839b48a8935047a90d4f10491303019b701a53cc7201926827a1c8a1c7d0bf5e

Analysis

max time kernel
148s
max time network
184s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
17/08/2026, 22:46

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Cataclyzm PC V0.37/www/index.html
Size 1KB
Sample260817-2qdfeseb47
SHA256 839b48a8935047a90d4f10491303019b701a53cc7201926827a1c8a1c7d0bf5e
MD5 d7be270d4770cb7f83cc11943a6a373e
SHA1 d34debc0146fb250774b3ad31a768eec5f1736da
SHA512 f3dadc6cd314028785201a86b6b41aab6cbd6d0330a299ae9b2e271c9b0476edf860be28aa4a725c9f011704985625e0a3920df5033219bda1024f9af9c7d43b
TLSH
T1E231730E6C86CC54A0304AD6C8B1F859DC48A3269750CCD972EC54BB6FB4BEC0C279E8
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2604	msedge.exe

Checks SCSI registry key(s) 3 TTPs 4 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	msedge.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134314815948579344"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-204488895-2999877624-296153668-1000\{20FE800B-CBB2-472D-9889-65970FD56B54}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4440	msedge.exe
4440	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe
3952	msedge.exe

Suspicious use of WriteProcessMemory 34 IoCs

description	pid	Process	procid_target
PID 3952 wrote to memory of 4092	3952	msedge.exe	89
PID 3952 wrote to memory of 2604	3952	msedge.exe	91
PID 3952 wrote to memory of 1920	3952	msedge.exe	92
PID 3952 wrote to memory of 1920	3952	msedge.exe	92
PID 3952 wrote to memory of 1920	3952	msedge.exe	92
PID 3952 wrote to memory of 408	3952	msedge.exe	93
PID 3952 wrote to memory of 408	3952	msedge.exe	93
PID 3952 wrote to memory of 4348	3952	msedge.exe	94
PID 3952 wrote to memory of 4348	3952	msedge.exe	94
PID 3952 wrote to memory of 4348	3952	msedge.exe	94
PID 3952 wrote to memory of 4524	3952	msedge.exe	95
PID 3952 wrote to memory of 4524	3952	msedge.exe	95
PID 3952 wrote to memory of 4524	3952	msedge.exe	95
PID 3952 wrote to memory of 2436	3952	msedge.exe	96
PID 3952 wrote to memory of 4436	3952	msedge.exe	97
PID 3952 wrote to memory of 2436	3952	msedge.exe	96
PID 3952 wrote to memory of 2436	3952	msedge.exe	96
PID 3952 wrote to memory of 4436	3952	msedge.exe	97
PID 3952 wrote to memory of 4436	3952	msedge.exe	97
PID 3952 wrote to memory of 5004	3952	msedge.exe	98
PID 3952 wrote to memory of 5004	3952	msedge.exe	98
PID 3952 wrote to memory of 3824	3952	msedge.exe	106
PID 3952 wrote to memory of 1912	3952	msedge.exe	107
PID 3952 wrote to memory of 3824	3952	msedge.exe	106
PID 3952 wrote to memory of 1912	3952	msedge.exe	107
PID 3952 wrote to memory of 4896	3952	msedge.exe	109
PID 3952 wrote to memory of 4292	3952	msedge.exe	113
PID 3952 wrote to memory of 3336	3952	msedge.exe	114
PID 3952 wrote to memory of 2664	3952	msedge.exe	115
PID 3952 wrote to memory of 2220	3952	msedge.exe	116
PID 3952 wrote to memory of 2220	3952	msedge.exe	116
PID 3952 wrote to memory of 2084	3952	msedge.exe	117
PID 3952 wrote to memory of 2084	3952	msedge.exe	117
PID 3952 wrote to memory of 4440	3952	msedge.exe	118

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\Cataclyzm PC V0.37\www\index.html
1⤵
- Checks SCSI registry key(s)
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffe3b1fc188,0x7ffe3b1fc194,0x7ffe3b1fc1a0
  2⤵
  PID:4092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1964,i,6319290203770674101,18197947394488871422,524288 --field-trial-handle=2264,i,3916826448706946545,16296836286769213667,262144 --variations-seed-version --mojo-platform-channel-handle=2324 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1664,i,4746655109548599044,18198370422951864593,262144 --field-trial-handle=2264,i,3916826448706946545,16296836286769213667,262144 --variations-seed-version --mojo-platform-channel-handle=2260 /prefetch:2
  2⤵
  PID:1920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2588,i,5926715992457361099,11414380565362553123,524288 --field-trial-handle=2264,i,3916826448706946545,16296836286769213667,262144 --variations-seed-version --mojo-platform-channel-handle=2424 /prefetch:8
  2⤵
  PID:408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3380,i,303408991399467872,5211383649468918519,2097152 --field-trial-handle=2264,i,3916826448706946545,16296836286769213667,262144 --variations-seed-version --mojo-platform-channel-handle=3376 /prefetch:1
  2⤵
  PID:4348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3384,i,3263102246965399531,639510813777513696,2097152 --field-trial-handle=2264,i,3916826448706946545,16296836286769213667,262144 --variations-seed-version --mojo-platform-channel-handle=3444 /prefetch:1
  2⤵
  PID:4524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4228,i,1751287577399183189,579351752211924054,2097152 --field-trial-handle=2264,i,3916826448706946545,16296836286769213667,262144 --variations-seed-version --mojo-platform-channel-handle=4248 /prefetch:2
  2⤵
  PID:2436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4200,i,13923151919793900430,7989657673816495426,2097152 --field-trial-handle=2264,i,3916826448706946545,16296836286769213667,262144 --variations-seed-version --mojo-platform-channel-handle=4244 /prefetch:1
  2⤵
  PID:4436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5000,i,17911668480480466021,14415858575123644022,524288 --field-trial-handle=2264,i,3916826448706946545,16296836286769213667,262144 --variations-seed-version --mojo-platform-channel-handle=5068 /prefetch:8
  2⤵
  PID:5004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5072,i,17379392317419581380,1677766100966410691,524288 --field-trial-handle=2264,i,3916826448706946545,16296836286769213667,262144 --variations-seed-version --mojo-platform-channel-handle=5536 /prefetch:8
  2⤵
  PID:3824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5484,i,18266151106853184013,4980459214763879183,524288 --field-trial-handle=2264,i,3916826448706946545,16296836286769213667,262144 --variations-seed-version --mojo-platform-channel-handle=5556 /prefetch:8
  2⤵
  PID:1912
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6284,i,1261119355055479649,16883160545809761847,524288 --field-trial-handle=2264,i,3916826448706946545,16296836286769213667,262144 --variations-seed-version --mojo-platform-channel-handle=6300 /prefetch:8
  2⤵
  PID:1524
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6284,i,1261119355055479649,16883160545809761847,524288 --field-trial-handle=2264,i,3916826448706946545,16296836286769213667,262144 --variations-seed-version --mojo-platform-channel-handle=6300 /prefetch:8
  2⤵
  PID:4896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4296,i,1978883220494503090,529521629054666351,524288 --field-trial-handle=2264,i,3916826448706946545,16296836286769213667,262144 --variations-seed-version --mojo-platform-channel-handle=4412 /prefetch:8
  2⤵
  PID:4292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4312,i,13255662086533511808,11475742307264653124,524288 --field-trial-handle=2264,i,3916826448706946545,16296836286769213667,262144 --variations-seed-version --mojo-platform-channel-handle=4224 /prefetch:8
  2⤵
  PID:3336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4408,i,4581142666202168302,14678777154724521344,524288 --field-trial-handle=2264,i,3916826448706946545,16296836286769213667,262144 --variations-seed-version --mojo-platform-channel-handle=4352 /prefetch:8
  2⤵
  PID:2664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3028,i,10234930136277405683,11926589738142081005,524288 --field-trial-handle=2264,i,3916826448706946545,16296836286769213667,262144 --variations-seed-version --mojo-platform-channel-handle=4968 /prefetch:8
  2⤵
  PID:2220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6664,i,13665127541882445989,4357637756604248413,524288 --field-trial-handle=2264,i,3916826448706946545,16296836286769213667,262144 --variations-seed-version --mojo-platform-channel-handle=6248 /prefetch:8
  2⤵
  PID:2084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=756,i,3860287812851145078,8766177421744873609,262144 --field-trial-handle=2264,i,3916826448706946545,16296836286769213667,262144 --variations-seed-version --mojo-platform-channel-handle=6132 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4440

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3240

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 acf2ca2fd979c7d8ae7b74bb0af4308e4abd3e42e1f32fd1a04b0ca1a2b166c8
MD5 80eaf72bc0ff9c89a5c23f07f38ee8f5
SHA1 cbf109666417a1db022b3f49a91481b9755a1b8e
SHA512 b21d0ebff096128eae96a603cc0e96af95cbca34e613c40faa0cc8c5c17961106d997b66011c3051ead599494bd80939479f2526a2e65ff25600b04b19065afd
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7T:fwUQC5VwBIiElEd2K57P7T
TLSH
T15EB3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 cd640af4b18734f838b65cd3f2b65e25dc669e7cc487a16f826240b353446af4
MD5 337b94f0014654439210355bd20e82dd
SHA1 26e4c8276331781253e2a807dd554b2ee3ad7e8e
SHA512 087107a51c83ccffad34c7d3f5423a0f231d30a9f78e9ed5db98eb770bada291f65c7b34d1e72284571b846a7acdf88b217ef4da25b7acff47964af1551b2e9b
TLSH
T1B6D012323B197041E71A8130E403C74017AE54B524864606A254C50D6DA90C592CB682
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 85f865adbe5e58c0596a4db9b9daa509b8e2bd087dbcc9a01a5a095a266757bc
MD5 29ddc94c4e214fd03f664130dd36edfe
SHA1 10dfd57508ad6ef16445956dc1ee4d8c2bffc4e3
SHA512 fa7477f3f8068f41dae4965a930de8ad11b234c1ccfcd17a84fb2bfe4c289beebc19be8d058f75ed01b6dbe7304af8270da91d31316fc94360f4fa750ab203bd
TLSH
T13AD012323B597441E71A8130E403C74017AE54B524868706A254C50D6DAA0C592CB682
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 0355e9628ec899f7b76e9975af689082af725a0533cb0f282dc50f3f29ba5633
MD5 40a27cc298fbb209b80f4c7842caeb28
SHA1 229af84e132490bc3ca0dbcf4d032c9ee207ee04
SHA512 e823dc0f433726f97657efa7254aa6eadb70d5946c44440de54f630f0cc1926f62229005ceaa666375b14e04a1274e914f053527edafa7c53e8feda6b46b91e4
TLSH
T15371B634013500ACE36042B1A4ED65457DF581E8FD375F02A1DC7AB7AE0EFE4A76AC49
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59332c.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59332c.TMP
Size 3KB
SHA256 f819c0cfed51a5cc8e0c849f3a2552927b1de20a4f79f9ed74d2c4c7bac197de
MD5 178a09bbfea3bd9fc99431d2b8a2a6e8
SHA1 881b3d0a2081ec4a8fa15228b0a4b60f164bc3b2
SHA512 0334dbde311a0c84d74176024ee479e18808b8ee28575bf09f48beadd466d57b5e3217c1f4138d638a4560e1da02dc13f5bd70a1c9a6de2da74d0bcd3725fad6
TLSH
T16971B734023540ACD36041B1A4ED65457DF481E8FD375F02A1DC7AB7AE0EFE4A769C49
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 fb4529da55e12cfa77dd600f045a8759b2622705cf97323a4d07f4c7a44d5e52
MD5 ddec86a58eabeec4f4778a8a276c69b0
SHA1 64ff2ef23d47ba96d0cbe3694bae149a824d95da
SHA512 0f1d3b3e79b7d14b66479890c1fc2a3fc1e22de19bbba3340cd082e23494e75b6929ad2a7f9ef7f9674ec730a842c799cf2e03f8c9cdd6e15e526248d948ccb5
TLSH
T181115BF3C3D5856E890116F05A28AE2BDE1D0606431C7C1589D4EF2B93E3065E10255B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 b068172cef8e4242e7cf186813858cf77356274d86ee641eac372303977f1ccb
MD5 30be2d7e78f77cbc8e5aa5f3c0400447
SHA1 24fca26f3f56d4c5b96755720fa96b5e93ea9c40
SHA512 d4492441d4208d105e6a887dfbc9496a6f756a125bf19f285378047f526ac5b12d7e14fa0388feab232da61c24475ee62ce34930169c7c9e209a90596b5169da
SSDEEP 192:sxZxRqyM/jK1Ml8Mk2/foskbSnIdpd9HW6+WNGYzQOH6IgrJ:sxZxgM2/foskbFLHbGd9
TLSH
T1E542D7116B34A97BCCDBD209FA557B53D6F8457292904E44AEFCCA1C04E6AED2207C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 dc19763152413f55c7f863c7c3d95937adb8bdf896b05915a51f9e892e17cc2c
MD5 6c1c6d29916ccfd18ad3645cc8698f87
SHA1 85be1615e8b9ded8c92e8b8008e6abb9a27f4a19
SHA512 d4c5ac24e190aa6c2967e053b2871ff5b0526d90c3ed8aab56414949002546022a91b4670069d5a6a4e6aa3bb49905df8e045105be148181f87c84f55f46e3af
SSDEEP 192:sxZxRqyM/jK1Ml8UQEk2/fosOgSnIdpH9HW6+WNGYzVVH6Ig5TJ:sxZxgqf2/fosOgFdHbGzL
TLSH
T19652E8116A34A97BCCDBE208FA457F53D6F4457392904E44AEFCCA1C04E6AED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 12a7b57b70929d33624f120d27e0242fe214b3f0d01543122fa683ff32f19516
MD5 652dfa1273c5b8f0f6b813e35a5bf601
SHA1 aee53622afa9f26f7caf818194c7dc9f1c70b8ec
SHA512 72a24713d337a5587799b10cbce322723b50bd13d7bcb8a24e23218aade688ca16de503672166e453f7149c4b7fcb8047c99ea4d9ddeb6b7d86fa6d03b2e52b3
SSDEEP 768:2JW7kf0Wvqida8F1+UoAYDCx9Tuqh0VfUC9xbog/OVX5LlWYSjJroIHi8Yx:2JW7kf0Wvqidau1jaa5LA3jihx
TLSH
T1F0D20B3B680CCB7E4F841E5CEC266F966ED801CB66988D544BFA884C03CB7EA51175DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 96c53e3c4e3eb776099529636152570fc843c71fc20b6896c06e7753758ca02c
MD5 942bf7e6d2e720e3c1179fb9dd7052c4
SHA1 9f9a465db4d8a6aa877f0371c42d97fcd01d43ce
SHA512 013da413be144b1f557879d1cd319499107b89d6ae3432c7af19423911a281b2edaf56aac6a905e4dc53a45227489e020a8a672f67925746bb0449db276bfc94
SSDEEP 48:KfSVOyIQA2aQL9IZy2KYTT4IHKVG8jyJCIfKLagLQIjKZz:KIbCKcT4wKVGKaCMKLaEQYKZz
TLSH
T101917751363B1A013CFE6908936ECE374E9236633418A46F7BB955650E67E211DFC8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

90e582ea-c280-4a86-a3c7-3c0ff3e9a36e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\90e582ea-c280-4a86-a3c7-3c0ff3e9a36e.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 6071f75c4c44fc53fb211c177c5e86f2b1af36640fd25b93edd0e3a7b2295db0
MD5 6bd6a74ba10a2a9220e55df7ba0e83d7
SHA1 62a6262e474909af3d4a5251a149487b5ce920b2
SHA512 4818bb712f1545b1757525c988f9d4fc42f352e131c0e59ad4ca029775c83ec5b02e6795ba12fcd45a3af1e8e042d67efa79370a19698f140672a8408e18e5dc
SSDEEP 384:VZcIhsNRXrbr1turdV5+25gySllYJTfY81FPxBu4:thMluVl5gZuTHvBu4
TLSH
T1FC929E715C245C3B99A7B159F44B36034FF8817BA3C8AE84EAFDAB1D01DA6EC1316816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 62a5628b44980d51157f7ea7e875a72ae0db5b5857b3013666a33fb36ede7cec
MD5 b7f9e5cb06bb862cc9ad8c463efaf305
SHA1 c2e3e2648448092956e0be57ed6e12e1acc623e7
SHA512 72bea7332051cebfffd3f73e7d87012116d4960e144c514a1681f9e5eb6bd27b9f25cfab7f92aeca41767468b7aa23bccc514822ac83a58d54dcf6db46d6f627
SSDEEP 384:FiFiZcItsNj8TUNTUlIlOrbr1turdV5+2+gySllYJTfY81FPxBu4:MFQtOwguluVl+gZuTHvBu4
TLSH
T124A27D734C54883FADA6A649F54A36038FF8817BD6D5EA90FBED9B1D019B1EC0306C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 2505636a8a74c03733d47bb53d04de0569f4d30b63a0a80cfda2bbaa676fff1b
MD5 24379a9feb070dbc659c670f972008e5
SHA1 96bfa065fd4cc084262f2211811ee9e5026017cd
SHA512 1e071409b098c00e28b238f3891f1517c8b7401c311c09a1cdc2939091db4b806d6ac518c82daf3dfc0704c55344281b207c9d8edf30c8f16bcdf564f99fdd5c
SSDEEP 192:MONM64BAQmiUyi1dW5GBPKUq+FdGe5A0aD0xU6:MONM6eARXWUdVsMU6
TLSH
T1D402FA396C796C6B9EB27E45F4873B179FD8113BEA946B44EAE85B0C00D725C2303827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 70235ddd84aa1e755aac5789fb0bd3d11b5d9a6bc95b71d2570cbd5f53d4e812
MD5 ff7cec58c2f1887107829c5a958eafcc
SHA1 8ec3b7ba813068c7e70a25ad4bf95fc3daf12b10
SHA512 9e0eed8160c7e831f08d00ce8f983d235ca7fafefe09b67901ceeab4f2b24520297c7c15218fc81647fc5e1cd2c9f75e15acce426ccf46b2d7b2b80db88d4b69
SSDEEP 192:6ONU64B6QmiUyjd45GBPKUq+FdGe5AMV+2aWw0qmU6:6ONU6e284UdV5+2YgU6
TLSH
T12E120A3568646C2B5DA27555F08736139FE8423BFBC5AB40FAEC6B1C01DF6AC2306816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 df0558542cc800279d6e50460eb5dc8410bd92b606575f51614a07ed78e56948
MD5 43f44ff5834dcd99cbf5f31cbcb7cadb
SHA1 ddd54958926b7fcc846c4ffa3571d415b6275c98
SHA512 b71096fdc6145e4a6e52f9c6f1f50e44b93fec3bb846ca7ba2ff4fe690b5f6793426239bcd4934964dc3e087d2422f1fe8d0035f5bd950bd701e556674ed6cef
SSDEEP 384:mZcIhsNROrbr1turdV5+25gySllYJTfY81FPxBu4:0hBluVl5gZuTHvBu4
TLSH
T154929E715C245C3B99A7B149F44B36034FF8C17BA3C8AE84EAFDAB1D01DA6EC1316816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 a6dc388bd042be60491ddaeb047cd12c25635093f457b661cfbc836c1fa5619f
MD5 c238c29c0d2a39199264c402b86b81fd
SHA1 dbf8f2d8d540def6306f2d6852dc93e9ac2e945a
SHA512 21ec340aff2a9aff42513eda31c2197a2e98aa90e6d42554fa2395663ce5c575765ab94b3610f49e79d45661e092e8acf0b5c56e438cc80e071a62033c7376fa
TLSH
T15E41285CA6F90108F3B36F569BF668AD487BB8772E0AD49D00110D4F0A73E40C8A2B37
MD5 SHA1 SHA512 TLSH

Submit Download