8a013ca1cfacc300f493ee993b098aac7a7ab2d052ba8f33c4ca309fcb70b1c2

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
22/08/2026, 12:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
fonts/about-us.html
Size 34KB
Sample260822-pj56msgp81
SHA256 8a013ca1cfacc300f493ee993b098aac7a7ab2d052ba8f33c4ca309fcb70b1c2
MD5 e3e65f98b3055b361c6b6bbbc362dab4
SHA1 90f693c8d6268b561abf858d141c74d8475930ee
SHA512 309e17a99455590fce504e311c27679040e39007632de95840093e2d41d96d02301a332af9a93574094d9f2039ecf65be6531c68408fd18a8f78bddc8254c933
SSDEEP 768:l4V5Zy5oM1oAmW6gO0CRHMT+nIC4v9vlSpaO/g5+lE:6V5lMvnO/g5+m
TLSH
T184F2832275C02827067341E869112BA9FBE6C25BE3074A4135FF579F6FB2E41CE336A5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1660	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134318749670425070"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-876885714-46325919-1482798410-1000\{7912E680-E961-4872-9465-863C3FD5E3B5}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1532	msedge.exe
1532	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3752	msedge.exe
3752	msedge.exe
3752	msedge.exe
3752	msedge.exe
3752	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3752	msedge.exe
3752	msedge.exe
3752	msedge.exe
3752	msedge.exe
3752	msedge.exe
3752	msedge.exe
3752	msedge.exe
3752	msedge.exe
3752	msedge.exe
3752	msedge.exe
3752	msedge.exe
3752	msedge.exe
3752	msedge.exe
3752	msedge.exe
3752	msedge.exe
3752	msedge.exe
3752	msedge.exe
3752	msedge.exe
3752	msedge.exe
3752	msedge.exe
3752	msedge.exe
3752	msedge.exe
3752	msedge.exe
3752	msedge.exe
3752	msedge.exe
3752	msedge.exe
3752	msedge.exe
3752	msedge.exe
3752	msedge.exe
3752	msedge.exe
3752	msedge.exe
3752	msedge.exe
3752	msedge.exe
3752	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3752	msedge.exe
3752	msedge.exe
3752	msedge.exe
3752	msedge.exe
3752	msedge.exe
3752	msedge.exe
3752	msedge.exe
3752	msedge.exe
3752	msedge.exe
3752	msedge.exe
3752	msedge.exe
3752	msedge.exe
3752	msedge.exe
3752	msedge.exe
3752	msedge.exe
3752	msedge.exe
3752	msedge.exe
3752	msedge.exe
3752	msedge.exe
3752	msedge.exe
3752	msedge.exe
3752	msedge.exe
3752	msedge.exe
3752	msedge.exe
3752	msedge.exe
3752	msedge.exe
3752	msedge.exe
3752	msedge.exe
3752	msedge.exe
3752	msedge.exe
3752	msedge.exe
3752	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3752 wrote to memory of 4232	3752	msedge.exe	88
PID 3752 wrote to memory of 1660	3752	msedge.exe	89
PID 3752 wrote to memory of 1528	3752	msedge.exe	90
PID 3752 wrote to memory of 1528	3752	msedge.exe	90
PID 3752 wrote to memory of 1528	3752	msedge.exe	90
PID 3752 wrote to memory of 5084	3752	msedge.exe	92
PID 3752 wrote to memory of 5084	3752	msedge.exe	92
PID 3752 wrote to memory of 1596	3752	msedge.exe	93
PID 3752 wrote to memory of 1596	3752	msedge.exe	93
PID 3752 wrote to memory of 1596	3752	msedge.exe	93
PID 3752 wrote to memory of 4268	3752	msedge.exe	94
PID 3752 wrote to memory of 4268	3752	msedge.exe	94
PID 3752 wrote to memory of 4268	3752	msedge.exe	94
PID 3752 wrote to memory of 1040	3752	msedge.exe	95
PID 3752 wrote to memory of 1040	3752	msedge.exe	95
PID 3752 wrote to memory of 1040	3752	msedge.exe	95
PID 3752 wrote to memory of 2372	3752	msedge.exe	96
PID 3752 wrote to memory of 2372	3752	msedge.exe	96
PID 3752 wrote to memory of 2372	3752	msedge.exe	96
PID 3752 wrote to memory of 3024	3752	msedge.exe	99
PID 3752 wrote to memory of 2992	3752	msedge.exe	100
PID 3752 wrote to memory of 3024	3752	msedge.exe	99
PID 3752 wrote to memory of 2992	3752	msedge.exe	100
PID 3752 wrote to memory of 2816	3752	msedge.exe	102
PID 3752 wrote to memory of 3808	3752	msedge.exe	112
PID 3752 wrote to memory of 876	3752	msedge.exe	113
PID 3752 wrote to memory of 4444	3752	msedge.exe	114
PID 3752 wrote to memory of 3172	3752	msedge.exe	116
PID 3752 wrote to memory of 3172	3752	msedge.exe	116
PID 3752 wrote to memory of 1532	3752	msedge.exe	117

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\fonts\about-us.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ffef3b2c188,0x7ffef3b2c194,0x7ffef3b2c1a0
  2⤵
  PID:4232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1872,i,9114336690638796200,5430336863423120313,524288 --field-trial-handle=2232,i,12985610650836349863,2927800764771745883,262144 --variations-seed-version --mojo-platform-channel-handle=2280 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1664,i,7944390546651708099,4585211701440004286,262144 --field-trial-handle=2232,i,12985610650836349863,2927800764771745883,262144 --variations-seed-version --mojo-platform-channel-handle=2228 /prefetch:2
  2⤵
  PID:1528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1756,i,11421182306277150567,7962778402024325773,524288 --field-trial-handle=2232,i,12985610650836349863,2927800764771745883,262144 --variations-seed-version --mojo-platform-channel-handle=2544 /prefetch:8
  2⤵
  PID:5084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3472,i,5875282248488530517,2611100609105339012,2097152 --field-trial-handle=2232,i,12985610650836349863,2927800764771745883,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:1596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3480,i,6454019100255964960,14722076103307769174,2097152 --field-trial-handle=2232,i,12985610650836349863,2927800764771745883,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  PID:4268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4244,i,11533149358011961351,8851486536543120172,2097152 --field-trial-handle=2232,i,12985610650836349863,2927800764771745883,262144 --variations-seed-version --mojo-platform-channel-handle=4252 /prefetch:1
  2⤵
  PID:1040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4288,i,5868075109232743896,9601826896312148388,2097152 --field-trial-handle=2232,i,12985610650836349863,2927800764771745883,262144 --variations-seed-version --mojo-platform-channel-handle=4380 /prefetch:2
  2⤵
  PID:2372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5000,i,17760941263340826290,9555811651797900093,524288 --field-trial-handle=2232,i,12985610650836349863,2927800764771745883,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
  2⤵
  PID:3024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5004,i,5523362114052309530,14930838708639382417,524288 --field-trial-handle=2232,i,12985610650836349863,2927800764771745883,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  PID:2992
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5892,i,4758867601148480544,15982901712674084112,524288 --field-trial-handle=2232,i,12985610650836349863,2927800764771745883,262144 --variations-seed-version --mojo-platform-channel-handle=5544 /prefetch:8
  2⤵
  PID:1152
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5892,i,4758867601148480544,15982901712674084112,524288 --field-trial-handle=2232,i,12985610650836349863,2927800764771745883,262144 --variations-seed-version --mojo-platform-channel-handle=5544 /prefetch:8
  2⤵
  PID:2816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4384,i,17783365139094563756,13719680723347253727,524288 --field-trial-handle=2232,i,12985610650836349863,2927800764771745883,262144 --variations-seed-version --mojo-platform-channel-handle=4280 /prefetch:8
  2⤵
  PID:3808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4388,i,10271772288363152495,17112821986001708597,524288 --field-trial-handle=2232,i,12985610650836349863,2927800764771745883,262144 --variations-seed-version --mojo-platform-channel-handle=6000 /prefetch:8
  2⤵
  PID:876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4400,i,11370437684872917743,11247308835468925033,524288 --field-trial-handle=2232,i,12985610650836349863,2927800764771745883,262144 --variations-seed-version --mojo-platform-channel-handle=4548 /prefetch:8
  2⤵
  PID:4444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5996,i,5353358867792073003,2881977784925267979,524288 --field-trial-handle=2232,i,12985610650836349863,2927800764771745883,262144 --variations-seed-version --mojo-platform-channel-handle=120 /prefetch:8
  2⤵
  PID:3172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5968,i,912546150837607748,5138090931557375403,262144 --field-trial-handle=2232,i,12985610650836349863,2927800764771745883,262144 --variations-seed-version --mojo-platform-channel-handle=5940 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1532

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:408

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 ae53e618032c667892ed21a0d220c217b0a8d7911b3dee86b08e6a49f9b5961f
MD5 f9f19468189111f8249d81621e4a102d
SHA1 fa68cce6f26f82bf96fb875ff427a4ef9e9673b2
SHA512 d53cb2328cd19d1ba8512d1ff3633af39c02eed400e5983853154f5b66c3341ed3d1103439b7c80316b2363de07a7530588d76f9e262920e057331d68d3f3bb7
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7h:fwUQC5VwBIiElEd2K57P7h
TLSH
T18DB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CrashpadMetrics-active.pma
Size 16KB
SHA256 fde3b41a5711362d7f3df7d71563d5eb6cc679bae7f80f74afcdf81dbc09eafd
MD5 3406d3b708dcef0116bffd8eaa181ad4
SHA1 3df64b48bff2b9d4160d900e91a7670046a24340
SHA512 d22d05c221bd19bc3b07e9a5ed722fbf8fbf75d695302fe8ec441d6d1e653bd63b3751a9608b344cc859feb79c5869aaeedd08bf846dc01a522b3a0dbb1637d9
SSDEEP 12:sUXhV0xosU8xCe+JKlkQuMRxCb8ZXfgYJ0IJpP0KLsyW1L7Fx6:fRqxosU8xWMk8xVZ4YWI30otWn
TLSH
T18F727886B34494FFC8C35A7189BE27902374F6DE5F02836B6A3A7A0E2E271C44F44220
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 6de34b260036ecaa4ce5839bc4a7ff7495e50b7b94349b12d9f840ca0e76da3b
MD5 56d82099872fb501c566d072ae897035
SHA1 2c96501551fc13c09496780960d8e7ccb4957b77
SHA512 c4b4017256caf25e88f146e6104134cddfd15089203e8e74c5196627fc92897f9fe7e3fc5c8305032be88e9409cdbc5dfe1e81017fcd5e38b3579b3d823b4a41
TLSH
T160D0C073378C7C00EA090170D013C3031FA7855824C39F03B100C01C54B43D9738B093
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f5dece638cd89af82b06bd2fcb3d1738eef64d2275be237184ea8bff7af3fdfa
MD5 f19ec2293392af872f10929c41627e26
SHA1 0576f5277c470f5bb8c3f4d3786ca8d967d0a33e
SHA512 4cc85dc71d34bb516f8fe45b565a6a9b4cda255a931f33289247ed84150baf0e2df40fc87109df41771553b92545ed858197cdd3d673694c83458cf9812aa9dd
TLSH
T16CD02272268C6C00EA090170D01383021EA6855824839B03A100C01C44A52D9728A093
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 f3eccd57900ece4af464276b4c1429b7801511fc746fc6ecf494d01aacaafad4
MD5 60c4e3cfdd8a45833f05ba6677b1d105
SHA1 dfc5af6507af90bbfc8c5f83cc65cc5f8e70492b
SHA512 4f3c2977b344a44607bd4252809995848d60dfedbda9dc2768a13c1811e4c838b6659db68b4eb1a719edd8964318357fecd1fbfd244b6982625c073927939c10
TLSH
T18771293726424952D34021B1E8A91B40F6BDCCAD8DCB7E6A1E904DFEF919B47B306CD9
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58c02e.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58c02e.TMP
Size 3KB
SHA256 90d6fff1d865e8d2f799a642a2c34fa012ff5cf52ec24516f802beaba9c1a88a
MD5 c1cd53d8177de3e1ab703879986fe9d4
SHA1 94223daacdf1fef75e95f9ee4df89cfd7a74c0d5
SHA512 8184520f55b13bbe5102ee8fcbf4bba39deabef0aaf6b325e4625fe7c3f46dade3a471fe499fbb4ca1fb7becf60301b73f849d399cef32a4c20959192d8c0722
TLSH
T14371293726424952D34020B1E8A91740F6BDCC9D8DCB7E6A1D904DFEF919747B306CC8
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 86904c21672ce4b92b8c3918fa34bc8995dc55bc283e945b974ae412c92f5d63
MD5 0e7b484ed165f4e0fe47dddd73922625
SHA1 6e79e498a9278364db660667804005b23fb0e311
SHA512 4135fc11a850a5e82fcbdcf4f951c421245af9528091ba52c2e0d6f9116acd8953cf30ed7051125f30f36663ac5a6605c91e8982012ef77a9f35ea50d1fd779b
TLSH
T1ED117DF3C3D595AE8D0516F05A28EE2BCE1D0506421C7C1A89D4FF2B93E3075D10195F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 fe6e5f480bf0c5f745905637559735e784811651f81ccc7f46e84e9f702c31e9
MD5 94e46fe214badc9fcc52e4aa440e228c
SHA1 a7413e3699894b37766e61b44ffef1ccaaa4aa94
SHA512 50b4407b8ebab14f280e226fe93c2e6457fe8f0fc9860a27074fd75594071f7422c07e194d9e24b91255788a57d7d1158820ecbe3d59ea13013161c883fc9e48
SSDEEP 192:sxZ4RtyM/jK1Ml8MkM/fvsSAIIdpd2HW6+WNGYwK2C6VIgrJ:sxZ47MM/fvsSA5AHbGJ9
TLSH
T12642F8116A34A97BCCDFD209BA41BF53D6F94432A2900E44ADFCDA1C05E6AED2217C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 ccc2316bda33186bf6fbe2a0e48282d6282e9945ab68f232ff6b98dd0ccc2543
MD5 f3fba5bb2539b8a1d7a30e72b3a49bfe
SHA1 632753cece1ecfe373094bd503e4e77237c1d6cc
SHA512 e8f22aa15e6f1ec34c31b95be454676d035b864aa25343872a8c66114532f46020a6469e3387af3e06b258c90c1dfcc23f058c9585c44d0300b3b763a2e411b5
SSDEEP 192:sxZ4RtyM/jK1Ml8UQpkM/fvsbvIIdpH2HW6+WNGYw9Dz6VIg57J:sxZ47qqM/fvsbv5WHbGWb
TLSH
T12D52D711AA34A977CCDBE20DBA41BF93D6F9447291900E44A9FCDA1C05E6BED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 002c32ab527548faf3ed720fe30fc7c6c1895ef9c18b5eda7c63b8ff3fff652b
MD5 947cdb69e4a1715f3f2a07bb7b241b51
SHA1 b0345590c91342b0eded2edec03a0a4bccdb93c1
SHA512 69698ff816f6dc84ef1affb93dc84cbbaabd24470cb18acf2a40426cc815326a2abe1c3b9f99bf082d4a2492ec08d7f639dcdfcb223935bbaf14f9834cf5819c
SSDEEP 768:Y14jeXmWvmKLE8F1+UoAYDCx9Tuqh0VfUC9xbog/OVhPLlrZ+dvrohUc9aB:Y14jeXmWvmKLEu1jacPLZQd8pY
TLSH
T149D20A3B280CCB7E4F844E5CED26AE976ED801CB5A584D5447FA494C03C76EB512B49B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 812b56bd157d65eabfc6f4aca6a36ca43f437b925d710b4cb7c0c424a36a8487
MD5 470937ba73733638ca3387cd545b44f3
SHA1 939117bc737504265b2861b8e1ac9107019a6f82
SHA512 81aeb8d0cf8c5749c52115d469f227f48888e73b7a12ce5e638c549c7b38fa12351dc02422117eab180f13916aa58dd0d5c16172240a8c845805c4b7e7bc5158
SSDEEP 96:KPYDMoGi+cmypHUwcKsJUecI4oJ24Bp65OaQwgSmdcWUx/KsuUP/ILDUtmSAKbKM:UlX+fsn27XlH
TLSH
T1F9917352B5FB12023E3E360C81909B6B9E4275A371AEA56B3BAC11654E76E104DFCCCD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9e413974-ab5c-47f9-93a7-9291a2695793.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\9e413974-ab5c-47f9-93a7-9291a2695793.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 1c4c88504400d3e7a05963032a254e63d75b1172982e48b1281b61dcd4a0c3b4
MD5 ff0834f792441d423fb3bda337d48b38
SHA1 fbbd317ceec713469d71e7e92402d31c14da4ae5
SHA512 f28bc38516adc752a04c7ece029d2587b6a5009729dd5b75941ca7682f431896b643648f3065253ba61a8333552522f569e46cb740895a37f73fcda1caf19bf7
SSDEEP 384:sZcIhsN/s7VAeE5ULf+682IXevFzivOupoJ:6hnVjbGYziWupi
TLSH
T1B5827D315C78AC7759F6E245F58B31178FF840679BC96F8099ECAB2D00996E91307C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 36381493569783c93898a02002518380d99829c1a6c1900b5c32908dc787dcf0
MD5 add17dbacc8fd7db39d7a4372c2d00cc
SHA1 1b79dcb101ca1ba1fd6f9b6379c1a4a802b23df3
SHA512 e42a86822c3c1e7498814ab91544cbd945e79287f7317c3ad92c9181ea58dd8de38a838bcfc053fd3cac6fe79d781baead18d75c109071204f7b3a687f0ef527
SSDEEP 384:eiFiZcIqsNh8TUNTUlIlR7VAeE5ULf+682IXetFzivOupoJ:1FQqcwgjVjbGcziWupi
TLSH
T1EFA25C334CA8D87BADFAAB45F54A31178FF84067CAD5AB90E6EC9B1D009A5DC1307C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 492bfb29c1d9d92806ca060e212a3a2aafb13f4a1a7eb7fafc7a4b34c0be792f
MD5 ee599fa85cf55ae33bc9539dfabe1799
SHA1 79ca9e809cce324d2fa03c223b4e13a96bd94d4f
SHA512 d6cd5f0c097c229ec2409de9d5a95f89bfa6124ac0ddd297f104ab88cd93138f1dd009f9fee69f5106f66e6e21dcbecfc4c588a4d723e0ff9b322acc0d9185c4
SSDEEP 192:EONQ6hZ0QmiUy1B1Bpc/+jV0jzor2e5wOZqdlU6:EONQ6oUpu+682t2qlU6
TLSH
T11402D835A8687C7B8EF2AE45F48737235FE5116BA9956B84DAF85B1C00C769C2307822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 6b962a60402b33fa9c05914442de100a83ddbb2a752a25ef4f051405c0a3b416
MD5 3473680900de297c24d6a2b177fe7414
SHA1 cbf25e9b1292eca44cf16227405fe8da972f7f0e
SHA512 32b14ae2d465fd2ebfa709f4ff3a143cf75bd87e49e336c492accb8296219e521a289699b714d0dbb5248f3e86a42ea2eae924dcb7393a3f80e5e94a9a131804
SSDEEP 384:aZcIhsN/R7VAeE5ULf+682IXevFzivOupoJ:YhSVjbGYziWupi
TLSH
T1FF827D315C78AC6759FAE245F58B31178FF840679BC96F8099FCAB2D00996E91307C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 57f3e7af473aa642b23021974de44b1a93c425a1249d4efda3ba94a9e96da07f
MD5 7090744cb3abaeaf31b2976c2691b1f1
SHA1 0644625a3d092254d9d81ad6587763acbbf85c7c
SHA512 7524662b0b599b64b946d13516244c0e85f0679b1caddee1b95ebc272ee0a13fe6220f4aadd4926b366ae853f27b737708b147523207ec7f1d9ef86b08da6024
SSDEEP 192:vONC6hZCQmiUy1J1BJc/+jV0jzor2IXQN2a5cOqjqsU6:vONC6CeJu+682IXe09zU6
TLSH
T10C12EA36A868BC675DE26951F49732139FE94127DEC57F80E6EC6F1C00DB6AC130A817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

34ea3d66-32b2-494e-9696-a4e2f05e27a8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\34ea3d66-32b2-494e-9696-a4e2f05e27a8.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 2b04efd0f27f7788a2ecab0894633b4a5d06e12ed5a23cba2235cce44a5bd9d8
MD5 1664bee1c2ce0acd889b9faddf9632f0
SHA1 4423367186c5a1b41838ba0e7dddaed61f564233
SHA512 2b744df0b476e74ee7fb88ce32e1df41d4428f1a65dda829adc0be482959849d0f5c9e8509481af81c1ce203f8b8887c35e6bc32094acfee8b638ae1415aa218
TLSH
T1E3412858BAE91148B377BF56ABF6A4AD447ABC371E06949D10020E4F0A73B40C861737
MD5 SHA1 SHA512 TLSH

Submit Download