dda76f72291e2d7c70566ba3780514fd608107575da2079c1d29adef8e19a4b0

Analysis

user interaction
yes
max time kernel
149s
max time network
146s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
21/07/2026, 18:01

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
41c2436f-9521-43a0-a10a-53adc6b8867a.html
Size 3KB
Sample260721-wlwtbade42
SHA256 dda76f72291e2d7c70566ba3780514fd608107575da2079c1d29adef8e19a4b0
MD5 f057ece37f7c14e4d996739057bdf5f3
SHA1 1801c26774dbb63662774ad8f6ec3136b6d2a902
SHA512 18496fb4c06ba4530f0fecf8b656ffe04cb3bc0b922b28744b1cdb2ce7ab27b1070f23a75de0558d1f12241ed13b4c5841db958fb0c1c529e8cda6e9e4edfefc
TLSH
T17C61122182F7254AA01290706FE12A166A15C143D34BCE287B5E76EADF8AD818DB778C
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3976	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134291304757911819"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-889581200-2041691093-2048517887-1000\{4D3DF7CD-7FD3-4C80-999A-7E1D8E00ADBB}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1796	msedge.exe
1796	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe

Suspicious use of WriteProcessMemory 34 IoCs

description	pid	Process	procid_target
PID 4536 wrote to memory of 972	4536	msedge.exe	87
PID 4536 wrote to memory of 4192	4536	msedge.exe	88
PID 4536 wrote to memory of 3976	4536	msedge.exe	89
PID 4536 wrote to memory of 4192	4536	msedge.exe	88
PID 4536 wrote to memory of 4192	4536	msedge.exe	88
PID 4536 wrote to memory of 5000	4536	msedge.exe	90
PID 4536 wrote to memory of 5000	4536	msedge.exe	90
PID 4536 wrote to memory of 676	4536	msedge.exe	91
PID 4536 wrote to memory of 2008	4536	msedge.exe	92
PID 4536 wrote to memory of 676	4536	msedge.exe	91
PID 4536 wrote to memory of 676	4536	msedge.exe	91
PID 4536 wrote to memory of 2008	4536	msedge.exe	92
PID 4536 wrote to memory of 2008	4536	msedge.exe	92
PID 4536 wrote to memory of 2136	4536	msedge.exe	94
PID 4536 wrote to memory of 2136	4536	msedge.exe	94
PID 4536 wrote to memory of 2136	4536	msedge.exe	94
PID 4536 wrote to memory of 4156	4536	msedge.exe	95
PID 4536 wrote to memory of 4156	4536	msedge.exe	95
PID 4536 wrote to memory of 4156	4536	msedge.exe	95
PID 4536 wrote to memory of 4176	4536	msedge.exe	99
PID 4536 wrote to memory of 3568	4536	msedge.exe	100
PID 4536 wrote to memory of 4176	4536	msedge.exe	99
PID 4536 wrote to memory of 3568	4536	msedge.exe	100
PID 4536 wrote to memory of 4340	4536	msedge.exe	102
PID 4536 wrote to memory of 3244	4536	msedge.exe	115
PID 4536 wrote to memory of 2948	4536	msedge.exe	116
PID 4536 wrote to memory of 2984	4536	msedge.exe	117
PID 4536 wrote to memory of 4456	4536	msedge.exe	119
PID 4536 wrote to memory of 4456	4536	msedge.exe	119
PID 4536 wrote to memory of 4052	4536	msedge.exe	121
PID 4536 wrote to memory of 4052	4536	msedge.exe	121
PID 4536 wrote to memory of 2100	4536	msedge.exe	122
PID 4536 wrote to memory of 2100	4536	msedge.exe	122
PID 4536 wrote to memory of 1796	4536	msedge.exe	123

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\41c2436f-9521-43a0-a10a-53adc6b8867a.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffe0732c188,0x7ffe0732c194,0x7ffe0732c1a0
  2⤵
  PID:972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1620,i,1435459828742038805,13248403498675311052,262144 --field-trial-handle=2940,i,2586594523730783038,17518961764159053438,262144 --variations-seed-version --mojo-platform-channel-handle=2936 /prefetch:2
  2⤵
  PID:4192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1884,i,7904732936262223498,16100684749268880818,524288 --field-trial-handle=2940,i,2586594523730783038,17518961764159053438,262144 --variations-seed-version --mojo-platform-channel-handle=2976 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2236,i,6300612591090470879,7171183828751245855,524288 --field-trial-handle=2940,i,2586594523730783038,17518961764159053438,262144 --variations-seed-version --mojo-platform-channel-handle=3040 /prefetch:8
  2⤵
  PID:5000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3416,i,7002479354524851290,17592542404784360906,2097152 --field-trial-handle=2940,i,2586594523730783038,17518961764159053438,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3420,i,7422917705773825445,630090836067364822,2097152 --field-trial-handle=2940,i,2586594523730783038,17518961764159053438,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:2008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4116,i,15303790248816677548,11026856379111678627,2097152 --field-trial-handle=2940,i,2586594523730783038,17518961764159053438,262144 --variations-seed-version --mojo-platform-channel-handle=4132 /prefetch:1
  2⤵
  PID:2136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4148,i,13977863262462765080,2734730418672237315,2097152 --field-trial-handle=2940,i,2586594523730783038,17518961764159053438,262144 --variations-seed-version --mojo-platform-channel-handle=4180 /prefetch:2
  2⤵
  PID:4156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3568,i,13715693080431626251,15557220843996122489,524288 --field-trial-handle=2940,i,2586594523730783038,17518961764159053438,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:8
  2⤵
  PID:4176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3644,i,7270849017599236849,17449010146791670288,524288 --field-trial-handle=2940,i,2586594523730783038,17518961764159053438,262144 --variations-seed-version --mojo-platform-channel-handle=3572 /prefetch:8
  2⤵
  PID:3568
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5864,i,11688587747255341680,13812350393372723880,524288 --field-trial-handle=2940,i,2586594523730783038,17518961764159053438,262144 --variations-seed-version --mojo-platform-channel-handle=5892 /prefetch:8
  2⤵
  PID:2788
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5864,i,11688587747255341680,13812350393372723880,524288 --field-trial-handle=2940,i,2586594523730783038,17518961764159053438,262144 --variations-seed-version --mojo-platform-channel-handle=5892 /prefetch:8
  2⤵
  PID:4340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4220,i,17866943824432035215,3563525415430942171,524288 --field-trial-handle=2940,i,2586594523730783038,17518961764159053438,262144 --variations-seed-version --mojo-platform-channel-handle=4508 /prefetch:8
  2⤵
  PID:3244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4212,i,9689256551992480080,15841714608773222815,524288 --field-trial-handle=2940,i,2586594523730783038,17518961764159053438,262144 --variations-seed-version --mojo-platform-channel-handle=4472 /prefetch:8
  2⤵
  PID:2948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4160,i,6834356127241555602,12179015903075837545,524288 --field-trial-handle=2940,i,2586594523730783038,17518961764159053438,262144 --variations-seed-version --mojo-platform-channel-handle=6216 /prefetch:8
  2⤵
  PID:2984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5372,i,6075837559672039010,13208904077215100915,524288 --field-trial-handle=2940,i,2586594523730783038,17518961764159053438,262144 --variations-seed-version --mojo-platform-channel-handle=5124 /prefetch:8
  2⤵
  PID:4456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5796,i,11746889479304954077,9005723083623244820,524288 --field-trial-handle=2940,i,2586594523730783038,17518961764159053438,262144 --variations-seed-version --mojo-platform-channel-handle=4456 /prefetch:8
  2⤵
  PID:4052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=764,i,2797060722575288126,6585092672924579660,524288 --field-trial-handle=2940,i,2586594523730783038,17518961764159053438,262144 --variations-seed-version --mojo-platform-channel-handle=2436 /prefetch:8
  2⤵
  PID:2100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=4212,i,12267407197868865329,9032822689565369144,262144 --field-trial-handle=2940,i,2586594523730783038,17518961764159053438,262144 --variations-seed-version --mojo-platform-channel-handle=6112 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1796

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3904

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 11d3c4c52f9fc9cd2b10a22b48769759f994fd6364f9a0fc145f4cd2c2a22e9d
MD5 4751cf705a737c4226029624bf43b9a8
SHA1 fd8cf726ee3f8f75b97147829de5553530caa82c
SHA512 46e3fedbf7fa14bdc2b3aad129f2879a9d24252f5d7bd9b55766bc32a6b82ea77aaf193bcdbdf4423e3b67ef84955e589b6077609344091ef72204c1d50b0dab
TLSH
T17ED09B307A58A58BD14360F1A4114B4115375557205397757521508E9E98055B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 701082e4ac35f878dc5ff6eb27989aae9d20d9b5662643e20b3acd1720b367fc
MD5 2b3686986ce1fd99f079eb226e8b0a8b
SHA1 0d2cdee36351378b91ed7f6ecdb43457fe4d7b5d
SHA512 937da61c495fd21a02bb76a63556dec83ce132f1d1830ff8d9af6212d15f1844766dd4abadd15ea61b48f8ae03b52baca44c99117714c705da840dbff8f116dd
TLSH
T182D09B303A58A98BD54360F1A4104B41153755572053D7757521508E9E99095B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 e1e8b226d2ee03de92820d63fb65832d40b41fb9f56003017d5ec528474f5758
MD5 cd2448b7c318439fcdb302e9293f744c
SHA1 2246c159b3b38e7d451401690da24c849a1e3f73
SHA512 2b63b9d76e37be2a5748bd80cd9a1161b35830475d9a511eaeb57a8b13e6eae7aee0986621d8e75029ae689172bcd38587fef543b86a5a7f7232124b4fae25cb
TLSH
T199E0209448CBC25D934C74C7415CA70ED3843A1E92C469191704C8D5B002550F7B19D4
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 11df412997f245f72d23a0f1cef3207e6730839bd4b21f757ce84825e09d3f28
MD5 843f13561e2d05d5bad9569c7f998d5c
SHA1 3ef16f7aa5cdb181617947453c5ce6c2f7676a41
SHA512 9f12e26fbfd7859d98f2f4e27738d627baa6310d713c7ff33868a96c5364a0dd4b46643196a016cb9d277da75ab0ccc63a82e60bc18ef5232b9631a416d53731
TLSH
T1C761F9FD176108E1E7694071B0E20640747C3EDAF53F7E8E535048F66616F668F5928C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58d992.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58d992.TMP
Size 3KB
SHA256 5d6028078cd5d9d2704733de1dc4cb74c94ec1f31ebc61397550dc778d71eec7
MD5 33e4f698055b11b023742ad69ab3dbf6
SHA1 f7c8b43d4be1dc6eb77ec401c8442deaf141beab
SHA512 9c6dd73364efff516c6f0e267a4209cb20b99270380170609fa10ca4d07f5657b96cd4993360548f5184fd322e6981f869208f2d321be2aa3c8ba9b6b0fa10f0
TLSH
T1B861F8FD176208E1E7694071B0E2064474BC3EEAF53F7E8E535048FA6616F668F5928C
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 fdb0a1d1c01610c5dfbc901b9cf13da1e29276b654fc0ac992264610ff08f252
MD5 09e5813e3a9333811b0ad7d56518e2ed
SHA1 de19f45c03f2b7769e14ebce4e556389961ff9aa
SHA512 423743b4e2277a8345c7ab86ccd4eee6c9af77df86c242abf5d39743c16d1a2718ec4549677ff9e37e9afdf52af51ecd6a6bbb73e384cccd4f1d3f01cba43a7e
TLSH
T14C11CCF7C3E085AE8A0556F0AA24AE1BCE1C0602831C7C5589E4EF2B93F3075E10259F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 71a37dc8292569fc45ab69bf1a0a7b2dda40ed88acd0469f8461bd20d5ef0411
MD5 6950c9ca5d9ba0b534f30bd532eaca54
SHA1 1b22378e2a16f2edab705e904236b2b358076046
SHA512 68b844790b07b2ad52780d7fa3ac70c06939c49e418f77cad42c1853979afaffbd0fe7a71db8a84c810873a0e371659009fbfd5f6ac8337425aea58672d8ccb4
SSDEEP 192:sxZRR+yM/jK1Ml8Mk+/fAs5iddHoIdpdEHW6+WNGY9IKJhoqIgrJ:sxZRMM+/fAs5Y52HbGDq9
TLSH
T18842E806AA34997BCCDBD209FA55BF53D6F5147292940E44A9FCCA0C04E7AEC231782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 565c118ba42c48b16e61fa7029cd72b8dab0107ff8749df00c6fdf44f401c5b5
MD5 d15eb84a7b70a06985a03a15beaa97e5
SHA1 31810dbb1f93d4bad55b6ee86673a8bc31296a74
SHA512 7bf1e257c8a180565a378a1290919338d9b7421648f2443f7e256e6219c931926d61f07d8f658ead6cb7860a6df9f51047113218de251df3005928f87e78294c
SSDEEP 192:sxZRR+yM/jK1Ml8UQfk+/fAsm8ddHoIdpHEHW6+WNGY9IQEhoqIg5zJ:sxZRMqM+/fAsme5kHbGGqj
TLSH
T1D152F816AA349977CCDBD209FA41BF53E6F5547292900E44AAFCCA0C00E7AEC221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 47e3c63aa86ff50789a419a2f9768f3e09aa97b2a0ab6d7d93af08d89c1d7c51
MD5 a13429a9f9c2122185dddb7ec2db4bec
SHA1 096f81b7d60fa6c7970a6d556a7e52322b09765d
SHA512 ce7db3c4caba38b48054d7160247968f72799a5ff775cc1e3d3fa60fdb7f2c7a904ee90bfb99100c82b855122c86ed1fe15f9a73bfcc5963909e5db78cb518a8
SSDEEP 768:xWcv21wWvu+Z+8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjFLlwmWNKromg6s:xWcv21wWvu+Z+u1jaeFLeRNhmc
TLSH
T189D20B2B280CCB7E4F841E9CED2A6F866ED801CB57988D5447FA894C03C77EB511B59B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 bb24b31df4d4501d8e9bb39df5a944aa459b9a8a959d99e9437ece4dfb3ebb8b
MD5 b32f8fade886e0c28d6907cf005df6a3
SHA1 36f6253ac389a08f3d78fcd255052ec0b9e99429
SHA512 25bafd4d81ed445a3b2abf634c3074f7f33cf52e82c246e3f9c8d34f1e5c964bdb8cc00e2ea8b2952190d68b61736565803ffcdcf5a72a50d5acdb4cdfdf945f
SSDEEP 96:KaRklRnHnqlPKZThqKLfTzqHxJSrBD+1buK0I+KkAKNyo:mT7FXv
TLSH
T1BB918219717F16452C3EA84C9655C927CA8274AA3458E42F7FE810A24F67E12ACFDACC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5977f5.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5977f5.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 081f26455ccf1a736ba386685752fb91caaf2bd6464d43d294c831477f68b6d0
MD5 1f26551425c956857422882260f58694
SHA1 546900f223c8dda3ce2d1b61e5bd68abe8c67851
SHA512 f19361fbe9ad9bd71a0cb5fee28c5d5aa74e05f7d44d14dfd57ac1a18c8657d316add1bb1457dfe48a90d336f6fd889ca8a4fa410c8758d52b084417afd04f4e
SSDEEP 384:SgiF1tNn/s3n9SSzsNz8TUNTUlIlkZnziwYAe+CMdceCBS+201DVcl1lIO7w/sC6:S7F1j+91awgwmjklCcl01DVcLCO7w/+
TLSH
T105A27C3798648C7BAEE69A85F50736075FF890A7C9C66E90E2DDAE0D01DF6DC1306C14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 8f0fb63ae61317a318639d4af0d1da9231cbc2a194ce722f6351841c66f74d75
MD5 120ea55d8af236475a8a77dc3639aa62
SHA1 c20a4c029f0ee0b2bb38f9665ca2f4cefdabf248
SHA512 225a33c8db28820e5e155bc5e35d7fbd02880d79149bb9623dbfe2dd8f4016abc95063a7001d0ed6204d1deb13b2d1e830a51b263248bdba70afb6eae6e1700b
SSDEEP 384:9tNn/s3n9SfsNhBZnziwYAe+CMdceCBS+2H1DVcl1lIO7w/sC7rC:9j+9UCmjklCclH1DVcLCO7w/+
TLSH
T13D929E35A8355C7799E2A595F5033A0B5FF8D0679AC63F80E4DDAF0D02CFA9C1306829
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 ce1fc5098f4fb7446c39837bfc605eb0934386cccd98b7dd01a69be9db7acaa6
MD5 d9202ea9e182011d976426cadf1bbe3b
SHA1 77571b8a7aa0de76aaa79deaa95527d31cfc4077
SHA512 183ac5cbc13003c3db6dcf36d65c3944eb3ad4ef667a51819e8da9e39dbe4dd3626dfbbc5771f8ad1d43430d2e0dd4cc7c4eaf2716004c566d50dae5e4d424d9
SSDEEP 384:6dtNn/s3n9SfsNhkZnziwYAe+CMdceCBS+2H1DVcl1lIO7w/sC7rC:6dj+9U5mjklCclH1DVcLCO7w/+
TLSH
T15C928E35A8355C7799E2A595F5033A0B6FF8D0679AC62F80E4DDAF0D02DFA9C1306829
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 520923c380ff5ffe8ad4b5c105d8ec6311d47916b06f55b17aa15e595dc91371
MD5 5d24489cfe6f03db2cdf1ae4d54c7492
SHA1 360a8a8f731006a7e193cbc0842d7d3f9297f269
SHA512 53a32f15d474cbf6dafa6bb85261d65f253ed4438bc62188dd115de1e3b46df93694d670f64abb46ea49f789820281c5f3ff6ee383b18c2b6fa4ca165fa8f46a
SSDEEP 192:JONU6v+YLNQmiUycmZh+CGy+FdeL9oCXus0fU6:JONU6vz/YZh+CMdceCD6U6
TLSH
T1AC02D9356D382C6B9FF26E45F5873A275FA82177E9912F84D9E81B0C01D765C2306826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 b1ec32db517fc2c89963f0b1e4716134711a1a55079846fa54b80b5123ed5fc8
MD5 b53d5bbcf7449acadcb5aa22088bbd4a
SHA1 aa1d49fc6fd987cdc3152e2b9154c4d54a9a58dc
SHA512 0738230029d554811ae3b45420a078b70ca2a01ff44c47768a1100f5bb6982bf949fae4ec339758e7425bad9ac034447a4812ee347f91416794ff058aae37bff
SSDEEP 192:XONM6v+YLaQmiUyrqmgh+CGy+FdeL9oCd1FS+2zCHvqSU6:XONM6vzKcgh+CMdceCBS+2A1U6
TLSH
T1FE121B36A8345C7B5EE2A955F48736135FA85167EA863F80E5EC6F0C02DF6AC2306816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b82d098c-dae4-4f0b-90b8-5d235bcaae44.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\b82d098c-dae4-4f0b-90b8-5d235bcaae44.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 946ca33ab3efb405b7a553b42111d14e39d26d9fdcae738390ae3d545a97781b
MD5 9c70177415edc8cfc3c34254def7620d
SHA1 265d87bb336757e56509a4406de1fb8bfea415c6
SHA512 307bd7efdd3e255600cfec6b937c0fa9d8d0777d11b28f0d09c89d3de58358c1e53cc6f2363380edc17604f599c4e60ead1ccc696e8510655ad5c7cd908058d0
TLSH
T1A141F958A6F91148B3B76E5AABF6696E887F7C372E17945D00010E4F0A32B40D961737
MD5 SHA1 SHA512 TLSH

Submit Download