b3c4934b86b907e7c98c01bfd982ce445afe36fa06a78a1a4ce164bdb120004f

Analysis

user interaction
yes
max time kernel
149s
max time network
134s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
16/09/2026, 16:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
email-html-2.html
Size 8KB
Sample260916-tz73dsshne
SHA256 b3c4934b86b907e7c98c01bfd982ce445afe36fa06a78a1a4ce164bdb120004f
MD5 e45c4b0305a36bcf005892059d929210
SHA1 6a57f2d6e38b7ebd6935c3d9203f9ba745d137a8
SHA512 294b42a8dd57fd3f3309208fcf0164ea065c05053363cea2009d58dc787963f468db4386df701798eb51b1f2169b36d16d7a7bb398819fbfc948d759e9506577
SSDEEP 96:CLST12STUq+STUyj6LUHj6/UDFSnUWOI5/fXoLolQzug4lRHABztvcwuq/MNX:ZJdEL//MFSnd55/foQvgaS/oX
TLSH
T17D025462C2112E1B452701F5F522E7869366C245E3075BA05AF572F7F2CED30BE623EA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5032	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134340498683573648"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2101206053-1414382737-268919432-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2101206053-1414382737-268919432-1000\{96126E0E-513B-4B18-A498-2A72E5FFEC24}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1072	msedge.exe
1072	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4940	msedge.exe
4940	msedge.exe
4940	msedge.exe
4940	msedge.exe
4940	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4940	msedge.exe
4940	msedge.exe
4940	msedge.exe
4940	msedge.exe
4940	msedge.exe
4940	msedge.exe
4940	msedge.exe
4940	msedge.exe
4940	msedge.exe
4940	msedge.exe
4940	msedge.exe
4940	msedge.exe
4940	msedge.exe
4940	msedge.exe
4940	msedge.exe
4940	msedge.exe
4940	msedge.exe
4940	msedge.exe
4940	msedge.exe
4940	msedge.exe
4940	msedge.exe
4940	msedge.exe
4940	msedge.exe
4940	msedge.exe
4940	msedge.exe
4940	msedge.exe
4940	msedge.exe
4940	msedge.exe
4940	msedge.exe
4940	msedge.exe
4940	msedge.exe
4940	msedge.exe
4940	msedge.exe
4940	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4940	msedge.exe
4940	msedge.exe
4940	msedge.exe
4940	msedge.exe
4940	msedge.exe
4940	msedge.exe
4940	msedge.exe
4940	msedge.exe
4940	msedge.exe
4940	msedge.exe
4940	msedge.exe
4940	msedge.exe
4940	msedge.exe
4940	msedge.exe
4940	msedge.exe
4940	msedge.exe
4940	msedge.exe
4940	msedge.exe
4940	msedge.exe
4940	msedge.exe
4940	msedge.exe
4940	msedge.exe
4940	msedge.exe
4940	msedge.exe
4940	msedge.exe
4940	msedge.exe
4940	msedge.exe
4940	msedge.exe
4940	msedge.exe
4940	msedge.exe
4940	msedge.exe
4940	msedge.exe

Suspicious use of WriteProcessMemory 34 IoCs

description	pid	Process	procid_target
PID 4940 wrote to memory of 740	4940	msedge.exe	82
PID 4940 wrote to memory of 3992	4940	msedge.exe	83
PID 4940 wrote to memory of 5032	4940	msedge.exe	84
PID 4940 wrote to memory of 3992	4940	msedge.exe	83
PID 4940 wrote to memory of 3992	4940	msedge.exe	83
PID 4940 wrote to memory of 2736	4940	msedge.exe	85
PID 4940 wrote to memory of 2736	4940	msedge.exe	85
PID 4940 wrote to memory of 4176	4940	msedge.exe	86
PID 4940 wrote to memory of 4176	4940	msedge.exe	86
PID 4940 wrote to memory of 4176	4940	msedge.exe	86
PID 4940 wrote to memory of 3964	4940	msedge.exe	87
PID 4940 wrote to memory of 3964	4940	msedge.exe	87
PID 4940 wrote to memory of 3964	4940	msedge.exe	87
PID 4940 wrote to memory of 692	4940	msedge.exe	88
PID 4940 wrote to memory of 456	4940	msedge.exe	89
PID 4940 wrote to memory of 456	4940	msedge.exe	89
PID 4940 wrote to memory of 456	4940	msedge.exe	89
PID 4940 wrote to memory of 692	4940	msedge.exe	88
PID 4940 wrote to memory of 692	4940	msedge.exe	88
PID 4940 wrote to memory of 2276	4940	msedge.exe	94
PID 4940 wrote to memory of 752	4940	msedge.exe	95
PID 4940 wrote to memory of 2276	4940	msedge.exe	94
PID 4940 wrote to memory of 752	4940	msedge.exe	95
PID 4940 wrote to memory of 2852	4940	msedge.exe	98
PID 4940 wrote to memory of 1164	4940	msedge.exe	109
PID 4940 wrote to memory of 4988	4940	msedge.exe	110
PID 4940 wrote to memory of 620	4940	msedge.exe	111
PID 4940 wrote to memory of 1236	4940	msedge.exe	112
PID 4940 wrote to memory of 1236	4940	msedge.exe	112
PID 4940 wrote to memory of 1764	4940	msedge.exe	114
PID 4940 wrote to memory of 1764	4940	msedge.exe	114
PID 4940 wrote to memory of 4420	4940	msedge.exe	115
PID 4940 wrote to memory of 4420	4940	msedge.exe	115
PID 4940 wrote to memory of 1072	4940	msedge.exe	118

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\email-html-2.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x290,0x7ffa66e4c188,0x7ffa66e4c194,0x7ffa66e4c1a0
  2⤵
  PID:740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1708,i,4859698071091545284,6176840206511285474,262144 --field-trial-handle=3040,i,18233039948433307245,16713419199601610234,262144 --variations-seed-version --mojo-platform-channel-handle=2972 /prefetch:2
  2⤵
  PID:3992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1872,i,9814366877218570925,9214047030387846808,524288 --field-trial-handle=3040,i,18233039948433307245,16713419199601610234,262144 --variations-seed-version --mojo-platform-channel-handle=3108 /prefetch:3
  2⤵
  - System Time Discovery
  PID:5032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2312,i,13122997299184133138,6548581329583863563,524288 --field-trial-handle=3040,i,18233039948433307245,16713419199601610234,262144 --variations-seed-version --mojo-platform-channel-handle=3128 /prefetch:8
  2⤵
  PID:2736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3448,i,6428386557572143720,8654858696437515982,2097152 --field-trial-handle=3040,i,18233039948433307245,16713419199601610234,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:4176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3452,i,13611005501049981470,2043366870265243374,2097152 --field-trial-handle=3040,i,18233039948433307245,16713419199601610234,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:3964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4180,i,5459570621695533878,16922417651028359100,2097152 --field-trial-handle=3040,i,18233039948433307245,16713419199601610234,262144 --variations-seed-version --mojo-platform-channel-handle=4220 /prefetch:1
  2⤵
  PID:692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4192,i,11034265962526842304,6435174663507143841,2097152 --field-trial-handle=3040,i,18233039948433307245,16713419199601610234,262144 --variations-seed-version --mojo-platform-channel-handle=4224 /prefetch:2
  2⤵
  PID:456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,4410579165551289815,17630793181848627363,524288 --field-trial-handle=3040,i,18233039948433307245,16713419199601610234,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:8
  2⤵
  PID:2276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5136,i,17609316827529244018,15584076857777536335,524288 --field-trial-handle=3040,i,18233039948433307245,16713419199601610234,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  PID:752
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5920,i,16232467704517019693,7948929136992331625,524288 --field-trial-handle=3040,i,18233039948433307245,16713419199601610234,262144 --variations-seed-version --mojo-platform-channel-handle=5928 /prefetch:8
  2⤵
  PID:1708
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5920,i,16232467704517019693,7948929136992331625,524288 --field-trial-handle=3040,i,18233039948433307245,16713419199601610234,262144 --variations-seed-version --mojo-platform-channel-handle=5928 /prefetch:8
  2⤵
  PID:2852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4860,i,6179551749614869192,14766539895072922773,524288 --field-trial-handle=3040,i,18233039948433307245,16713419199601610234,262144 --variations-seed-version --mojo-platform-channel-handle=4352 /prefetch:8
  2⤵
  PID:1164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3592,i,6230949368028481260,7918945337237063937,524288 --field-trial-handle=3040,i,18233039948433307245,16713419199601610234,262144 --variations-seed-version --mojo-platform-channel-handle=4476 /prefetch:8
  2⤵
  PID:4988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5928,i,6226428255537955648,6243240928174054960,524288 --field-trial-handle=3040,i,18233039948433307245,16713419199601610234,262144 --variations-seed-version --mojo-platform-channel-handle=6244 /prefetch:8
  2⤵
  PID:620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5212,i,17624266587606040663,18366481143182888643,524288 --field-trial-handle=3040,i,18233039948433307245,16713419199601610234,262144 --variations-seed-version --mojo-platform-channel-handle=2592 /prefetch:8
  2⤵
  PID:1236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5368,i,2974084500763241643,9588452903288629049,524288 --field-trial-handle=3040,i,18233039948433307245,16713419199601610234,262144 --variations-seed-version --mojo-platform-channel-handle=5220 /prefetch:8
  2⤵
  PID:1764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5812,i,5617896984673527283,4734646384884804865,524288 --field-trial-handle=3040,i,18233039948433307245,16713419199601610234,262144 --variations-seed-version --mojo-platform-channel-handle=776 /prefetch:8
  2⤵
  PID:4420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6160,i,14554508950166918133,11420232354886168059,262144 --field-trial-handle=3040,i,18233039948433307245,16713419199601610234,262144 --variations-seed-version --mojo-platform-channel-handle=5140 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1072

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1256

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2864

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 61a97be736e0441d45644d31b38bd9bef6c1bd260fa1ecbb5d099fa493fee6b4
MD5 99bbd8400adc948f85ebd87cb24b3fcb
SHA1 c8fb9564ede7ecb06cef446bdb527025127a796e
SHA512 75b3ee70eca487cbbfb3d5b4b25bae158ff99188ab36d55f391e9f80c51ce9fa433897d79a0ae37ad64698bc3eb5aa9a10a49116fb8f7f35ed0a6e98aa8321b7
TLSH
T109D022C8F2A0300CE00C3233A02BCE022B88CEA8F0032BCA000E8C80E8800C80CF2C8E
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 87a6b56b3a47cfd9f58f49b21d0040033c8cfd80b50e49b434794cefa7e29583
MD5 74ef2da89fa243ea7d0030317efca192
SHA1 ceb38f6fe8b62f80d617114db8b4617467417ae3
SHA512 285847f78095225db6f446ab877593c3e8e9c642b3beec1b15e7b1eec59d6b2f61ada0e2fb96cf36a3046dbd5102c274473cea5f978ee83b010039a4dc00d05d
TLSH
T10DD024C471D0340CD40C31335015CD011744CD54F00317C7000D4C40C4400C40CF1C4D
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 43a8a8b14878e0831c6455d25fe194bcd96fa09bafa8dadf1a956844e3c2a849
MD5 a20ccf7e49af7c9b34fe39ace0644e1f
SHA1 949b06112cb6c9872d030d0f0b6c3e6b089419bb
SHA512 4277963fbacea5a24379196e8cb1b49537c261695e546c437884079092fec9f10e3eac3ef085be9864de84d115ffeb4a1e48ee6bd580366c8342a33034159631
TLSH
T17CE07DA814CCC7FFAA4876474168578CC380370EF3CCAA1A170C88C57281048B2C3BE0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 1ac25eb6373bd327c8090fee04b6eae511f1739c2612e18bdd5a2a24ddd002a4
MD5 d5ab67b6cee51a1b55bb480f7fe3ee55
SHA1 85d6d4d837f04a8ec22ec952284694854bfef9dd
SHA512 a17f29f4d1fac724004e04e9b04169c3a43d42613d06753bd5fe87b46bf090124cf164660d880fd56e9a0642a761f18f9211e4d56da0fe35876a061298193382
TLSH
T13161A28461974C08FB9C647DA3DF39C735348F7189776D410AC6DC786B26F4F500A2A8
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 973B
SHA256 fe7c9a0b6e4692310d99e6e32f438769d2bbc60127df1f9450a69acb22b6774f
MD5 4ffa6ab100f7604a40dae29cc2d44f64
SHA1 b0fb0202a08d2e525bd11b7a0a6be3721ed96cbe
SHA512 9562852fbdf26ef08b5d7ae22d786ae9070a87a305a73db2b33284df8fa269f58da7924c39248d0f3c3d3996a68dc47805823f37fe451fba862770d47fa54e6d
TLSH
T1FE11B5F783E4467E9A0152F19A185F1BCE5C0507531C7C5585E46F1B93F34B0E10159F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 0f1f0ead2d685b3c0133b494ebff7ea9aac0c1e14ef9254d03e2adee7c025efc
MD5 cc44b817bba2a81b1457861a1942cad1
SHA1 7c941eea4dc6671879c8bdb4717b6498048c94b5
SHA512 505ca0f4ab2c225339abed4ac6a38e8293884ca2db8c29d40eecf55fce8ee425811fd35a347982c90c2ae9ea8a2cae89b12b9fb91051b89e21cb4d60f3aa5579
SSDEEP 192:sxZ3R5WB/fmsnA2QIdpda4HW6+WNGYaQnZIg5iJ:sxZ3SB/fmsA2x84HbGk4
TLSH
T1AB22B615AE78A97B8CCBD21DBB55BF43E6F91032A1911E48E6FC861C05E76CD1207C0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 f045252f8fb92d47f0eb362f3e5e6ca0999ffb17fb98673ede13b6e4a90a91cb
MD5 58778d1173a16a270bfa5e0d1c123fe1
SHA1 3ef4f292e55a47a13a32ab2cbc9b8c38e55bb01f
SHA512 1caa0d50542a4ffe06708a87e69b3e36bd1646a1c2b5101d98ea015ba08f03fa96adc56d66b1d50369b447ffd6d1658071a260c2744206612210c526d558dfee
SSDEEP 192:sxZ3R5WB/fmsni2QIdpHa4HW6+WNGYarnZIg5IJ:sxZ3SB/fmsi2x64HbGRi
TLSH
T16422C755AE28697B8CC7D21DBB55BF43E6F91032A1911E48E6FC861C05E7ACD2207C0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 f3e682c499e91037217a997aeb32963ec4dc2356afa8144d59c02b5db48e875e
MD5 c03e4f10f3eaff4f5b5fd401fa2be7db
SHA1 f31307f3348d7015337271570b6a24b0fec1def3
SHA512 0b01b1190bfbc12df6e5792e074ed96645c9ab964074eacc6a87fc39f6ec0d2d819ee008ef87031aef1aecbae0356645cdc6408e2bc5994cb2c0dba1551b680e
SSDEEP 192:sxZ3R5WB/fmsZA2QIdpda4HW6+WNGYaQnZIgrJ:sxZ3SB/fmsy2x84HbGk9
TLSH
T1D312A6156E28A97B8CC7D21DBB65BF43E6F91032A1951E48E6FC861C05E7ADD120BC0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 4a4283d52abd25bdd5e83c1bfd4ec976e7720d6a1f115228790a4b464299d292
MD5 c65b15b3841883ce8007c09ceef7cdbe
SHA1 b6148541a9a3c87baf16427a88b925633b9ec1de
SHA512 d76640e34e200b05eb03066de1a1baba038137b37ce8c622dc8f94749fbbb587df4d4f2652156926e6ba7d293c2de1f0cbafd5c9659178bd57a10aceca7ac79b
SSDEEP 192:sxZ3R5WB/fmsni2QIdpda4HW6+WNGYaBnZIg5IJ:sxZ3SB/fmsi2x84HbGLi
TLSH
T18222C755BE68697B8CC7D21DBB55BF43E6F91032A1911E48E6FC861C05E7ACD2207C0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 164e46bc63855e6837690ee4720e687040904528a18ba835d6295b5f56123848
MD5 6e456e912e21cc8423009cb23158e0e1
SHA1 3fa6a0853c98fbe6740bd265057b502996ad582a
SHA512 3f1dc471560007fa70087507cbda2b21faa8ab06da2706dc79e2864d39d7a08dc54c2237e827d1a02a779650d56f6414b6a52ea7c99aadb29b6185e113db8bac
SSDEEP 768:7cyQRbrWvvlpZ8F1+UoAYDCx9Tuqh0VfUC9xbog/OVaKLlRXH34ro4ZCE:7cyQRbrWvvlpZu1jaXKLf33D4ZCE
TLSH
T19AC2FA2F640CCB7E4FC01E9DDC666F976E9802C7A6588D4047FA994C02C77EE512A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 cb9ed9f7c8739ac18ce88638089bd924017f0d31a2050be8fdfe21dd2a194beb
MD5 9e01f0b268f2904136ac95e2d3d4353b
SHA1 f23860014d6dcdb264491899840d894d30874e3f
SHA512 ace2d9f0d9572e4fb5522254a8554ffb8b34e85bb6a9ff1f6f7c20c40959c7aea1a2e0de4fedfd4b6195e4c060c9cdead51cc0b775a9c19bc944b20c7ac517d8
SSDEEP 384:5ZcIlesNWLzk3DSdpup5u8idaOf0Bkwc0a0Wog:RIFXekdT0Bkua0WH
TLSH
T101927C756CB4AC76A8E3A125F9473A038FB880A7D3C85F84D5DCA72E01DA6981307D27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 7f402fd4f4612d632a30ccd2af6af024269cda3f6402f30136675155348b62a2
MD5 0a406bba5a7eb8cd79ed1396c8867e3a
SHA1 706477ddbf173861087ef6a84e8e73d094d8f5d2
SHA512 be6c88d7105c8996694e82b21713049119c2a0cf2b79993e6d04ca891938cacc47047266122441a64b7fcdf145665704aa81ebca40f9b5dbf544f5e973f4f51a
SSDEEP 384:iZcIUsNWkzk3DSdpup5u8idaOK0Bkwc0a0Wog:QUMXekde0Bkua0WH
TLSH
T163827D356CB86C76A9E3A165F8473A038FB880A7D3C85F84D5DCA72E01DA6D41307D27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 d60c20718e485ef363e103dc4f4ad957bed4ad82dbf8f7128b0caebb0abcafb3
MD5 8ab5fdd800eb185bd929049e99d66825
SHA1 f6e52af046a32fba2bde6ce692e56e7406012c73
SHA512 7ab2c488c7b8ba167b47339e710ce3403b0b62ab72b3f313131e8883319b4aaa37c3286179dd0fb13fbc7117b1b14e08bbe601583f9873c974c188f651e947bf
SSDEEP 192:SONw6iDCQmiUyXtHq5u88PdPCvGSqlQ+U6:SONw6/4Hq5u8ida2tU6
TLSH
T1CF02F7386C283C7B9DE3AD15B58B7B139FE4116FE7952B84C9E81A2D01D769C1703922
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 14KB
SHA256 3226e77247be5a1c30185bbc0239f3478b02c302b2a200a03e582b7d351a8372
MD5 57705797ee4ba0ef357c3e0af45e6d4c
SHA1 96bf37e34d129f47264cb6b868014d4638a2b724
SHA512 55960a2c0f9766f132fdda0ad29c9974b2b02a66752e17b3966b405e0a593d60da0411ef2f752d80a3c68eacfb3ca01c87b09104e2d240ddada872a918de0d45
SSDEEP 192:uymsNW/jQkrk4Ic63DPP4QmiU1hHpB4p5u88PdPCvGUetplAN/aftd5kHQc0a3Kv:osNW/jzk3Dg7pup5u8idaOG0Bkwc0a03
TLSH
T130623A3578B8AC76ADE3A525F44B3A039EB481ABD7882F84D5DC671D01DB2986307D23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 111a3fd2a05c5cff3ffc640250e128b0db5a8b49c6ef265b590a87f4debbbc04
MD5 f0bebbf003fc9e20b16c3ac03f0e5316
SHA1 428a18416a0ec360c98e7cb66c1990890782488b
SHA512 95d3d7bfbb690948d7197e972fcc9fe9e3cbe1cd52e3fc7cfd258e3247ed108cf9eb1f1d8bddfb161fe870bb066d53bd720c4fc448d2a7389c909076e7d108d8
SSDEEP 384:nZcIUsNWLzk3DSdpup5u8idaOK0Bkwc0a0Wog:PUFXekde0Bkua0WH
TLSH
T1D8927C756CB8AC76A8E3A165F9473A03CFB880A7D3C85F84D5DCA72E01DA6941307D27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 fc1bedf896f929f1e03649ce2d557349df7fbaa00938c2d55403fbd00bf0410e
MD5 35f499a2f49cf42b957554b3a70918a8
SHA1 2c317c2b701a288954b015a418cd7aab56be5f69
SHA512 942253a87cf7d6ec3f7ea93754b05258eae4c4d66ca46e8900787165100a0b8863953f67e370993cafa008921ef70ba2d3d16652a074404033e59352b4d2df45
SSDEEP 192:SONn6iDcQmiUymt0q5u88PdPCvGUetPuZN/afU6:SONn6Fr0q5u8idaOo0U6
TLSH
T129123A35A878AC7B6DE3A821F4873A139FB4416BD7886F80D9DC272C01EF5985707923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 990ea6a06299922194f370440381de1cafd6d49b472e0f6d45fc506200ad73e9
MD5 1a3621e124e8fd5ba41c2641d8bf47fe
SHA1 21467295d5cc27862b3995870f116a602af746d3
SHA512 8794d01ba54b6bb2d312c4a687e2303e030f6faf189b8c84f69aa2d4a6fb6465e4b117929a4a2950d277ddd2a9bf5e0570fbfbba470652167dc42a76ff195aae
TLSH
T17A412C58A6F91058B3B77E5AAFF6B47D447AB9732F06D46D00110D4F0A66B40C8A2737
MD5 SHA1 SHA512 TLSH

Submit Download