3e1191da4fd30625fad097eba49fa71323db93602d2daeb99337746dccc7a39f

Analysis

max time kernel
148s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
28/06/2026, 06:01

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
3e1191da4fd30625fad097eba49fa71323db93602d2daeb99337746dccc7a39f.html
Size 80KB
Sample260628-grd35afw2p
SHA256 3e1191da4fd30625fad097eba49fa71323db93602d2daeb99337746dccc7a39f
MD5 8fff57896c4cbb912081c0baa0c9f3f6
SHA1 0ffb9e333d888f9b3da89ffe7bd7c1eed1be04aa
SHA512 00890a7799afabb16fc0abd40a32aaefcef8b370d22d61ad9e0e1a7a62746b268c440c6a1b1e6b3b8f4fb9b1c7c1b2553cbf63d9dba1584dfd03a27e1e78f64e
SSDEEP 1536:50oQEr+MGUIgxJ/H9tKiDTzJpRXYK401qwQWZhlP1z:7rvl9tKezJDRxz
TLSH
T1EC83F9B9F1A170325E13F970412F510FBA3B686BE44C0DA8F254D8F1AEF69894463F69
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4104	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134271001245422063"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-668679576-120646659-2289335452-1000\{09C7122C-8C7F-44A9-8F5E-386D139BC7CA}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4736	msedge.exe
4736	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
380	msedge.exe
380	msedge.exe
380	msedge.exe
380	msedge.exe
380	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
380	msedge.exe
380	msedge.exe
380	msedge.exe
380	msedge.exe
380	msedge.exe
380	msedge.exe
380	msedge.exe
380	msedge.exe
380	msedge.exe
380	msedge.exe
380	msedge.exe
380	msedge.exe
380	msedge.exe
380	msedge.exe
380	msedge.exe
380	msedge.exe
380	msedge.exe
380	msedge.exe
380	msedge.exe
380	msedge.exe
380	msedge.exe
380	msedge.exe
380	msedge.exe
380	msedge.exe
380	msedge.exe
380	msedge.exe
380	msedge.exe
380	msedge.exe
380	msedge.exe
380	msedge.exe
380	msedge.exe
380	msedge.exe
380	msedge.exe
380	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
380	msedge.exe
380	msedge.exe
380	msedge.exe
380	msedge.exe
380	msedge.exe
380	msedge.exe
380	msedge.exe
380	msedge.exe
380	msedge.exe
380	msedge.exe
380	msedge.exe
380	msedge.exe
380	msedge.exe
380	msedge.exe
380	msedge.exe
380	msedge.exe
380	msedge.exe
380	msedge.exe
380	msedge.exe
380	msedge.exe
380	msedge.exe
380	msedge.exe
380	msedge.exe
380	msedge.exe
380	msedge.exe
380	msedge.exe
380	msedge.exe
380	msedge.exe
380	msedge.exe
380	msedge.exe
380	msedge.exe
380	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 380 wrote to memory of 4980	380	msedge.exe	87
PID 380 wrote to memory of 840	380	msedge.exe	89
PID 380 wrote to memory of 4104	380	msedge.exe	88
PID 380 wrote to memory of 840	380	msedge.exe	89
PID 380 wrote to memory of 840	380	msedge.exe	89
PID 380 wrote to memory of 3656	380	msedge.exe	91
PID 380 wrote to memory of 3656	380	msedge.exe	91
PID 380 wrote to memory of 4836	380	msedge.exe	92
PID 380 wrote to memory of 4836	380	msedge.exe	92
PID 380 wrote to memory of 4836	380	msedge.exe	92
PID 380 wrote to memory of 4216	380	msedge.exe	93
PID 380 wrote to memory of 4216	380	msedge.exe	93
PID 380 wrote to memory of 4216	380	msedge.exe	93
PID 380 wrote to memory of 2912	380	msedge.exe	94
PID 380 wrote to memory of 2912	380	msedge.exe	94
PID 380 wrote to memory of 2912	380	msedge.exe	94
PID 380 wrote to memory of 620	380	msedge.exe	95
PID 380 wrote to memory of 620	380	msedge.exe	95
PID 380 wrote to memory of 620	380	msedge.exe	95
PID 380 wrote to memory of 3460	380	msedge.exe	99
PID 380 wrote to memory of 3460	380	msedge.exe	99
PID 380 wrote to memory of 1456	380	msedge.exe	100
PID 380 wrote to memory of 1456	380	msedge.exe	100
PID 380 wrote to memory of 2896	380	msedge.exe	104
PID 380 wrote to memory of 2872	380	msedge.exe	111
PID 380 wrote to memory of 2236	380	msedge.exe	112
PID 380 wrote to memory of 1060	380	msedge.exe	113
PID 380 wrote to memory of 312	380	msedge.exe	114
PID 380 wrote to memory of 312	380	msedge.exe	114
PID 380 wrote to memory of 3672	380	msedge.exe	115
PID 380 wrote to memory of 3672	380	msedge.exe	115
PID 380 wrote to memory of 4736	380	msedge.exe	117

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\3e1191da4fd30625fad097eba49fa71323db93602d2daeb99337746dccc7a39f.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffd22cec188,0x7ffd22cec194,0x7ffd22cec1a0
  2⤵
  PID:4980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1828,i,16612478837033599818,10792489641834446764,524288 --field-trial-handle=2196,i,15146309651571043212,10044334968451750710,262144 --variations-seed-version --mojo-platform-channel-handle=2224 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1668,i,13893829976229047310,8354626027469649242,262144 --field-trial-handle=2196,i,15146309651571043212,10044334968451750710,262144 --variations-seed-version --mojo-platform-channel-handle=2192 /prefetch:2
  2⤵
  PID:840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2448,i,4085755795332088828,13286840539320442704,524288 --field-trial-handle=2196,i,15146309651571043212,10044334968451750710,262144 --variations-seed-version --mojo-platform-channel-handle=3156 /prefetch:8
  2⤵
  PID:3656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3448,i,13080108276622657447,10362969654093924266,2097152 --field-trial-handle=2196,i,15146309651571043212,10044334968451750710,262144 --variations-seed-version --mojo-platform-channel-handle=3532 /prefetch:1
  2⤵
  PID:4836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3452,i,8210985141462528122,8266589077467955034,2097152 --field-trial-handle=2196,i,15146309651571043212,10044334968451750710,262144 --variations-seed-version --mojo-platform-channel-handle=3444 /prefetch:1
  2⤵
  PID:4216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4164,i,16608042877365844575,2262264173614271655,2097152 --field-trial-handle=2196,i,15146309651571043212,10044334968451750710,262144 --variations-seed-version --mojo-platform-channel-handle=4172 /prefetch:1
  2⤵
  PID:2912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4196,i,13456320721463056822,16927958782588891797,2097152 --field-trial-handle=2196,i,15146309651571043212,10044334968451750710,262144 --variations-seed-version --mojo-platform-channel-handle=4192 /prefetch:2
  2⤵
  PID:620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,7016319271965449252,17795350163853954603,524288 --field-trial-handle=2196,i,15146309651571043212,10044334968451750710,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:8
  2⤵
  PID:3460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3820,i,16419944713059216950,1912307119357718254,524288 --field-trial-handle=2196,i,15146309651571043212,10044334968451750710,262144 --variations-seed-version --mojo-platform-channel-handle=5208 /prefetch:8
  2⤵
  PID:1456
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5840,i,1656959532471757134,5645141689322535260,524288 --field-trial-handle=2196,i,15146309651571043212,10044334968451750710,262144 --variations-seed-version --mojo-platform-channel-handle=5872 /prefetch:8
  2⤵
  PID:2776
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5840,i,1656959532471757134,5645141689322535260,524288 --field-trial-handle=2196,i,15146309651571043212,10044334968451750710,262144 --variations-seed-version --mojo-platform-channel-handle=5872 /prefetch:8
  2⤵
  PID:2896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4672,i,16458311326667640287,14073527772992176919,524288 --field-trial-handle=2196,i,15146309651571043212,10044334968451750710,262144 --variations-seed-version --mojo-platform-channel-handle=4848 /prefetch:8
  2⤵
  PID:2872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6228,i,11734521291913690238,8248556630395239627,524288 --field-trial-handle=2196,i,15146309651571043212,10044334968451750710,262144 --variations-seed-version --mojo-platform-channel-handle=6300 /prefetch:8
  2⤵
  PID:2236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6304,i,12506704066054046225,7909666269072957594,524288 --field-trial-handle=2196,i,15146309651571043212,10044334968451750710,262144 --variations-seed-version --mojo-platform-channel-handle=4864 /prefetch:8
  2⤵
  PID:1060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5232,i,1345747764623213308,8860795055851633813,524288 --field-trial-handle=2196,i,15146309651571043212,10044334968451750710,262144 --variations-seed-version --mojo-platform-channel-handle=5168 /prefetch:8
  2⤵
  PID:312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5212,i,9849942739644992156,16960262535400406747,524288 --field-trial-handle=2196,i,15146309651571043212,10044334968451750710,262144 --variations-seed-version --mojo-platform-channel-handle=4844 /prefetch:8
  2⤵
  PID:3672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=4896,i,4686026624140312306,12703585781502492632,262144 --field-trial-handle=2196,i,15146309651571043212,10044334968451750710,262144 --variations-seed-version --mojo-platform-channel-handle=6184 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4736

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3808

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CrashpadMetrics-active.pma
Size 16KB
SHA256 814d47aad78c212b52568b9c7b58d242899d490d3afebce66181cae50c880df5
MD5 8c7cdfea4284ba987d295d82a9c7ddd6
SHA1 7d1a3a66f2d64a383b230196ba89a263ce7ee957
SHA512 59c8229e834c944265aed4131c79f41f9f940a48651b9fb18800cef5bae36d17c7fd5880120c6fee8ce22a157b65bc63846b65765bc4dc86e15926dcce400d0d
SSDEEP 12:sf9iXhV0xoUZxCe+JKlkQuMRxCb8TXuYJ0IJpPK6BsyW1inPiz:U9iRqxoUZxWMk8xVTeYWI31BtXP
TLSH
T105724C85B34498FFC8835E7189BD27903774F6DF1F02866B6A6A760E2E271C84F44224
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 81240d13af4ca099e1358c75991e3fa5640dbb3aac72c2d98006f6159bf74aa0
MD5 96dd753cd2d8557b97ab2cd76f7fc6cf
SHA1 81697ccb13fb04a07bd47b552b3607597251f36d
SHA512 355c412a688a71b124e85c0527177b3f97efceb2a5553f8428e0913940daffd3bd176f5476b940c64eee52d543f0568112ac073984d9a64015adc15cbef552de
TLSH
T174D09224BA29A149E282007AA881EB565219DA95296B9622E620C44DBD2B925A3851C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4bf0783d55eb083b4adaa03ed8b76a2bd35b0819c8ad2530a78e1b8d6856010b
MD5 7a50c2e276f05b686e8cb6c95b86650f
SHA1 bc892af04a9d6b1bee8047f67518d676df864301
SHA512 f1d02fd9f067323214d78de08172e1a78028eba76f4754436f4d77b849e8422865dcea22be13f21c36ac2c5807b393c1dffdb0a3217c3353a517a0467461a474
TLSH
T19BD022203A28A008E282003AA880EB020208CA80282BC322E220C00CAC2B820A3800C2
MD5 SHA1 SHA512 TLSH

Submit Download

41fe64ca-204c-4b84-b1a8-6ac0e54952ba.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\41fe64ca-204c-4b84-b1a8-6ac0e54952ba.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\000003.log
Size 1013KB
SHA256 0acbb56ee085a077c88bbd27a668fd5169138128b902a3841460f14e9288877d
MD5 bf8cb7119f02b18a5ddedfcda453cb0c
SHA1 419b8c669a4b5d81a5e92319ba84978f3c19e6b4
SHA512 7abe303be30826fb3b1046730039a7aace649067f213267c924d1ac00f6a851bf33c656b8282b3fad15cbea16f5bfe6016894e53f04cf8a15d8308c16fb7eedf
SSDEEP 12288:jxVBWSx0OsV3M3rtBYAbKg7G8FD3U73MSEiNtKBTk75P+ZLNHt/Ga48NsyP7/:jxSV+rVwMSEiNtKBTk75If
TLSH
T1032533CAD7F079BF0296A852FD39B89D13B919808070EA3B4FED454F92CDDA4815B391
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 ed64ab3cfe52a54b97cae9e364618ed94f08a5d380a99353c5f68b6c43423e83
MD5 d85e3f42784b32c55f130251a3670b1e
SHA1 2f655faa0e7550772e2d5ac4d01d5c09c5ebcf8f
SHA512 5788acdf38f9d9e85876de3d7e81d5e7ab856ebbefe1821f97ae8b3c35e3978830c5c0c41c3fd40e404de9ace8435cc5223144abffbd8d898b11557b1745c9f1
TLSH
T168E026C875C8C32EA648FC8B45AC574CC2C1360E9BC8AD6E1B089A887101A50E6D37D4
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 34c53479b19b86febe9fc075b98c91d2ec38816bb08745787594557f0c4eee65
MD5 da41ca127445ad329b8439540ab54e77
SHA1 7afcd4c31f82517bdad595d9c0922021e5392c11
SHA512 c1f9b398eb463ebcd4f12a94035c086327d3e6a78c5b7dbc47bf07cbee31e3fcb37ff9973cfa492f6d8df02296a9b6ba81f8c3febed8f8310d732b572daa002b
TLSH
T1386109F504C276A1EFDD0E3190D206957EF789EAFBB37E89109499706E15761022B23F
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 10ab0f38e8d8345711d38a73de065248047653edddc7acacc55679b2ab509f07
MD5 41c2d9cfffc62caedd76ee4a45a8f683
SHA1 d34c5bdb56cb920f0164696dec56d9be269f52d0
SHA512 7a3a3792dbd97ba45957f06b303033c0ee1ee572111c9ed28edc03f16161acb5e54b8002c04aac8079f64309b3275412dc49f2700b8c49955695df522eb61ebf
TLSH
T177318DF7C3D4867EC91156F0AA246E2BCE2D0516832C3C5689E4EF5BA3E2475E101A9F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

e917537c-3a7b-44ea-90f1-dbcedb0d7a83.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\e917537c-3a7b-44ea-90f1-dbcedb0d7a83.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 bf8b8bcd5e56049c3179f52ca59cc3cd2c30ac2ab63bc89a628931cc0a9acd62
MD5 b3320740f26ad3a4de24e545ef22217d
SHA1 3eb8c9313f7637ad737cff423fd922c7a85ccf45
SHA512 b19d7e5a188b1c2fbaf8d9ca460dd43440254badbff9ab73f3a162dcc8a03ddae179f466520e9cc71c3ee64a4c903b2681ee0f58e74895d0377a45ae10eba8cf
SSDEEP 192:sxZycRakH/f7XsfKyxIdpdZHW6+WNGYCknpkZIgrJ:sxZycvH/fDsfKy6THbGEw9
TLSH
T14322B6526E28A9778CC7D219BA25BF53D6F95032A1901E58EAFC861C05E7BDD230B40F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 61e9cbb3ad99a4de3a5104652d5f0e71f2f9af0cec59f811e510709b34c1914d
MD5 9d0dd1ac1a7f828be98c10e567def19b
SHA1 c8690883f3d36447a7a6997a7a2be95e92baff83
SHA512 d3ae6035d66dd1a084e0d7cf361c7addfeabdfb0ecdaf6031aaf968fb69447cd44200c95eaab348d31418bfd6f9a370a6ee70e4ed483e44fe793821fcd0e8323
SSDEEP 192:sxZycRakH/f7Xs3SyxIdpdZHW6+WNGYCWLpkZIg5nJ:sxZycvH/fDs3Sy6THbGEwr
TLSH
T1E922A8526E2869778CCBD219BA15BF53E6F95032A1911E58EAFC871C05E7BCD230B40F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 bed51a6a3b1955bcb58d6250a448b33edbdf44a871e6466bc0bfdbb2f8912a03
MD5 05bd2eaa491c5182ca3f6d0d552b6e73
SHA1 a13bdcb6b94680c75006087f7e01810fa65306df
SHA512 49552d15fefef87acf22aa792537cc0c34786285a9e600ea73ef5c0eb731c12f57c28822adc6b414b3f83cefe6d0c8010e6405944a1910a626874bce5baf59aa
SSDEEP 192:sxZycRKyM/jK1Ml8MkH/f7Xs3SyxIdpHZHW6+WNGYCZkAkZIg5nJ:sxZycIMH/fDs3Sy65HbGpwr
TLSH
T1F352D7126A345977CCDBD209B951BF53D6F95573A2900E48AAFCCA0C01E7BED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 86edee89ba368127aa9a895eb2b9d5de3d042a0f966390bef14fd93fc0b79344
MD5 241f86ed6cd498a316160cfc6f431363
SHA1 f41ebe270cb32fed8d25efa24df8fa0f6dfbb61b
SHA512 147e4d2ad1b477ff66f967a1d1ab0c06138147a71205bb5b96cbf2eb67c64b1d7a5d0fd8feba6110b4695dcfad6a583a575e9593aa7c80337fae92c1296b81f7
SSDEEP 192:sxZycRakH/f7Xs3KyxIdpdZHW6+WNGYCknpkZIg5NJ:sxZycvH/fDs3Ky6THbGEwF
TLSH
T18222B7526E38A9778CCBD219BA15BF53D6F95032A1901E58EAFC861C05E7BDD230B40F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 efeb4148bcd65e21aa4f4bd028f7f9734bab66c43837b71df77a6b2287fa8357
MD5 bca05b0fa0e114f301dea3ffd2cfe222
SHA1 2b6e9033bd7c64cd97cdde5a8e24af2003463698
SHA512 25d2349ec0f7d8bfe8b078499cbda42425b7a3749a96350511d0c6701087ca6147ba09b29e6b69fe7b62e5004ec280a12dbff7e18046612a96127fe7d977be79
SSDEEP 768:FW8bqn+WvSCt68F1+UoAYDCx9Tuqh0VfUC9xbog/OVnZLlRTKV2roOR:FW8bqn+WvSCt6u1jaCZLbWVNM
TLSH
T1C5D20A3B280CCB7E4F845E5DED26AF962DD801CB6B988D4447FA884C03C76EA511B5DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 d97fa657438390f7c5851347a8621525fa1d9361bd439ab96417d676f5cfd359
MD5 9beeffde61b6e551845751691a3e61ed
SHA1 325d1980c727cec9deb261150a8f5e537f0bc943
SHA512 fa2e0a29880b46226b2fe255f8a98b01759970ce2fb978c9cbbe3ce8020df68844c86fc3493bb9e59a07c7463120bc000796122a84cfe82539ecde3c99a1c4c7
SSDEEP 768:FXqbUj+WvSCs68F1+UoAYDCx9Tuqh0VfUC9xbog/OVHZLlRTKr2roXR:FXqbUj+WvSCs6u1jaaZLbWrNh
TLSH
T12EC2D93B340CCA7E4FC01E9DDD5A6F972E9802C7A7988D4447FA994C02C77EA512A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 0e03b98b091123301ddc0d92b76af8e647979249d25c7d93b6d06e4d2bae8a7c
MD5 028f9d8d4ab5e27bc2f886fbbd1c55e3
SHA1 86af6c7e79942367b39b816707d1a159de46b2e6
SHA512 12cf5a2fc30356ae4d574c3bf8f5e968f693559150f9149ad361b68e4ae481ba8622ae8f005655ad5d79f35d82bca2e2d8731fa220a425b7eef3f4f7f9d5d391
SSDEEP 48:KQJI5Ky8sjyhOIXKzacnyhjgXz1xFgRZSzI+bgKz1btgHrwsCNA:KQJSKy8KyOIKzam64YKBWF
TLSH
T103910216303A4292683E2988F3979A761F4235A33154E86F3FB808921F67E120CFDDDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

57670136-3e6b-4449-b39d-d1485f94420e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\57670136-3e6b-4449-b39d-d1485f94420e.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 bc8140fd29a0e4c06f4c95fe91cb27be99c6398d1db9f6a9f06136c49b166908
MD5 3e3809f55fb00af2aeae3dd45e869630
SHA1 e3f8304aa7bef863131504a8ab6ac905b43e1d40
SHA512 88d377b30c32cf88b36e54202a862a6ad9439d46110a61deb3b06af139a1d021bf0e4431349f58f893dff5cc2234e7259321c9bc2f80995e7cb8ba9fe09ca7e5
SSDEEP 384:htNn/s3n9SfsN8v8J6f2puEa+SdPId+2Bemn15wbAjEO8z:hj+9U0Bvan2dlBemn12bfZz
TLSH
T1BF927C3668384D371DE2A589F44B36179FE8C16396C92B94D5EC8F0D01EB79C131B91A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 691adc576ecfe4c2d129a3cfed4c3ed41b3b2838c1f51f8920486c4c67ada3c0
MD5 cc11618bf53a5035e6f106df09572c49
SHA1 d7c3358ce47b36f6c9ba6a715fe950f8e80b9a4d
SHA512 2766719fed86ae1724d29be6a1c3b34298778f3460bee226feadf3733375a26a88b3efcdd86099f8fb2079ce6f7e99492cc1cabbdd848ebd68a8608c57300e65
SSDEEP 384:QiF1tNn/s3n9SazsN08TUNTUlIlO8J6f2puEa+SdPId+2Eemn15wbAjEO8z:rF1j+9RZwgbBvan2dlEemn12bfZz
TLSH
T101A25C3358688D3B6DE29A89F44B36179FF481B7C6C56AA4E6DC8F0D01E729C130BD15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 7240ce4d160e0fda2ced3367e6fab2c13b791f1383a6126cca599381ef397761
MD5 36e22e1d2994bc9e47fe7434c53cf316
SHA1 b674a6ad2fc63b867c6cc577b6090b4f1f2a3044
SHA512 59ebda2032e3b150a9e4876b364bba6f03edf048b1c00f3e4d7eef2885d0ee228a900c9f2ac7d8728a16df0291544780cdf391501bdbda88d3915f705ecf801c
SSDEEP 384:FtNn/s3n9SfsN8O8J6f2puEa+SdPId+2Bemn15wbAjEO8z:Fj+9U1Bvan2dlBemn12bfZz
TLSH
T1F7927C3668384D371DE2E589F44B36179FE8C06396C92B94D6EC8F0D01EB79C131B91A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 82d4940dff7b8e66b91fec371fadec88a56b6d0ccfa35abfaf79929605032b3b
MD5 e79836ab0b4b9b8a05570c8bc90b9d3e
SHA1 035a8dc7d33143c023ae9a180740bd2ce04ed72f
SHA512 e21980239944006647bb351b349bef18adc5c0b1654c6403870f977be547e8954d1adeee62868951f2cd4b9b3843902a8aab990f336b1c631e6db263bff00132
SSDEEP 192:vONGV6Db6QmiUyRyRGHBa+jx+FdCYHojRgcipU6:vONY6uqxHBa+SdPIappU6
TLSH
T1D802EA3568386CBB9AF2AE49F48727239FD41177D9962B44D6EC5F0C00D765C1307826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 eaf38a1db8db322a35a39c7bba8aa0f6f9070e8e5a85271824c6efddd50456fc
MD5 4bc0a52fed3453b425dae1ac27bdc75b
SHA1 fb13f55d209548bb09e965b112331ea36ff9214e
SHA512 4ac7d07e12c9aeed74c89c96c437567ae53e26f89e5f496584d3e3fe5834f19fa6dd2a11215a9329cf031a9905107be6e835f1b1e975ebcefd3432b01255978d
SSDEEP 192:cONl6DbzQmiUyR3RG0Ba+jx+FdCYHodX+2TNzSqY7U6:cONl69qw0Ba+SdPId+2NeU6
TLSH
T103121A3668389C7B5DE2A555F48736139EE88127DF8A3B91D6EC1F0C00EFA5C130B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 101e5043d1fea53c6ca65200a0a8ab09da880dcc7c48329de261a915b6efac71
MD5 7aa3398c76eab118ab8c92fe37276589
SHA1 5f4377057287f9ae0c76f9b873e7df8799784260
SHA512 12d7a83c36ebc9eda1417b90291e530b6e760ee94f12af310ca7658e058b3286c17f24c10259f40f5b03edf9d84eb60e6f76a0b8ce3978012f8048e8a36fb2f4
TLSH
T137412B5CA6EA1148B3776E56ABF7A46D487FBD772E06D45E10010E4F0A62A40CC71737
MD5 SHA1 SHA512 TLSH

Submit Download