27581b82aed2596be9709e03f3ce0fa6d6edf203a6e9de4c1650a0a53434855e

Analysis

max time kernel
148s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
23/07/2026, 08:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
1NWnZ-iHA3vSyOTdWBY5vFHB-Dh2-cXan6JdG4YpcBp8.html
Size 7KB
Sample260723-j8mspsyycs
SHA256 27581b82aed2596be9709e03f3ce0fa6d6edf203a6e9de4c1650a0a53434855e
MD5 a8cbe20781d62f2058551fb26a7f6839
SHA1 0587e6195848614a15caea8f4430d3cb8ed269e8
SHA512 53829415d4a71580ec3c9e5f8c0efbc0b1ddc65c1ae78d08477b3d48f3e41048dcee8651991af2bc68d09a710fde0fea3b0db030f6d0aaeb382c16cc8518d529
SSDEEP 192:PjaZ7gzsweJqeJ30huxexxxjVnF6FPolfuEk:a7EsweJqeJEhuxexUoFu1
TLSH
T14AF12CCAF6B1B115715601A5A02F2207F635D42FD56DE8F0D1A9C2F0E7EB1C9072AA2E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1820	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134292684358916977"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-876885714-46325919-1482798410-1000\{F1E1C142-479D-4A0C-AE4C-785B1A8D8A94}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2720	msedge.exe
2720	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 1364 wrote to memory of 3168	1364	msedge.exe	86
PID 1364 wrote to memory of 1820	1364	msedge.exe	87
PID 1364 wrote to memory of 4544	1364	msedge.exe	88
PID 1364 wrote to memory of 4544	1364	msedge.exe	88
PID 1364 wrote to memory of 4544	1364	msedge.exe	88
PID 1364 wrote to memory of 1772	1364	msedge.exe	90
PID 1364 wrote to memory of 1772	1364	msedge.exe	90
PID 1364 wrote to memory of 1768	1364	msedge.exe	91
PID 1364 wrote to memory of 1768	1364	msedge.exe	91
PID 1364 wrote to memory of 1768	1364	msedge.exe	91
PID 1364 wrote to memory of 2136	1364	msedge.exe	92
PID 1364 wrote to memory of 2136	1364	msedge.exe	92
PID 1364 wrote to memory of 2136	1364	msedge.exe	92
PID 1364 wrote to memory of 2300	1364	msedge.exe	94
PID 1364 wrote to memory of 2300	1364	msedge.exe	94
PID 1364 wrote to memory of 2300	1364	msedge.exe	94
PID 1364 wrote to memory of 2168	1364	msedge.exe	93
PID 1364 wrote to memory of 2168	1364	msedge.exe	93
PID 1364 wrote to memory of 2168	1364	msedge.exe	93
PID 1364 wrote to memory of 2560	1364	msedge.exe	98
PID 1364 wrote to memory of 3296	1364	msedge.exe	99
PID 1364 wrote to memory of 2560	1364	msedge.exe	98
PID 1364 wrote to memory of 3296	1364	msedge.exe	99
PID 1364 wrote to memory of 2176	1364	msedge.exe	101
PID 1364 wrote to memory of 3176	1364	msedge.exe	110
PID 1364 wrote to memory of 1980	1364	msedge.exe	111
PID 1364 wrote to memory of 1244	1364	msedge.exe	112
PID 1364 wrote to memory of 3052	1364	msedge.exe	113
PID 1364 wrote to memory of 3052	1364	msedge.exe	113
PID 1364 wrote to memory of 4092	1364	msedge.exe	115
PID 1364 wrote to memory of 4092	1364	msedge.exe	115
PID 1364 wrote to memory of 2720	1364	msedge.exe	116

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\1NWnZ-iHA3vSyOTdWBY5vFHB-Dh2-cXan6JdG4YpcBp8.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x25c,0x7ffe8b7ec188,0x7ffe8b7ec194,0x7ffe8b7ec1a0
  2⤵
  PID:3168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1856,i,2221636467905314969,3245265581523359840,524288 --field-trial-handle=2272,i,15788879798209904580,8894895581279323766,262144 --variations-seed-version --mojo-platform-channel-handle=2308 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1744,i,10640964994673377996,8848426154245964702,262144 --field-trial-handle=2272,i,15788879798209904580,8894895581279323766,262144 --variations-seed-version --mojo-platform-channel-handle=2268 /prefetch:2
  2⤵
  PID:4544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2580,i,3542248923975233530,9493935536034032084,524288 --field-trial-handle=2272,i,15788879798209904580,8894895581279323766,262144 --variations-seed-version --mojo-platform-channel-handle=2780 /prefetch:8
  2⤵
  PID:1772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3420,i,12112577783295929715,9607919743936114048,2097152 --field-trial-handle=2272,i,15788879798209904580,8894895581279323766,262144 --variations-seed-version --mojo-platform-channel-handle=3460 /prefetch:1
  2⤵
  PID:1768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3428,i,10454054523178400141,17061274484830727031,2097152 --field-trial-handle=2272,i,15788879798209904580,8894895581279323766,262144 --variations-seed-version --mojo-platform-channel-handle=3468 /prefetch:1
  2⤵
  PID:2136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4168,i,2326443754182303008,18295095590905772848,2097152 --field-trial-handle=2272,i,15788879798209904580,8894895581279323766,262144 --variations-seed-version --mojo-platform-channel-handle=4180 /prefetch:1
  2⤵
  PID:2168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4196,i,11731666804826095175,5659675286533705545,2097152 --field-trial-handle=2272,i,15788879798209904580,8894895581279323766,262144 --variations-seed-version --mojo-platform-channel-handle=4188 /prefetch:2
  2⤵
  PID:2300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4988,i,14639840794881429642,15995491662157567810,524288 --field-trial-handle=2272,i,15788879798209904580,8894895581279323766,262144 --variations-seed-version --mojo-platform-channel-handle=5168 /prefetch:8
  2⤵
  PID:2560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4972,i,4987283067569321968,13539378084291763950,524288 --field-trial-handle=2272,i,15788879798209904580,8894895581279323766,262144 --variations-seed-version --mojo-platform-channel-handle=5192 /prefetch:8
  2⤵
  PID:3296
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,8874815183430204653,13132561231208163478,524288 --field-trial-handle=2272,i,15788879798209904580,8894895581279323766,262144 --variations-seed-version --mojo-platform-channel-handle=5928 /prefetch:8
  2⤵
  PID:4760
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,8874815183430204653,13132561231208163478,524288 --field-trial-handle=2272,i,15788879798209904580,8894895581279323766,262144 --variations-seed-version --mojo-platform-channel-handle=5928 /prefetch:8
  2⤵
  PID:2176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6320,i,12457090928881943201,4862796745680009214,524288 --field-trial-handle=2272,i,15788879798209904580,8894895581279323766,262144 --variations-seed-version --mojo-platform-channel-handle=6300 /prefetch:8
  2⤵
  PID:3176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5100,i,6682231134024763697,17205978473387768862,524288 --field-trial-handle=2272,i,15788879798209904580,8894895581279323766,262144 --variations-seed-version --mojo-platform-channel-handle=6296 /prefetch:8
  2⤵
  PID:1980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6328,i,1944914261505147683,6623642536708806932,524288 --field-trial-handle=2272,i,15788879798209904580,8894895581279323766,262144 --variations-seed-version --mojo-platform-channel-handle=4724 /prefetch:8
  2⤵
  PID:1244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5196,i,18171296848045131560,10905837028023150546,524288 --field-trial-handle=2272,i,15788879798209904580,8894895581279323766,262144 --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:8
  2⤵
  PID:3052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5168,i,13997671804451432194,8255152514373044471,524288 --field-trial-handle=2272,i,15788879798209904580,8894895581279323766,262144 --variations-seed-version --mojo-platform-channel-handle=2756 /prefetch:8
  2⤵
  PID:4092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6180,i,9813526704532108609,17803442735006316452,262144 --field-trial-handle=2272,i,15788879798209904580,8894895581279323766,262144 --variations-seed-version --mojo-platform-channel-handle=5692 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2720

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2428

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 be06603db0423fa762df5e31d294d37a760d1abaa13f2b19b228b2c32352160c
MD5 ae1385025971508ab127a3e420d827a6
SHA1 c7326b967f32399f6379738997a901372cdfbce0
SHA512 26daf0573ffeb68f7d51e967ceb5b5495fdd4d5831b2503423abfda66d0680f4e0bddca98c043aac6ea74a9a7d3bf6203d1a5c44496554fb3cc0c9ccee197c1f
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7tY:fwUQC5VwBIiElEd2K57P7q
TLSH
T13FB3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 6de34b260036ecaa4ce5839bc4a7ff7495e50b7b94349b12d9f840ca0e76da3b
MD5 56d82099872fb501c566d072ae897035
SHA1 2c96501551fc13c09496780960d8e7ccb4957b77
SHA512 c4b4017256caf25e88f146e6104134cddfd15089203e8e74c5196627fc92897f9fe7e3fc5c8305032be88e9409cdbc5dfe1e81017fcd5e38b3579b3d823b4a41
TLSH
T160D0C073378C7C00EA090170D013C3031FA7855824C39F03B100C01C54B43D9738B093
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f5dece638cd89af82b06bd2fcb3d1738eef64d2275be237184ea8bff7af3fdfa
MD5 f19ec2293392af872f10929c41627e26
SHA1 0576f5277c470f5bb8c3f4d3786ca8d967d0a33e
SHA512 4cc85dc71d34bb516f8fe45b565a6a9b4cda255a931f33289247ed84150baf0e2df40fc87109df41771553b92545ed858197cdd3d673694c83458cf9812aa9dd
TLSH
T16CD02272268C6C00EA090170D01383021EA6855824839B03A100C01C44A52D9728A093
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 1a8f62f0c8e2ad41ed099b7209026e474549bce709d72583da405757a1a26a0d
MD5 c0998f6d3edbc1979d48e061826b78eb
SHA1 6e347ac358d4e88b9af0a0d40fc19c646d2dc592
SHA512 8bf332f928bda48db7af5406739091d2c7d44ce5da16cd16b489b0315dbebf5906c968025c831f94090cddec2c0d8f663a4eafbcba01c8ff8ad930322c55a6ac
TLSH
T155714C19CB834C43EB018E34D7F102B175328BA84A6F5DBA2174CBFF6E0EB218519D29
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58b3ca.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58b3ca.TMP
Size 3KB
SHA256 f8a6365b6a91bbc76cc8a95df5be74a23d9a0db764983fca850279d4e37a090c
MD5 5cdba82775d360f786ef7c94cbba4038
SHA1 ae4421789c18fcffb06b3a9ceadc523ba8e413e8
SHA512 efe765f1eccf2eaf2d0c934548fbbb937d70cbd8f3e5867c1281b0562beb0b35dce6a4032f3745cdbf0ae236df7baaed4d953721cb01abe4fb1e43571671ff8e
TLSH
T1E1715F19CB434C43EB018E34D7F102B575324B984A6F5D7A2174CBFF6E0EB218519D28
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 a3effa481fb56e5d43ef4d9b736c269f924c726673405b35b25d613a75bdb31a
MD5 45ff5965d78e32e94783afe476734de8
SHA1 3e68c15c1d0d64c0e433928d25666042354da7f0
SHA512 da1c4d92bac2fcd912bbb05b6bd2b0351e2d74e5eb776d28d39d670b0f5996e0de9bf9f7a44d68bd7285f0d0f2667a7531bc5c40ae3e93a7e26a2eb158139fb8
TLSH
T167219EB3C3D5866E890556F06A28AE1BCE1D0546832C3D16C9E4EF2B93F3475E10159F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 5f67e68c2e91c80893ca62abd03f34095604c0a42f871fa6d591917b7a34bb99
MD5 38d223515708b3a1f85a1d3ee1b2c682
SHA1 2e8a9164d9afb37cfaffa4033d264c023c51f6fa
SHA512 2e16a9e04a84df1fea6ef41a9c3dfa87eba672dd10cbc9a041da3bac395f5379ac5a646f6cde5b0b9d85e9ea088304010d35ab82af1f8fed71140e9b96ea3ec3
SSDEEP 192:sxZBRCyM/jK1Ml8Mkp/f+Xsz/fMIdpdNHW6+WNGYwKnrrIgrJ:sxZBMMp/foszXVXHbGW9
TLSH
T1AE42F8166B349977CCDBD209BA557B53D6F90572E2800E84A9FCCA0C04E6AED2207C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 6a4ab9bdff593ccd6fbd34cc35dea391ce32752217a4c1d6d8882cf447b7f5be
MD5 ed9b02f23aaf53a0b78973593a9bb9f8
SHA1 3d08233c393952e1faf0746994f9bdf5048058b3
SHA512 7dc0f6c6fd4071a7521e9818d0ccb89a11630c2a8ac27c44748ab2d14bee45f7b938b04e4ae6af2788b81dd522a2631ad225ec34448fc17dc179695e75909de3
SSDEEP 192:sxZVRCyM/jK1Ml8UQVkp/f+XsE/fvIdpHNHW6+WNGYws8XrIg5zJ:sxZVMqep/fosEXAtHbGJP
TLSH
T1E352D716AA349977CCDBD209B945BF53D6F54472D2900E84AAFCCA0C05E6BED2217C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 807786b1ccac1ed8ab5838e1bfb2cf341fa11bb4dfa65c1c431168f3de275c1e
MD5 ec9320d24c5a4780413c1444aa91e2bd
SHA1 9eb87b97109cd8ae6f8ead38e6c856769f964197
SHA512 d786216f10e3e664ccb47a8d75a3e5496216b06fef513bddba38d3b81f51ff0408c77597ac3fa2dad7e1354c5339dd0e8d90b81813b61d8515fa77c46428a6eb
SSDEEP 192:sxZVRCyM/jK1Ml8Mkp/f+XsE/fvIdpdNHW6+WNGYw7nrrIg5zJ:sxZVMMp/fosEXAXHbGhP
TLSH
T1FD52E8166A34997BCCDBD209B9457F53D6F54462D2500E84AAFCCA0C05E6BED2313C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 fd9ed254b61572af37d3fd8598e82270b40d56976cfeaf6f82f27c02d8964e93
MD5 9079edbbe169fd63c6ce61bff12dba45
SHA1 7fe4f695bdae2eeb4c8171b1b4293418098d69b9
SHA512 5a447346dd30394c881915f7e5eb6b9177ac1455718a1c392120cdf05987567ceedb58dd56138a3ee1bdca1363e1f48dac1f899f9d079d02d91d9e8bbbc9a8ff
SSDEEP 192:sxZVRCyM/jK1Ml8Mkp/f+XsE/fvIdpdNHW6+WNGYw7nrrIg5zJ:sxZVMMp/fosEXAXHbGhP
TLSH
T19152E8166A34997BCCDBD209B9457F53D6F54462D2500E84AAFCCA0C05E6BED2353C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 b2a613a9542f82fdd79323d8bb4e91c9d30faee6acf990d272cd8471200ce955
MD5 ece4e0721adb5256b54897d189e601fa
SHA1 e5cdb9536c048bb8c0b96f3c371bbc18aa3798ed
SHA512 3c9f181cbe68d1c6d7d2be1b15eb0bb3312b51e105639d61f61d0b045c4faef4607cecda34911b6eb2f8b988398b36a1b8871d9221692199cd538e0b37da41d6
SSDEEP 768:w14jeXmWvmKLE8F1+UoAYDCx9Tuqh0VfUC9xbog/OVhPLlrZ+dvrohicpaAq:w14jeXmWvmKLEu1jacPLZQd8TG
TLSH
T18BD20A3B280CCF7E4F844E5CEC2AAE976ED801CB6A584D5447FA494C03C76EB512B49B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 2afe2a2caf892882b062a31f0871f62f6363a35bafad94517b252530e0f5db38
MD5 42af6959d39c9a47d129de7f6207db76
SHA1 5aae24a7d4c8fecadfd08f592445b93e7514ac76
SHA512 824f537c6a92a3a3725e2c351cf67716e6e6f2648144fbb3082abe851e8b139db3125aea017a972f3157a9423f2d1bb173cf40442ea608b65109eabbeb73ad5d
SSDEEP 24:Kdk/fkGkNkEakhdkVklk14kBk9+kIIjkhk1Kikyhakvk11EkHklSmkvMkq8klkO8:KA1IBK2s8rydTI1K8cQMXI5KoIMvyRz
TLSH
T1C6917B0132BB27827C3E2504A3B196665B82B5933029BD6B3F9844790F27E660DFDCDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c38488ac-f9bc-489c-a66e-8f10ae2ae381.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\c38488ac-f9bc-489c-a66e-8f10ae2ae381.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 da3ea96e77532d3e4f72e20912853b77b5e6a6e0d6f8ebe6fec4bbc7160c6dfd
MD5 7e4067c0f1f6986cf4850243681148e3
SHA1 08eedfa6138724ad3483d66d36611b42b6af969a
SHA512 42126a830b113906f2c78cf17545699a6feb88cabb8f69507641b4b853a2a535ff5af727a7bd4a389a91ebb58087ef98ae8aac6b947b524590b6c79ff1989a58
SSDEEP 384:+ZcIhsN8mR9ek14f+D8h8RX/cFfDVcl1lIO7w/xD8QBuf:8hWp1gn8/afDVcLCO7w/xbBuf
TLSH
T12F927D325879AC778DE5B646F84731174FF89027DBD96F80D2EC6B1D009EAA81316C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 4295777841cfec290c53009275ac8c0c3898492ec7d9db86e61e417a9c03ccbb
MD5 9ad6e0639ce706ce5c4f8d6fbe564e5d
SHA1 ee2054e4f2d1fe8dc37c8cc8c44f2df6949fac03
SHA512 15145b7fdec67d1039e57188672baf658a2abc1c2ca56ef0c58c64a4c8c3bb115c895388d3a020d0a5bcc4258f5056e01721eb5e84ec09d86ecaf2cd76861144
SSDEEP 384:HiFiZcISzsN08TUNTUlIlzR9ek14f+D8h8RX/QFfDVcl1lIO7w/xD8QBuf:CFQ6twgLp1gn8/+fDVcLCO7w/xbBuf
TLSH
T14DA26D3358A8997B9DE6AB46F84A31178FF89077CAD5AB90E3EC5B1C009F59C1307C25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 841cb5a5976d545f28904ea3bedcf6bfee1fe06c8b940f0376947470dc0b5e9f
MD5 af010e5116a61a241fbb18a7ccc60191
SHA1 eafa1953d0fb29492022c2048667cb3222f26e51
SHA512 b1de798105b0c49dc6d97caf68e1c5c3f552778905c5ca945ee2860baf021b88623831186b0a516a199ad6cc590fd4e18e4dc15c8044cdadb2886e816fd73a8b
SSDEEP 192:EONnF6hZ0QmiUyfEpc/+jVpjzoruo8a5wOZOGU6:EONF6oXpu+D8h8h2hU6
TLSH
T12D02C9356C686C7B8EE2AE45F48736235FE4212BEA956F84D6F85B1C00D769C2307836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 50bdca1af7ce74eaf90b912bf0a662a0ce10d8dafc42a54c16a9d51b603087d9
MD5 b88087fb969c39ffd20aacc35ec71ca2
SHA1 785abc34ad98bf8c2abb01066bb6fe327439d125
SHA512 e1731690f08ae84ca10c020cef239599be988dd7adc6b47a430278a96c00122f4ebe3cd69a07f0a7a823a0644825ccb74ab563f0180ae01cc21dbadfeda3a5bd
SSDEEP 192:2ONF6hZTQmiUyLEac/+jVpjzoruo8RX8EPU5cOqrqIU6:2ONF651au+D8h8RX/f9fU6
TLSH
T1EC12EA366868AC675DD2A655F48731135EE4522BDF85BFC0D6FC2B1C00DF6AC230B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 040f4281dad9f6b3584a6bba2c3e40a27c40481f84f6c65882612add526dff97
MD5 fd684f5bd55557b5e3a6d0d68e3249f9
SHA1 8605fecc29cb7af8cb3b377a99979b1722135c3f
SHA512 4bdf7295c3aa72b5ddd03105e60c9ae1c951f36589e872217d13e67ff1cd54370bbb9849c516d8f8097ef7e279b89038f84676011d1f66ddb7fed5336baaa617
SSDEEP 384:YZcIhsN8zR9ek14f+D8h8RX/cFfDVcl1lIO7w/xD8QBuf:mhxp1gn8/afDVcLCO7w/xbBuf
TLSH
T144927D325879AC778DE2B646F84731074FF89027DBD96F80D2EC6B1D009EAAC1306C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

468d8a42-d67b-49b1-a9eb-ce640c07df46.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\468d8a42-d67b-49b1-a9eb-ce640c07df46.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 612a471004c5bc60091935a23e73e9719d185276561851314f8dd00beeb742bc
MD5 e618f393a2fec3b5a96e8877f33b7a05
SHA1 33cbeb7916f2b23348a41d2fbee51ff7869d5033
SHA512 d876d2d78cf84d95e69b8fa813e509565c0cc3021656c2add851f69d157329fb50e597816c0bd21b67d024a34e2cd4db0e6c30f97c1ca1a266dd214cac91e223
TLSH
T152410A59B6E91148B3B76F56AFF6986E447FBC772E07D49D00110E4F0A62B04C8A1737
MD5 SHA1 SHA512 TLSH

Submit Download