272a5e4d204297d0c1edee1212cb966a641a1eb615b004179d40b5fc41d2b6df

Analysis

max time kernel
148s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
05/08/2026, 18:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
party-game-what-original-edition-the-ultimate-laugh-out-loud-board-game.html
Size 703B
Sample260805-wzerysdp21
SHA256 272a5e4d204297d0c1edee1212cb966a641a1eb615b004179d40b5fc41d2b6df
MD5 1df59c9d8ac185ac48974b4af5925181
SHA1 1944a18af1a584a6e917f9f60880f574200cdb84
SHA512 bc57ed159eeda7e6d7e0b4ee471cfa69a078b75316899bdf193de6b0ef10b4dee46cea86a9d535c899dcdc99ba8253f342c880eb9ab3473face7d460d5298a57
TLSH
T12C01F4DE8F16D3037533D538E7AC7654A33B219F9244D04AC1290D9F52782A3A1979DF
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4516	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134304277042203262"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-889581200-2041691093-2048517887-1000\{118BB341-F1B0-491F-85FD-7541AAC77003}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3600	msedge.exe
3600	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe
4012	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4012 wrote to memory of 4480	4012	msedge.exe	84
PID 4012 wrote to memory of 4516	4012	msedge.exe	85
PID 4012 wrote to memory of 4492	4012	msedge.exe	86
PID 4012 wrote to memory of 4492	4012	msedge.exe	86
PID 4012 wrote to memory of 4492	4012	msedge.exe	86
PID 4012 wrote to memory of 4356	4012	msedge.exe	88
PID 4012 wrote to memory of 4356	4012	msedge.exe	88
PID 4012 wrote to memory of 4340	4012	msedge.exe	89
PID 4012 wrote to memory of 1280	4012	msedge.exe	90
PID 4012 wrote to memory of 4340	4012	msedge.exe	89
PID 4012 wrote to memory of 4340	4012	msedge.exe	89
PID 4012 wrote to memory of 1280	4012	msedge.exe	90
PID 4012 wrote to memory of 1280	4012	msedge.exe	90
PID 4012 wrote to memory of 1916	4012	msedge.exe	91
PID 4012 wrote to memory of 432	4012	msedge.exe	92
PID 4012 wrote to memory of 1916	4012	msedge.exe	91
PID 4012 wrote to memory of 1916	4012	msedge.exe	91
PID 4012 wrote to memory of 432	4012	msedge.exe	92
PID 4012 wrote to memory of 432	4012	msedge.exe	92
PID 4012 wrote to memory of 4188	4012	msedge.exe	96
PID 4012 wrote to memory of 4152	4012	msedge.exe	97
PID 4012 wrote to memory of 4188	4012	msedge.exe	96
PID 4012 wrote to memory of 4152	4012	msedge.exe	97
PID 4012 wrote to memory of 4948	4012	msedge.exe	99
PID 4012 wrote to memory of 3800	4012	msedge.exe	108
PID 4012 wrote to memory of 660	4012	msedge.exe	109
PID 4012 wrote to memory of 2908	4012	msedge.exe	110
PID 4012 wrote to memory of 5052	4012	msedge.exe	118
PID 4012 wrote to memory of 5052	4012	msedge.exe	118
PID 4012 wrote to memory of 3600	4012	msedge.exe	123

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\party-game-what-original-edition-the-ultimate-laugh-out-loud-board-game.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffc4bc9c188,0x7ffc4bc9c194,0x7ffc4bc9c1a0
  2⤵
  PID:4480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1972,i,17422260826458583231,17253618871621969468,524288 --field-trial-handle=2308,i,2588304167409456754,1037163976013800752,262144 --variations-seed-version --mojo-platform-channel-handle=2344 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1672,i,7919313411274612414,2464778419355282766,262144 --field-trial-handle=2308,i,2588304167409456754,1037163976013800752,262144 --variations-seed-version --mojo-platform-channel-handle=2304 /prefetch:2
  2⤵
  PID:4492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2532,i,1737402566021947136,8226683088127719070,524288 --field-trial-handle=2308,i,2588304167409456754,1037163976013800752,262144 --variations-seed-version --mojo-platform-channel-handle=2676 /prefetch:8
  2⤵
  PID:4356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3452,i,636782183597694334,11730245224122216591,2097152 --field-trial-handle=2308,i,2588304167409456754,1037163976013800752,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  PID:4340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3468,i,17658057418479841129,11060021264367575389,2097152 --field-trial-handle=2308,i,2588304167409456754,1037163976013800752,262144 --variations-seed-version --mojo-platform-channel-handle=3552 /prefetch:1
  2⤵
  PID:1280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4232,i,11274115841148935136,2447439284570752617,2097152 --field-trial-handle=2308,i,2588304167409456754,1037163976013800752,262144 --variations-seed-version --mojo-platform-channel-handle=4304 /prefetch:1
  2⤵
  PID:1916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4248,i,18357974754067807092,3007121589419152250,2097152 --field-trial-handle=2308,i,2588304167409456754,1037163976013800752,262144 --variations-seed-version --mojo-platform-channel-handle=4332 /prefetch:2
  2⤵
  PID:432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5112,i,7680709604395348001,3785611663957075341,524288 --field-trial-handle=2308,i,2588304167409456754,1037163976013800752,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
  2⤵
  PID:4188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3492,i,18393870095583262317,11686796759016139322,524288 --field-trial-handle=2308,i,2588304167409456754,1037163976013800752,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:8
  2⤵
  PID:4152
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5856,i,4798484305758249980,7307341562632060509,524288 --field-trial-handle=2308,i,2588304167409456754,1037163976013800752,262144 --variations-seed-version --mojo-platform-channel-handle=5884 /prefetch:8
  2⤵
  PID:4228
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5856,i,4798484305758249980,7307341562632060509,524288 --field-trial-handle=2308,i,2588304167409456754,1037163976013800752,262144 --variations-seed-version --mojo-platform-channel-handle=5884 /prefetch:8
  2⤵
  PID:4948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4548,i,13207424792286573310,5461322672782807895,524288 --field-trial-handle=2308,i,2588304167409456754,1037163976013800752,262144 --variations-seed-version --mojo-platform-channel-handle=5964 /prefetch:8
  2⤵
  PID:3800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4544,i,4125225898853239665,15111316696551685069,524288 --field-trial-handle=2308,i,2588304167409456754,1037163976013800752,262144 --variations-seed-version --mojo-platform-channel-handle=4512 /prefetch:8
  2⤵
  PID:660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4532,i,7193141217699984439,3019361657741471385,524288 --field-trial-handle=2308,i,2588304167409456754,1037163976013800752,262144 --variations-seed-version --mojo-platform-channel-handle=5944 /prefetch:8
  2⤵
  PID:2908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5240,i,18402968848201345863,4561752777278625630,524288 --field-trial-handle=2308,i,2588304167409456754,1037163976013800752,262144 --variations-seed-version --mojo-platform-channel-handle=2036 /prefetch:8
  2⤵
  PID:5052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5852,i,1403482227385674965,2875802907675433512,262144 --field-trial-handle=2308,i,2588304167409456754,1037163976013800752,262144 --variations-seed-version --mojo-platform-channel-handle=756 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3600

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2524

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 11d3c4c52f9fc9cd2b10a22b48769759f994fd6364f9a0fc145f4cd2c2a22e9d
MD5 4751cf705a737c4226029624bf43b9a8
SHA1 fd8cf726ee3f8f75b97147829de5553530caa82c
SHA512 46e3fedbf7fa14bdc2b3aad129f2879a9d24252f5d7bd9b55766bc32a6b82ea77aaf193bcdbdf4423e3b67ef84955e589b6077609344091ef72204c1d50b0dab
TLSH
T17ED09B307A58A58BD14360F1A4114B4115375557205397757521508E9E98055B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 701082e4ac35f878dc5ff6eb27989aae9d20d9b5662643e20b3acd1720b367fc
MD5 2b3686986ce1fd99f079eb226e8b0a8b
SHA1 0d2cdee36351378b91ed7f6ecdb43457fe4d7b5d
SHA512 937da61c495fd21a02bb76a63556dec83ce132f1d1830ff8d9af6212d15f1844766dd4abadd15ea61b48f8ae03b52baca44c99117714c705da840dbff8f116dd
TLSH
T182D09B303A58A98BD54360F1A4104B41153755572053D7757521508E9E99095B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 2fb79c8401d5474bbaca8899a488b6b5faa5f660e2372f4a65ad21b692ce62df
MD5 fefe5fcfee45900186fcf2fe3923c452
SHA1 2f74917d25205c5d57122e3f10727dfa0811372c
SHA512 1d8e40b235f66099bf1147aa2e9843c29aa079904ebe271c8e20272f635bc753593f43b5d35b1f25f4b6e988e52ec12b0e52559b4f30b7880108fa5c631b1bbb
TLSH
T11061E638092E0871E39A28B556D5321730B6BDEBF9561E74C2E09E37211FF25B93D508
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58acc5.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58acc5.TMP
Size 3KB
SHA256 0c8975bebec2d49a684b8006728c3b39b423f92b61162df45bd541b7825a87e2
MD5 2377a262d911eb436d68b9dfec370365
SHA1 74c7745671da2ac59596cb30799d01e41020f46f
SHA512 8f59b3795a194f8aaa19a3e8ec1111b15d5ed3b11399400dfebe81539d3fddcd6a406c863e0f62aa0fa7f6f039b364664b5ba564e3c8b5245f788c7f8063cf11
TLSH
T1B961D6380A1E0871E39A28F156D5320720B6ADEBF9565E75C1E49E37211FF25B93D508
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 49fd412009012af99c02ef6ff039fcfa3db3ef01b3ec34aaa6025db866a19855
MD5 df99112b42cae7c68c00cdc44961e87c
SHA1 ab3cad3fe092068dda8d44ea295a873b9d16b2c4
SHA512 65487c5cd5beade4dcdefd396e271f640d88a2297d934bfb68827312397e110bdd2315111dc4ef98ff25813117a828c4577859119465bde598d3cf4764cccc79
TLSH
T13511BAF3C3D5856E891156F0AA28AE2BCE2D0606422C7C6989D4FF6BD3E3075E10295F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 de38e7a88830a2a942d407afd1c636208e7a2f1ca237fcc45a4756d610369376
MD5 c4634413c36a840fcda5bf61c1c446a4
SHA1 4d979f42a5bf8ca38d446b42e150fed1eaa6a2ca
SHA512 819997d694e56965de6b852dc6f31d89ea3a207f80da27065c57f50ae0c64e5a24f622e56edf49420589d4655992035fcf2271489525dc8a67086bc4750f0a24
SSDEEP 192:sxZjRtyM/jK1Ml8Mk3/fXseJXPNIdpdNHW6+WNGY9IK+VM9IgrJ:sxZjDM3/fXseJXGrHbGoh9
TLSH
T11A42E8117A34A97BCCCBD209FA55BF53D6F9057292900E54A9FCDA1C04E6AED220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 9ab23468dfde9f4beccca3eba7d7f063eba9d51f0c4d98e6e7fa56b0c36af223
MD5 45fa09c3cf4f2e00f7980e553c589b5a
SHA1 d5d2fbd58ae2a1bf5f7955df05af26404050a2c0
SHA512 e8663f9602bf2b5c1d0326f04cb46424a25d824a872fad7c4b9c752cea6918f9e3ceb5c15a7de80cbcf0dbd0085ea77c9435ff75c5845114c2f1dd08dc6d445e
SSDEEP 192:sxZjRtyM/jK1Ml8UQAk3/fXs1JoPNIdpHNHW6+WNGY9I81VM9Ig57J:sxZjDqT3/fXs1JoGtHbG/h3
TLSH
T15A52F812BA349977CCCBD209FA55BF53D6F5097292900E44A9FCDA1C00E6BED220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 2e429b49b751a33d179eb16e43c0dfc457433583bf309ea39fb3e18e00582dfa
MD5 f1c38b76dc7b87c5ea15f0bf3ee43c92
SHA1 bfa3ea8603e8ea52400654bf682ebdee85eab386
SHA512 6fd2e1b77e6bc31d3b4239e747f7bfdc4030af6b6e8e604971edf0ab476295e7f1f4af6270e36b23668eb251976cd6eb404bb0757047435e6e882f6281d07a67
SSDEEP 768:rgcv21wWvu+Z+8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjFLlwmWNoroIg6r:rgcv21wWvu+Z+u1jaeFLeRNTI7
TLSH
T1BAD20A2B280CCB7E4F841E9CED2A6F8A6ED801CB57988D5447FA494C03C77EB511B59B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 eab23a598e2533b280310bfadcf4dbac90c7733335d48db780e54da3b9e91509
MD5 6f67d021bf4a856ac6cf5c7c214a5f65
SHA1 9c2c2ff757f01b4270f24e45153c3b90bc6f1985
SHA512 9d633882cf66d0e7cb6e5bdb70c77f9eecdb1390c108e05237cbf6805f0676de7ff1848358ddc9e60c2f3e2b50dd5d244f3491418bd85735c84d4b81bb61491f
SSDEEP 96:KaRklRnHnqlPKZThqKLfTzqHxJSrBDqAoKRef6KcKDyCW:mTLqHPW
TLSH
T134917516313B1292787E694CA3528A368E4636A3381CF56F7BB800B54F27E651DFD8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5946b4.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5946b4.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 0671e3dc5ea5745e7ea1ae070b2b3aa27638b0c247b1bb50543d722f3ef11617
MD5 a5a5549017804264f73f6aa29ae762ec
SHA1 cc78d350f474ec9b4f9184d5d8180d49994ba23f
SHA512 118426c6e55d40001e5bae95215d1a8acb2d71c9465231af6ee9c4fadff63f488af15c96c69b9547dd8d2b0ddab3391f88df8afec3240b16dee876a63120caa5
SSDEEP 384:oZcIhsNxWSxzitDEe+CMOfpYBeRs9JKgqijUEhOGe:WhORQPkOfpYTjKgqmUEhOGe
TLSH
T19A928D3168786D76A9E7F580F58B36175FF88173E2C02F90D1ECBF1D02DA698230A925
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 32080cc1659212a6b42d24d2fdc283bde65629fb4e54005a97d51b2a9b92552c
MD5 1ab27079e2006d0c443feea16c2be001
SHA1 bec09ff9040bcd178203883ace546ffcc00108f5
SHA512 f484dbc09a8dbc8338f2e2297be912d3213edfacff8ff42461a99171174014d955cbb448c480997dc25e9a402474f8c5a00b76c1a9a9315da505a16b3aa8056f
SSDEEP 384:QiFiZcIpzsND8TUNTUlIlDSxzitDEe+CMOfeYBeRs9JKgqijUEhOGe:rFQJmwgkRQPkOfeYTjKgqmUEhOGe
TLSH
T1B0A28E3258A8997BAEF7AA80F64A32179FF44173D6C1AEE1D2DCAE1D01D75DC130AD10
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 4875d1cdfb99e6409203e08dfc46bfe53993df8b9d93414bd865e74e86f723fa
MD5 559e9382a46faf45f180730612941fe8
SHA1 e56e94bcbf1fcbf5c2153aa36e0ac37043a8f349
SHA512 0ac337c20b8b7f3d53f56c53bb12c2ae7a623c907f6a250a6403be47b6d7e0372f2a31ba8fa84a9f145095f6c3924559066f916d8d290c85de5f89658bdbd1f0
SSDEEP 192:JONVh6v+YLNQmiUyo9Zh+CGlOdmuusMEU6:JON/6vz/nZh+CMONFU6
TLSH
T15402FA35BD682CAB9FB2AE45F58737275FA8113BE6912F80D9D82E1C01D774C2306926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 08f2f53e10b8fa608596019df9d100e3372b0e36a0e7fb35ae2a5ae1e27fa71e
MD5 d7b6e0a6f52db31e9e9ba91177e36d54
SHA1 cf61e6ad39875ed43753ee5da9bced7afb3e34d9
SHA512 62ac8640904fd84f0bb3d8d56b374646c0c9337e04f72ede0df80a64d4c28b845828975b9d46f9baa5728b5bbf071f0244d6f3195468f4c40faa5660d613fd32
SSDEEP 384:5ZcIhsNxDSxzitDEe+CMOfpYBeRs9JKgqijUEhOGe:RhjRQPkOfpYTjKgqmUEhOGe
TLSH
T182928D3068786D76A9E7F580F58B36175FF89133E2C42F91D1ECBF1D02DA698230A925
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 9807a95d2c36ac7fd6a730ba510eb234a0e1780b706b1b3ccd737546e550d628
MD5 8af1ba0206e2ece7bcce15e7e9723460
SHA1 92a16e488c3cdd7a9efbbc4144e5639720736f7c
SHA512 2c45d635cd2fe5c4c0811803d925c7468f53db894593010b6efc065647c235eb26b9e3b0352ceaed61b6d47cee2a9e2d9550bd630924a3116483bbbcaea68f27
SSDEEP 192:MON06v+YL1QmiUyV9Eh+CGlOdmcheoCHmq8U6:MON06vz3IEh+CMOfCYU6
TLSH
T17F122B3578B86C6B5EE3A544F48735239FA85237EA867F80D5DC3E1C01DF69C230A826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 6e14e8baec6e787fdf66da3eabf84d6910401187732bcd2dc23b12119ba88e59
MD5 6764d203a3484171b52497da42453401
SHA1 50a29e421fb40e9ee9d981a5e4dcaf88a3560a7e
SHA512 083845f8fbf7eed1a3e9375aefe1eb7dd718e0f41f00e85d6a2ae8a3d14711e42a577867073405a5bfaac1139e6aa962f8f26a228ebe8ff98f33ebc43035e258
TLSH
T1D841F998B6ED1149B3B76F5AABFAA8AE447F7C372E06D45D10110E4E0A63B41C871733
MD5 SHA1 SHA512 TLSH

Submit Download