b3c4934b86b907e7c98c01bfd982ce445afe36fa06a78a1a4ce164bdb120004f

Analysis

max time kernel
148s
max time network
152s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
16/09/2026, 16:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
email-html-2.html
Size 8KB
Sample260916-tz73dsshne
SHA256 b3c4934b86b907e7c98c01bfd982ce445afe36fa06a78a1a4ce164bdb120004f
MD5 e45c4b0305a36bcf005892059d929210
SHA1 6a57f2d6e38b7ebd6935c3d9203f9ba745d137a8
SHA512 294b42a8dd57fd3f3309208fcf0164ea065c05053363cea2009d58dc787963f468db4386df701798eb51b1f2169b36d16d7a7bb398819fbfc948d759e9506577
SSDEEP 96:CLST12STUq+STUyj6LUHj6/UDFSnUWOI5/fXoLolQzug4lRHABztvcwuq/MNX:ZJdEL//MFSnd55/foQvgaS/oX
TLSH
T17D025462C2112E1B452701F5F522E7869366C245E3075BA05AF572F7F2CED30BE623EA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4876	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1262770251-41185387-1005173349-1000\{FA72DC2E-F4F4-4537-A028-7D3E1EFE8A9A}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3256	msedge.exe
3256	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3736 wrote to memory of 3060	3736	msedge.exe	87
PID 3736 wrote to memory of 4192	3736	msedge.exe	88
PID 3736 wrote to memory of 4876	3736	msedge.exe	89
PID 3736 wrote to memory of 4192	3736	msedge.exe	88
PID 3736 wrote to memory of 4192	3736	msedge.exe	88
PID 3736 wrote to memory of 1504	3736	msedge.exe	90
PID 3736 wrote to memory of 1504	3736	msedge.exe	90
PID 3736 wrote to memory of 5484	3736	msedge.exe	91
PID 3736 wrote to memory of 5484	3736	msedge.exe	91
PID 3736 wrote to memory of 4452	3736	msedge.exe	92
PID 3736 wrote to memory of 5484	3736	msedge.exe	91
PID 3736 wrote to memory of 4452	3736	msedge.exe	92
PID 3736 wrote to memory of 4452	3736	msedge.exe	92
PID 3736 wrote to memory of 1172	3736	msedge.exe	93
PID 3736 wrote to memory of 1172	3736	msedge.exe	93
PID 3736 wrote to memory of 1172	3736	msedge.exe	93
PID 3736 wrote to memory of 5672	3736	msedge.exe	94
PID 3736 wrote to memory of 5672	3736	msedge.exe	94
PID 3736 wrote to memory of 5672	3736	msedge.exe	94
PID 3736 wrote to memory of 3444	3736	msedge.exe	97
PID 3736 wrote to memory of 3444	3736	msedge.exe	97
PID 3736 wrote to memory of 2192	3736	msedge.exe	98
PID 3736 wrote to memory of 2192	3736	msedge.exe	98
PID 3736 wrote to memory of 5800	3736	msedge.exe	100
PID 3736 wrote to memory of 4464	3736	msedge.exe	103
PID 3736 wrote to memory of 4884	3736	msedge.exe	104
PID 3736 wrote to memory of 3356	3736	msedge.exe	105
PID 3736 wrote to memory of 2632	3736	msedge.exe	106
PID 3736 wrote to memory of 2632	3736	msedge.exe	106
PID 3736 wrote to memory of 3256	3736	msedge.exe	108

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\email-html-2.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7fffa5a0c188,0x7fffa5a0c194,0x7fffa5a0c1a0
  2⤵
  PID:3060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1540,i,18435353727245229522,8315228669335456264,262144 --field-trial-handle=2140,i,801761210724061946,5846361443448941711,262144 --variations-seed-version --mojo-platform-channel-handle=1888 /prefetch:2
  2⤵
  PID:4192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1880,i,6975017505220131494,5598556049675743587,524288 --field-trial-handle=2140,i,801761210724061946,5846361443448941711,262144 --variations-seed-version --mojo-platform-channel-handle=2176 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2520,i,5613083609315257293,1320389270235180967,524288 --field-trial-handle=2140,i,801761210724061946,5846361443448941711,262144 --variations-seed-version --mojo-platform-channel-handle=3228 /prefetch:13
  2⤵
  PID:1504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3496,i,3117889012211065352,15256577369420531131,2097152 --field-trial-handle=2140,i,801761210724061946,5846361443448941711,262144 --variations-seed-version --mojo-platform-channel-handle=3552 /prefetch:1
  2⤵
  PID:5484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3520,i,7749274218270389523,12556490125537187948,2097152 --field-trial-handle=2140,i,801761210724061946,5846361443448941711,262144 --variations-seed-version --mojo-platform-channel-handle=3584 /prefetch:1
  2⤵
  PID:4452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4216,i,8722653753930645914,8235522592518592392,2097152 --field-trial-handle=2140,i,801761210724061946,5846361443448941711,262144 --variations-seed-version --mojo-platform-channel-handle=4740 /prefetch:1
  2⤵
  PID:1172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4228,i,10407281878653397409,3526823525853646677,2097152 --field-trial-handle=2140,i,801761210724061946,5846361443448941711,262144 --variations-seed-version --mojo-platform-channel-handle=4744 /prefetch:9
  2⤵
  PID:5672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5276,i,8970758196555595066,15583092757474571946,524288 --field-trial-handle=2140,i,801761210724061946,5846361443448941711,262144 --variations-seed-version --mojo-platform-channel-handle=5364 /prefetch:14
  2⤵
  PID:3444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5224,i,10904699540362122402,6753438770081841159,524288 --field-trial-handle=2140,i,801761210724061946,5846361443448941711,262144 --variations-seed-version --mojo-platform-channel-handle=5404 /prefetch:14
  2⤵
  PID:2192
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6096,i,1989491857806510265,12407543488249229861,524288 --field-trial-handle=2140,i,801761210724061946,5846361443448941711,262144 --variations-seed-version --mojo-platform-channel-handle=6108 /prefetch:14
  2⤵
  PID:1360
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6096,i,1989491857806510265,12407543488249229861,524288 --field-trial-handle=2140,i,801761210724061946,5846361443448941711,262144 --variations-seed-version --mojo-platform-channel-handle=6108 /prefetch:14
  2⤵
  PID:5800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5184,i,5452209057951404115,5754491335863812685,524288 --field-trial-handle=2140,i,801761210724061946,5846361443448941711,262144 --variations-seed-version --mojo-platform-channel-handle=4804 /prefetch:14
  2⤵
  PID:4464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,15551788616465814432,8998591028232239340,524288 --field-trial-handle=2140,i,801761210724061946,5846361443448941711,262144 --variations-seed-version --mojo-platform-channel-handle=4904 /prefetch:14
  2⤵
  PID:4884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6108,i,6631563890566155823,9625809482256816641,524288 --field-trial-handle=2140,i,801761210724061946,5846361443448941711,262144 --variations-seed-version --mojo-platform-channel-handle=4968 /prefetch:14
  2⤵
  PID:3356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4112,i,10145339146611559584,578916305394499907,524288 --field-trial-handle=2140,i,801761210724061946,5846361443448941711,262144 --variations-seed-version --mojo-platform-channel-handle=5404 /prefetch:14
  2⤵
  PID:2632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5644,i,8118670564651462815,7760092789493559003,262144 --field-trial-handle=2140,i,801761210724061946,5846361443448941711,262144 --variations-seed-version --mojo-platform-channel-handle=804 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3256

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2904

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4272

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e1837ee53009f9b691f7aee3be45ffb945d4894bf04ccaf875b9947114bb5224
MD5 58ba31abb4a3fd3bbc9aadea4fc9ca13
SHA1 d79c4b2ccee6dadb45162ea34fb988911510f0b8
SHA512 0c096d7f5d364e0911d26f4bc2ea03e3d81b2026be5182b04fc17e7949640761db8056138b55b28aa9abe884d601d2cf6b1be9e992fd3565c35c69def459d32a
TLSH
T1F3D02B3579ACD772C18C503A405901112A95F001FD46C1801953B10848913400006295
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0a1e646beadfff70af6a1dc73b6baa41188262ddbb2b7781270d4e94c92c02be
MD5 893220bb58a1416480d52375128fa19a
SHA1 3a577208211e9133f3744d9ba695501b0481ca9b
SHA512 b3f0e3d85398f7aa7fcea74cd44fd2709c0265d9072771dccfe7508832bc1173f452a0f49028e8bd62ea434676abcdf4a111c8e31f121871fbdfa4acf207b131
TLSH
T1C2D02B3179BCD772C18C503E405A01112A85F001FD46C1801A53F10848913400005281
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 edf1fc886a6e003050b2b9db89e0b7a6f194bd1dfdf759c2afde0b2264062c0f
MD5 860c44572f871f11849fcb71a12d470b
SHA1 0bd1d10b0233cccb5ad8a0d367b27ed66d03c69a
SHA512 86bdd986d2d1df90705d0d488f1c11200dba046236c0295093ed2ffb4573dfe77671692b1266182996c7a8685fc83fd33d4eaeeda9f9bf45fe12237f1e0acb7a
TLSH
T13571CB1A9B328A46FBD43AB48AD60E963E77948CAFC34F4051D6C1F41E273A384644DC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe595ad8.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe595ad8.TMP
Size 3KB
SHA256 4905d923a955e7ccd23adb854b1ed36fdcfe7794242fd1d23d06338befddfc7d
MD5 2a2527ae108eaa6bdeff3064bf7ec21e
SHA1 f065a4cf5ec54658d244df95507a28cb6df05cd1
SHA512 2e236d5edf46f32a196062839666985e9a6b7cf00be2112d1ac98abb9dbe9011e0b650f5589fed58459bd461f90e2808e43471580d92e22974e140440572abe1
TLSH
T16671CB1A9B328A45FBD43AB48AD60E963E77908CAFC34F5051C6C1F41F273A384640DC
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6f030f53-3bb6-4334-9ff4-b834dfdf1564.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\6f030f53-3bb6-4334-9ff4-b834dfdf1564.tmp
Size 2KB
SHA256 2661fb8d5f73b3a2e286789762ea232d9cb9c76bc8f45a3b7ade5a9ef1877071
MD5 06695f4e919f4b99baea1484f7cd157e
SHA1 a12512c1a373c1b49bac37495292d00ffa8fe802
SHA512 2d6316e3a329e142cd7f9793f6aa10e4f564b431c8585c3b4cfcbaa4f1ca8f787549cbe1d9a9570214eaac8bc995adef8ba10ec684fa37dc1f38eeb7f520bd19
TLSH
T18151CEF7C3E8867E890156F0AB186E1FCE1D0915532C3C5689E4AF2B93E34B1E141A9F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 11855bd17248084b89c0cdac850bcd5132d9085f85714d228a80343a5b23595b
MD5 8de0c78c84073cf668a1e8840e943d09
SHA1 2cadf4453c44702edbd06e10fbb40c13dcdeb72d
SHA512 0c820691a5384c9f1461b902d5fec346797deaafc039c6e4c7985137d6ea137653c14696aef63148897053ca8ee4b543ef35cb00edd9a68f8afc0becfe060299
SSDEEP 192:sxRBRqbj/fLsDqmBGzoA8p4i/g6+WNIYdqnGKFIgDgJ:sxRB+j/fLsDHB7r/5IFo
TLSH
T185329519A968A93B8CCBE21DFB557F53E2F95032A0D51E48E6FC871C05E76DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 139b04841a0482d382429f56875d0780a2bc6fd2dbef265c0cbf250abfa81aba
MD5 a9e5e9ccce3cd5b9da638dbc33aea165
SHA1 f52dbddf96cdf4eae50d4a4ee6c188134182a6e1
SHA512 4af3fcbd5a9c9315fb543e333e7b61e231a81cc4e6b03a9d4bdec854484bcbe1be823f9ccc2ec62315d5d151e37cccce4ecab56b7fd492911c2487213f0947a7
SSDEEP 192:sxRBRqbj/fLsHqmBGzoA8p4i/g6+WNIYdqnGKFIgD6J:sxRB+j/fLsHHB7r/5IHq
TLSH
T17132A515AD68A93B4CCBD21DFB557F53D2F91032A1D51E48E6FC861C05EB6DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 24a22dde4bafb04d39dd87ec2b4df22361b7d870e7b064f51ccad4f6064b4840
MD5 654e3ee99a1a9eefbaf99e0c2be30fb4
SHA1 3c71d790686745c90ffa5f95654fc2ac66c799f5
SHA512 9dacac75fdac21e93a8ac068caedfb6324c23e5ed799a746d28a83c7c55c0bd4fa10595204a8472c60cff90a78e2e5c9c5cacd7f7979d082f723280ff66ec0da
SSDEEP 192:sxRORqbj/fLsBqmBGzoA8p4i/g6+WNIYdqnGKFIgIJ:sxRO+j/fLsBHB7r/5IHs
TLSH
T14B329515AD68A93B4CCBE21DFB597F53D2F91032A1D51E44E6FC861C05EB6DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 b96b2345ae707718b8c54692047cd8c2ba811c8f8e1fa9be1cb83c8ab1047997
MD5 70c11e13aecc016c7cd73036688fd2d6
SHA1 7326ff65241d645d7665bd65bcd109e0226f7835
SHA512 af2512190e002681b3992b95f1e45f53298e8870f91faa6bf54e4821895e1a244f131b62248dd1d6ab57ad8d6afaed08c977dcc5cb4226f4f71c8bb2f572f3fd
SSDEEP 384:qYe+z1ifCtgUGFf8SKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OV269GGRLMroKrP:qF+z1oWgU6f8S8F1+UoAYDCx9Tuqh0Vz
TLSH
T1C4B2EA2B604CCB7E4FC01A9D9C197F9B6D9802C796588D4047FED94C03C77EAA21A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 21d6644120dc69511f25e605a9790bf8c68470ceac2558eca9338d3b1f122878
MD5 a135a9d5001dda970134cfbb0ee68591
SHA1 cfa58109506d7e1e80e8a70f9b7f0007c8010f74
SHA512 ac6c8f71befcccf56214e64e8d4829898d62212896ee89cad9a1a93183b5e608e2cfb11cbd17ae85378d959653f07729d8f06340b541bac214fcc3c51f5b163f
SSDEEP 768:D63jnrYE2qK3Oo1h3Yogkl5akl8pbHW0AWD8Mg1Ch:D63g1h3Yog05akl4bHW0ABMg1Ch
TLSH
T171F2B071ACB4EE778DE6D685B6077603AFF495536AD85A8085DC9F0E019B2ED030BC23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 49dea1e404c0ee293c2da1a565896106983e920415ea1a9e011bcd5d4888051e
MD5 2c111f61e0f301423b307fb7aaca6435
SHA1 ad8a3f17fd2e4108d5830a34b03ebe2da6b42627
SHA512 eab48f3898cc1e34b785e125cc3509d48868cebeb4f25d8094a84d2c834ac0bcc233f5379fed0ea7b8c6a22548cedb604b3fa08f2fce6d6deafa6f36155dfc28
SSDEEP 768:eFQ03owgdQFreE2qK3Ok1h3Yogkl5akl8pbHW0AWD8Mg1Ch:103rs1h3Yog05akl4bHW0ABMg1Ch
TLSH
T164F2A072ACA4DA779DE6DBC4F60A7603AFF481639AD89591D6CC9E0D01972DD030BC23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 6a653309aafecf286f68547a0c76847b514268aa06b3a81d44708a04c468e901
MD5 a0e21dcd4630cb7b426d6a5c357b47fd
SHA1 d5a1cb6e83e8544c4758ee899f2e5ef4941d12b0
SHA512 22a280c1bbff09a33b7fc8a289bec330d03800b50bd0e0ce06479a478dca78257c5e2a45eec8c49f19d17e4a7f697c7ed7c78c0666c74b42c7932fbbb9afdc45
SSDEEP 768:w63wQFreE2qK3OC1h3Yogkl5akl8pbHW0AWD8Mg1Ch:w63h61h3Yog05akl4bHW0ABMg1Ch
TLSH
T188F2B071ACB4EE778DE6D295B6067603AFF495536ACC5A8085DC9F0E019B2ED030BC23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 2c3b88a5cc018de52397fb151e918645bdee0278e31f4bfbc7d9fe06197e77bf
MD5 3233f0a490829f8b8c5a0d28aba6ef38
SHA1 7864126d47000596e7635bab28fdae0445247282
SHA512 f0b24136016be7c3123229a4a1417793cdb977035e6941d92a1fb2933e85102d400fbc026117025cc032b32c6c55979a5f7a8116c5f733f3c2505f86b544e135
SSDEEP 768:B/UxvxjgC+CZ3YTCN3E28K3Op1h3Yogkl5akl8pbHW0AWT7SHvP0Vv:UZj3+I3u1h3Yog05akl4bHW0AOSCv
TLSH
T1BE03C039EC65AD778EE6A244760AA317FFF89463AAC4569449DC9F0D02873BD030B853
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download