6fe0806c33261b43f4ac32077120d2234df9771375705af675edcb8fee5c675f

Analysis

max time kernel
149s
max time network
144s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/09/2026, 15:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
email-html-1.html
Size 30KB
Sample260930-sscr8sbd68
SHA256 6fe0806c33261b43f4ac32077120d2234df9771375705af675edcb8fee5c675f
MD5 d1da1b01c1ebdc04ce8ac38aba2b9350
SHA1 3e7a1a9f42b8c863cad8c9a2c35e5490fde3fb40
SHA512 2a85f102097c15341cefe69877ea4a2328cd697d1f0fd3051b125a8e022b7a6bcab17292153fe6ed5751c11ee22be9f750509b31c6631742ff56b3053f581c9e
SSDEEP 192:4MEzeVs/8QSjavwsR2x6fGYfNm3V8+8VWq+88OS8+8A6DRQ0y2cLzjpC4cjpjjpo:EfCsR2x6fGY0lZ4LZTFjyh
TLSH
T152E20F12F6C11A0515EB8AD5E9D337BC3F7902D94FA90E387C283BBD9554CF30A62229
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2660	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1696934516-3600988056-1840298893-1000\{6B54C388-31BD-480E-A7AC-04AB49F61CFB}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1228	msedge.exe
1228	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4568 wrote to memory of 3360	4568	msedge.exe	86
PID 4568 wrote to memory of 2660	4568	msedge.exe	88
PID 4568 wrote to memory of 2812	4568	msedge.exe	89
PID 4568 wrote to memory of 412	4568	msedge.exe	90
PID 4568 wrote to memory of 2812	4568	msedge.exe	89
PID 4568 wrote to memory of 2812	4568	msedge.exe	89
PID 4568 wrote to memory of 412	4568	msedge.exe	90
PID 4568 wrote to memory of 1804	4568	msedge.exe	91
PID 4568 wrote to memory of 1804	4568	msedge.exe	91
PID 4568 wrote to memory of 1804	4568	msedge.exe	91
PID 4568 wrote to memory of 2316	4568	msedge.exe	92
PID 4568 wrote to memory of 2316	4568	msedge.exe	92
PID 4568 wrote to memory of 2316	4568	msedge.exe	92
PID 4568 wrote to memory of 4260	4568	msedge.exe	93
PID 4568 wrote to memory of 4260	4568	msedge.exe	93
PID 4568 wrote to memory of 4260	4568	msedge.exe	93
PID 4568 wrote to memory of 2552	4568	msedge.exe	94
PID 4568 wrote to memory of 2552	4568	msedge.exe	94
PID 4568 wrote to memory of 2552	4568	msedge.exe	94
PID 4568 wrote to memory of 5012	4568	msedge.exe	99
PID 4568 wrote to memory of 3828	4568	msedge.exe	100
PID 4568 wrote to memory of 5012	4568	msedge.exe	99
PID 4568 wrote to memory of 3828	4568	msedge.exe	100
PID 4568 wrote to memory of 5060	4568	msedge.exe	104
PID 4568 wrote to memory of 4204	4568	msedge.exe	114
PID 4568 wrote to memory of 4836	4568	msedge.exe	115
PID 4568 wrote to memory of 1524	4568	msedge.exe	116
PID 4568 wrote to memory of 204	4568	msedge.exe	124
PID 4568 wrote to memory of 204	4568	msedge.exe	124
PID 4568 wrote to memory of 1228	4568	msedge.exe	127

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\email-html-1.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x24c,0x7ff8bf70c188,0x7ff8bf70c194,0x7ff8bf70c1a0
  2⤵
  PID:3360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1776,i,1632132015420096482,2131883353731824830,524288 --field-trial-handle=2372,i,17941469221223277420,1000941727910812711,262144 --variations-seed-version --mojo-platform-channel-handle=2400 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1648,i,12383030855849986454,2162451276644086953,262144 --field-trial-handle=2372,i,17941469221223277420,1000941727910812711,262144 --variations-seed-version --mojo-platform-channel-handle=2368 /prefetch:2
  2⤵
  PID:2812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2304,i,2542274801328182109,16036072913260222089,524288 --field-trial-handle=2372,i,17941469221223277420,1000941727910812711,262144 --variations-seed-version --mojo-platform-channel-handle=2408 /prefetch:8
  2⤵
  PID:412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3456,i,12960910484614868027,7613735604885625909,2097152 --field-trial-handle=2372,i,17941469221223277420,1000941727910812711,262144 --variations-seed-version --mojo-platform-channel-handle=3016 /prefetch:1
  2⤵
  PID:1804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3460,i,8386677142769581412,10431890998228739686,2097152 --field-trial-handle=2372,i,17941469221223277420,1000941727910812711,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  PID:2316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4136,i,11154249843636409788,14706273246046637210,2097152 --field-trial-handle=2372,i,17941469221223277420,1000941727910812711,262144 --variations-seed-version --mojo-platform-channel-handle=4252 /prefetch:1
  2⤵
  PID:4260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4128,i,10433866636154828699,1913859674150080453,2097152 --field-trial-handle=2372,i,17941469221223277420,1000941727910812711,262144 --variations-seed-version --mojo-platform-channel-handle=4260 /prefetch:2
  2⤵
  PID:2552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,453503301954605524,7864531342407667776,524288 --field-trial-handle=2372,i,17941469221223277420,1000941727910812711,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:8
  2⤵
  PID:5012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5132,i,17671324478172928146,3388199130045128109,524288 --field-trial-handle=2372,i,17941469221223277420,1000941727910812711,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:8
  2⤵
  PID:3828
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5864,i,2115877152367408556,7280523810776009526,524288 --field-trial-handle=2372,i,17941469221223277420,1000941727910812711,262144 --variations-seed-version --mojo-platform-channel-handle=5892 /prefetch:8
  2⤵
  PID:2912
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5864,i,2115877152367408556,7280523810776009526,524288 --field-trial-handle=2372,i,17941469221223277420,1000941727910812711,262144 --variations-seed-version --mojo-platform-channel-handle=5892 /prefetch:8
  2⤵
  PID:5060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4128,i,16018156779960253174,156351961204743784,524288 --field-trial-handle=2372,i,17941469221223277420,1000941727910812711,262144 --variations-seed-version --mojo-platform-channel-handle=4620 /prefetch:8
  2⤵
  PID:4204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3620,i,4275122197118252974,3438388599187231628,524288 --field-trial-handle=2372,i,17941469221223277420,1000941727910812711,262144 --variations-seed-version --mojo-platform-channel-handle=4508 /prefetch:8
  2⤵
  PID:4836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4224,i,12537934923923071938,10448448881133652448,524288 --field-trial-handle=2372,i,17941469221223277420,1000941727910812711,262144 --variations-seed-version --mojo-platform-channel-handle=5968 /prefetch:8
  2⤵
  PID:1524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4984,i,8728741048675422395,1181185086676407851,524288 --field-trial-handle=2372,i,17941469221223277420,1000941727910812711,262144 --variations-seed-version --mojo-platform-channel-handle=2156 /prefetch:8
  2⤵
  PID:204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5960,i,12410762709435116905,15634722936742811747,262144 --field-trial-handle=2372,i,17941469221223277420,1000941727910812711,262144 --variations-seed-version --mojo-platform-channel-handle=760 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1228

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4180

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 63b3e051645c9957f53c538586c3b5463f3ba4412c230d66eb66f06ad6052604
MD5 0070abe22a07fb36149648973e990688
SHA1 c8a203457b36afa6d0ce9b56d26cb7817d832d37
SHA512 cda9b7179f6f997dac4ee0624ff9f92ed77b7c27218584fb07f6b2ebc24d10fc25d45c3d2781b766d834f82054e29ee150712e7ab7d7a11465c468d0f8a31fd1
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P79:fwUQC5VwBIiElEd2K57P79
TLSH
T175B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3a9e2856f7b8bdcf4e651903050a9f78a4dcadbc91b2bacca38c04067256642f
MD5 8eed843072749c683b08c3e5dbce9bd8
SHA1 87464a0b34e45a134ed6f01b613378b3b1c952ad
SHA512 ce7dc7d95703c8a1e763fcb3eae4091d89a746632583bc1fc73a8c189a11f08c6f50e2ee328053aab1da82c11d6f5f81942259c5654861d13f267c34e76feb7c
TLSH
T199D02B6CBE989EA0E40210340231910431CBC8178442200648B1065708003C303448B0
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 221e3dccb30d516b1b3c2d51c604a308dfba3aa3dbe8e11c2d09e185e21df465
MD5 7c97d945db36fde78f76660ee3165916
SHA1 fa851b1197f5a5f6ba4d935baba30b0465e8ad12
SHA512 73a256bc0b95a0662925ed2ac0e1668d7a760da5001e2b32fe139724419020254e080420b21ccad1896c60c44ca2663c2a3d2eccb8cb4180b6b0ad628c68d676
TLSH
T14FD02B6C7ED89EA0E80210340230910431CBC8178442210748B1065708013C303448B0
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 2afe89fce350b8a18e6bf5cb9750deef01453fb13e8233975d067ff1867eee64
MD5 262642667036b6b6735b1c6373704a09
SHA1 a4063dcb729c3b51fdfa727d0bf494421b1d29f3
SHA512 0b32f842d173fc85df1f1ec47d8a6256a7e0652b949724b956c17c3dfc7261cc29ee024f61b5efe244ebd2fde7c2088259124d954d09b4e2052569bf35f7edf7
TLSH
T12261FC85E55101B5FBE5B033B6F057BF363849B19DEB1E9ED1A4E278940E721313804C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58f79a.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58f79a.TMP
Size 3KB
SHA256 3b9c27ed93e003f8171c6063d87c0b8db469629166b2f6992311fa0286b2b1fd
MD5 be662d78335f9d486d8e1d0bde1cb2a9
SHA1 3b8a2f9c3297652e09df71168748205b10d33a88
SHA512 be4aa11563c3cf9f2060370fa1f1f3721ab5a3b65dc78c423cb8f8679fb1b1da682a4d74f74f41d4d1c63145c1bbe0e4341732a5a8a8da4e9a528f2bdb92bce1
TLSH
T1FD61D886E55101B5FBE9B033B6F057BF363849B29DEB1EAED1A4E278950E721313804C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 ddf1503a7ff22d81ef605c3ecdc22454681b498448c63301dede53b0701ae48a
MD5 ec7d3493a2b92c7cbd8696ed9626bff6
SHA1 23e7d53f0133ec23d5e53f1669cd091ed3dff030
SHA512 9d6b9cebec192be78f7a095e2a01da6c1efa8b9a5cd1cee8afda91ad7602ca306d63664a7a185aec49705c5d13f432a9ef2eff29524f93a71f7f752b5f9a6f14
TLSH
T181217DF7C3E486BE890156F09A24AE17CF1D054A522C7C5A8DE4AF1B63E2475D10169F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 215f637fd90f079a7f7fb3060cf6a48004211b20630359cfedfe1158697fb499
MD5 a7ce0d0c0e602b26fec18da7b740be39
SHA1 4e1f7a90fb6b67bea82c8d40b20f9bc22d3e5887
SHA512 c41ba79ff0217f733001a66056f6e27448cc54f32883498269e8eab18280223f0e2ddcc353ba6d05309909ec7743f1b97ecd54220bc8b33f0e111f5636539327
SSDEEP 192:sxZmQRKW1O/fesm1ZnNIdpddyHW6+WNGY3R/FMfeIgrJ:sxZmQ71O/fesm1ZnuHyHbGIH9
TLSH
T11722B7116E38A97B8CC7E20DBA257F53E6F9503291D41E98AAFC861C05E6ADD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 bf7defaef0e7a94323f75c981a4d324370634de189f8c50662f717d76e69f495
MD5 364cdd940d63024b20bf2c3fa9b87943
SHA1 14506a82612bf027f28f7fbd8a1b5c53f1d69923
SHA512 44932d000650eddacde1b72cd7d2392b4108bc2cd1deb7d2cf08e7c4d07913537d25e54676f99244782aff3986c56bd40dd4b2f56109f9cd2c8f544e8652818b
SSDEEP 192:sxZmQRKW1O/fesDDZnNIdpHdyHW6+WNGY3C/FMfeIg5NJ:sxZmQ71O/fesDDZnu9yHbGFHd
TLSH
T17122B7527E68A97B8CC7E60DBA157F53E6F9503251D01E88AAFCC61C05E7ADE120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 a3355bbcc5411dd4d3591ad4d80e17f979000c762c54796e7357b9389e3e1f51
MD5 2656f9aa83c2c7df5c3de836892c2814
SHA1 9275c78d5ef58bcf745ddcc0bfb5237dc9f10afa
SHA512 8292d04acfb0e891858273b9e2edfe8e8422f2fe3b36958e6f78f50f16b3fd3808ea0f7cd1db260c4a6d106b5d04e324e78b618d5cdf218c649ab8cfd78f34eb
SSDEEP 192:sxZmQRKW1O/fesDDZnNIdpddyHW6+WNGY3e/FMfeIg5NJ:sxZmQ71O/fesDDZnuHyHbG1Hd
TLSH
T19222B7117E68A97B8CC7E60DBA157F53E6F9503251D11E88AAFCCA1C05E7ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 82a38c53973914ef9ca9b2e3885f884b46cee14ee52945b264b853c2aea02610
MD5 5ec8820bd00e87de3dce0dd30a5b5d7d
SHA1 963e1642397a45f30a0d46cf1c70932941fc6230
SHA512 1111ecb1e75a4f0e125e69dbf5a4707bdda733dfcd6091f575fe740be298295ada5d990bd58cfa97ff348ec54b0f8e044f97149a84269947f294fc3ea91651a2
SSDEEP 192:sxZmQRKW1O/fesD1ZnNIdpddyHW6+WNGY3R/FMfeIg5vJ:sxZmQ71O/fesD1ZnuHyHbGIHb
TLSH
T1E122B6116E78A97B8CC7D20DBB157F53E6F9503291D41E98AAFC861C05E66DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 518a8fe0107849dfcd0c3666892ba21c28adf6dd530ed97781c0aeaa7321b828
MD5 036e25a77becc2a6e7a0b72e403ca6a0
SHA1 0d36fdfc99268854565a677e5b758cd7f85ef75e
SHA512 1172ab1feb1528b8c7d36bb73471272978d11c95e134fa2e163e4c0b3e83139ed3a8b466ba574bb4e6e9fea76b4ebc30c569732fb07fbd277926853a9898f8c3
SSDEEP 768:9r30AbSWvS2l98F1+UoAYDCx9Tuqh0VfUC9xbog/OVGmLlLJ72BrolZMd:9r30AbSWvS2l9u1jaLmLZ126m
TLSH
T13AC2DA3B640CCB7E4FC05A9DDC6AAF9B6E9C02C796548D8047FA984C02C77EA51274DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 e038af010ad2f4e2df2b195be24ee717729302a546217228777b345ac336d73f
MD5 1946b5a8fd121e13e23835739ea031c4
SHA1 9a1c9867fc3ca338dbc58c7a11a07d7d106d0a08
SHA512 80c9c0b0c51cfe4d8dba9479efb659db08465ef7bc9613fd31588ee63902dd89a53cb1d73dcea38756b1acd5c352360341c5a79fc3e83088246dc2cda017369d
SSDEEP 48:K0ydgMyQwBbsbcISkBK9o1yBxKRYTkQCyL2xMwuUUNb4PgISINK9s1uNxmdYHYcw:KoZeK6kyeFGK20p0QKpaC5
TLSH
T1399104053677129038BE294884E5DB6F524136637118EAAB7FBC54B68F2BE190CFD8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59939b.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59939b.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 163bb55d5d01e053290a6db3a0598b99d39eb71359773da7e3b3d5e170f1e6fb
MD5 f5534f430ee0b45b53b9d8ca3798e112
SHA1 51a5ac45b99c95f9fe8571dd3d0216ae682d802d
SHA512 b76736137a4348e7e89f5ceb631f05a5e648bd42a723864668fada3e783ce8c25d94e009b6af9293df6602151f33d716311a7162a84c0758d808ee3c5ebc26ea
SSDEEP 384:IZcIhsNfUY00ndKLhpuyWW9iX5FQCK1GtgOIwZOyhLpop:2h+v6hQCacL1GXsi1S
TLSH
T154827D36A8B85D7B9DE79545F58B36034EF48127EBC86F94D8ED571C04D6298030BD23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 401ea2d2aae3c6424f7ab2f80bc0167fde85a687cf809824dac60dd1a779a6a8
MD5 12bd565932c37a3e90367eeae995500e
SHA1 9cf74ba11db980c44f4880ee1c543050991ea4cc
SHA512 9437c58481852471ed98accc3f1435ec23b463a2a5ed043625ffb3a982eeb1c107c05e2e7d83cb94999c67ec3dd4227f5b1e2f2e81d0a26603b42ebb17004d22
SSDEEP 384:9iFiZcIAqzsNfc8TUNTUlIll00ndKLhpuyWW9iX5FQCBRGtgOIwZOyhLpop:0FQv+cwgL6hQCacyRGXsi1S
TLSH
T1A0A25C33A8A8997FEDE79A45F58A32038EF48167DAC9BB94D6DD5B1C00D71D8030BD12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 254ed4fd59cacc44a05f03ca307c00b619f69a5899859254722f201d8fec89a5
MD5 255cd8e9e4986d00d4c8290dfae0af40
SHA1 5627ab51289ead312b21792f68a1c0f017b6d6f1
SHA512 39f3473f8e6ec361633032386441465141d23009ac5b9589cef7d7712621bc81c6bea312c9b70e68ba92ef35cafbbc19c2aac0088a4e00c1110d26592b751686
SSDEEP 96:gqONkBQsjpfuMVwptaL5ih/cIPURHl8h4otop5MiCDcBIPuva6zx8X5Fxkx4AVZV:LONV6AmwprQmiUyUw6siX5FQVZJiGLU6
TLSH
T1C902E739FC786C7B9EE2AE05B58B36135EE5112BEA942F84C9E81B1C01D729C1307932
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 f3dcfc8695416ab425a485635337c8d0dee777fa8a4b12abf750ec1ba9213548
MD5 37a244c563dd055c1a38b9fb95a69732
SHA1 68c539c02d9e4f3067e0bcd5a5f136e1f55d5f12
SHA512 2c4134b2f790228a0721c635fc02a4fc5de2e9e631ecb6897ff22f6ac055496dad3b184a938164b942ece7b17a76722fff627e999ab10084d691283e26f4dda1
SSDEEP 384:0ZcIhsNfUl00ndKLhpuyWW9iX5FQCK1GtgOIwZOyhLpop:yh+Y6hQCacL1GXsi1S
TLSH
T10A828D36A8B85C7B9DE79545F58A36035EF4812BEBC86F94C8ED571C04D6298030BD23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 d5015628f027c16715daf145a25407b892b0b76f68c843d3914997dec0971074
MD5 627c9534e341d2cb5d13b6cd94cf0930
SHA1 b2c05534e8a099cbbebabadbd1794e373c79c57a
SHA512 f668f458b7d45692e35c3420d7a4ac50413c0e89b5eda7cdbfcd16307213be326f1281bd2ed1aa4f910cd5f3775b2ef32617cb9f070aa77c55599dad53664d60
SSDEEP 192:LON7h6AmwpJQmiUy/wCsiX5FQVQmlRbrqlU6:LON7h6ipnzCsiX5FQCEGU6
TLSH
T19E120936F8B86C2B9ED29854F48735135EE5821BEF887F84C9EC1B1C05DB29C530B926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c3ef3248-8bdc-4ade-a42b-bfc12154c59b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\c3ef3248-8bdc-4ade-a42b-bfc12154c59b.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 e135c10373cb7641f994cfd61f2335d4176ccf0a0b1c052fc3cbe8e10a12bd6e
MD5 3bcd55892d557a148ddb83073e0d89a8
SHA1 a41097c67d1917fae874ab2b787b5cb6793b62eb
SHA512 7e446bf20ad49b3f0a3c9489659671fd0fb2a95643afcb38e12e122ba4c96cb0c9a5b296bdc1d211abc3041d9c4c32bcfe0bdfd7f4d9ebef59608201b5a51cce
TLSH
T1AC41D459B6F91148B3B36E2A9BF7A57D487B7D732E0AD59D10010E4E0A22B40C8B1737
MD5 SHA1 SHA512 TLSH

Submit Download