hxxps://u22512033[.]ct[.]sendgrid[.]net/wf/open?upn=u001[.]sVrkM0p1UYmemt56Vc6GtE8ekdrbX8LAijpB0-2FW6OQxNSA8fhIoBnacXfQ0fxDyZUfdUmqzq4SLSr-2B-2BU5kvgy9E-2BMNe9Vrr6gyDzUbYPE7oOcxfIJX6VKUhtejWHGoQnFRvSOwk46U3VRyipwyye7QuI5j2DuxwdEtSN4HO7JBPFI6rBIGUR095dujibP-2BbinDYkJrwv7EwYXj7T3Wym-2Fw-3D-3D

Analysis

user interaction
yes
max time kernel
149s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
03/08/2026, 16:08

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://u22512033.ct.sendgrid.net/wf/open?upn=u001.sVrkM0p1UYmemt56Vc6GtE8ekdrbX8LAijpB0-2FW6OQxNSA8fhIoBnacXfQ0fxDyZUfdUmqzq4SLSr-2B-2BU5kvgy9E-2BMNe9Vrr6gyDzUbYPE7oOcxfIJX6VKUhtejWHGoQnFRvSOwk46U3VRyipwyye7QuI5j2DuxwdEtSN4HO7JBPFI6rBIGUR095dujibP-2BbinDYkJrwv7EwYXj7T3Wym-2Fw-3D-3D
Sample260803-tk815seq8y

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2572	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134302468971593330"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-668679576-120646659-2289335452-1000\{1E2A9313-E3C3-4A0C-9FE1-CD2A4445FCB5}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2428	msedge.exe
2428	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3896	msedge.exe
3896	msedge.exe
3896	msedge.exe
3896	msedge.exe
3896	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3896	msedge.exe
3896	msedge.exe
3896	msedge.exe
3896	msedge.exe
3896	msedge.exe
3896	msedge.exe
3896	msedge.exe
3896	msedge.exe
3896	msedge.exe
3896	msedge.exe
3896	msedge.exe
3896	msedge.exe
3896	msedge.exe
3896	msedge.exe
3896	msedge.exe
3896	msedge.exe
3896	msedge.exe
3896	msedge.exe
3896	msedge.exe
3896	msedge.exe
3896	msedge.exe
3896	msedge.exe
3896	msedge.exe
3896	msedge.exe
3896	msedge.exe
3896	msedge.exe
3896	msedge.exe
3896	msedge.exe
3896	msedge.exe
3896	msedge.exe
3896	msedge.exe
3896	msedge.exe
3896	msedge.exe
3896	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3896	msedge.exe
3896	msedge.exe
3896	msedge.exe
3896	msedge.exe
3896	msedge.exe
3896	msedge.exe
3896	msedge.exe
3896	msedge.exe
3896	msedge.exe
3896	msedge.exe
3896	msedge.exe
3896	msedge.exe
3896	msedge.exe
3896	msedge.exe
3896	msedge.exe
3896	msedge.exe
3896	msedge.exe
3896	msedge.exe
3896	msedge.exe
3896	msedge.exe
3896	msedge.exe
3896	msedge.exe
3896	msedge.exe
3896	msedge.exe
3896	msedge.exe
3896	msedge.exe
3896	msedge.exe
3896	msedge.exe
3896	msedge.exe
3896	msedge.exe
3896	msedge.exe
3896	msedge.exe

Suspicious use of WriteProcessMemory 34 IoCs

description	pid	Process	procid_target
PID 3896 wrote to memory of 4948	3896	msedge.exe	85
PID 3896 wrote to memory of 2572	3896	msedge.exe	86
PID 3896 wrote to memory of 4632	3896	msedge.exe	87
PID 3896 wrote to memory of 4632	3896	msedge.exe	87
PID 3896 wrote to memory of 4632	3896	msedge.exe	87
PID 3896 wrote to memory of 1124	3896	msedge.exe	88
PID 3896 wrote to memory of 1124	3896	msedge.exe	88
PID 3896 wrote to memory of 2912	3896	msedge.exe	90
PID 3896 wrote to memory of 2912	3896	msedge.exe	90
PID 3896 wrote to memory of 2912	3896	msedge.exe	90
PID 3896 wrote to memory of 4936	3896	msedge.exe	91
PID 3896 wrote to memory of 4936	3896	msedge.exe	91
PID 3896 wrote to memory of 4936	3896	msedge.exe	91
PID 3896 wrote to memory of 4784	3896	msedge.exe	92
PID 3896 wrote to memory of 4784	3896	msedge.exe	92
PID 3896 wrote to memory of 4784	3896	msedge.exe	92
PID 3896 wrote to memory of 1924	3896	msedge.exe	93
PID 3896 wrote to memory of 1924	3896	msedge.exe	93
PID 3896 wrote to memory of 1924	3896	msedge.exe	93
PID 3896 wrote to memory of 1540	3896	msedge.exe	97
PID 3896 wrote to memory of 3884	3896	msedge.exe	98
PID 3896 wrote to memory of 1540	3896	msedge.exe	97
PID 3896 wrote to memory of 3884	3896	msedge.exe	98
PID 3896 wrote to memory of 1684	3896	msedge.exe	103
PID 3896 wrote to memory of 2520	3896	msedge.exe	111
PID 3896 wrote to memory of 2296	3896	msedge.exe	112
PID 3896 wrote to memory of 3832	3896	msedge.exe	113
PID 3896 wrote to memory of 4868	3896	msedge.exe	114
PID 3896 wrote to memory of 4868	3896	msedge.exe	114
PID 3896 wrote to memory of 4840	3896	msedge.exe	115
PID 3896 wrote to memory of 4840	3896	msedge.exe	115
PID 3896 wrote to memory of 5108	3896	msedge.exe	117
PID 3896 wrote to memory of 5108	3896	msedge.exe	117
PID 3896 wrote to memory of 2428	3896	msedge.exe	118

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://u22512033.ct.sendgrid.net/wf/open?upn=u001.sVrkM0p1UYmemt56Vc6GtE8ekdrbX8LAijpB0-2FW6OQxNSA8fhIoBnacXfQ0fxDyZUfdUmqzq4SLSr-2B-2BU5kvgy9E-2BMNe9Vrr6gyDzUbYPE7oOcxfIJX6VKUhtejWHGoQnFRvSOwk46U3VRyipwyye7QuI5j2DuxwdEtSN4HO7JBPFI6rBIGUR095dujibP-2BbinDYkJrwv7EwYXj7T3Wym-2Fw-3D-3D
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ff84b0dc188,0x7ff84b0dc194,0x7ff84b0dc1a0
  2⤵
  PID:4948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1868,i,8686614288966232389,6555457127910104726,524288 --field-trial-handle=2324,i,812414591152676205,3247545536298924350,262144 --variations-seed-version --mojo-platform-channel-handle=2376 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1760,i,12804856813692661625,18152113565837856539,262144 --field-trial-handle=2324,i,812414591152676205,3247545536298924350,262144 --variations-seed-version --mojo-platform-channel-handle=2320 /prefetch:2
  2⤵
  PID:4632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2628,i,5600072908500145578,1615947483464569650,524288 --field-trial-handle=2324,i,812414591152676205,3247545536298924350,262144 --variations-seed-version --mojo-platform-channel-handle=2772 /prefetch:8
  2⤵
  PID:1124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3448,i,549118013207298037,984144896039122211,2097152 --field-trial-handle=2324,i,812414591152676205,3247545536298924350,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:2912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3452,i,8727088102238316595,17797466719866955410,2097152 --field-trial-handle=2324,i,812414591152676205,3247545536298924350,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:4936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4240,i,16117702561876261322,9386429726437498662,2097152 --field-trial-handle=2324,i,812414591152676205,3247545536298924350,262144 --variations-seed-version --mojo-platform-channel-handle=4288 /prefetch:1
  2⤵
  PID:4784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4244,i,5826065916004197178,14356127591838786083,2097152 --field-trial-handle=2324,i,812414591152676205,3247545536298924350,262144 --variations-seed-version --mojo-platform-channel-handle=4364 /prefetch:2
  2⤵
  PID:1924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5148,i,416767081348380717,6225662652117307061,524288 --field-trial-handle=2324,i,812414591152676205,3247545536298924350,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:8
  2⤵
  PID:1540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5152,i,1673347197165045596,1389990698472026357,524288 --field-trial-handle=2324,i,812414591152676205,3247545536298924350,262144 --variations-seed-version --mojo-platform-channel-handle=5208 /prefetch:8
  2⤵
  PID:3884
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5928,i,2890072805533702773,18023237696922232271,524288 --field-trial-handle=2324,i,812414591152676205,3247545536298924350,262144 --variations-seed-version --mojo-platform-channel-handle=5932 /prefetch:8
  2⤵
  PID:628
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5928,i,2890072805533702773,18023237696922232271,524288 --field-trial-handle=2324,i,812414591152676205,3247545536298924350,262144 --variations-seed-version --mojo-platform-channel-handle=5932 /prefetch:8
  2⤵
  PID:1684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4768,i,2273650650370309733,4183711493970394081,524288 --field-trial-handle=2324,i,812414591152676205,3247545536298924350,262144 --variations-seed-version --mojo-platform-channel-handle=4276 /prefetch:8
  2⤵
  PID:2520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4752,i,3059622680516731357,1921359386610815151,524288 --field-trial-handle=2324,i,812414591152676205,3247545536298924350,262144 --variations-seed-version --mojo-platform-channel-handle=4356 /prefetch:8
  2⤵
  PID:2296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4756,i,8505752385406673200,1027370005728819517,524288 --field-trial-handle=2324,i,812414591152676205,3247545536298924350,262144 --variations-seed-version --mojo-platform-channel-handle=4676 /prefetch:8
  2⤵
  PID:3832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5476,i,3723776915230890110,990689686719582960,524288 --field-trial-handle=2324,i,812414591152676205,3247545536298924350,262144 --variations-seed-version --mojo-platform-channel-handle=5460 /prefetch:8
  2⤵
  PID:4868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6416,i,9828289444958638611,16638084707336928759,524288 --field-trial-handle=2324,i,812414591152676205,3247545536298924350,262144 --variations-seed-version --mojo-platform-channel-handle=5848 /prefetch:8
  2⤵
  PID:4840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=760,i,16628816782639717196,5831515528853507709,524288 --field-trial-handle=2324,i,812414591152676205,3247545536298924350,262144 --variations-seed-version --mojo-platform-channel-handle=5544 /prefetch:8
  2⤵
  PID:5108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6156,i,13726390543429101235,15793462200565019583,262144 --field-trial-handle=2324,i,812414591152676205,3247545536298924350,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2428

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1656

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CrashpadMetrics-active.pma
Size 16KB
SHA256 814d47aad78c212b52568b9c7b58d242899d490d3afebce66181cae50c880df5
MD5 8c7cdfea4284ba987d295d82a9c7ddd6
SHA1 7d1a3a66f2d64a383b230196ba89a263ce7ee957
SHA512 59c8229e834c944265aed4131c79f41f9f940a48651b9fb18800cef5bae36d17c7fd5880120c6fee8ce22a157b65bc63846b65765bc4dc86e15926dcce400d0d
SSDEEP 12:sf9iXhV0xoUZxCe+JKlkQuMRxCb8TXuYJ0IJpPK6BsyW1inPiz:U9iRqxoUZxWMk8xVTeYWI31BtXP
TLSH
T105724C85B34498FFC8835E7189BD27903774F6DF1F02866B6A6A760E2E271C84F44224
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 81240d13af4ca099e1358c75991e3fa5640dbb3aac72c2d98006f6159bf74aa0
MD5 96dd753cd2d8557b97ab2cd76f7fc6cf
SHA1 81697ccb13fb04a07bd47b552b3607597251f36d
SHA512 355c412a688a71b124e85c0527177b3f97efceb2a5553f8428e0913940daffd3bd176f5476b940c64eee52d543f0568112ac073984d9a64015adc15cbef552de
TLSH
T174D09224BA29A149E282007AA881EB565219DA95296B9622E620C44DBD2B925A3851C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4bf0783d55eb083b4adaa03ed8b76a2bd35b0819c8ad2530a78e1b8d6856010b
MD5 7a50c2e276f05b686e8cb6c95b86650f
SHA1 bc892af04a9d6b1bee8047f67518d676df864301
SHA512 f1d02fd9f067323214d78de08172e1a78028eba76f4754436f4d77b849e8422865dcea22be13f21c36ac2c5807b393c1dffdb0a3217c3353a517a0467461a474
TLSH
T19BD022203A28A008E282003AA880EB020208CA80282BC322E220C00CAC2B820A3800C2
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\000003.log
Size 33B
SHA256 68c7ad234755b9edb06832a084d092660970c89a7305e0c47d327b6ac50dd898
MD5 f27314dd366903bbc6141eae524b0fde
SHA1 4714d4a11c53cf4258c3a0246b98e5f5a01fbc12
SHA512 07a0d529d9458de5e46385f2a9d77e0987567ba908b53ddb1f83d40d99a72e6b2e3586b9f79c2264a83422c4e7fc6559cac029a6f969f793f7407212bb3ecd51
MD5 SHA1 SHA512

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 146B
SHA256 19cf406ebbc7135027e16fa37c0846aeaab1229508c5ea2f785e020ab307ecc5
MD5 5f53738b7bb5071e8f192ee6ad811688
SHA1 549f13e6cfde73b00c9a4d75c518868a20a149b0
SHA512 083fa0a86f3571f65948307759d4046e0640f37d71d5a72ef0109bee2a35e4b23fa11d0d1f69d6800903d5071b1922ecf3f966b3a9b77bfa24c0c744b5548be3
TLSH
T181C02B5409C5C21BA608F84F1324570DD2C0330F9BC4B60F0308D74830C2884A193DA0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 01a0d33f3e1ae7c7dda792155d5d8f1796e327e77043469e5542e99809571e0e
MD5 3a15408c81b267a9b0881f35fc98e067
SHA1 56ca14f84d1e9b86e53a767bc7ee8ec367b8e0a3
SHA512 cf2b012f34836f624866e741da1181c440ccba6243a0fb7ec1e838d80ea01ccb5f0d3430d40a78bd19b7bddc50d237a89bb69c38cd9ae7c86baad19447d61404
TLSH
T1996192340DDE66F5D761C4F299E10345307BC9E6F9335D4DF290DCBA2A867F1512812A
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtraction\EntityExtractionAssetStore.db\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 fe0d590a01b474ba0f2ddcb1d935acd3820c5be2e31a5bda80c4d30c202e0fbb
MD5 5f974b13f20ce2f5739ee3b090f15c4c
SHA1 d56e1f6819cae53f57ffdbf422b9414088c13032
SHA512 663188eefebbc226fab1333caee31e03147d91d89a96b6cc47cdb1395f88f8cab7face8397685df094bcf703d6ce28e0de24fd715c6790b6e94ed3c9fbe89a5b
TLSH
T1EB117AF3C7D5856E890156F06A24AE2BCE2D0606422C7C2989D4FF2BD3E3075E10295F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 fe2745f574258147ca87273467e45e2f5a643496a3595716a04dd7e4d590ee22
MD5 8b8c733865c5500220fa6a51ba71d504
SHA1 a06c0e5578fb22610a59ddb48335bc43cd5f570a
SHA512 7267d7e4195f91f151db0675277776ce30201635eb01e3f46b5c950d3cd13dca27ff82382e51ad68e0a5fbf0ee52bf6417266728b7a6087df2f881d96433c5ad
SSDEEP 192:sxZIRHkS/fvsh6tIdpUgHHW6+WNzUq/YCAIrxfIgrJ:sxZImS/fvsh6OdHHbN/xx9
TLSH
T19E22D7126E38A97B4CCBD21DBB19BF13E2F9503291D11E58E6FC961C04E6ADD224780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 7fad8e2d59a852d81188d329a348124679a3bf2aa3d3b1971ff29026b529f4e4
MD5 a05082cd75d2472c5656d6f7d39daa9f
SHA1 4a7cbb81459a9c3a5c7e116baa7d09dc54c91a91
SHA512 58949d5e2dc6f96b01a8efc75268e5d09aa2046c6ed73dc493333b829324c57a2eacf9ee69bb8782db3758c68274ed9e616a62adfe00714a5f8844e7aafd7c4e
SSDEEP 192:sxZIRHkS/fvsUPtIdpUgHHW6+WNzUq/YCGerxfIg5KJ:sxZImS/fvsUPOdHHbN//xg
TLSH
T16F22D9526E38A9778CCBD20DBB19BF13E2F9503291911E58E6FC961C04E7ACD224780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 daebeada2923720fd82254dd9eadfd0539fd8f6eeaefbb8bf034fcece538e51f
MD5 4fa3677cb826bc00ca1f5c99afc9af99
SHA1 804a306c5672af969ff4a15572d0f0e1ec8bb033
SHA512 86f4c081547d028a8e8db9ca8d7f996d5e0ab127ebafe285e2ec6bc29c8caf1ae0c7bebe538a9d9d13900f7880808597ff3a5995f34873be40bacf52986d9669
SSDEEP 192:sxZIRHkS/fvsU6tIdpUgHHW6+WNzUq/YCAIrxfIg5oJ:sxZImS/fvsU6OdHHbN/xxi
TLSH
T11F22C7526E38A97B4CCBD21DBB19BF13E6F9503291D11E58E6FC961C04E6ACD224780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 443dbce31330c9a9bce7529b17ded6e55959f4c2c4fb1fc75a4edfac3e877ecb
MD5 533ad89cd150d31fe287fe61adc32035
SHA1 f32bcd3b06d81916e6c5b5379dd55bfb0434e4c5
SHA512 7a508821e51e1be7a28009366c0465025cd138587180e5b45607426a71826a17d76a6d87343f02a1dfc3e2bba338b78279b7a7ab50272f9d562c82e4bd4e5a22
SSDEEP 768:2CqbUj+WvSCs68F1+UoAYDCx9Tuqh0VfUC9xbog/OVHZLlRTKrZro2:2CqbUj+WvSCs6u1jaaZLbWrS2
TLSH
T19DC2F93B340CCA7E4F801E9DDD5A6F972E9802C7A7588D4447FA994C02C77EA512B4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59eff4.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59eff4.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 867d5430755502bdbfb0cce1fede3d69fa7479fe95d21532ccd1a4de533484bf
MD5 1d463ebd372d1c9707917beed0eafef1
SHA1 78806547cf018b0930f3c8875fd2c0dbf1542bf9
SHA512 dc8ed66440c1fa5dfddec5aff0f9c2267efc9661bf4fa06ccc158ae8133cc8090460b096352b1d7f5d4a9fbb14f4ee7b0aca13a21daa34e010e6a04ac0f956ee
SSDEEP 384:LiFiZcIKzsND8TUNTUlIl4q0FeEa++d5VI6HlytEDq1o:mFQCOwgk9a73VIoy6Dq2
TLSH
T105D229F244E74936DAAE5707E77E3D028EBCC063B585AA94B3D89A0CCC951BFD306815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 adc44f27971cca03f46158579d51461a263b1b893d54b02bbe21e38ca478ccf0
MD5 9684db7519cdb53d376cf4d8a06500c5
SHA1 1e9a17d43c0cac2b05b5f9ab67bf110b4a051a86
SHA512 211722dc217802a379323cf5e2e7edf139d80cacdd69497cbe43c06622f8d437eafad1956d3650468106e60b4b0822cb805447c9c3d4c5415603bfa89f7f5610
SSDEEP 192:uYm+xasuheOwQxMGsNxFQcmWbiVyQmiU1ipR4Ea+j1+FdCK2VamEq+6wt2lU0Byu:GZcIhsNxFq0oeEa++d5QI6HlytEDq1o
TLSH
T1B0929E3158B81D735AF6B104F48F3A139FF89023A6C96FD4E1ED9F1C00D96A8134B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 4bbda762cd70f3913e6147f166e92c9e060bbdbeba68cfe06bd15975c618e43a
MD5 de0800979b27219c1ca17d2ed4ae4440
SHA1 f6792ece6549334baff8263e3576535571e27e6e
SHA512 5415d66a04e806d0eecfdb3c98db553866680b49327439b4b5c9fae510f0245d399901a6ac5b13194d226eb1ce847878dfde9b3164d893a38abcc363ea6d1933
SSDEEP 192:usm+xasuheOwQxMGsNx4QcmWbiVyQmiU1ipR4Ea+j1+FdCK2VamEq+6wt2lU0Byu:OZcIhsNx4q0oeEa++d5QI6HlytEDq1o
TLSH
T180929E3158B81D735AF6B104F48F3A139FF89023A6C96FD4E1ED9F1C00D96A8134B926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 685bcfca3a68f4f8c1200de5cb37758bb62765f1c4406c45e50a00bcc092922f
MD5 5406b0b9cf570b7e925a7e218cb3e6d4
SHA1 cdaed677be1683d7fb740e10d93b8eb255e87af6
SHA512 df158a175d54879080c35d4a0710dc60febeacda0e813871d25d9015bc11dc7d5b65976e2e29fe4d52d36a348a108cc6cb8b849eb81bea7741a3309d882e78f8
SSDEEP 192:vONR6Db6QmiUyuoHBa+j1+FdCKHRguxU6:vONR6uMHBa++d5G2U6
TLSH
T12A02F83568786CB79EF26E49F48B37279FD4106BAA962B54DAD81F0C00C764C2347837
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 68814cd65eba6a16a3eaf7d1b0b52917a0b07905351562f4bd264f6deb3b7e3e
MD5 d5b0e249967e103b453ba0d1bf15d46f
SHA1 9a81ed7c02d0dba70a483c07054e58f8803b2410
SHA512 b2744dc754a6b90dc7217838c5f7fabe9bccd50431e5dc0e095c8d05eab561e93194ab56a44ceaf4ed977bd7c0a5a658c3c4a922fc567bd9c9d3c15c79a46d89
SSDEEP 192:EONs6DbfQmiUydoaBa+j1+FdCK2DNzEq+U6:EONs6J5aBa++d5OIU6
TLSH
T121122A3268789C775EE26954F48B3613AFE48127DA8A7F90D5DC5F0C00EB69C234B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 058d16a57d5d39607ca7774fb68be2a7e84da6d5bb9216d3912fa563e495e494
MD5 d71c744568de0983a8c035a9a67ab4ee
SHA1 3dd9a41d44eeef898359208b11ef381ffe684d2f
SHA512 ab000a09e7c3c895689640c853adc173698e3fd3b42cc4948ec3c04cc7c43f749d00dfc5e0f0c88e9b68233f02cf49f832ddefe8922d166995945d57c6e649e7
TLSH
T110411C58AAF91148F3B77E5AABF6A86D487FB9772E06D49D00110D4F0662B00C872B33
MD5 SHA1 SHA512 TLSH

Submit Download