bf7401b1617f6cf645a926a44f87ab0708726e2a0e9d740a059a15d7e4b88232

Analysis

max time kernel
148s
max time network
143s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
20/08/2026, 12:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
vishal1/privacy.html
Size 29KB
Sample260820-plz3eack4x
SHA256 bf7401b1617f6cf645a926a44f87ab0708726e2a0e9d740a059a15d7e4b88232
MD5 a51fdf6cddcff0bcad07d7771cb2605d
SHA1 7badf31ff87ffef233fdc438cfdc3d5ddafe11c5
SHA512 2963491a42079d1a74b42d275b1d389725ab16cec060869ac43cf4d24cf98cbcaef235d26cfd3f37596409313a36874c19dde15fd90af2a4267733040cfbf6e0
SSDEEP 384:XQJuIx4tN5kDi7N2pYwNOgzW/YzUz2T7F8KpY5zrKQ68IpBzsgSoOiy1QCAW:NN2pL57UHoO71QnW
TLSH
T155D2A667D784226221B202413F53ABA5FF29806B735585A63C6D820E1FF6E189B373DD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4356	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134317023509100023"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1788976790-1541110888-1636651838-1000\{D8CCAEF8-6F05-425B-9C97-8BD430A95B9A}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4484	msedge.exe
4484	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe

Suspicious use of WriteProcessMemory 34 IoCs

description	pid	Process	procid_target
PID 4460 wrote to memory of 1440	4460	msedge.exe	85
PID 4460 wrote to memory of 4356	4460	msedge.exe	86
PID 4460 wrote to memory of 2060	4460	msedge.exe	87
PID 4460 wrote to memory of 2060	4460	msedge.exe	87
PID 4460 wrote to memory of 2060	4460	msedge.exe	87
PID 4460 wrote to memory of 4268	4460	msedge.exe	88
PID 4460 wrote to memory of 4268	4460	msedge.exe	88
PID 4460 wrote to memory of 3632	4460	msedge.exe	103
PID 4460 wrote to memory of 3632	4460	msedge.exe	103
PID 4460 wrote to memory of 3632	4460	msedge.exe	103
PID 4460 wrote to memory of 4552	4460	msedge.exe	91
PID 4460 wrote to memory of 4552	4460	msedge.exe	91
PID 4460 wrote to memory of 4552	4460	msedge.exe	91
PID 4460 wrote to memory of 3900	4460	msedge.exe	92
PID 4460 wrote to memory of 3892	4460	msedge.exe	93
PID 4460 wrote to memory of 3900	4460	msedge.exe	92
PID 4460 wrote to memory of 3900	4460	msedge.exe	92
PID 4460 wrote to memory of 3892	4460	msedge.exe	93
PID 4460 wrote to memory of 3892	4460	msedge.exe	93
PID 4460 wrote to memory of 3876	4460	msedge.exe	97
PID 4460 wrote to memory of 4296	4460	msedge.exe	98
PID 4460 wrote to memory of 3876	4460	msedge.exe	97
PID 4460 wrote to memory of 4296	4460	msedge.exe	98
PID 4460 wrote to memory of 4660	4460	msedge.exe	101
PID 4460 wrote to memory of 4076	4460	msedge.exe	107
PID 4460 wrote to memory of 904	4460	msedge.exe	108
PID 4460 wrote to memory of 4312	4460	msedge.exe	109
PID 4460 wrote to memory of 4952	4460	msedge.exe	110
PID 4460 wrote to memory of 4952	4460	msedge.exe	110
PID 4460 wrote to memory of 4196	4460	msedge.exe	112
PID 4460 wrote to memory of 4196	4460	msedge.exe	112
PID 4460 wrote to memory of 668	4460	msedge.exe	114
PID 4460 wrote to memory of 668	4460	msedge.exe	114
PID 4460 wrote to memory of 4484	4460	msedge.exe	123

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\vishal1\privacy.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ffb8b18c188,0x7ffb8b18c194,0x7ffb8b18c1a0
  2⤵
  PID:1440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1960,i,9176591051649469594,10022211477657884464,524288 --field-trial-handle=2260,i,9353978972255668456,1996314052515897963,262144 --variations-seed-version --mojo-platform-channel-handle=2288 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1712,i,16834255887661361805,643206426636206708,262144 --field-trial-handle=2260,i,9353978972255668456,1996314052515897963,262144 --variations-seed-version --mojo-platform-channel-handle=2256 /prefetch:2
  2⤵
  PID:2060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1948,i,1436582750649641065,2134654347530862771,524288 --field-trial-handle=2260,i,9353978972255668456,1996314052515897963,262144 --variations-seed-version --mojo-platform-channel-handle=2652 /prefetch:8
  2⤵
  PID:4268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3468,i,17753055257425021319,6472822896570652386,2097152 --field-trial-handle=2260,i,9353978972255668456,1996314052515897963,262144 --variations-seed-version --mojo-platform-channel-handle=3544 /prefetch:1
  2⤵
  PID:3632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3472,i,10228185815727634853,12761210974936569817,2097152 --field-trial-handle=2260,i,9353978972255668456,1996314052515897963,262144 --variations-seed-version --mojo-platform-channel-handle=3548 /prefetch:1
  2⤵
  PID:4552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4272,i,7023079164659253134,2304067604411369713,2097152 --field-trial-handle=2260,i,9353978972255668456,1996314052515897963,262144 --variations-seed-version --mojo-platform-channel-handle=4348 /prefetch:1
  2⤵
  PID:3900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4296,i,14453349775226505281,10848726355381982435,2097152 --field-trial-handle=2260,i,9353978972255668456,1996314052515897963,262144 --variations-seed-version --mojo-platform-channel-handle=4676 /prefetch:2
  2⤵
  PID:3892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,3034040082358294207,10033310137217088728,524288 --field-trial-handle=2260,i,9353978972255668456,1996314052515897963,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:8
  2⤵
  PID:3876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5132,i,16290844162184427655,5849595173216044292,524288 --field-trial-handle=2260,i,9353978972255668456,1996314052515897963,262144 --variations-seed-version --mojo-platform-channel-handle=5212 /prefetch:8
  2⤵
  PID:4296
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5800,i,17767391313372788592,18441252403118214682,524288 --field-trial-handle=2260,i,9353978972255668456,1996314052515897963,262144 --variations-seed-version --mojo-platform-channel-handle=5816 /prefetch:8
  2⤵
  PID:4104
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5800,i,17767391313372788592,18441252403118214682,524288 --field-trial-handle=2260,i,9353978972255668456,1996314052515897963,262144 --variations-seed-version --mojo-platform-channel-handle=5816 /prefetch:8
  2⤵
  PID:4660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4884,i,2333778491202221410,1434542377677376292,524288 --field-trial-handle=2260,i,9353978972255668456,1996314052515897963,262144 --variations-seed-version --mojo-platform-channel-handle=4856 /prefetch:8
  2⤵
  PID:4076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4696,i,9945542293003413350,18316398897082268678,524288 --field-trial-handle=2260,i,9353978972255668456,1996314052515897963,262144 --variations-seed-version --mojo-platform-channel-handle=4860 /prefetch:8
  2⤵
  PID:904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3552,i,11843465381156714213,11990363228498227469,524288 --field-trial-handle=2260,i,9353978972255668456,1996314052515897963,262144 --variations-seed-version --mojo-platform-channel-handle=6140 /prefetch:8
  2⤵
  PID:4312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5012,i,13842900058092357712,12752437238219729250,524288 --field-trial-handle=2260,i,9353978972255668456,1996314052515897963,262144 --variations-seed-version --mojo-platform-channel-handle=3048 /prefetch:8
  2⤵
  PID:4952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5448,i,11634914747636799935,4602444087565293635,524288 --field-trial-handle=2260,i,9353978972255668456,1996314052515897963,262144 --variations-seed-version --mojo-platform-channel-handle=5296 /prefetch:8
  2⤵
  PID:4196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6244,i,13794030581863737100,17416988059327595288,524288 --field-trial-handle=2260,i,9353978972255668456,1996314052515897963,262144 --variations-seed-version --mojo-platform-channel-handle=6300 /prefetch:8
  2⤵
  PID:668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6188,i,10046136498501601902,965207606090299304,262144 --field-trial-handle=2260,i,9353978972255668456,1996314052515897963,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4484

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4196

C:\Windows\system32\backgroundTaskHost.exe
"C:\Windows\system32\backgroundTaskHost.exe" -ServerName:App.AppXmtcan0h2tfbfy7k9kn8hbxb6dmzz1zh0.mca
1⤵
PID:3632

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 92b83a0e542b7bb3ed324c35b5f2a40c47a6351981065b804e4d9d80ddd6d7ee
MD5 9ea20a12d0c030ae7f84014f382662b7
SHA1 7912569189cf07c1ce092a268e67e9f391b7c8c7
SHA512 39ca414f13163c8479fe7650ae0dd1607b267fe3f319c09aec7bd5f68448e9ac604351069bf6b166b3f897d3afb5d7f35e609b9fc72b9debbcb05bad8fad7d81
TLSH
T132D02B20FF04E002D1072172540047100E0848902093C140E030441CDCEC804D395307
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7d64d2777f444a09968d6c155732e22d743fcf7c319c222bc06f6bb97808e489
MD5 89bc5edb6bd922f1cf8ec5536b066fa6
SHA1 c50aaf0fe1444780bb68ee7ab6e1c7468c2f303e
SHA512 77a1265c1484940562f1514202a0072e343efb323e1dcdb979fc9b7a2c69d85b814c076828b260c0b86a19e482ebb0a2df850f9b7c130a327861a7c56e26cde8
TLSH
T15CD02B20BF04E402D1072172540047100E0848902093C241E030441CCCED844D395307
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 06e535e24d13171540ff300ab53ad823eeee526d24e3a3e4dcedfd21c036dfac
MD5 e281069e4f23d200514a673a557649ec
SHA1 736acddffead724668bf4bf8bf8407e88aaf5ea9
SHA512 40c9a87f4891f6bcb5c47637975aad05d9d47a3eaa75cd45beb1715fd6299336168454cc041177aafb6a7d72a75fb9fd00b4b2c69ac3d63e3a8f03b8cdb03811
TLSH
T176E020C905CCC3FFF900644751DD6B0CD6903A0B93C4EA4D274C8486F0D11406293950
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 33718e08cbcb919cc396420de64e67270227ff0a851e1d34f966cedc48cf4642
MD5 9244f454eb3af12649e344bfa0530c92
SHA1 74d243cfbcc2f7fd23dea14e1d8e6dbc2f913c00
SHA512 db32c8bf9743c36490aead647c705d785f56c7dd1d9bde593cf0e895bb3adb6f0d5ed1d9c4fc1b06cebf2b68c1cc897ad03ea9934d0068644e5b569022af62aa
TLSH
T11F71433933518058E3220872DFD916EB763685E7FCAB3E8111F2BC74A521F728666B4D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe589342.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe589342.TMP
Size 3KB
SHA256 0109291f784f49e2b51cd3f8ade80841f66476935a0360f906e890c97a0548ae
MD5 f84d49f2e5cf1078388bf5de4daa8b5d
SHA1 df3c2cdfb98c7af457741a8e4bbd5cd50a36c4a3
SHA512 4b0a2ab4725bb75ca8dcec46e24c44522ff69af3787e6517d3360b487b527666edd5a06433cc1c5df5b30be0bd642a6546a48d49a8e8bf8ee7c8a2d3f4016bb5
TLSH
T1FE71533933108058E3220872DFD916EB763685E7FCAB3E8110F2BC74A521F728666B4C
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 0c0aa6785e1b6fdd40324d19a6f5380edb0ee87d9c5cfa24c38ac626d18ab768
MD5 e072e360b1648ab97855b54de88e0755
SHA1 a2d495a357760669b6f949aa00892b7320786105
SHA512 749e9fa7c1b586c09bbf284da3439964313acaa5bb1033fc9bb76a634607899dd7f00398fab144ab9e5710707e5095690fe5263f4b5b19adcfd7656012a95731
TLSH
T10E117DF3C3E5856E890116F05A24AE1BCE1D0606821C7C16C9D4EF27D3E3075E10155F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 0cc228e675c8b7caabcf2d9dfce60c1f74fed3d38310487255cd42f0f317042c
MD5 3e22f8378ef1bc947caf0b1fa1c1f8f3
SHA1 ac9849ded0403873825e2ffe8a2173ba98457064
SHA512 56102bc7bdb0753b1c42201443412525ae69b3095635535237f2f1626f233d12718cba9fcb724d791d016d8acfa1e416dc6363938011dfb4ee9c3c04e948a639
SSDEEP 192:sxZIRzk7/frsygdOVVIdpdTHW6+WNGYvrCjXeIgrJ:sxZIi7/frsygdTZHbGzG9
TLSH
T1B922B8126E28A57B8CC7E21DBB15BF43E6F9507261941E58EAFCC61C04E7ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 1429d0066cceaf2da832df31618c76181144fc300eeef7aaef192724df0ce080
MD5 172d32c2b4e9ee09c24803a0217327a9
SHA1 e55f9aed71627212c5dcc90b720f2c89750cae29
SHA512 35327b96ade9858e0f4c5256396ff5fa40697f121b2c6a52a25541fe7940e45ab8a578b8a35667d51a12d1dd6372488de099f8e645e24e6f38820113e0bd11a3
SSDEEP 192:sxZIRzk7/frspgdOVVIdpdTHW6+WNGYvrCjXeIg5eJ:sxZIi7/frspgdTZHbGzG0
TLSH
T1EE22B8126E28A57B8CC7E20DBB15BF43E6F9507161941E58EAFC861C04E7ADE220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 67c337c331ccd0c1383ca25e9c9f71eca3cde2b9e98cb2fd740d010512ceaaad
MD5 84a8d405d8cd21b1219fb67e7524507e
SHA1 53caa56b5049e96dcacb62102b09a86df7b40428
SHA512 e53e62cd33bf2f0711bb44d20fa4e657d60eddec7a6020d29c9834299964d5caf022c13225db64e765c2ea1b09668de305fa772e0bc682864592f1a197bdb3bc
SSDEEP 192:sxZIRzk7/frspgMOVVIdpdTHW6+WNGYvE2jXeIg50J:sxZIi7/frspgMTZHbGsGe
TLSH
T19B22B7126E28657B8CCBE24DBB15BF43E7F9507251951E48AAFCC61C05E7ACE220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 9b2dd7755aea9de723131fa6a6be007e226b0150da323af2a3af1cc9837cfc5c
MD5 47686247db7a573b989f369146284e92
SHA1 61826c7ab3c04267e9d2de5f6337184cac2dad9d
SHA512 af5ec3113d201c1af121fe6d60632929ff8cc414e82325394dbb1af2fb8df1de35e47b0afe20b91a7a724a48cae336acca0c69d646686c2f98d6c4c96b72d313
SSDEEP 768:5Aee3rxWvhffn8F1+UoAYDCx9Tuqh0VfUC9xbog/OV4cLly0pb0roB:5Aee3rxWvhffnu1jatcL88bfB
TLSH
T152C2FA2B640CCB7E4F800EADDC5A6F973FA802C7A7549D4087FA994C02C77EA51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 b8594445710d6b68df49269c2381f0564249bc451aae8b089eab3a31cb006010
MD5 f5bda8ad570efdbf1d138144d047606c
SHA1 ee49e2d20d6314d3cdab9bdd1e79de76b589b531
SHA512 05f311c82038cbc4c5d356e3c068842e67c62ff8e8c75f57f1ec65772f3526fe708525fad2d7e5d779a7b93a8a3a17339fe3adfa28430d73745e88c108c776a1
SSDEEP 192:u4LsNukQbh1M7N1qQmiU1y8F4MTbt+FdLjv3mhk8z1dqAI+:9sNukeA7bmJaDd/gRI+
TLSH
T15F421A316C74AC7759A3B582F44B36035FF4916B9AC86F94EADC6B1C01DB2AC130BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 36acb421bce1394516aae8c7748677d7f79c22725c2a5bed58d547fbb5f6acd4
MD5 42ed2e66738e54fe7c6f6c0edcb0ccd3
SHA1 220b2ed3e7921ab6e8a44b31aa7799e4bbc6209d
SHA512 5747decf88a6d715467fa48bce3e775765fbaa83767d2abfcb8e81b0677698411898f44c89d09a061309f648b2d3cb477295ba936dc417b1e01d97fece2365d5
SSDEEP 192:uZHm+xasuheOwQxMlEsNubQbh1M7N1qQmiU1y8F4MTbt+FdLjv3mhg8v1dqAhF:cEZcIfsNubeA7bmJaDd/CRhF
TLSH
T1F4726C725C74AC3759B3B586F48B32075FF8907B96C86B44E6ECAB1C01DA66C130BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 7d822741e684600e62e934a21773a0a99fdfafc971ba2fe32bb4f94cba806d14
MD5 cf62768131c1ebfe9332766944edb0b7
SHA1 343da1a1cdb8607cd03a908f34a6e3962b0f0f24
SHA512 58bcf01c9bac113b834c10a1d66fffc9b6439c01c6f4063f6d47b3a5ad64bdf7d46c31492bbc1985503ea344bd486c7c68a7af93016d0d85b802462bba82468a
SSDEEP 192:lONe6vMtPQmiUy/sThTbt+FdLjv3mR847vajU/u:lONe6UtRfTMd/+yU/u
TLSH
T18302F935AC786C6BAAB3BD4AF58B27171FF4117FA9905B54EAE82F1C00D765C1303826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 af86551b0438286c49d3022b8a56c0b5e768a8a76d5b03dfbac33d6fbf11f707
MD5 aad1417e5f3555848adace69249c32bb
SHA1 6e4649555537e9f77b4755f12850af5c3d540365
SHA512 c3795279c7bb35113b2446ff317a3cf3fa4ab776880380b7a4208186eec9f6dca6f044a9fbc6ea53457e49614d91ace0ee3549c9033ef3f6933aa604006f6bbe
SSDEEP 192:uH4m+xasuheOwQxMGsNubQbh1M7N1qQmiU1y8F4MTbt+FdLjv3mhk8z1dqAhF:kLZcIhsNubeA7bmJaDd/gRhF
TLSH
T18C627D715C74AC7759B3B582F48B36035FF8907B96C86B44E5ECAB1D01DA66C130BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 9KB
SHA256 f0e59e9709898f09de68bb66755f50b00706ba3bb9b8620936a42a4586123e4e
MD5 4b6f97e6914b892a219de472b3c52542
SHA1 383ab5ab4789617b3ca90cd558579e01304f77b0
SHA512 58dba94bf4c0929a62129e345fceca9eed263bb79cd4c27970388feb5714618903af43cb2292544ddf95419bed3f9edb452ad51b7de7951bbf646f8b450acf41
SSDEEP 192:qONn6vM3PQmiUyFsGhTbt+FdLjv3mht80IdqAU/u:qONn6U3RPGMd/3RU/u
TLSH
T1B2120A31AC65AC6B6EA3B485F48B36075FA4817BDAC46F54EADC2F1C01DF66C1307816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 e6edea237fa70367437fd35f0bb65dca9ab382c4d3c102b7b76a4dec10447321
MD5 87df027ef06551e4932c391b7497e32b
SHA1 f03dffe6258775b9f85337e7f9e4c0938d2343ec
SHA512 52fecf7873e0f6bb617da9c9ab70da0838b5f35434e3a86e981a36d215b59135c69344c5968eb13dbf102b83845cc4effa52c36dbcf654bf76c4ff220682b9d7
SSDEEP 192:u4m+xasuheOwQxMGsNueQbh1M7N1qQmiU1y8F4MTbt+FdLjv3mhk8z1dqAhF:iZcIhsNueeA7bmJaDd/gRhF
TLSH
T1BB627D315C74AC7759B3B582F48B36035FF8907B96C86B44E5ECAB1C01DA6AC130BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

VariationsRuntimeSeedV1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\VariationsRuntimeSeedV1
Size 522B
SHA256 532e27b1c35cecf3833a063deb0a05850d18f45002890d4dd9c69509841b7738
MD5 b809bb2b4dca57c6dcf6e141ab343c71
SHA1 3d858fed3e81f1ca3d3c105aaa579c0359654edf
SHA512 089d37cbd8d0d641052a8ffbbf4ee41489551f876cafb2dec05897f131d309580b9872e3493f6cec359efde76d766ef4a7f8ee86fa084740fbcbd049e7f749e6
TLSH
T177F0051380DA34D2EA6B00A0F1446DD4120FA1FA2919B7746975855681986716144736
MD5 SHA1 SHA512 TLSH

Submit Download

VariationsSeedV1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\VariationsSeedV1
Size 1KB
SHA256 4be77f1836af34db081a48761a1d3a67028d1a2acbee4c83b1a5df34e46ca164
MD5 3d4b571069f3c6be6b4441791c6978aa
SHA1 2f236d89e9c5facd3aad6edec224cc7359a8628f
SHA512 0fc62bbc86f2f836e519f286906a87ecd1ffdb4d5c0c6e93d166289e41b2e1a62915d96287219d55b9384627d313a56e34849baff24def6ce42ddbc8304df6cb
TLSH
T1E4412A430732D6D0E40F7AC2396E9A6150934FDE62C2F6330EB681714D7B86A808911D
MD5 SHA1 SHA512 TLSH

Submit Download

VariationsSeedV1~RFe58adee.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\VariationsSeedV1~RFe58adee.TMP
Size 584B
SHA256 8a6e28f053ac3cf303ba668f13d6008c3860bf255f898ba8bec7376b3ac412a3
MD5 9a3fe6bc689ab7cd28c9589fae0152c2
SHA1 49fd1f3c0104d60295d18c7c02419510d602fe06
SHA512 92220522c939bb08111cf10085932c4d7697fbdce66d9db7d918912e641ef2412d0a605c5b33fc4a1d79e3245d8e792dee23b0e88ebf8f4baced33e27fd3a3a1
TLSH
T1D7F04138D9DE4647E4861F7A0AE298BE042853B80A8263DCE824407650DAD6917C9FDA
MD5 SHA1 SHA512 TLSH

Submit Download

989e3cd6-8c62-464f-8a5d-645451a7d97f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\989e3cd6-8c62-464f-8a5d-645451a7d97f.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 97d0960ece6ea7219c876df6435e45ea1fb1bdcca888aa94076beec6482b4fb0
MD5 88ccabfb61e3a615e8f4a72d2171c925
SHA1 fffb3994b1bff993ed7a3a237a26205d12ed6991
SHA512 9fbd3b0f9669884383b03a42e119a883c8fd1942ece4b561ba7eb1144e1c6899c222cbc9f7dc4f9e1789f0d29d4e4e05793b42cbec9ce50a7819733fc34325e7
TLSH
T152417858A6FE1148B3B76E1AABF7A96D487FB8372E07D49D00000D4F0A62B00C872733
MD5 SHA1 SHA512 TLSH

Submit Download