5d7070e6faf4e23a67db3ba6e6c01192eb46fdb5cbc4f532630f3984134275a4

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/07/2026, 12:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
homexyz/Privacy.html
Size 25KB
Sample260730-pg8tra1vgx
SHA256 5d7070e6faf4e23a67db3ba6e6c01192eb46fdb5cbc4f532630f3984134275a4
MD5 328dd7f0c3b9c3b6feaca27661aaaa1a
SHA1 ee4022d557da8f49d761bd579b4a93f7e33e00f9
SHA512 669ccf46a8747bce02792ba232d02488c1e8192f34d1eaa6b7e1527bbfc424388b42021e7c1696eb0e1e9737f5e720e33d1422c7c02b10e7f4d56f16fd1561f9
SSDEEP 384:VTxAE7xeWk9cAhAz9W24StyCVsDHWQNVMBEUzvICBzLzh4MW4dCftz96tz20La47:V2EV6csNVL2Q+fZdgF91q069
TLSH
T10CC2A65BF70C223601820293367AAA95F72FD528736191B63C7D813B1386F195B2B7ED
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1716	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134298875590444056"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-668679576-120646659-2289335452-1000\{4BC4AA38-E8DF-4F62-A10B-C9DBD14CFF70}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3936	msedge.exe
3936	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 1280 wrote to memory of 2760	1280	msedge.exe	86
PID 1280 wrote to memory of 1716	1280	msedge.exe	87
PID 1280 wrote to memory of 1676	1280	msedge.exe	88
PID 1280 wrote to memory of 1676	1280	msedge.exe	88
PID 1280 wrote to memory of 1676	1280	msedge.exe	88
PID 1280 wrote to memory of 3088	1280	msedge.exe	89
PID 1280 wrote to memory of 3088	1280	msedge.exe	89
PID 1280 wrote to memory of 3936	1280	msedge.exe	90
PID 1280 wrote to memory of 1652	1280	msedge.exe	91
PID 1280 wrote to memory of 3936	1280	msedge.exe	90
PID 1280 wrote to memory of 3936	1280	msedge.exe	90
PID 1280 wrote to memory of 1652	1280	msedge.exe	91
PID 1280 wrote to memory of 1652	1280	msedge.exe	91
PID 1280 wrote to memory of 4952	1280	msedge.exe	93
PID 1280 wrote to memory of 4952	1280	msedge.exe	93
PID 1280 wrote to memory of 4952	1280	msedge.exe	93
PID 1280 wrote to memory of 4900	1280	msedge.exe	94
PID 1280 wrote to memory of 4900	1280	msedge.exe	94
PID 1280 wrote to memory of 4900	1280	msedge.exe	94
PID 1280 wrote to memory of 4860	1280	msedge.exe	98
PID 1280 wrote to memory of 4860	1280	msedge.exe	98
PID 1280 wrote to memory of 1028	1280	msedge.exe	99
PID 1280 wrote to memory of 1028	1280	msedge.exe	99
PID 1280 wrote to memory of 4112	1280	msedge.exe	101
PID 1280 wrote to memory of 2912	1280	msedge.exe	111
PID 1280 wrote to memory of 4552	1280	msedge.exe	112
PID 1280 wrote to memory of 4764	1280	msedge.exe	113
PID 1280 wrote to memory of 1420	1280	msedge.exe	115
PID 1280 wrote to memory of 1420	1280	msedge.exe	115
PID 1280 wrote to memory of 3936	1280	msedge.exe	116

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\homexyz\Privacy.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7fff0f64c188,0x7fff0f64c194,0x7fff0f64c1a0
  2⤵
  PID:2760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1964,i,10139479363475940275,5193232791324359777,524288 --field-trial-handle=2248,i,9213247405788942809,18396843983686419357,262144 --variations-seed-version --mojo-platform-channel-handle=2276 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1864,i,6923933200803828204,8001394446776708256,262144 --field-trial-handle=2248,i,9213247405788942809,18396843983686419357,262144 --variations-seed-version --mojo-platform-channel-handle=2244 /prefetch:2
  2⤵
  PID:1676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2484,i,10755367559039177094,17908234509935949264,524288 --field-trial-handle=2248,i,9213247405788942809,18396843983686419357,262144 --variations-seed-version --mojo-platform-channel-handle=2488 /prefetch:8
  2⤵
  PID:3088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3488,i,5745071350219768143,4960537493104922566,2097152 --field-trial-handle=2248,i,9213247405788942809,18396843983686419357,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:1
  2⤵
  PID:3936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3508,i,14245292035176784920,6127269374164420521,2097152 --field-trial-handle=2248,i,9213247405788942809,18396843983686419357,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:1652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4264,i,5169018084798923950,2313167388358903895,2097152 --field-trial-handle=2248,i,9213247405788942809,18396843983686419357,262144 --variations-seed-version --mojo-platform-channel-handle=4272 /prefetch:1
  2⤵
  PID:4952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4332,i,13292659445857497244,2506101676849390470,2097152 --field-trial-handle=2248,i,9213247405788942809,18396843983686419357,262144 --variations-seed-version --mojo-platform-channel-handle=4276 /prefetch:2
  2⤵
  PID:4900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5140,i,743627282932803888,6848468681076899371,524288 --field-trial-handle=2248,i,9213247405788942809,18396843983686419357,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:8
  2⤵
  PID:4860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5132,i,3593068832124989106,11452250711321680508,524288 --field-trial-handle=2248,i,9213247405788942809,18396843983686419357,262144 --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:8
  2⤵
  PID:1028
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5840,i,7842107059718187177,16605239017947815855,524288 --field-trial-handle=2248,i,9213247405788942809,18396843983686419357,262144 --variations-seed-version --mojo-platform-channel-handle=5860 /prefetch:8
  2⤵
  PID:4360
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5840,i,7842107059718187177,16605239017947815855,524288 --field-trial-handle=2248,i,9213247405788942809,18396843983686419357,262144 --variations-seed-version --mojo-platform-channel-handle=5860 /prefetch:8
  2⤵
  PID:4112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4360,i,6083477700755963901,17417320804917916770,524288 --field-trial-handle=2248,i,9213247405788942809,18396843983686419357,262144 --variations-seed-version --mojo-platform-channel-handle=4332 /prefetch:8
  2⤵
  PID:2912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4432,i,10340714372906638869,7807601980830672536,524288 --field-trial-handle=2248,i,9213247405788942809,18396843983686419357,262144 --variations-seed-version --mojo-platform-channel-handle=4520 /prefetch:8
  2⤵
  PID:4552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4352,i,7596506662080161237,8229470486146532581,524288 --field-trial-handle=2248,i,9213247405788942809,18396843983686419357,262144 --variations-seed-version --mojo-platform-channel-handle=4476 /prefetch:8
  2⤵
  PID:4764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5184,i,6121238438195392402,6798019543997253513,524288 --field-trial-handle=2248,i,9213247405788942809,18396843983686419357,262144 --variations-seed-version --mojo-platform-channel-handle=5272 /prefetch:8
  2⤵
  PID:1420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=760,i,18216852659699717284,17099130279126815248,262144 --field-trial-handle=2248,i,9213247405788942809,18396843983686419357,262144 --variations-seed-version --mojo-platform-channel-handle=1712 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3936

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:652

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 bba2e49c11cb10e1da3782e96a0839de38ec558ccceb0d68515b04792179f852
MD5 34d661b06bc0857903247c15b32b3124
SHA1 72b12aeb58848c0b8474acb525b5e3c41cf32367
SHA512 ff623932c1d85ab3c9cf10c993d26b94c5e1d9968c6a6f9a48925137edcf7379ba3bc8d216e7fc052000ec59dab883f4b498f2262f7941a46d3328c62092e788
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7U:fwUQC5VwBIiElEd2K57P7U
TLSH
T1E0B3A931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CrashpadMetrics-active.pma
Size 16KB
SHA256 814d47aad78c212b52568b9c7b58d242899d490d3afebce66181cae50c880df5
MD5 8c7cdfea4284ba987d295d82a9c7ddd6
SHA1 7d1a3a66f2d64a383b230196ba89a263ce7ee957
SHA512 59c8229e834c944265aed4131c79f41f9f940a48651b9fb18800cef5bae36d17c7fd5880120c6fee8ce22a157b65bc63846b65765bc4dc86e15926dcce400d0d
SSDEEP 12:sf9iXhV0xoUZxCe+JKlkQuMRxCb8TXuYJ0IJpPK6BsyW1inPiz:U9iRqxoUZxWMk8xVTeYWI31BtXP
TLSH
T105724C85B34498FFC8835E7189BD27903774F6DF1F02866B6A6A760E2E271C84F44224
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 1c8e6fcbb66aba64fe595f222fc4117e00e82ccdc0eef2100a1b4f7babb04f87
MD5 398d1e7948d46a763209c466fdacd0fb
SHA1 b26f2c32bc106089a59ce779d792beaba59f92bf
SHA512 a0bbf31d803e7333d004f03de9c261732d00cceb5d82dd64b5f0decf8adc8b840891187c72bb21cce83873e6d4dd2fab89d4c7efa320afe2ef3589678dcb1424
TLSH
T1B6D080277A196004F3964175A483D7061319956129575711F310C44CA9775D553C11C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 5d2c4e39ddbeb0ac61628bae04f1ac5787600ec893b0e230d1a84d61470771a9
MD5 cd6e704306442404371caebfec7f5b29
SHA1 e4beab8b7820af3633bf7c75a5498a958a95832e
SHA512 de66681a9245e8ece7d7e2ea2080251c395f2aeb8a885ac007eaf16f2ee3a3e36610d2afc17be964a038704371cedfbe4da91143ebed5adac20dbda97768d6e6
TLSH
T13AD080273A196404F7964175A483D7061319956129579712F310C44C99775D553C11C2
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 c77e3e49872be1548d4fc1dfd903375e3857152af097a04f1a921b0da9e12b2d
MD5 185a3b602ccd99e8e9ffad2468c45b4c
SHA1 9b969f18dd30c332922e09743b24ea1d68df88a6
SHA512 ac8a733eda843f71370d6f80874e319f3dada1aedef4773d327c0efa123d43ab2b210a9c8dfa89a2c9a8cb50ec4afc9abdd0f24eead1accae57afc2443fbb3ad
TLSH
T1877127340572C3B1E3EA02B2ADD72FCD34728CF9F51B6E933890D8B6A6A8F14464514B
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5827e6.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5827e6.TMP
Size 3KB
SHA256 180de39b89f224041057c65b008592ddf0865d9ec7aac5f4e88639d0cbc8e7dd
MD5 e0a6e49301ec26e6f38d50c4fdb80a75
SHA1 5f5088f83b0e708e531b01b3d1c34f3e311ad045
SHA512 289ab2a5566e88f79f098b92b51d2cc944c87a1f1e71973a7e78e817b8b205b24683d1bfe6b2d614960739a75e1fbee2dde4e3c3aa680690ad5e3f78b84c81d5
TLSH
T1197128350572C3B1E7AA02B19DD72FCD34724CF9F51F6E933890C8B6A6A8F144645147
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 c06f1891efe310fcf94500899b5e52d78e8bde9c0d3dd764493d660a2412d78c
MD5 070149f3066111d12bc7897ce18c69f4
SHA1 cee91d45d9cdbcaf94b054042f569a87d8535371
SHA512 1cc571e48cb741ca3bd7e2299aa03332e9b98ff9da5232411ccfa953629ac8d18fb142a7cb752a61027cb04e9d9eca0e38c35a7ea7cbed174a5d717be7a7a2e6
TLSH
T15061CCBBC2D8477E845252F4AB256A17CD2D154B82283C46CDF9AF5F63E24B0D20169F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 acc4e0585a5f5d25da0f7d1acc4a577bc19378926b2d7b879ad22608a498060b
MD5 558d4f35a5b65273b8d8c1c44e43652a
SHA1 47f186a596aece9f50c25022a98266aada8c8c13
SHA512 d8ffdc46bbb3274ab0ef52d2c66e8fc0f504952a72cf5a1a23c0126f04d20d53635ea32b5dccd8ae1372307bdbf661714cf636f00334a92cd13c4197538fcac1
SSDEEP 192:sxZxq/yM/jK1Ml8MkM/f2snhGIdpdYHW6+WNGYCkurcRGIgrJ:sxZxq7MM/f2snhn6HbGL4+9
TLSH
T1D842D8156B389977CCCBD209FA51BF53D6F94572D2940D48AAFC8A0C04E6AED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 a539f41f9df16514f4b32b9f72baea50d262bfd0e187229dad1cb77c4b458d56
MD5 dc4b7eac03c3e4c601b700e15b2ae52e
SHA1 6a71631f92915369794c49acc05d51fd9c1a7e2e
SHA512 1f64d6df1e153873782a2e942c12e3c56a3b14a03c38736c85034292740ff48737dc07a863e44197d1edfa9094a8d348cacdc869befc7600bb4ca4135d279748
SSDEEP 192:sxZxq/yM/jK1Ml8UQMkM/f2sy0GIdpHYHW6+WNGYC1DFcRGIg5AJ:sxZxq7qXM/f2sy0n4HbGz4+C
TLSH
T19D52D8166A389977CCDBD209F941BF53D6F54472D2940E48AAFCCA0C04E6BED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 384d345cfc2997eb9d8e929a0cbc04caa0c244de0b7d4df8384f505a48e7e3ab
MD5 d51bb8edbbcac0ad4de6febbbba2b2e2
SHA1 052dcee7f1b230be622d1289972908072f504945
SHA512 70b663d386eb0ff3588fc2d492a6b1a7a8591de8dc5e9ba06d1bbb0e7af2168a3d94f19dc9c3af53a3eca94c1ef7e6ead490eb4d22046087be01e5ae9e9c0eaf
SSDEEP 768:H08bqn+WvSCt68F1+UoAYDCx9Tuqh0VfUC9xbog/OVnZLlRTKV8roV:H08bqn+WvSCt6u1jaCZLbWVnV
TLSH
T183D20B3B280CCB7E4F845E5DEC266F966ED801CB6B988D4447FA884C03C76EA511B5DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 24fb6a5a06e8188ed13aa3b9dc0f02659914f1cf4d8d5ff79e56f3215330cbab
MD5 87c66301c478c5f631afc5e996ae9e34
SHA1 0d2b4f7ca2589421ec3ff9bf2d0f55582d0644ab
SHA512 be3bac3f9be2dd25de55bf6e2430a80046a71561c2773f769e5bbe7387637c645fdda9e03e86959484cc763408ee2210cbe76284a2a29d5a42826fd11d0a4164
SSDEEP 96:KwZ2KCwiWliKuEyL0Ym+u2w+x9uY2K2Tui2yA45S4nX:MhJgRX
TLSH
T149917402713E02413C7D390895A6C92BCE82B5E63918A9BF7B7891B25F66E111DFCDDC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 2a5e728b03baccb60b0ae960e9ce15e3c12dc39c949d9494943a5c1a0f31f8b4
MD5 b8a0c8ef29c605d63a20b4451c0c6359
SHA1 f935da92208f9f19d5ef3dc8fcdab44a6a5534f0
SHA512 9443ee7dc27791540bfe961ef58764275be726421a663e89c3b7d6bb560239eed4b3cf4186690eb7184f614d236d960ce1456c863f0bb5880bef0537da0c4d7a
SSDEEP 384:DZcIhsNAYK2f0Ea+wOS7+2qxOObjI9G6w7wFW:bhqPa1OS7lqx29Mt
TLSH
T18A928C3269788C73AAE2A550F48B3A175FF8907BD7C95A84D2DCAF0C05DA5AC030A429
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 e2837fcdec0c83d9d06f39544af139a8cc9ba5ff7cd8143f64a8cafa737946db
MD5 8c20ed00a19800513a86871481bf3ad6
SHA1 1de7e1ef12081692292dbc17d6806ab69beebc81
SHA512 9900e27e348eb858ec5842140aaaae5a49824130768d29bd4d075a5d6bd47221a608fdfe7726fd307b3329ee4871648876cb2f625de6088ef2adc01710bbeabb
SSDEEP 96:EqONkEQsjpf1bxX5ih/cIPURHl8h4otop5HnD1BfPgvE5BzatIRdy+jCOmhsR1Rf:vONw6Db6QmiUyjLHBa+jcOmiRqRgPbU6
TLSH
T12202E639687C6CBB9EA26E48F88B37275FD4103BDA966B40D6D85F0C00D765C230783A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 8fd9f1efb8f7130eab6df19932cd893cf740d466ea2546907672789f8f6620b6
MD5 9eb836fbaf5c0763d3ab48ca8ad15be1
SHA1 e4488915ae8af6c11f54288c941998606a5ca45e
SHA512 261bc486875006c21a45c0964011c6e7afb7fa7cb0312653daa5dec1ec4d2fc4acde3218234fbaaaa029b5cc538752984a20bfac6c922e1447d131c490780789
SSDEEP 384:bZcIZzsNAdK2f0Ea+wOS7+2BxOObjI9G6w7wFW:DZ5Pa1OS7lBx29Mt
TLSH
T1C0928D3669788C739AE3A550F48A3A175FF8907BC7CD6A84D2DCAF0C05DB5AC130B429
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 9107f74301556e8c1ba24317f8974833175b165cf23a8fab41262a5fcfa6da8d
MD5 83fb11ea5b58f5fa107489244a71060a
SHA1 f477ce136bc4dcca2800e0d9a3d630d702ad5df4
SHA512 e08e87b7c8f9cd145e36d3c669f457d11b7bdc17fe9f77c9738c6a5d411ceb3cfe2432a73d0cf0710d02d703321e5cb57a95d0344dd8456a341bd7432676dfc1
SSDEEP 384:LZcIhsNAdK2f0Ea+wOS7+2qxOObjI9G6w7wFW:Th5Pa1OS7lqx29Mt
TLSH
T134928D3269788C73AAE2A550F48A3A175FF8907BD7CD5A84D2DCAF0C05DB5AC130A429
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 af9f89eae8bc7ff0d4e163f5acdccea5332f29eb58674fe5c69ff482a57e6979
MD5 2bfadd14a19c0a7590ab99272ec1b409
SHA1 24992cc26a25fe8cac4cba2460d0e81d1ad6d80b
SHA512 ce7b4c19fb0ff2b4942201f15a57f35b965909272427dd93e2f93f7c7382b34e9820af69de4c98eb4cef9c48190d8082a8f85dd0178f08be605063d2c62f983c
SSDEEP 192:0ONZ6DbnQmiUyALUBa+jcOmiR67+2ENzhqQU6:0ONZ6xHUBa+wOS7+2ExU6
TLSH
T17A120836797C9C775EE26544F48736135FE9002BDA8AAB91D6DC5F0C00EF69C234A82A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

01bbcc75-93fa-4581-905a-dc6c00df6001.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\01bbcc75-93fa-4581-905a-dc6c00df6001.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 bdad9f2143f686fbb5997f5cc3ed5f2b0fa4280aad4407632674123aaa1c77cd
MD5 3f71a602519cdc91276b95a5b5e113ed
SHA1 466a967f3a699cf34fd227d3ad06bc2d7f57a533
SHA512 a009007843e608847e137467129d77e80604b9c79139d0dfcd8074e8a0a81dae78ee73d8feed0d4394cb874acbbb0f17e952bdcd1b01c16ca7b34d97e3fc4a08
TLSH
T189413B59A6FA5108B3776E1AABF7686E487FBC672E06D45E00010D4F0662B40CDB2737
MD5 SHA1 SHA512 TLSH

Submit Download