939bca409027c35266e6aa10d06db00df2671f0a8a43eff5f2f1ac15aaa2eb4b

Analysis

max time kernel
149s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/08/2026, 12:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 43KB
Sample260810-pltkmaydjf
SHA256 939bca409027c35266e6aa10d06db00df2671f0a8a43eff5f2f1ac15aaa2eb4b
MD5 6ff8264ecd86eca51167c75679cebcb4
SHA1 1a6374b226db8082300a0f3cfa5f1599714e10be
SHA512 7957a179e0c754952656cad226e033f529746dd9918f3880480ba5cc4bb88bbebbbf337355033f6a7f39e5c81c5362667bc313c1c227c8c1db4020b8a9a1ae28
SSDEEP 768:mX9zvYZAZThfA5fXZpDyVNntJUUG29k1otQUAwLKrv+NPJe6ZsPDbVFjCn:mFYZAlC0taUv9k6tQBm
TLSH
T10C13943831C1147B50B782B166609B7DEFA5C62BD61BC658B2EDA7832FF7E014983790
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2484	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134308383350950429"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-668679576-120646659-2289335452-1000\{BC150CBA-188C-470B-A08D-370A36702E90}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3440	msedge.exe
3440	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2792 wrote to memory of 1100	2792	msedge.exe	88
PID 2792 wrote to memory of 516	2792	msedge.exe	90
PID 2792 wrote to memory of 2484	2792	msedge.exe	91
PID 2792 wrote to memory of 516	2792	msedge.exe	90
PID 2792 wrote to memory of 516	2792	msedge.exe	90
PID 2792 wrote to memory of 3820	2792	msedge.exe	92
PID 2792 wrote to memory of 3820	2792	msedge.exe	92
PID 2792 wrote to memory of 3696	2792	msedge.exe	93
PID 2792 wrote to memory of 3696	2792	msedge.exe	93
PID 2792 wrote to memory of 3696	2792	msedge.exe	93
PID 2792 wrote to memory of 3548	2792	msedge.exe	94
PID 2792 wrote to memory of 3548	2792	msedge.exe	94
PID 2792 wrote to memory of 3548	2792	msedge.exe	94
PID 2792 wrote to memory of 2964	2792	msedge.exe	95
PID 2792 wrote to memory of 2964	2792	msedge.exe	95
PID 2792 wrote to memory of 2964	2792	msedge.exe	95
PID 2792 wrote to memory of 3900	2792	msedge.exe	96
PID 2792 wrote to memory of 3900	2792	msedge.exe	96
PID 2792 wrote to memory of 3900	2792	msedge.exe	96
PID 2792 wrote to memory of 1768	2792	msedge.exe	100
PID 2792 wrote to memory of 1768	2792	msedge.exe	100
PID 2792 wrote to memory of 2060	2792	msedge.exe	99
PID 2792 wrote to memory of 2060	2792	msedge.exe	99
PID 2792 wrote to memory of 2736	2792	msedge.exe	102
PID 2792 wrote to memory of 1824	2792	msedge.exe	110
PID 2792 wrote to memory of 384	2792	msedge.exe	111
PID 2792 wrote to memory of 3780	2792	msedge.exe	112
PID 2792 wrote to memory of 4604	2792	msedge.exe	116
PID 2792 wrote to memory of 4604	2792	msedge.exe	116
PID 2792 wrote to memory of 3440	2792	msedge.exe	117

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ffabfaec188,0x7ffabfaec194,0x7ffabfaec1a0
  2⤵
  PID:1100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1648,i,914424272942768704,9049002123908068407,262144 --field-trial-handle=2172,i,18435216205158829229,15453086824996099907,262144 --variations-seed-version --mojo-platform-channel-handle=2168 /prefetch:2
  2⤵
  PID:516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1972,i,650615032938952502,12445530633939984920,524288 --field-trial-handle=2172,i,18435216205158829229,15453086824996099907,262144 --variations-seed-version --mojo-platform-channel-handle=2460 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2476,i,6952611446203824876,1402628904542758726,524288 --field-trial-handle=2172,i,18435216205158829229,15453086824996099907,262144 --variations-seed-version --mojo-platform-channel-handle=3108 /prefetch:8
  2⤵
  PID:3820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3424,i,6588511288100826738,5318911880471037994,2097152 --field-trial-handle=2172,i,18435216205158829229,15453086824996099907,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:3696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3428,i,13146316976871936670,8059234773960059214,2097152 --field-trial-handle=2172,i,18435216205158829229,15453086824996099907,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:3548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4156,i,15990838494583065240,4703396331554921619,2097152 --field-trial-handle=2172,i,18435216205158829229,15453086824996099907,262144 --variations-seed-version --mojo-platform-channel-handle=4172 /prefetch:1
  2⤵
  PID:2964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4192,i,119643013363214789,8415796918881143452,2097152 --field-trial-handle=2172,i,18435216205158829229,15453086824996099907,262144 --variations-seed-version --mojo-platform-channel-handle=4188 /prefetch:2
  2⤵
  PID:3900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3588,i,13063934254711073277,2586972333997124656,524288 --field-trial-handle=2172,i,18435216205158829229,15453086824996099907,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:8
  2⤵
  PID:2060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5136,i,139686426383815675,16006525515036446014,524288 --field-trial-handle=2172,i,18435216205158829229,15453086824996099907,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:8
  2⤵
  PID:1768
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5940,i,4240690902535708600,16292148292600145394,524288 --field-trial-handle=2172,i,18435216205158829229,15453086824996099907,262144 --variations-seed-version --mojo-platform-channel-handle=5968 /prefetch:8
  2⤵
  PID:3724
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5940,i,4240690902535708600,16292148292600145394,524288 --field-trial-handle=2172,i,18435216205158829229,15453086824996099907,262144 --variations-seed-version --mojo-platform-channel-handle=5968 /prefetch:8
  2⤵
  PID:2736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6308,i,12881839897981189008,330148479494990771,524288 --field-trial-handle=2172,i,18435216205158829229,15453086824996099907,262144 --variations-seed-version --mojo-platform-channel-handle=4408 /prefetch:8
  2⤵
  PID:1824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4192,i,11384671576117917604,2726922112721702407,524288 --field-trial-handle=2172,i,18435216205158829229,15453086824996099907,262144 --variations-seed-version --mojo-platform-channel-handle=5968 /prefetch:8
  2⤵
  PID:384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4768,i,4473194612687589277,820970835682315797,524288 --field-trial-handle=2172,i,18435216205158829229,15453086824996099907,262144 --variations-seed-version --mojo-platform-channel-handle=4416 /prefetch:8
  2⤵
  PID:3780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5168,i,12038637153320125650,12673562401586209552,524288 --field-trial-handle=2172,i,18435216205158829229,15453086824996099907,262144 --variations-seed-version --mojo-platform-channel-handle=5312 /prefetch:8
  2⤵
  PID:4604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6296,i,10594448872944705214,16235748354362317437,262144 --field-trial-handle=2172,i,18435216205158829229,15453086824996099907,262144 --variations-seed-version --mojo-platform-channel-handle=4348 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3440

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4976

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 4fbc0660f9f3056d5f36574b4004c58e5bf7b4539c8ad0bc0c3c5f5c791c776f
MD5 8410891e1250217cbd9dbe647ad5529f
SHA1 327802c1c5a4509900f7fe24316e0c502f8cbc38
SHA512 5034413d9345fbf305700f2a174f9c14d56e658cc489c615bb3e81afc0edbb449127f4aef51732eedfa1d11fb6ffa8cb919486fe9b500b19c34cebb226d0b956
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7x:fwUQC5VwBIiElEd2K57P7x
TLSH
T1C6B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CrashpadMetrics-active.pma
Size 16KB
SHA256 814d47aad78c212b52568b9c7b58d242899d490d3afebce66181cae50c880df5
MD5 8c7cdfea4284ba987d295d82a9c7ddd6
SHA1 7d1a3a66f2d64a383b230196ba89a263ce7ee957
SHA512 59c8229e834c944265aed4131c79f41f9f940a48651b9fb18800cef5bae36d17c7fd5880120c6fee8ce22a157b65bc63846b65765bc4dc86e15926dcce400d0d
SSDEEP 12:sf9iXhV0xoUZxCe+JKlkQuMRxCb8TXuYJ0IJpPK6BsyW1inPiz:U9iRqxoUZxWMk8xVTeYWI31BtXP
TLSH
T105724C85B34498FFC8835E7189BD27903774F6DF1F02866B6A6A760E2E271C84F44224
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 1c8e6fcbb66aba64fe595f222fc4117e00e82ccdc0eef2100a1b4f7babb04f87
MD5 398d1e7948d46a763209c466fdacd0fb
SHA1 b26f2c32bc106089a59ce779d792beaba59f92bf
SHA512 a0bbf31d803e7333d004f03de9c261732d00cceb5d82dd64b5f0decf8adc8b840891187c72bb21cce83873e6d4dd2fab89d4c7efa320afe2ef3589678dcb1424
TLSH
T1B6D080277A196004F3964175A483D7061319956129575711F310C44CA9775D553C11C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 5d2c4e39ddbeb0ac61628bae04f1ac5787600ec893b0e230d1a84d61470771a9
MD5 cd6e704306442404371caebfec7f5b29
SHA1 e4beab8b7820af3633bf7c75a5498a958a95832e
SHA512 de66681a9245e8ece7d7e2ea2080251c395f2aeb8a885ac007eaf16f2ee3a3e36610d2afc17be964a038704371cedfbe4da91143ebed5adac20dbda97768d6e6
TLSH
T13AD080273A196404F7964175A483D7061319956129579712F310C44C99775D553C11C2
MD5 SHA1 SHA512 TLSH

Submit Download

71df6872-83c1-4be2-8825-70ccf43ddd98.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\71df6872-83c1-4be2-8825-70ccf43ddd98.tmp
Size 12KB
SHA256 45195bcb07e91403fdfa6b01ed8061932ff19b4ba2823ef2ac0c884dd5a6f906
MD5 919a1340f8dbfc4c94f16a1caa984be7
SHA1 317c762c73bfda4de4e1f897447dab687f78c22d
SHA512 31c9136e27fa0bf0ba29a20b783521142aae2f019c0a9a02db76f0f5c25d65fa13e1a81af323c92d0bc0ad72032595dbdbf5ab76a0de77952e0bd14cd98aab27
SSDEEP 192:sxZdRjyM/jK1Ml8Mkj/fjsmbZIIdpdiHW6+WNGYCkfri9IgrJ:sxZdBMj/fjsIZ5kHbGY+9
TLSH
T17C42EA156A3459B7CCDBD209FA55BF53D6F9147292900E88A9FC9A1C04E6AEC220382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 d4b031ad2c6795c85e4e93326b509d71516f7ace15406521e10d3a2c0fdfd2b4
MD5 b4c4fc526509a3897fe10bd23b9a1297
SHA1 d884829c2597e97480a2a8aa633a1d04aa80e067
SHA512 eed9dc63786f6522993ab389c3053140ae5830395ef8cd22f24544401bf0315e51de19df60e95f540d87ceeb9db1cd043b7ec3023598e1554e46392e99863088
TLSH
T180614B35016AA9ACD730023154E2115E70BDCFECFA33DE95287388F4DA06F3986D91C8
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe584dfc.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe584dfc.TMP
Size 3KB
SHA256 99a39182cdd627eadfb2f1718d61ef071a9c478060656c4b60736aa3fa1d60d0
MD5 b6ebff6a875fbf0b3d70bea0640b3e3a
SHA1 a0c3289776233c70e002cce78a743c74074f7a34
SHA512 49c447b4866e777cc4759957ff4b497c50437147de406b13012127271a532fdaf43433c79197f4f85c7a479d90fd5458a24743b993b7bace0f47234dccaefc34
TLSH
T1E4614B35016AA9ACE731013154E2125E70BDCFECF937DE95287388F4DA06F3986D91C8
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

08530102-4138-46f7-ad14-0abd2e6c3502.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\08530102-4138-46f7-ad14-0abd2e6c3502.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 d4628b6016d33f0a4a5ecaf26480717d87f77ebe9a0cc15547bc79d3143a2757
MD5 f8bcde4be6c50fec8e03bc85efc6ebda
SHA1 9b28487ca5f66fcbbbb4dc3a5cc102f60afe0862
SHA512 b6b73ba5fbf8ccf23edc14dfa6807b6c856b2d27e78f395fc9ed724b0129c36ff7c4ce028764d1f21756228c2e3ccdec60312b9ab2c8a74b805bd739963d7ce7
SSDEEP 48:YALlNGOgOgwg1g/ogegSzZHzs+zEsm1dzsXYVZMsb8s7YlKzVsKPJssKXsPLXsBe:DAOnRsnVJZXz6EiZnHYlK1PHKuL85GwQ
TLSH
T132918DBAC6E847BE881612F09B256D16DD5D065B82283C678DF5BF1F63F20B0D20169F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 0b4e085e33ca385a3cd535d0d24bd9ffc7fc638bf74d03c9321e6075941b69b9
MD5 a8fc82570b3b12327d5689bd823bcbed
SHA1 e97cdab67ca02e14047bed833d3a924d76ea028e
SHA512 fe11558064084bc9069c290848f2a5aecfdc7d902c2d3624c457264c54cbe6700980ab3381485cfa39fa076aa19ea1adb8022e509dde1d86141201d8c558ec78
SSDEEP 192:sxZdRjyM/jK1Ml8UQAkj/fjsnbnIIdpHiHW6+WNGYCj8ri9Ig53J:sxZdBqTj/fjsbn5CHbGW+f
TLSH
T1E252D915663459B7CCDBD20DF951BF93D6F9187291940E88A9FCDA1C00E7ADD221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 fb70689f4cbbccd90ddbc9677f2e69fcc8f5832a6ea7662c77f2d0337a98466b
MD5 fda698d0616591c2713e24f222b2dd77
SHA1 5860ab2e841e38a9ebf84a190a1036db90fb35c2
SHA512 d323903bd240d5b04f8c5b6f2838535c5376f8b75b41eadf638b904ebbca31d892673cd6e53c6946cac9c70114015e6aa52d793a1ecbd689ae11bffb78bb7188
SSDEEP 768:DA8bqn+WvSCt68F1+UoAYDCx9Tuqh0VfUC9xbog/OVnZLlRTKVQrov3:DA8bqn+WvSCt6u1jaCZLbWV7v
TLSH
T1E8D20A3B280CCB7E4F845E5DED26AF962DD801CB67988D4447FA884C03C76EA512B5DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 0846eff7bc5025c836943f8dfb1d3f84f7137cc976c0314452628d53bb53504b
MD5 841ae145d0d74d5576d50723f80735ed
SHA1 30db6054a8d5cec6eacb77ce22b6b87bcf5d3d83
SHA512 a9f4b0fd1faf21e236bad869449130043bb12c2508a77d61d6e5f728c05ab0559dfe0f86263eb4f8902aaf0b2f1bba88fef098c74053dc43a75f81a7f9966cc2
SSDEEP 96:KAVqKG0CWxS1RTL72JLk97R2KjT7X2nZxsHxni8YKhus:wd3/7v
TLSH
T1B491134A35BA0212283D258DF297863B0F4239A37158E5AF3FB850715F6AE111DFD8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

feba7062-bb03-43b9-93d3-49986113f6c3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\feba7062-bb03-43b9-93d3-49986113f6c3.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 1c39c11507a36ba471f8fd45b57228a666c17d96ca4f8c0e2770988cc616c906
MD5 919e95009b6c83d4fbf47a225e26bae7
SHA1 9a916c53addc98b3912c4611a19a483bfe3796b7
SHA512 b31eef5757e17747e54d1691e15974eac904c00bebb2cf67d35a6d38b98f05a193c278c79e5178c970ef79aa8c2e2ac6c1fbabf2507eaee8385b83adbf5758c8
SSDEEP 384:KZcIhsNGcJDhbOLfEa+SOOqm/PQ6HlytEDq1XrWP:ohtsanOOqm/PQoy6DqNWP
TLSH
T12E929F31A9785C775DEB6245F88A36138FFC902797D46FD8E1DDAF1D00DA198130B82A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 c41bd725bf0931bc65900d428d2f524ccf9b7d5fb0eac59960354c17d30000b6
MD5 51112fa3edc1413041f1d11e524f396a
SHA1 335bfd573921cc81584c6a63b1e4428538b38a71
SHA512 8ff6cdbc420f606412edb8ab3905f0ab3a04605f075bff340a7f2ebe195b7f1d5ba0ed7c58600eedf4fd04ce0fe7adf5c8ee39f36d83701802ba68f1cdcde86f
SSDEEP 192:vONy6Db6QmiUy8y/HBa+jWOmBwR+sRg67vU6:vONy6ubOHBa+SOOpkU6
TLSH
T1F802E83569686CBB9EB26E48F88727175FD4103BDA966F94D6D81F0C00D764C230783A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 3a2fd5d7f69c31b8ca7f666fa73c6e97671793f1027157a73afcc40c24c41712
MD5 a13046078987133d075a45ea5ad65337
SHA1 030bd71d3cb595d0743a51f6d0b537dbcfb46b2c
SHA512 634609caab7d87de0ea1458482446d6ce2fe7079dbd80dbdb9917e483c672e01d817250244e460d0965132c2f0e5f9473dfe45feaa8e9d749280999937477292
SSDEEP 384:VlZcIhsNGlJDhbOLfEa+SOOqm/PQ6HlytEDq1XrWP:VdhqsanOOqm/PQoy6DqNWP
TLSH
T1A4929E31A9785C775DEB6245F88A36138FFC802797D46FD8E2DDAF1D00DA198130B82A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 ae380ed8c684788a7c7039a9d76c7fc11ebe71a392229b06378c3e0ffc3538a7
MD5 02942faef20844f959be9b8ff49e2923
SHA1 a27eb0f0408bf5408f27aebf773ba40d3abadc2d
SHA512 0fc39fd5b4d42a65d0a4177eacff52ae864545f2207d070579b67828657cff0f3733f45253e8620479a5b09534bcc7b2d9d0e3e79a14417b7a27838c16f0db1e
SSDEEP 384:9/iFiZcIuzsNG8TUNTUlIllJDhbOLfEa+SOOqmUPQ6HlytEDq1XrWP:9KFQuXwgysanOOqmUPQoy6DqNWP
TLSH
T199A28E329964897B9EBB5744F84A35138EF84067CAD5ABE4E3CDAF1D00D719C130BC25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 ea8a81966be15beaf5757a4d260ad66d8d51fb78e2f64a360c4c6a1cd1f64439
MD5 74a1d9bc1aad9ffa034c075dd73363fe
SHA1 f14bb4924880cd8e5269539c9f07ef7f73d4a6cb
SHA512 d88196915810d2f5d2d31d49e681ae4d4a7ecbea05716bfea7c03abb1a62a7fa79232e76f5da3621bcb4ffc21ca4c6eca88f11dae2fb1dba56efbdb1a201c008
SSDEEP 192:dONH6DbSQmiUy84/9Ba+jWOmBwR+QmZpNzErqZQU6:dONH6mbU9Ba+SOOqm5PQU6
TLSH
T123121B3679689C775DE26584F88732139EE8513BDA8A7F94D6DC2F1C00EF65C230B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a2fbedb4-5b99-4a74-8989-0b61748339d2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\a2fbedb4-5b99-4a74-8989-0b61748339d2.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 531c98296326c2569184c9c112f37aed0d11524d9037c7bc161214891a76130c
MD5 111f48513545f0975c4300e9f886f3b8
SHA1 126497b353a9c1313c658c56adc77fae0e5554dc
SHA512 e323b18a54fea1479e2d5ab9d3f0da5aa2ca5242898a9a6281c87b7ee305603ea4558246c583d8693b123da5f3098b9a1a7ff2b47c26c8bd519f645b02c4b560
TLSH
T1D041E65CB6E91148B3B76E5A9BB6786D447FB9672E07D49E00050E8E0A33B40CDA1B37
MD5 SHA1 SHA512 TLSH

Submit Download