID 3624 wrote to memory of 4544	3624	msedge.exe	107
PID 3624 wrote to memory of 4480	3624	msedge.exe	117
PID 3624 wrote to memory of 4480	3624	msedge.exe	117
PID 3624 wrote to memory of 2576	3624	msedge.exe	119

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\email-html-1.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x25c,0x7ffaa95ac188,0x7ffaa95ac194,0x7ffaa95ac1a0
  2⤵
  PID:4952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1956,i,17527094694846260141,17665519550401683829,524288 --field-trial-handle=2244,i,6334838382119686731,10152716053889609477,262144 --variations-seed-version --mojo-platform-channel-handle=2344 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1728,i,8398100705124896172,5994155169671778310,262144 --field-trial-handle=2244,i,6334838382119686731,10152716053889609477,262144 --variations-seed-version --mojo-platform-channel-handle=2176 /prefetch:2
  2⤵
  PID:4832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2516,i,4233853033677280423,2284910018037974473,524288 --field-trial-handle=2244,i,6334838382119686731,10152716053889609477,262144 --variations-seed-version --mojo-platform-channel-handle=2624 /prefetch:8
  2⤵
  PID:2160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3460,i,8267433431101676142,2413807950536241251,2097152 --field-trial-handle=2244,i,6334838382119686731,10152716053889609477,262144 --variations-seed-version --mojo-platform-channel-handle=3532 /prefetch:1
  2⤵
  PID:696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3464,i,1958672125243758443,908588414876310067,2097152 --field-trial-handle=2244,i,6334838382119686731,10152716053889609477,262144 --variations-seed-version --mojo-platform-channel-handle=3544 /prefetch:1
  2⤵
  PID:4144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4220,i,16499645370635396604,18133297296076192345,2097152 --field-trial-handle=2244,i,6334838382119686731,10152716053889609477,262144 --variations-seed-version --mojo-platform-channel-handle=4284 /prefetch:1
  2⤵
  PID:2924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4240,i,14855583822699641993,16614515401769617207,2097152 --field-trial-handle=2244,i,6334838382119686731,10152716053889609477,262144 --variations-seed-version --mojo-platform-channel-handle=4288 /prefetch:2
  2⤵
  PID:1012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5148,i,8152456164758640065,12918756804730132453,524288 --field-trial-handle=2244,i,6334838382119686731,10152716053889609477,262144 --variations-seed-version --mojo-platform-channel-handle=5212 /prefetch:8
  2⤵
  PID:564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4888,i,172194955575582289,13673451806894293341,524288 --field-trial-handle=2244,i,6334838382119686731,10152716053889609477,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:8
  2⤵
  PID:2208
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5816,i,15273398007784800208,11432048011498371767,524288 --field-trial-handle=2244,i,6334838382119686731,10152716053889609477,262144 --variations-seed-version --mojo-platform-channel-handle=5832 /prefetch:8
  2⤵
  PID:372
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5816,i,15273398007784800208,11432048011498371767,524288 --field-trial-handle=2244,i,6334838382119686731,10152716053889609477,262144 --variations-seed-version --mojo-platform-channel-handle=5832 /prefetch:8
  2⤵
  PID:4840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3608,i,8180283104430055159,5417844672270413925,524288 --field-trial-handle=2244,i,6334838382119686731,10152716053889609477,262144 --variations-seed-version --mojo-platform-channel-handle=4384 /prefetch:8
  2⤵
  PID:1528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=120,i,12777457441896520936,6952312750022911618,524288 --field-trial-handle=2244,i,6334838382119686731,10152716053889609477,262144 --variations-seed-version --mojo-platform-channel-handle=4308 /prefetch:8
  2⤵
  PID:4604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5816,i,5552358488469841849,15939501509639413290,524288 --field-trial-handle=2244,i,6334838382119686731,10152716053889609477,262144 --variations-seed-version --mojo-platform-channel-handle=6240 /prefetch:8
  2⤵
  PID:4544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6324,i,13180490814823633813,13213438967990060299,524288 --field-trial-handle=2244,i,6334838382119686731,10152716053889609477,262144 --variations-seed-version --mojo-platform-channel-handle=6336 /prefetch:8
  2⤵
  PID:4480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6136,i,14495780859874050838,11998007109804497580,262144 --field-trial-handle=2244,i,6334838382119686731,10152716053889609477,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2576

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:892

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ab98da7535c8de464335204ae97fd672936e639269325c3a388b3039d8396b83
MD5 1656a3560c7aeae221756f3891b89fd3
SHA1 e48441fe2b843ba3bd0bb7799c07b22a27db8eb7
SHA512 c06d7152d11e33601716d4c5c33c7373ac4e0c16571e80ac4a8ffb9cabb52fae51d4fe8d808fc75be943287b55a320e90a186d71a5f06e9db006f6ab89266400
TLSH
T1CFD09B307B597042D3074031E8074790169E84B5249B86066554410D7D5A485E3DF547
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ec6419a915c6f94199df67c6cf1d67bc666c22ef160c8377d6792913a6518679
MD5 a8d0099e5966b86c13c6997282a63770
SHA1 df541b93a0caebe364906ec90c768bb625495f4c
SHA512 a2093c42c3f547b910f560ee7a58cb187cef96045e8e335276c7bde87fdc5e9894b670421e94170d0878e86a2bea8125d914e11181882004f966732f9670a693
TLSH
T135D09B303B597442D7074031E8064790169E84B5249BC7076554410D7D5B4C5E3DF547
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 48eff40fee37f252f7c92a68eba6e2a66389cb17717c3e2598128a9194fecfad
MD5 0df1e4faf684deec4959d08e1ad43539
SHA1 548fc5882ce6a0f6d4faf7ff96789da2cc7d4d40
SHA512 298be78055f385a2bf69d8b006171bc9aedf661becf44d4e4a531b9670420f48e1e19ee243250a1280e86fad704197a31708bc8835ddfdd92c8b65191c80a19a
TLSH
T1EA618238C78309A5D7A174B290FD0F24797587D8FAF32D85D86829346F1B751C3682D8
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe591311.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe591311.TMP
Size 3KB
SHA256 ecad7938ec9f44e4ba0ed26e28ac701ffdf1298f8476aab9e9e825a6ff85d2aa
MD5 23f032b691f62c8fd4e574c7b093facb
SHA1 9a9c7f28d3a0f4bc7122c41060f09d7cefc34d29
SHA512 ebe5ff4f457967d2457fdc066754d63f7a34f71502e861e7461b6971b24a50a20b7361e84bccc4aaf54981f00690a76147adc0e5b2f54759bbdf9bf52bf56f35
TLSH
T168618138C78309A5D76174B294FD0F24797687E8FAF32D85D8A829346F1B751C3682D8
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 dca9662e19bc9989c4b1b7d3d54e75fcf25c5bf31ea27b3ef313d651a5d71ba5
MD5 8379c427d50858c3d03e3c73dcc2b38d
SHA1 63c725b82ba5b2092ffa5843405f61a807ba0bc1
SHA512 8bd1add36fd80f7fbc8075aa3d2dbde0178a3a6f49294c2631e1053256377314d27821bd33cf7d40e699ad81bc771af06062824895bca184195e062e5183426d
TLSH
T1A9119BF3C3E5856E890156F05A24AE2BCE2C0505422C3C59C9D4EF2B83E3065E00155B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 5439137c6472fb328a3fa4f7c5edb662dce12f4543c4f1b629406e7ce525638d
MD5 62293ecd6e62a2a17fd81218afb6722e
SHA1 4313ffbe5a856d630c26e71a911d1945297edb6f
SHA512 a7644b89edbd74a61e5cecf429d37d428fe8fb81ed42752773f37810c371ce44b25fa6b126f2539dc9018c46fe8103003444ca5dadd63ef994e8155f2ce1f747
SSDEEP 192:sxZnRBkk/f+s97wSBIdpdYHW6+WNGYzQsdlsIgrJ:sxZn8k/f+slwjSHbGqy9
TLSH
T1A422C9566E34A93B8CC7D209BB157F53D6F9503295941E48EAFCD61C05E7ACD120B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 09bbb3745a5fcc8a8427dbc42210a2c12259eff8d922110f40c94c3f8b12163e
MD5 7b13e51e7d31422872950f2615c97819
SHA1 9dbfb3ebb7f17740a7e5249c0513bf4e239520c6
SHA512 bf2f8f35ef72859bf1a4299611e36f95f1b8dff919dd515c81d97cf28c9194078e5fef55c89be089bb34c1e54dfba7f8b1f5e093791147c6ebd395c124f6111a
SSDEEP 192:sxZnRBkk/f+se7wSBIdpdYHW6+WNGYzQsdlsIg5IAJ:sxZn8k/f+sywjSHbGqyj
TLSH
T13022C8566E38A93B8CC7D209BB15BF53D6F9503295901E48EAFC961C05E7ACD220B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 83659551f2dbbe185c55bfde562c2f86104e69abbc941fb87f7a68044d3ffa97
MD5 512345890becd85b01bc350cfc64a2a1
SHA1 c03175d8df4cc372fb8f6b90f893cd3a76616ff4
SHA512 51da7ae29e4e1b62882dcefb6ed14ac421fe4177993e57c248768b682ce277a71a17d0763b199c8e9ef70096e46645f716dfba819f1f8ecc971f6cd300959dc5
SSDEEP 192:sxZnRBkk/f+se7BSBIdpdYHW6+WNGYz+cdlsIg5IyJ:sxZn8k/f+syBjSHbGgyV
TLSH
T10322C8566E38A93B8CC7E209BB157F53E6F5503295911E48EAFCD61C05E7ACD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 c47a23d28658bad4c5d70a2423c77e4d1f55760af33dc6f55e0bfaea8fb06911
MD5 852b9125baeb7cd65786e790fbfbba87
SHA1 72e9f1ffe4d312d1f9fa0016e4fb5448a91b6689
SHA512 9a0cc124bf6faf3b350fca2ed37d448d38188bbb37226218231fe0cb2ab6ae99586f96a4ed1b50055d676e6ed248f7f3103eee4a692628ef61c190ca195bd4b7
SSDEEP 768:g2k7u70WvqiEa8F1+UoAYDCx9Tuqh0VfUC9xbog/OV35LlWYSBiroyRYS:g2k7u70WvqiEau1jai5LA3B55S
TLSH
T1FAC2F93B740CCB7E4F801E9DEC566F977E9802C7A6988D4087FA994C02C77EA51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 f8e5e274dcdf3dd5727db2a756704334a152a4617a81923808aac8e4c07f217c
MD5 02c2413a8c72991e843104d549f4acb6
SHA1 cae2853493aa08f7d90509d4579899251cdb8efa
SHA512 79ab924b0c71e210f1c722a4f2877be4aac42dd5b0e1fbc071b33eecaea9af3ac8443652b1db8dc5c5a2fa8d0efd51c4dee7152ffcbe19b360ec545d9b64239b
SSDEEP 48:KfSVOyIQA2aQL9IZy2KYTTIIjK1Kc7y5CI/KT60DhI5Kii:KIbCKcTIwK1K6aCgKT60hCKii
TLSH
T121915606357A0E553CBE294DB69796365F4232633018B4AF7FB800A11D6BE214EFE8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 eef5ae69a4ae1b78f7422d69cbbaffaa32f5032eeb99134520bd264f3cf1ba06
MD5 a2cc9651be133938eff548badd823f55
SHA1 176ecaab45afb9b2f911ff4869f06afb97510e0d
SHA512 08a461d10df9e0b6779edbc7acf8894e56905327d2a23bbc7bd48dbbb1cbb0fb1e58c95ece81a6abce4c9068a7fe236609e55307d543331fcc174690a853abfd
SSDEEP 384:IZcIhsNf4SbOX7OBMdtp5CEJruoOOPrXLpe8C/AyAT:2hWNOphuoOi9Pzyq
TLSH
T138928D7158786C77ADB6F681F58627035FF84237F6C42A44B6ECEB1C02E66980317C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 f40e64f2bd10d32bf6fe8555770b47c249d9c09571cfe5e80bcb629d293d39b8
MD5 7b8fe3f39e47f836f01849715a961b19
SHA1 b7ecf7a78fe766ca2a0a5cbe2e9e120aaac3d269
SHA512 3961b0d5f6ad46c5422ee90e11fa6c6435c49ea0c54a4410f5de6eb243ed19b0a54b7e6c09942e52f7dfe69c8c861da2804d35b3470ef341afcbdeb10ca32f1c
SSDEEP 384:YqZcIDsNfxSbOX7OBMdtp5CEJrBoOOPrXLpe8C/AyAT:7DPNOphBoOi9Pzyq
TLSH
T1F7928D7158786C7BADB6F681F58627039FF84237E6C52A48B6ECE71C05E669C0307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 b0ab3226fa81290f8ebc1444b2781fc434df9b4b8fd09729af2059209960a255
MD5 a86fced742ad21f76635d1dcb1b7de63
SHA1 a8090212d1ad59fab4e3bbdc45f8575ad1faf6e2
SHA512 87278d4bb524a07a1d39948accba44459fa98fb621a98c54ddce4f46c57797ad544bbf60df67761211793c5b6edd91501c2015329929a3fcc6ed84804d96dfba
SSDEEP 192:MONY64BAQmiUyBC1B9W5GBPKK7+FdG29poaDGUxU6:MONY6eAqCv9WLdtpR5U6
TLSH
T15D020A346C786C7B9EB2AE45F58637175FE8113BE6801B84EAE85B1C01E774C2303827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 7f58b48f52b1ab96585eb853093b0e3fcd2a7e2ab3115c13abe25c8ba31346bb
MD5 d8631fd20275798babf7940f73261d33
SHA1 e2490f84d69ae845566948c3d40fd2b94c4a98af
SHA512 34ef30a29240d2c01108a6b58a947fcf3d58cdf326e40a368f743c416e22a351bf7384e79305d0d4ce27b679a6327c986f2860335f5d24b734a462516bca750e
SSDEEP 384:TZcIhsNfxSbOX7OBMdtp5CEJruoOOPrXLpe8C/AyAT:LhPNOphuoOi9Pzyq
TLSH
T137929D7158786C27ADB6F681F58626035FF88137F6C42A44B6ECE71C02E66980307C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 0f516dd5e068357feac9533f33cb1127547f5033b7d2ce7b485ac807a72036ef
MD5 ca151e07cf7363f8e6e906e9c1d820b3
SHA1 da763deb342f5320e6eceedc1489421f2662c21f
SHA512 41e0faf5244f4d8c9abba22eb848ffaa22ca89da61c590a2251238d6d46094e40289979f5d1a21d8a6a0b2e3e8136e39d006b481aa9bb8a2a63031bab65369ce
SSDEEP 192:ZJON664BMQmiUyBiB9z5GBPKK7+FdG29p9hFC1SJrzWwdqtU6:LON66ecqC9zLdtp5CEJr/oU6
TLSH
T18A120A35A8746C7B9DA2B541F48736035FE44227EAC56F90F6EC7B1C01EB6AC1316816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

edd5181a-db90-4e24-922d-0b43275b6711.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\edd5181a-db90-4e24-922d-0b43275b6711.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 ad04701028b17de86ee943c7be63588f30128adc44bcac9d99f9fc5bb906c761
MD5 09b1213c19c808c4ed50aa5a6564233a
SHA1 29c86ddea54643229a740d6be9670e8270ba5655
SHA512 1e1a4a3e43896beb384672e609910efc6a7ced8431a6d243746a62b098957518ca1159b2ec7bb9723cf8edd9f222160b7de2884817dfc5d082cc5fa1679f0e72
TLSH
T1FE410B5DA6FA1148B3B76E169BF7A87D487FBC672F06945E00110D4E0A23B40C861B33
MD5 SHA1 SHA512 TLSH

Submit Download