05e6c66d67e99afb14523cfd8866a6602869c0cb67b89e5b84a40979acfa50e2

Analysis

max time kernel
148s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
22/07/2026, 12:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
download.html
Size 8KB
Sample260722-phl2davbkd
SHA256 05e6c66d67e99afb14523cfd8866a6602869c0cb67b89e5b84a40979acfa50e2
MD5 fcf129ddcbbe986c2928e802388c87b9
SHA1 c1d92573de8b652a07d37bbf92564154bf335258
SHA512 e6a01c968ffdbcd4b5f3cf3b241ce60df0a381723cb1b456e283ca9f537205233f1efe90778eae781b3841139ae49c9bf32b016abbaa143b507b7f2ecf7b66b7
SSDEEP 192:03JJg9UTXwxIIw3/Qr5y2kKB/QY+AfTynIaIMgccfjzL8w:vUrwxIIwvQr5y2kKdQ/Abyn5zxcnL8w
TLSH
T1C012E8361859502F40335BC9E1A1631DB0A23299D435D928FEBE83DC8BD1FA1EA2FE55
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5092	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134291965312110698"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-889581200-2041691093-2048517887-1000\{E09509D3-AF3D-460B-B155-65FAC59A597B}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4380	msedge.exe
4380	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe

Suspicious use of WriteProcessMemory 34 IoCs

description	pid	Process	procid_target
PID 764 wrote to memory of 4640	764	msedge.exe	85
PID 764 wrote to memory of 5092	764	msedge.exe	86
PID 764 wrote to memory of 3728	764	msedge.exe	87
PID 764 wrote to memory of 3728	764	msedge.exe	87
PID 764 wrote to memory of 3728	764	msedge.exe	87
PID 764 wrote to memory of 4036	764	msedge.exe	89
PID 764 wrote to memory of 4036	764	msedge.exe	89
PID 764 wrote to memory of 4928	764	msedge.exe	90
PID 764 wrote to memory of 4928	764	msedge.exe	90
PID 764 wrote to memory of 4928	764	msedge.exe	90
PID 764 wrote to memory of 4752	764	msedge.exe	91
PID 764 wrote to memory of 4752	764	msedge.exe	91
PID 764 wrote to memory of 4752	764	msedge.exe	91
PID 764 wrote to memory of 3316	764	msedge.exe	93
PID 764 wrote to memory of 3316	764	msedge.exe	93
PID 764 wrote to memory of 3316	764	msedge.exe	93
PID 764 wrote to memory of 4840	764	msedge.exe	92
PID 764 wrote to memory of 4840	764	msedge.exe	92
PID 764 wrote to memory of 4840	764	msedge.exe	92
PID 764 wrote to memory of 2872	764	msedge.exe	97
PID 764 wrote to memory of 2872	764	msedge.exe	97
PID 764 wrote to memory of 1968	764	msedge.exe	98
PID 764 wrote to memory of 1968	764	msedge.exe	98
PID 764 wrote to memory of 2852	764	msedge.exe	100
PID 764 wrote to memory of 468	764	msedge.exe	117
PID 764 wrote to memory of 652	764	msedge.exe	118
PID 764 wrote to memory of 4480	764	msedge.exe	119
PID 764 wrote to memory of 4924	764	msedge.exe	122
PID 764 wrote to memory of 4924	764	msedge.exe	122
PID 764 wrote to memory of 4848	764	msedge.exe	123
PID 764 wrote to memory of 4848	764	msedge.exe	123
PID 764 wrote to memory of 2876	764	msedge.exe	127
PID 764 wrote to memory of 2876	764	msedge.exe	127
PID 764 wrote to memory of 4380	764	msedge.exe	130

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\download.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x25c,0x7ff8ea0ac188,0x7ff8ea0ac194,0x7ff8ea0ac1a0
  2⤵
  PID:4640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1852,i,714135310906455257,17714041774155213849,524288 --field-trial-handle=2268,i,12997570231801262517,825220366705069437,262144 --variations-seed-version --mojo-platform-channel-handle=2308 /prefetch:3
  2⤵
  - System Time Discovery
  PID:5092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1680,i,9298039349823740172,14641037425800171430,262144 --field-trial-handle=2268,i,12997570231801262517,825220366705069437,262144 --variations-seed-version --mojo-platform-channel-handle=2264 /prefetch:2
  2⤵
  PID:3728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2608,i,6945908777452474919,10076446716641570748,524288 --field-trial-handle=2268,i,12997570231801262517,825220366705069437,262144 --variations-seed-version --mojo-platform-channel-handle=2644 /prefetch:8
  2⤵
  PID:4036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3408,i,5055843576155270857,16200758877713892128,2097152 --field-trial-handle=2268,i,12997570231801262517,825220366705069437,262144 --variations-seed-version --mojo-platform-channel-handle=3440 /prefetch:1
  2⤵
  PID:4928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3416,i,16820293560180018119,5294308382286819888,2097152 --field-trial-handle=2268,i,12997570231801262517,825220366705069437,262144 --variations-seed-version --mojo-platform-channel-handle=3432 /prefetch:1
  2⤵
  PID:4752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4180,i,14706958900078943230,4734037486487126205,2097152 --field-trial-handle=2268,i,12997570231801262517,825220366705069437,262144 --variations-seed-version --mojo-platform-channel-handle=4184 /prefetch:1
  2⤵
  PID:4840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4252,i,8041641722770669016,12172303121590724791,2097152 --field-trial-handle=2268,i,12997570231801262517,825220366705069437,262144 --variations-seed-version --mojo-platform-channel-handle=4212 /prefetch:2
  2⤵
  PID:3316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4404,i,11291026863954038034,17423094644667857164,524288 --field-trial-handle=2268,i,12997570231801262517,825220366705069437,262144 --variations-seed-version --mojo-platform-channel-handle=5164 /prefetch:8
  2⤵
  PID:2872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4936,i,564032169792058111,6028292422106358015,524288 --field-trial-handle=2268,i,12997570231801262517,825220366705069437,262144 --variations-seed-version --mojo-platform-channel-handle=5124 /prefetch:8
  2⤵
  PID:1968
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5864,i,5529862566667838618,1885472809919884282,524288 --field-trial-handle=2268,i,12997570231801262517,825220366705069437,262144 --variations-seed-version --mojo-platform-channel-handle=5884 /prefetch:8
  2⤵
  PID:2792
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5864,i,5529862566667838618,1885472809919884282,524288 --field-trial-handle=2268,i,12997570231801262517,825220366705069437,262144 --variations-seed-version --mojo-platform-channel-handle=5884 /prefetch:8
  2⤵
  PID:2852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4352,i,4807683771692941493,5527165484608635159,524288 --field-trial-handle=2268,i,12997570231801262517,825220366705069437,262144 --variations-seed-version --mojo-platform-channel-handle=5084 /prefetch:8
  2⤵
  PID:468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4356,i,11458509504322399585,14702508471490518177,524288 --field-trial-handle=2268,i,12997570231801262517,825220366705069437,262144 --variations-seed-version --mojo-platform-channel-handle=4228 /prefetch:8
  2⤵
  PID:652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4340,i,1442739097161127863,13545076762299255081,524288 --field-trial-handle=2268,i,12997570231801262517,825220366705069437,262144 --variations-seed-version --mojo-platform-channel-handle=4260 /prefetch:8
  2⤵
  PID:4480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2136,i,9087862553327975019,10048056729259696150,524288 --field-trial-handle=2268,i,12997570231801262517,825220366705069437,262144 --variations-seed-version --mojo-platform-channel-handle=5112 /prefetch:8
  2⤵
  PID:4924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5908,i,8606998961974216873,10140453930967234044,524288 --field-trial-handle=2268,i,12997570231801262517,825220366705069437,262144 --variations-seed-version --mojo-platform-channel-handle=5804 /prefetch:8
  2⤵
  PID:4848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4340,i,10364066706342001641,16475263502199206432,524288 --field-trial-handle=2268,i,12997570231801262517,825220366705069437,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:8
  2⤵
  PID:2876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6256,i,1258945099813665271,17983817390372501684,262144 --field-trial-handle=2268,i,12997570231801262517,825220366705069437,262144 --variations-seed-version --mojo-platform-channel-handle=5824 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4380

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2572

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 11d3c4c52f9fc9cd2b10a22b48769759f994fd6364f9a0fc145f4cd2c2a22e9d
MD5 4751cf705a737c4226029624bf43b9a8
SHA1 fd8cf726ee3f8f75b97147829de5553530caa82c
SHA512 46e3fedbf7fa14bdc2b3aad129f2879a9d24252f5d7bd9b55766bc32a6b82ea77aaf193bcdbdf4423e3b67ef84955e589b6077609344091ef72204c1d50b0dab
TLSH
T17ED09B307A58A58BD14360F1A4114B4115375557205397757521508E9E98055B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 701082e4ac35f878dc5ff6eb27989aae9d20d9b5662643e20b3acd1720b367fc
MD5 2b3686986ce1fd99f079eb226e8b0a8b
SHA1 0d2cdee36351378b91ed7f6ecdb43457fe4d7b5d
SHA512 937da61c495fd21a02bb76a63556dec83ce132f1d1830ff8d9af6212d15f1844766dd4abadd15ea61b48f8ae03b52baca44c99117714c705da840dbff8f116dd
TLSH
T182D09B303A58A98BD54360F1A4104B41153755572053D7757521508E9E99095B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old~RFe59e1fa.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old~RFe59e1fa.TMP
Size 331B
SHA256 9e18537067c442ce7e49de67993486e32109f868126a56512c0ba3ff7a2aec84
MD5 cefdb9960d2dfdfb4cd4eb687d0fe76f
SHA1 5fd27e74d21244d826fcd1093958ff544bfc1d72
SHA512 39ddf6916c1878e7cf891a00c27cd2f631f880ae274ecc257a8159ca7377b9ef2a20773f76d93b572c2a4beb057e040760955ec7925212354b5bbde18dc74823
TLSH
T18DE026C984C8C26EA640A45B427CE38CC2A1374B9AC8799E3F08C9D5F0C1094A7B26D4
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 d2688ea8bb18d3e31717d56f665552d5534498c3ad2b9a07928a8c58f44975fa
MD5 59c7a37d1e5be871d0cea51cf7b15ca1
SHA1 c0b823086d78eb8498fd278ae416c7db4123e27d
SHA512 751cc11d84d84c0b93fa5a4a2238ffc961d7bcbd79cd401860cdab6d6dcdfa03b9bd1d11cc157849ebc691ca29d43d1ee04ba814bf3726571e6b8677ed20ffb1
TLSH
T152611B380B5E0482E3A156B1B4E20105717182F9FB9FDE4DEF149DF55A3632AC99249B
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58c157.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58c157.TMP
Size 3KB
SHA256 99f4d4426a2ac87b58fd26dddf9fa89fcd321279540d0d712bfa2c0939b237be
MD5 4b3cedbd03b0cdf11417ddee7401b9e5
SHA1 b8d4ab27d7b515b94fc6c293cb282fda03400c62
SHA512 a3b4430c9fd069dbf2c1ff13b50cb2d59459bf44aa61ffad3277b4d88fad17c22c1de18be69e024babf6c188f1023d1177b234acfd4c8fa2042939558cc30fec
TLSH
T1A4611B380B5E0482E36156B1B4E20105717182F9FB9FDE4DEF149DF55A3632AC99249B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 042a62453f121fa071ba13c2dd7cd7d00d437e8b6b7e832d4ae7794704c5503a
MD5 aa50d9a62033b935356cf63e0f79d9bc
SHA1 49b3dd393169740cb974edff05d831d373077c76
SHA512 b0d121d8a34e273be8b1e48e80b1f6fc2b045023a79eff25a1d08e1160809e6d06e805ec1b66eee0a89d4aae8be469546d7d8b88b98c57b5d342ffe681a0ea63
TLSH
T11711CCB3C3E1856E890516F06A24AE2BCE1D0602832C3C55C9E4FF27A3F3475D00256F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 9762edc6e9a445884c2c745c0670f9ac673393239ad004c4d545b20e427abdbc
MD5 ee9cb42edb5976cfb0c1e565631508ee
SHA1 cf7e19c47fcfc14a9347aa422fad38a8c3e52612
SHA512 9b47e3c0f5c21e0f936ed62071b14c4b0640acbe2a037507608fa7ef69f430f1b9856a7b01c413ddf84945f297b2a6c344120bd3029dd8ddee4f13548bb36996
SSDEEP 192:sxZFRgyM/jK1Ml8Mkr/fPs5E2rBIdpdJHW6+WNGY9IK4cpIgrJ:sxZFyMr/fPs5E2unHbGA9
TLSH
T18642E7166A349977DCDBD209FA55BF53D6F90472D2940E44EAFCCA0C04E6AED220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 fc772875a017431e594c483e580106308aa2da2978406298349dcb60a86d6d9f
MD5 5e74ce0e1b05b0f4ab54f98549818e3c
SHA1 4738b65df9c523ec9b42f87b1b6036c1920c90a3
SHA512 7e8a04f0f440d2ff4ecb4c9d3a6993aabc7c80796ffc442960824aa8975f591771dffded8672eea580af62a00c83a7c932c01a17469447520b5eac722efe1f1f
SSDEEP 192:sxZFRgyM/jK1Ml8UQykr/fPsEEkrBIdpHJHW6+WNGY9IBbcpIg5ZJ:sxZFyqxr/fPsEEkupHbG6V
TLSH
T12C52E716AA349977DCDBD209FA45BF53D6F44472D2940E44AAFCCA0C04E6AED220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 88828ca215e60afa94fed74368a5d616b2fb777a218cdb5b53caf8ac5229fcc5
MD5 d79419b4a20f740e72c68273ab581eb4
SHA1 40a45d84aa3b2af0a3f941b3b085e824f620c9e8
SHA512 4b266638477f985fd5916dc2a8df8f6681f71d5a1237658fd91576454066c72b190d80dc0e50dc7685849cc31548158d1166092f4a8bbaf3c005079c6775cf2e
SSDEEP 768:PAcv21wWvu+Z+8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjFLlwmWNIroQg6Bt:PAcv21wWvu+Z+u1jaeFLeRNzQj
TLSH
T1ADD20A2B280CCB7E4F841E9CED2A6F8A6DD801CB57988D5447FA494C03C77EB511B59B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 6221fc272a6b45f604226981c00008b925733dcdc7a2545175ca813538e5d91e
MD5 2895043e5cfc6d115ab39e1a6a7fb878
SHA1 f6c3c1a86c37c19e440fce63f0c8d2176b03d4d2
SHA512 b269605922d952826c1d2351ee5eb16a96b6dc6e6048917b0508787c69745e7c2bd9bf40cb107f57aca3e0ea6064911998d09350d163752e8197ceec06eada3a
SSDEEP 96:KaRklRnHnqlPKZThqKLfTzqHxJSrBDW2P6K4k+TNqKWYb:mT+p+y
TLSH
T126919852B07B1282393E680C925589268E83B55735ACB57F7B6804A54F37E126CFC9CC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ccf37c84-5003-4060-84fb-9e5213e9a127.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ccf37c84-5003-4060-84fb-9e5213e9a127.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

09ecd0ea-8e17-4aa5-8a0a-02aa2b40d977.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\09ecd0ea-8e17-4aa5-8a0a-02aa2b40d977.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 d79c05b2935551f21c89d72df80a258bb215f532c9a14055e24c518dc1a3fe7f
MD5 3429389761db468066f51181733a4157
SHA1 d8d02f1496703b01b8d4f376151b9b26369f0675
SHA512 2792bce26a648daca73dfa2150367a1b64395c436def2d565ad37203b5865d38b02cd0455bb82ec6f70fc908ee763ec6428d977207fe62bb74d369612260e589
SSDEEP 384:otNn/s3n9SfsNEzcjziEd7e+CBd0eskvUScjmwH+:oj+9UuvKJxskvU1jb+
TLSH
T1B0928E36AD345CAB6EE29546F94B36138FA851B3C6C52F90D9EC7F0C01DB6EC0316929
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 f25a7d883d79949f37919534443d291b9d33015d734e76538a2d037bc2c96113
MD5 3c1c7e2707291ae537136bd11e3157dd
SHA1 774bebc58e6a415b6a221b08b1aa6930bf1fcbe8
SHA512 9a68863e67603ceca1e7902423768def8bbd4890762fac9523cc216fc5b4d8587c46fc9ca01b95730f11dbcf1de36407a3b30c93b3c8f1ddd6b7b1bad130c038
SSDEEP 384:XtNn/s3n9SfsNE2cjziEd7e+CBd0eskvUScjmwH+:Xj+9UPvKJxskvU1jb+
TLSH
T100928E36AD345CAB6EE29546F94B36138FA851B3C6C52F90D9EC7F0C01DB6EC0316929
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 2514e7a0aa55db1536f1c9187e73c8281466b84c48f145bf02b1356851966e6b
MD5 4965fca7d3cc71216e2f2b4da400c855
SHA1 f916358f68832d535d9524d259099cc6a84fc6ec
SHA512 834770c7fa51608f8e3a1fc230ae4575ad31227df9c30092724fb4a1cf7dad46c6edac3a196152d8afd86f36122d4285623284239cc8855c43b59dd8a4d66f91
SSDEEP 192:JONa6v+YLNQmiUy5R54Zh+CGD+FdeP9ospusv32AU6:JONa6vz/DZh+CBd0esJvmAU6
TLSH
T11202DA39AD381C7B9FF26E45F48736175FA81177E9912F85DAE81F0C01D765C2306826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 16560c532456d252a30339acd3186e29bd4a61ca6c4d52e908be44b5064138bd
MD5 778a5b4632a66872e90a123c1cacec3e
SHA1 0eef431edb4629215dba104af5b1838c1edb7a2c
SHA512 404f1f00b3b872a7a0f7d6503910e7fc019cb27cc28458075980c72e1e99bd6ec9cbd643dce0e172db4cd1f033559fc751497bd39cec65fbe8696db243f84ede
SSDEEP 192:uONV6v+YLkQmiUy5o54Zh+CGD+FdeP9osNOeBDCHvWqgU6:uONV6vz4IZh+CBd0esOvUU6
TLSH
T1A6120B36AC785C6B6EE2A945F48735135FA55177EAC63F80D6EC2F0C01EF69C1306826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 cf8bebf8f25d61995b9a54beeebb9428174a6f9cd1de261473812a03efef48d0
MD5 db6252dd1267adba776267e2c106173a
SHA1 b220703589d380d1b58aa5130f085634a977717d
SHA512 a28afd488db886ae51cf6170b98109c7f68a8046ad79bbf59e22ff7f50282d19dc013653f50f6bea7c364c557adf435aac68cb1cf6f30fe9bc7a8b02fe1a4316
SSDEEP 384:QiF1tNn/s3n9SEzsNM8TUNTUlIl2cjziEd7e+CBd0esjvUScjmwH+:rF1j+9rJwgBvKJxsjvU1jb+
TLSH
T15AA25B379D649DABBEA69A45F94B36138FB451B3C9C12E90E6DCAF0C01DB1EC0306D25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 fd2226ec064d74de5b065c2b109e065f9dbbb56e274639cd5e589e31ebeaa4ae
MD5 97d93ff03151be3fa809cd89f8aaa58b
SHA1 562e1a9e71a24749af8023b3aff57d80f50dc87c
SHA512 977ba35873dee82a4c827e01ab9a2883da11ea629455cea4d92b86f25b2b9ec274b3705651311a9cee18098d465fabb1b7a32834540b4eed0c9c54e62dc4e8cb
TLSH
T1F041D858BAE91018B3B76F5AABF6A86D487FBD772F06C49E10110D4E0622A00C971737
MD5 SHA1 SHA512 TLSH

Submit Download