613ab5adba879cb8aff02adf8ebfee8c9514004d713f23513a6888be45cd0439

Analysis

max time kernel
148s
max time network
152s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/09/2026, 16:39

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
email-html-2.html
Size 65KB
Sample260910-t587msvvfz
SHA256 613ab5adba879cb8aff02adf8ebfee8c9514004d713f23513a6888be45cd0439
MD5 45b416a68844b0e55ba490a568f8af4e
SHA1 75366ce92fc3ebe6e95c1e044893df38c2d9fa65
SHA512 ccf83b2f9c434568120b7bfbd42e256a268a5a5d1f576b41050f3cf331b33e121fc621e6a09c7bdc277d0a73a2c82dee416e017ea7c742b99157203955a6e27a
SSDEEP 1536:07BmOTcdOTRgauUDWP3FvqbLMj/n6QN2CE+4ArYj0rYOvZMJmeHb+C6fkUeqZdSv:EBVga6P3FibIj/n6QN2CE+4ArYwc6MEy
TLSH
T102636317E7C10D1E993F1874B4636B7C777861CB5FA24DB4B88F6B3B2709CA241A2648
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3996	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134335319899870650"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1079202589-886135813-2527035092-1000\{2A7C954D-F0EA-4FD8-AE75-4920A1E8F85A}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3948	msedge.exe
3948	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe
6140	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 6140 wrote to memory of 1848	6140	msedge.exe	89
PID 6140 wrote to memory of 3996	6140	msedge.exe	90
PID 6140 wrote to memory of 2632	6140	msedge.exe	91
PID 6140 wrote to memory of 2632	6140	msedge.exe	91
PID 6140 wrote to memory of 2632	6140	msedge.exe	91
PID 6140 wrote to memory of 1736	6140	msedge.exe	92
PID 6140 wrote to memory of 1736	6140	msedge.exe	92
PID 6140 wrote to memory of 3756	6140	msedge.exe	94
PID 6140 wrote to memory of 3756	6140	msedge.exe	94
PID 6140 wrote to memory of 3756	6140	msedge.exe	94
PID 6140 wrote to memory of 4532	6140	msedge.exe	95
PID 6140 wrote to memory of 4532	6140	msedge.exe	95
PID 6140 wrote to memory of 4532	6140	msedge.exe	95
PID 6140 wrote to memory of 5072	6140	msedge.exe	96
PID 6140 wrote to memory of 5072	6140	msedge.exe	96
PID 6140 wrote to memory of 5072	6140	msedge.exe	96
PID 6140 wrote to memory of 2628	6140	msedge.exe	97
PID 6140 wrote to memory of 2628	6140	msedge.exe	97
PID 6140 wrote to memory of 2628	6140	msedge.exe	97
PID 6140 wrote to memory of 4692	6140	msedge.exe	99
PID 6140 wrote to memory of 4680	6140	msedge.exe	100
PID 6140 wrote to memory of 4692	6140	msedge.exe	99
PID 6140 wrote to memory of 4680	6140	msedge.exe	100
PID 6140 wrote to memory of 5944	6140	msedge.exe	102
PID 6140 wrote to memory of 3756	6140	msedge.exe	106
PID 6140 wrote to memory of 5140	6140	msedge.exe	107
PID 6140 wrote to memory of 2352	6140	msedge.exe	108
PID 6140 wrote to memory of 3800	6140	msedge.exe	109
PID 6140 wrote to memory of 3800	6140	msedge.exe	109
PID 6140 wrote to memory of 3948	6140	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\email-html-2.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:6140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffdb709c188,0x7ffdb709c194,0x7ffdb709c1a0
  2⤵
  PID:1848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1744,i,6149063648826801716,7521235630507418120,524288 --field-trial-handle=2432,i,7483964813221665980,1610287134834533660,262144 --variations-seed-version --mojo-platform-channel-handle=2464 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1512,i,3177679081776458491,14725405662747019317,262144 --field-trial-handle=2432,i,7483964813221665980,1610287134834533660,262144 --variations-seed-version --mojo-platform-channel-handle=2428 /prefetch:2
  2⤵
  PID:2632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2204,i,12856917176086418968,16279833568034736061,524288 --field-trial-handle=2432,i,7483964813221665980,1610287134834533660,262144 --variations-seed-version --mojo-platform-channel-handle=2528 /prefetch:13
  2⤵
  PID:1736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3532,i,2812248929105120480,12636246846022858440,2097152 --field-trial-handle=2432,i,7483964813221665980,1610287134834533660,262144 --variations-seed-version --mojo-platform-channel-handle=3548 /prefetch:1
  2⤵
  PID:3756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3536,i,11566647583002278804,4420145153084275153,2097152 --field-trial-handle=2432,i,7483964813221665980,1610287134834533660,262144 --variations-seed-version --mojo-platform-channel-handle=3572 /prefetch:1
  2⤵
  PID:4532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4220,i,931697790796438069,12373621275512478433,2097152 --field-trial-handle=2432,i,7483964813221665980,1610287134834533660,262144 --variations-seed-version --mojo-platform-channel-handle=4728 /prefetch:1
  2⤵
  PID:5072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4232,i,8759950465373482747,15100571946992360772,2097152 --field-trial-handle=2432,i,7483964813221665980,1610287134834533660,262144 --variations-seed-version --mojo-platform-channel-handle=4724 /prefetch:9
  2⤵
  PID:2628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5304,i,13157282943107480852,12140878395671917905,524288 --field-trial-handle=2432,i,7483964813221665980,1610287134834533660,262144 --variations-seed-version --mojo-platform-channel-handle=5348 /prefetch:14
  2⤵
  PID:4692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5284,i,9261870508679579149,4678556768621049892,524288 --field-trial-handle=2432,i,7483964813221665980,1610287134834533660,262144 --variations-seed-version --mojo-platform-channel-handle=5344 /prefetch:14
  2⤵
  PID:4680
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5972,i,4648338781474027083,15649464460186849056,524288 --field-trial-handle=2432,i,7483964813221665980,1610287134834533660,262144 --variations-seed-version --mojo-platform-channel-handle=6004 /prefetch:14
  2⤵
  PID:3936
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5972,i,4648338781474027083,15649464460186849056,524288 --field-trial-handle=2432,i,7483964813221665980,1610287134834533660,262144 --variations-seed-version --mojo-platform-channel-handle=6004 /prefetch:14
  2⤵
  PID:5944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4752,i,558619370056116584,14115345636761774872,524288 --field-trial-handle=2432,i,7483964813221665980,1610287134834533660,262144 --variations-seed-version --mojo-platform-channel-handle=5092 /prefetch:14
  2⤵
  PID:3756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5004,i,6990212282938136056,9182991496597605958,524288 --field-trial-handle=2432,i,7483964813221665980,1610287134834533660,262144 --variations-seed-version --mojo-platform-channel-handle=4232 /prefetch:14
  2⤵
  PID:5140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5088,i,17627740168766583890,11480895269047843697,524288 --field-trial-handle=2432,i,7483964813221665980,1610287134834533660,262144 --variations-seed-version --mojo-platform-channel-handle=6088 /prefetch:14
  2⤵
  PID:2352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3440,i,5108704356484217876,11440356022145448756,524288 --field-trial-handle=2432,i,7483964813221665980,1610287134834533660,262144 --variations-seed-version --mojo-platform-channel-handle=5024 /prefetch:14
  2⤵
  PID:3800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5336,i,11468822448276112084,9390835774800064352,262144 --field-trial-handle=2432,i,7483964813221665980,1610287134834533660,262144 --variations-seed-version --mojo-platform-channel-handle=6240 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3948

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5628

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1996

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2d6015222f1312f2737e561f5cb789cba16ddda90131d3af679ca4d112ce8de9
MD5 c1a7f665f2c508cc6aaf2ab720e9bbac
SHA1 f10047340073ccfd0dfa0a1ac50f19824703c6c6
SHA512 3b4b2c7997cc3a8e382662b8ab84779147222db6dcf3b614fe3750efba14aade687800978cd24780f580eacb766daa34fe0e560c30dde1f463983613dda767cb
TLSH
T188D092693B904E08C5C4207228E0A6A6A2604A31B82E024840A2B23CF8A5ED6073F4AA
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0c59160a51f6f3c09faaf3593a45b43a14b1da3961c2cccaed8346e6543c20e0
MD5 a2b289a93fce671046a365170f24567f
SHA1 d545bd953aab467815db42a92fd1d54047d5e6af
SHA512 ce7bb8aa1a40366ad652feb8233f60cd807014cb9e8ca999c2c1931eeb40a4afa1dc2c94c60d58639e2cece8c73d3a46da7a30c651ca6da0834f57b890bd2572
TLSH
T1CFD092653BA04E08C5C4207628E1A6A6A2504A31642E024841A2F23CF8A5ED6073F4AA
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 0346e9d5f6570644c6047aa4380db5aac358f12e36ec7e780334889014274b71
MD5 552a576bd478390541caff717ffa3432
SHA1 1171ab95b4e557b62d3a3b070fdbdeb4d49bd48c
SHA512 6749ff5757347c41d4729ba1e2d1dcf62edbd56f38bf4be4f7d0bc53b6d6b44cda70551dfe857dcf1d947129c37a6630d3651f9856f6c0a586a65f59185afeed
TLSH
T14E51FDA5F7250DC1D7E488B168D0544B32F8845A370F6E38B1145F784A87F9ADBD00E3
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59d0e3.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59d0e3.TMP
Size 2KB
SHA256 51fe0025fcd8c6c60300096efb0e878a86e2023c705919cfbc02fc905c33f126
MD5 8cef65e7f175c991451f5d06854de193
SHA1 d8307e465b1b3b65555fade8ab5028038d169d5c
SHA512 1cbb0dc80f0e28ddec06446ed7427982f27c9650b9f584a135644345cb9c337c876f24d2240b5418c7a59ad9d5ed6c1ba700ea037dfaccb9e6acdc54919b896a
TLSH
T122510EA5F7250DC1D7E488B168E0544B32F88499370F6E38A1141F784A87FDADBD00E3
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 c3957142b5447f3f3bced887b7f664868af39d7d1d0a8d4b22b1f74487bdddb3
MD5 f8d58d3cf615d6752276f832e9b2661b
SHA1 36cfb53f9d12f5bd68715319c14707b1be963f13
SHA512 a9bfad24db7de648ebebf309f5220ac9b2f1c7252c04c9e91cfe42dbbd2e58f4ab47841d7d3425d82b7bb01af32b9a147b67a3f4746dee930cce472e7da29e40
TLSH
T11831B1F787F4867E9A1196F0AA18AE2FCE1C0511431C7D69C9E0AE2793F3471E041A6F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 c8502d561ef9749a165ad4f2851fd5c7cdcd766741b943bc3aa3d13584556dae
MD5 2574da61966c8c22b68cf6a731a22974
SHA1 12aab4cb14700d95fdef60116778f3a062201b16
SHA512 06c10fbf2aa7dfc99068f29585592cf7e2fa24935afc6d1b03e4098e4e8ec7582c9fc141e7743246e3f7e7790d58e0ccb083c2d75f6d96162650080c1a69af0c
SSDEEP 192:sxRaRrbPV/f8sZKHFSa0qzoA8p4T/g6+WNIYblSZ66GUIgDyJ:sxRaxPV/f8swlSa0nq/5In6ea
TLSH
T11632C8166928A93B9CCBE21DFB567F53D2F9503361942E48B7FC9A1C04EB6DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 3d23a877b31e5533e6991ad29dd2cdab3aaf29586b061c19917f72cd35695c17
MD5 353bfb1167669a246532dbe7f721faa3
SHA1 5a9ca7074617a5884eda0f002386f09c5bd47464
SHA512 e6663ad656651f81567a8f79fae0609b6501e96e985c2b7507d7f645db21da76e257db88f2b4f2ec479ac248d9f369cc7dc74e400a1d469f4fcfbfff62d341ad
SSDEEP 192:sxRNRrbPV/f8sWKHFSa0qzoA8p4T/g6+WNIYbCwZ66GUIgIJ:sxRNxPV/f8sRlSa0nq/5IW6es
TLSH
T12832C7166A28A93B5CCBE21DFB567F53D6F9503261942E48F7FC9A0C04EB6DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 964bea161b61db0a96e3cfba046969ebd49bddede8b7986737fd693dd6379619
MD5 c96a1ff55a57fd5e32c6943f9886c589
SHA1 284c3610b8d96176fc637cf05fe7b40446e668ef
SHA512 f789d7bebe760c6d7fe125acd0b849bcf1d68ca38c8c878c64f98b4738f1f7807d468c1e449c4a69915caa06603dc4c85bc26bbac151cfac15d6334fa1de70dd
SSDEEP 192:sxRaRrbPV/f8sGKHFSa0qzoA8p4T/g6+WNIYbCwZ66GUIgDQJ:sxRaxPV/f8shlSa0nq/5IW6eQ
TLSH
T18832D8166A28A93B5CCBE21DFB567F53D2F9503261942E48B7FC9A0C04EB6DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 e4a1cc702b0406816da42fccd97fc9508f7781f6443b7248f2103085b613b5ff
MD5 45b005f8feeaa8443703dc7fc3d3e20d
SHA1 52874ecfdcd86ba2c678dda3f1fa2198d0b59750
SHA512 773495b50d4403713a6a5754d190160d301781770768bdccf14b8f76fbd3953a96ca555ba40eb6b18f9809bc28fe3bbc480bfd4dc9b8435a490d0aeb8eba335f
SSDEEP 384:Flp1pABfCtgisFfq4KhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVnz98ERF5roAoG:Fb1pAtWgikfq48F1+UoAYDCx9Tuqh0Vu
TLSH
T1DBB2DA3B204DCB7E5F800A9DEC19AFD76D9802C797988D4447FE994C02C77FA921A4DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 c4a70fa5764d090209b88ddfa69ed820b937aad60ef5594d0804dfe4eaf8c598
MD5 14247fe9ebd8ad6ce2c1f97553e62a24
SHA1 7ad74a914d85eae317bef9905ace892923231925
SHA512 ad77cebecdeab1920eb97cdd0a8d54fc1337008956bdfb91118cb0ca2d9a917e914b620fd940417bd0f724ff8bad391362fb58ea5e5e975c815f462245c1ba56
SSDEEP 96:KR2r6WwYY+Wo9lg2+K4Lgk+ce2VUGfHfItpfd9xWJmsgRxKnXiKwkGKUgKBb:C2r6WwYYZo9m22Lgkte2VUGfHfItpfdX
TLSH
T168911454307B435038FD795885B9CA1F428135A3B214E96B3BA845B29F6BE094EFECCD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

c71c9603-3058-462e-806d-70325d18d35b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\c71c9603-3058-462e-806d-70325d18d35b.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 334e6b6e2f8edf63c61f399d5fcfb15893c81e9a1a6585c2f9471e9a1b8b7b0a
MD5 d43e89286542d7bf2509fa13ca5aa666
SHA1 1188e8250bc9e2597339489472a27fb900ef53f3
SHA512 6d0437f67db355005d4d3f9187857eaf3ae7f8463272a223190752f957b3e2f9b1cb7ec10cbd7435e4e22d3df9cb81b8010c355a2d45225c36ad62e4b5b9cc67
SSDEEP 768:ig3lI7BqobGEDe2tZu4aWADIidy8LuvwMgTb:ig3H2tZzaNsuVLfMgTb
TLSH
T150F2BE76BC569EB79CFB9280B2833A06ADF49163D6CD19D489DC2F0E00DB5AD1307C1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 6f5e894a84c6e6ecb5b58a264570ed0a520d071717283d71338ec540b2d4d3a2
MD5 f517319643cc62830ec9b99777b403ab
SHA1 4039364a7d4f10bab15c2015918de86432e1c8e0
SHA512 0cb62e33075d0a1e7ec859808a9c188c4692423f197712b0bdc8fb7b9b648a11881a17103cdb03bc10c343e500a9b175945b8b74ea6b714b2d6c43ae7f3ac663
SSDEEP 768:Mg3y87BqobGEDe2tZu4aWADIidy8LuvwMgTb:Mg3W2tZzaNsuVLfMgTb
TLSH
T1B1F2AE76BC569EB798FBA280B2833A06ADF49163D6CD19D485DC2F0E00CB5AD1307C1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 945bee25c896285d59c799f6b47bcdf8f932caccb524375d9f5739cd825195ec
MD5 5888bb6656eb34cf5203ca6f3ccbf17a
SHA1 22a3448087c6a42cc4d2ab6947d67a7700eeceba
SHA512 1f76f0b0676bd1d4e928d17efd2d52351adc789923d950596a073bfcf4e219431f1c5990eba5156c04754672d9332e5f9324fb3db277c7523fd0b0322780b864
SSDEEP 768:crv+4UNbdC3hrZBqobGEDeHtZu4aWADIidy8LbvweVH1S1C:cbsbw3mHtZzaNsuVL0EH1d
TLSH
T15E03BF36F859DA735CF75284B187790B7EF8926386890AE088DC1F4E46DB4AE130BD17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 f5c483dbc9d6557c47fa58f588ae42e98fbb8e17b0e7bf5e8a7aef25e60043df
MD5 489cf5f42f9b1cd87f86ec4e4ef82f55
SHA1 403810d546ab7155b291f964dd91bb86bec7458e
SHA512 c3535c5ee777f43ca73b4dfe5f6afc1cf9ee4908a442a2de671e1a3dff6ba8836ba7d0f5e2298091080c6d51d8f1d96de49c1857622db33dd7e4a7d065faa934
SSDEEP 768:9rv+4UNbdC3oAeBqobGEppZu4aWADIidy8LqoeVH1S1C:9bsbw3WpZzaNsuVLjEH1d
TLSH
T1F103CF36EC59CA779CF79284B1877A0B7EF8926386880AD088DC1F4E46DB4AD1307D17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 9a29a96de9b00a6eed1f2594dce657e9b4c8ba7ed308009590a0b03d2b4563bf
MD5 75af9b0ddde08d66a7a8be9ba3ab204d
SHA1 ca9ccdbb824924e1dbdf18311b83896ad7158ca0
SHA512 3602fd6a66818bf9d36124d197361aec2d7a91b3520df0ebbfa345a3ce6e386e9f22cd08138aaf1f0fb12f39343a8a6016d1b8a36ac424a45d6bc0f3aa4c2f7c
SSDEEP 768:lFQt3BwgE87BqobGEDevtZu4aWADIidy8LuvwMgTb:Et3AvtZzaNsuVLfMgTb
TLSH
T15AF29E77AC45CABBACBB9780F64636069EF481A3C5CD99E496DC1E0E00DB1AD1347C1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f9f6563c-8a54-40a0-af17-7e61c51cf299.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\f9f6563c-8a54-40a0-af17-7e61c51cf299.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download