613ab5adba879cb8aff02adf8ebfee8c9514004d713f23513a6888be45cd0439

Resubmissions

10/09/2026, 20:13

260910-yzr4dsgl4w3

10/09/2026, 20:06

260910-yvf6bsee633

10/09/2026, 20:04

260910-ytbjfsgk8t3

10/09/2026, 16:34

260910-t268wasdrc3

Analysis

user interaction
yes
max time kernel
149s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/09/2026, 16:34

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
email-html-2.html
Size 65KB
Sample260910-t268wasdrc
SHA256 613ab5adba879cb8aff02adf8ebfee8c9514004d713f23513a6888be45cd0439
MD5 45b416a68844b0e55ba490a568f8af4e
SHA1 75366ce92fc3ebe6e95c1e044893df38c2d9fa65
SHA512 ccf83b2f9c434568120b7bfbd42e256a268a5a5d1f576b41050f3cf331b33e121fc621e6a09c7bdc277d0a73a2c82dee416e017ea7c742b99157203955a6e27a
SSDEEP 1536:07BmOTcdOTRgauUDWP3FvqbLMj/n6QN2CE+4ArYj0rYOvZMJmeHb+C6fkUeqZdSv:EBVga6P3FibIj/n6QN2CE+4ArYwc6MEy
TLSH
T102636317E7C10D1E993F1874B4636B7C777861CB5FA24DB4B88F6B3B2709CA241A2648
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5032	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134335316678981435"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1788976790-1541110888-1636651838-1000\{0631122A-F173-49F9-916B-28EC5A89CAD5}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1356	msedge.exe
1356	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3724 wrote to memory of 3340	3724	msedge.exe	84
PID 3724 wrote to memory of 5032	3724	msedge.exe	85
PID 3724 wrote to memory of 2372	3724	msedge.exe	86
PID 3724 wrote to memory of 2372	3724	msedge.exe	86
PID 3724 wrote to memory of 2372	3724	msedge.exe	86
PID 3724 wrote to memory of 2552	3724	msedge.exe	87
PID 3724 wrote to memory of 2552	3724	msedge.exe	87
PID 3724 wrote to memory of 4176	3724	msedge.exe	89
PID 3724 wrote to memory of 2000	3724	msedge.exe	90
PID 3724 wrote to memory of 4176	3724	msedge.exe	89
PID 3724 wrote to memory of 4176	3724	msedge.exe	89
PID 3724 wrote to memory of 2000	3724	msedge.exe	90
PID 3724 wrote to memory of 2000	3724	msedge.exe	90
PID 3724 wrote to memory of 3848	3724	msedge.exe	91
PID 3724 wrote to memory of 628	3724	msedge.exe	92
PID 3724 wrote to memory of 3848	3724	msedge.exe	91
PID 3724 wrote to memory of 3848	3724	msedge.exe	91
PID 3724 wrote to memory of 628	3724	msedge.exe	92
PID 3724 wrote to memory of 628	3724	msedge.exe	92
PID 3724 wrote to memory of 3100	3724	msedge.exe	96
PID 3724 wrote to memory of 3676	3724	msedge.exe	97
PID 3724 wrote to memory of 3676	3724	msedge.exe	97
PID 3724 wrote to memory of 3100	3724	msedge.exe	96
PID 3724 wrote to memory of 4248	3724	msedge.exe	99
PID 3724 wrote to memory of 5004	3724	msedge.exe	105
PID 3724 wrote to memory of 2576	3724	msedge.exe	106
PID 3724 wrote to memory of 3420	3724	msedge.exe	107
PID 3724 wrote to memory of 1804	3724	msedge.exe	112
PID 3724 wrote to memory of 1804	3724	msedge.exe	112
PID 3724 wrote to memory of 1356	3724	msedge.exe	119

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\email-html-2.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffbc05ac188,0x7ffbc05ac194,0x7ffbc05ac1a0
  2⤵
  PID:3340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2000,i,17007174841855121064,13273610223400769049,524288 --field-trial-handle=2244,i,13083763934887953307,1907185190568264914,262144 --variations-seed-version --mojo-platform-channel-handle=2680 /prefetch:3
  2⤵
  - System Time Discovery
  PID:5032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1664,i,16912179910223213524,233388511397514349,262144 --field-trial-handle=2244,i,13083763934887953307,1907185190568264914,262144 --variations-seed-version --mojo-platform-channel-handle=2240 /prefetch:2
  2⤵
  PID:2372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2308,i,17411502666585886374,8346193078314624776,524288 --field-trial-handle=2244,i,13083763934887953307,1907185190568264914,262144 --variations-seed-version --mojo-platform-channel-handle=2688 /prefetch:8
  2⤵
  PID:2552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3444,i,10513734872042234599,14336305947053870379,2097152 --field-trial-handle=2244,i,13083763934887953307,1907185190568264914,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:4176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3448,i,3187988107626890758,7309425209407254312,2097152 --field-trial-handle=2244,i,13083763934887953307,1907185190568264914,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:2000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4132,i,9328154166602172,7208638870223619390,2097152 --field-trial-handle=2244,i,13083763934887953307,1907185190568264914,262144 --variations-seed-version --mojo-platform-channel-handle=4244 /prefetch:1
  2⤵
  PID:3848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4136,i,9239511956174849852,4690931910910191849,2097152 --field-trial-handle=2244,i,13083763934887953307,1907185190568264914,262144 --variations-seed-version --mojo-platform-channel-handle=4288 /prefetch:2
  2⤵
  PID:628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3628,i,4398180790708828567,3991872063753489918,524288 --field-trial-handle=2244,i,13083763934887953307,1907185190568264914,262144 --variations-seed-version --mojo-platform-channel-handle=5192 /prefetch:8
  2⤵
  PID:3100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3640,i,15628626084711474503,17351053244002684560,524288 --field-trial-handle=2244,i,13083763934887953307,1907185190568264914,262144 --variations-seed-version --mojo-platform-channel-handle=5216 /prefetch:8
  2⤵
  PID:3676
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5872,i,15646368989064163787,16256889540688393327,524288 --field-trial-handle=2244,i,13083763934887953307,1907185190568264914,262144 --variations-seed-version --mojo-platform-channel-handle=5892 /prefetch:8
  2⤵
  PID:4428
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5872,i,15646368989064163787,16256889540688393327,524288 --field-trial-handle=2244,i,13083763934887953307,1907185190568264914,262144 --variations-seed-version --mojo-platform-channel-handle=5892 /prefetch:8
  2⤵
  PID:4248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3516,i,12625318902942021183,5004180748395420148,524288 --field-trial-handle=2244,i,13083763934887953307,1907185190568264914,262144 --variations-seed-version --mojo-platform-channel-handle=4612 /prefetch:8
  2⤵
  PID:5004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3592,i,15242062453305145120,9054441967837401888,524288 --field-trial-handle=2244,i,13083763934887953307,1907185190568264914,262144 --variations-seed-version --mojo-platform-channel-handle=4604 /prefetch:8
  2⤵
  PID:2576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3544,i,2563606864406417468,291599963652788229,524288 --field-trial-handle=2244,i,13083763934887953307,1907185190568264914,262144 --variations-seed-version --mojo-platform-channel-handle=3632 /prefetch:8
  2⤵
  PID:3420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5304,i,6119757181842590481,7010648348634926006,524288 --field-trial-handle=2244,i,13083763934887953307,1907185190568264914,262144 --variations-seed-version --mojo-platform-channel-handle=5132 /prefetch:8
  2⤵
  PID:1804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=560,i,18419375185442766031,13387373061705867424,262144 --field-trial-handle=2244,i,13083763934887953307,1907185190568264914,262144 --variations-seed-version --mojo-platform-channel-handle=5960 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1356

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2996

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 a6673ce49b12fdcbb7d76835e1b016504a29767f7212d8e801c405cb7104ab24
MD5 ca6c08209c2d38cddd20d85d8c5dc47a
SHA1 cec1cabd103f18062e7cb4e4d6f0d8b419a6c0bd
SHA512 21049ac949a133b2d3655a743fa48fb77fd023763be431c403808d8b8cc86ade7133ad2fd2407bc2f19378bde77d294fb858d77ccfdd369434389ccbd4e515c6
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7V:fwUQC5VwBIiElEd2K57P7V
TLSH
T17AB3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 6d0f88884e23b1418c456620b79662feebdfd970ca9325ba2981c94b3b0f0b2f
MD5 7060eae8ec426d15de2849b1f7d261b4
SHA1 b252d90b9d7050d0b9b7c03141d9d3b7cae404ac
SHA512 8791005fae20dc1dc5dc5b0086efe814e0b1e36781ef1931cc1fc699fc4cb34d62ab3f9a83f4967824f3bb71aef6adc6ad457ab7a6addcba99f9e9b473eabb4d
TLSH
T118D01222BE08A415E65BA271A502C7141F5954A124938651E224D86CD9F84D49696387
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4d517b88a0fb88494276c126764235de9ee52961c86cc4d3abaf517b10a649a8
MD5 dde9ea8dd9c7e315ef614ab3476af02c
SHA1 e03e201e89770d15b4040d579c2cce8684959a2c
SHA512 410e016336529d709de957d44e67238e4f6592b9ce6646395a9e45ce592e7810b4cb6b1b6df5d8b26875a6aa235b77d41c0983ccc055556f8b8c02224093fdd1
TLSH
T16DD012227E08A415E65BA271A502C7141F5954A124938651E224D86CC9F94D49696387
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 f0551ede46e59f20ebb0311d27a519e06fdec738a034e77dc20ea65e9507c013
MD5 1cb73e29beb1f248e174894905714dc1
SHA1 32c5e8642569c3f51b6ce82864ca8c79af273616
SHA512 be83eea2a68f12047c497bd9de0a7a63ed2b24051cf956d6ecfc8502a49e85dcbac58146b90ae5d95ad516188689098d7b5e3edb9b9cb73a29be93e39804dae2
TLSH
T19B7127340E4940A1FF200A33D4D50239FC72AAEFF61E2E56234D66B5F60634A13AC65B
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe586cee.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe586cee.TMP
Size 3KB
SHA256 12646d82dc3636e6b3c18b6709e47f6d2234febef8b0a72b778bb536b94be272
MD5 9a261ad06179de89eed104f8dd5a5865
SHA1 0544a4a39ed1c312534fecdd4a8aaa5110f4534c
SHA512 7d5bf7f0a3f1e97eec47a8ac2a61fb6b6b2ada1205b2b21b42d588a2c94eac3c884261f477fb81f635a259d85662fdd2f68a20b9a97aeb7298cf39a8dea02dfc
TLSH
T1507128340E0900A1FF200A33D4D50239BC71A6EFF61E2E56234D5675F60234A139C55B
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 bbbf6b1b03557743bb4ae23c6968a2866e3a42bc615616ccd0f354c7dbe68654
MD5 6fb4febbe085aedf8b86ae836e2fdbe5
SHA1 d190947aa984974a3ad8113eb62d302ee36c039c
SHA512 edafd22e8aa10e327d983d52a27b4d0fa320b57db76a1e2207c24a73bc8c8998c65f07db0e3b506d77d18f6075ce6844f7d6f95577eeadb3376806deb3757416
TLSH
T14D118CF7C7E586AE8A1156F05A28AE2BCE1C0606431C7D15C9E4EF2BA3F30B5D00256F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 becb33aaea03b954f9ccc5c0485d5cb7bb2ca71ee8b19c1698745a7fc9b8303b
MD5 55a9d74e9483a54fbc713d4ec1d4b8ac
SHA1 97c2f65111fbb5dac4c20ed3dc0a4f0a5943754a
SHA512 31a0594ae90f92cec72f4e305127d060ba887727f074d823860f1190f8b506c374bd6dfc0994acebf798864cbce1c39d92a98bb829c9ab17c381c77596210363
SSDEEP 192:sxZDRjyM/jK1Ml8MWb/fLspQV1IdpdHHW6+WNGYvrhycSIgrJ:sxZDJub/fLspNRHbGJf9
TLSH
T16142D8116A34697BCCDBD20DFA51BF93D6F95472A2940E44A9FCCA1C04E7AED220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 f4ef562ff0d75b0395a8eb1b72ff681c7148ef4e861c1a1c2e60967ff7b601c7
MD5 4d7cbc4a02742182e9e727e8ba9c7310
SHA1 77a561ae5590c92b0336d6d5108373c68cd36568
SHA512 4c969f845d313a4910ff2d2b5987c1d96a83961164863c93c6d59e940cb1e136eba976776c1ff2cff19ba4928bf864943f35751cad7f24a2b739429bf597bd9a
SSDEEP 192:sxZDRjyM/jK1Ml8UQAWb/fLsMQV1IdpHHHW6+WNGYv9wncSIg5RJ:sxZDJqbb/fLsMNnHbGZf9
TLSH
T10B52E711AA346977CCDBE21DF981BF93D6F55472A2940E44A9FCCA1C00E7AED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 aa1276bd9adddbba2ffe5467aaec93c5947e6b03619bd8e095d2558931bda9e9
MD5 e100fbb899a2cd3b4c370a0d12a44aa6
SHA1 ec2298149602a5aac11534c5d9902d43972b2b94
SHA512 6864b5741a578725d6070136f5fc9083099ca8615f135b61b8e1cf0cf6411c2d8e18ae085eea14addaad66ba6ef3ecab772181222b1906a1b4349960be15aa32
SSDEEP 768:dBseJ3xWvhfyn8F1+UoAYDCx9Tuqh0VfUC9xbog/OVYcLly0ppiroBpw:dBseJ3xWvhfynu1jaVcL88p5c
TLSH
T195D2FB2B280CCB7E4F844E6DEC266F966EE801CB57984D5487EA884C03C77EB51275DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 baaf5bfdec6c686d5e5b296d9570bdcf9e181639e765dcc05126113588265803
MD5 f828f807b6b3fd4097e2464b74f302f2
SHA1 96ed6655d8739c98e52fc040dea7934e25a0bfd8
SHA512 a2e8d6232a6594498fd31ba769e695291f060cfcea94aadd634524b15abe69188c2c53c79ad2d399dc732d5d0ad960a03d21f9e44efbdcd50bdb39148d652b02
SSDEEP 48:KYHIhKggkXyBAIDK1KcjylDI1KkUILyBeIvKLiw0:KYH+KggmiAgK1KyODKKkU2yesKLiL
TLSH
T15AC1A622713F02023C7E3558B2AA97374E4135E33558A8AF7BB800655E6AE116DFD8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 6dcdc4805997e60a3d3c99f78dcfefd81108ec5cb2fd506c2a59e8e6b81bb31a
MD5 d419b5db36ace02c793e4d3f61522a99
SHA1 10d67dea0c3fc0c2537a1cb9bc79dc531677c9c2
SHA512 6aed8b5482dc27551ec74810ee4129da9064f786f8c1036a801e021a14749be8c04d7a696caf8d2b2c4006d7e6eb313b26f0077b58ab30ad96241963e44e4b17
SSDEEP 192:uAm+xasuheOwQxMGsNImQRTnM7n0fQmiU1Po7G4MTW0+FdLuhpFd3EZO8z1irq6n:yZcIhsNImWM70hYJ1dyZdUN6//
TLSH
T100626C715C786C77A9E3B185F44A36134EF4D027EBC86B50E6EDAF1D01DB6A8130781A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 4470959042e3b20d4577f5e32449f178786fbd2254b4361acf6832092ea4c2a6
MD5 9a53dc20b7d131190adbdd862127c862
SHA1 ae5b84c736f820802365d0b737ff928958d9294a
SHA512 b5f96d6f7e205c2ac7f03272ed971978c9107a0ff217b49110ecfddc53d32f586612aae89990b1406e6da6a8df7f943b502e649d3e7375496c79f02b58ed90b8
SSDEEP 192:uLm+xasuheOwQxMGsNIxQRTnM7n0fQmiU1Po7G4MTW0+FdLuhpFd3EZO8z1irq6n:NZcIhsNIxWM70hYJ1dyZdUN6//
TLSH
T10E626C715C786C77A9E3B185F54A36034EF4D027EBC86B50E6EDAF1D01DB6A8130781A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 3f87663b0ff59f3824c839988e60228abac399862cd0bcb66fa27e7b123d3dfc
MD5 b4e393450ef03c7eae54cafd34d0f508
SHA1 232b9cf13245703eb96d91b749c871c9aca1fee3
SHA512 b7424f375bb37da10ee000f79d504e0c6937a5159a38685afa3b1361403cdbf91433304af92b40250691817c13d8469ff3ad4246e00486a7f93f327710b1b01f
SSDEEP 192:uxm+xasuheOwQxMlysNIxQRTnM7n0fQmiU1Po7G4MTW0+FdLuhpFd3EZg8v1irqy:1ZcIJsNIxWM70hYJ1dyZdUr6//
TLSH
T1D7726C715C786C77A9E3B185F54A37034EF4D027EAC86B50E6EDAF1D01DB6A8230781A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 aad4f805c8f6a6d472e93e1da73f839fb34af5595bcd36bdc4bde0fa0737b265
MD5 9a300a9eee750202c838543bb89fe162
SHA1 4666b0f2eb2aec43ff9a35cb04acf97c936ec54a
SHA512 04f44fd854c290fa582d8089179156c999b2b8bb436a30b0a164c8f99428fe754dca815e03a46c3b767c56da2d648f4268f1371b09e303cadb3a35ffbafd4099
SSDEEP 192:lON06vMtPQmiUyDYThTW0+FdLuc847mbLU/u:lON06UtRPTudy+CLU/u
TLSH
T155020835AC786C6BAAA3AD45F48A33175FE4507BAAD05B50EAEC6F1D00C769C1303827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 9KB
SHA256 9494ad51323d3066cbd7dfad5a361c5ddda11f7c75ce34f488dc13544837e355
MD5 7ec2a5eb798f8e52d7344de178feea0f
SHA1 697b5e6d610c3caf11fd3ad0f999306bfef0f3e8
SHA512 02a1d521160ca3e361451b037631c7faf85c3ef31b24b807752ec9e78f4b988da8c058332b07facbbdf9ad6ce429cf3fd503bd3affc251e03af42140f667d9ec
SSDEEP 192:zONR6vMSPQmiUyDTYrhTW0+FdLuhpFd3EZY80Iirq6U/u:zONR6USRFrudyZdUv6U/u
TLSH
T1B8122B31AC746C67AE937585F08A32574FB0813BEAC46B50EAED6F1C01DF6AC2307816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 aabf503eec6f97c8a8bfb6aff3692102fd48f0af03a888a6d5d86521e15953b0
MD5 cff0add4da84d56eac8f2ff3cf91037a
SHA1 16a5cf9926ed82a855f143d2d93299f5dd4c8beb
SHA512 95a9530258c96bdd2e9de38ad0bf3028e289b54ec8b939c61999cd2cdff71b1ffe8d2c1c70706470c9d2aecc8713bf06474f11c38b2054eca1b58dfad8f5cc5c
TLSH
T183410958AAE9115CB3B76F1A9BF6986D487ABC332E0AD49E10110E4F4A62E40CD61737
MD5 SHA1 SHA512 TLSH

Submit Download