7b6589fe2e38c7f3bdd9c45ea044762db857986d681b61ebe78193e2f7fcfb2d

Analysis

max time kernel
148s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
27/08/2026, 00:12

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
130483781.html
Size 30KB
Sample260827-ahn4eaxhmb
SHA256 7b6589fe2e38c7f3bdd9c45ea044762db857986d681b61ebe78193e2f7fcfb2d
MD5 88c50dbf0b1b9c1e7f7403b79d953549
SHA1 fa022095ff3c37a4c091817c68e85cf6a969aa91
SHA512 9e4d4a12ffe6019458bd88e4c2ee4fc8e417542abe5f0a97a543c92636e9a208ce62329044a87ff289e1cfb10f29756b39c9fc15c83c9a966ec4fa04dc5597ef
SSDEEP 768:fvHo5MaxzWqZvszU+bx1461NbA8qu7RcWXRoRNRRqIkq/vgGA/Rx0I1EPxgpvCll:nHo5MadWq1szUG1rtWf34PKX63NHu
TLSH
T151E210C072C0F81756DD4F33FE1FA9F9D07A9CA36888764392A4B68825B9527C4E4CB4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4480	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134322631846552800"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-668679576-120646659-2289335452-1000\{E17B53FE-1D42-49D1-933C-E15875DF2237}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4264	msedge.exe
4264	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 3188 wrote to memory of 3376	3188	msedge.exe	84
PID 3188 wrote to memory of 3084	3188	msedge.exe	85
PID 3188 wrote to memory of 4480	3188	msedge.exe	86
PID 3188 wrote to memory of 3084	3188	msedge.exe	85
PID 3188 wrote to memory of 3084	3188	msedge.exe	85
PID 3188 wrote to memory of 1716	3188	msedge.exe	87
PID 3188 wrote to memory of 1716	3188	msedge.exe	87
PID 3188 wrote to memory of 4368	3188	msedge.exe	88
PID 3188 wrote to memory of 4368	3188	msedge.exe	88
PID 3188 wrote to memory of 1584	3188	msedge.exe	89
PID 3188 wrote to memory of 4368	3188	msedge.exe	88
PID 3188 wrote to memory of 1584	3188	msedge.exe	89
PID 3188 wrote to memory of 1584	3188	msedge.exe	89
PID 3188 wrote to memory of 3512	3188	msedge.exe	91
PID 3188 wrote to memory of 3512	3188	msedge.exe	91
PID 3188 wrote to memory of 3512	3188	msedge.exe	91
PID 3188 wrote to memory of 4176	3188	msedge.exe	92
PID 3188 wrote to memory of 4176	3188	msedge.exe	92
PID 3188 wrote to memory of 4176	3188	msedge.exe	92
PID 3188 wrote to memory of 1044	3188	msedge.exe	96
PID 3188 wrote to memory of 3116	3188	msedge.exe	97
PID 3188 wrote to memory of 1044	3188	msedge.exe	96
PID 3188 wrote to memory of 3116	3188	msedge.exe	97
PID 3188 wrote to memory of 4224	3188	msedge.exe	100
PID 3188 wrote to memory of 4900	3188	msedge.exe	106
PID 3188 wrote to memory of 3508	3188	msedge.exe	107
PID 3188 wrote to memory of 3944	3188	msedge.exe	108
PID 3188 wrote to memory of 2148	3188	msedge.exe	113
PID 3188 wrote to memory of 2148	3188	msedge.exe	113
PID 3188 wrote to memory of 3508	3188	msedge.exe	115
PID 3188 wrote to memory of 3508	3188	msedge.exe	115
PID 3188 wrote to memory of 4264	3188	msedge.exe	116

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\130483781.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2b4,0x7ffa4b72c188,0x7ffa4b72c194,0x7ffa4b72c1a0
  2⤵
  PID:3376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1856,i,9842348671556467712,10019803319430005178,262144 --field-trial-handle=2284,i,4664574589568897923,16285975145494588246,262144 --variations-seed-version --mojo-platform-channel-handle=2280 /prefetch:2
  2⤵
  PID:3084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1956,i,2532001991498081213,10975469394046188809,524288 --field-trial-handle=2284,i,4664574589568897923,16285975145494588246,262144 --variations-seed-version --mojo-platform-channel-handle=2324 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2544,i,12059569278024077540,17896167903986648572,524288 --field-trial-handle=2284,i,4664574589568897923,16285975145494588246,262144 --variations-seed-version --mojo-platform-channel-handle=2568 /prefetch:8
  2⤵
  PID:1716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3416,i,16956825975741936114,5552796769418935773,2097152 --field-trial-handle=2284,i,4664574589568897923,16285975145494588246,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:4368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3420,i,3450645061033122080,9592489002023168902,2097152 --field-trial-handle=2284,i,4664574589568897923,16285975145494588246,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:1584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4204,i,943534453693457385,13134568466085900799,2097152 --field-trial-handle=2284,i,4664574589568897923,16285975145494588246,262144 --variations-seed-version --mojo-platform-channel-handle=4220 /prefetch:1
  2⤵
  PID:3512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4236,i,16355680901089014195,11541225543736834135,2097152 --field-trial-handle=2284,i,4664574589568897923,16285975145494588246,262144 --variations-seed-version --mojo-platform-channel-handle=4268 /prefetch:2
  2⤵
  PID:4176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5092,i,5619351992554857283,5680200924601228888,524288 --field-trial-handle=2284,i,4664574589568897923,16285975145494588246,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:8
  2⤵
  PID:1044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5084,i,10407566632267682762,16326439938261849107,524288 --field-trial-handle=2284,i,4664574589568897923,16285975145494588246,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
  2⤵
  PID:3116
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5808,i,14587691582162123764,17850451849181262088,524288 --field-trial-handle=2284,i,4664574589568897923,16285975145494588246,262144 --variations-seed-version --mojo-platform-channel-handle=5824 /prefetch:8
  2⤵
  PID:3764
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5808,i,14587691582162123764,17850451849181262088,524288 --field-trial-handle=2284,i,4664574589568897923,16285975145494588246,262144 --variations-seed-version --mojo-platform-channel-handle=5824 /prefetch:8
  2⤵
  PID:4224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5928,i,8912378974691182562,15387065154036251939,524288 --field-trial-handle=2284,i,4664574589568897923,16285975145494588246,262144 --variations-seed-version --mojo-platform-channel-handle=5836 /prefetch:8
  2⤵
  PID:4900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4256,i,11469976622314918089,15163893707715137790,524288 --field-trial-handle=2284,i,4664574589568897923,16285975145494588246,262144 --variations-seed-version --mojo-platform-channel-handle=4456 /prefetch:8
  2⤵
  PID:3508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4280,i,463908108561055387,16390972318564623516,524288 --field-trial-handle=2284,i,4664574589568897923,16285975145494588246,262144 --variations-seed-version --mojo-platform-channel-handle=4444 /prefetch:8
  2⤵
  PID:3944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5204,i,5377323320408581140,5631895290726216326,524288 --field-trial-handle=2284,i,4664574589568897923,16285975145494588246,262144 --variations-seed-version --mojo-platform-channel-handle=4444 /prefetch:8
  2⤵
  PID:2148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5668,i,12399013264606537683,34273337430918278,524288 --field-trial-handle=2284,i,4664574589568897923,16285975145494588246,262144 --variations-seed-version --mojo-platform-channel-handle=5876 /prefetch:8
  2⤵
  PID:3508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6184,i,7592328333823806107,17087820567463334386,262144 --field-trial-handle=2284,i,4664574589568897923,16285975145494588246,262144 --variations-seed-version --mojo-platform-channel-handle=5212 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4264

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4100

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CrashpadMetrics-active.pma
Size 16KB
SHA256 814d47aad78c212b52568b9c7b58d242899d490d3afebce66181cae50c880df5
MD5 8c7cdfea4284ba987d295d82a9c7ddd6
SHA1 7d1a3a66f2d64a383b230196ba89a263ce7ee957
SHA512 59c8229e834c944265aed4131c79f41f9f940a48651b9fb18800cef5bae36d17c7fd5880120c6fee8ce22a157b65bc63846b65765bc4dc86e15926dcce400d0d
SSDEEP 12:sf9iXhV0xoUZxCe+JKlkQuMRxCb8TXuYJ0IJpPK6BsyW1inPiz:U9iRqxoUZxWMk8xVTeYWI31BtXP
TLSH
T105724C85B34498FFC8835E7189BD27903774F6DF1F02866B6A6A760E2E271C84F44224
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 81240d13af4ca099e1358c75991e3fa5640dbb3aac72c2d98006f6159bf74aa0
MD5 96dd753cd2d8557b97ab2cd76f7fc6cf
SHA1 81697ccb13fb04a07bd47b552b3607597251f36d
SHA512 355c412a688a71b124e85c0527177b3f97efceb2a5553f8428e0913940daffd3bd176f5476b940c64eee52d543f0568112ac073984d9a64015adc15cbef552de
TLSH
T174D09224BA29A149E282007AA881EB565219DA95296B9622E620C44DBD2B925A3851C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4bf0783d55eb083b4adaa03ed8b76a2bd35b0819c8ad2530a78e1b8d6856010b
MD5 7a50c2e276f05b686e8cb6c95b86650f
SHA1 bc892af04a9d6b1bee8047f67518d676df864301
SHA512 f1d02fd9f067323214d78de08172e1a78028eba76f4754436f4d77b849e8422865dcea22be13f21c36ac2c5807b393c1dffdb0a3217c3353a517a0467461a474
TLSH
T19BD022203A28A008E282003AA880EB020208CA80282BC322E220C00CAC2B820A3800C2
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 26c5a31b72eea5fe51c2a27371dd08c42938e18d3a296959d6baae99f456067b
MD5 661d9d26e3ec7ee395c357a76a37134a
SHA1 ddbb49f273d322d75965825c8ecd02b9c72f81fe
SHA512 2f7f1c4c3d928122548e40ce8b07c658d7cabb8556972c4ed7900ad59aaf508c0e50e2d86ecad1484ec27720365c16fe14a0331e03c716527937ae0041eda1d9
TLSH
T1EE71E7350921B891F3901F3A70E60557FC7AC9D8F7578E9790AEC9B46927B60413E2CC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5872ba.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5872ba.TMP
Size 3KB
SHA256 0c15256464a32aa1d2e84aad8c0292b8e83ed891c8a4d93da651b20df2db41eb
MD5 446e573d4d4686f9b819667375f2c7c0
SHA1 4aad6ea29cbef3a0f4b888a4a5011a610cffeb6b
SHA512 659297961390165cb9d6a8c24c93bea3dc3225b3060bc2202caa199cc1ef3338ca7f90477e8d7e4103d23a97d26e9685d9c000a91a6d772fe4ca436ffae9cfd7
TLSH
T12871E8350921B491F3901F3A70E60557FC7AC9D8F7574E5790AEC9B86527B60413E2CC
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 33fa27815358867385fc0e06b71b289569a090b7f38dcdc87d40cccc8f18562f
MD5 8621ec9e948eac1102d291ca4509d4d7
SHA1 6651f12f78aaaa995f02b01105962b2131856d62
SHA512 3f150813973ccd8d289ad85cc8cd501355cd7cb6940e0b5c0d4233047384c1f3b3ecf4ed4070f9e726aa418214ce4dbacdf0b97858e2189727a4d1fc1e3c503f
TLSH
T10F117DF3C3D5866E890156F09A24AE2BCE1D0605421C7C1989D4FF6B97E3475D10295F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 b8c3a6594c0790ae175fd8d3463fed251a2259c5aeb6a9a09e78868092528351
MD5 c64fa2b273fc62638cef89edc5c127ad
SHA1 37dd169af653fcba7842b0bed52ebb1daf9f4c6e
SHA512 b73da31b91f42ff954eac44498f6f820e1f4be36a00cc08f9aa60f817979a56a0acef4f1423fb01e5e06e55d60d3591acf7304c3017afcf124db565261d859b2
SSDEEP 192:sxZYRck2/fosf5bIdpdqHW6+WNGYCkdrTHIg54J:sxZYx2/fosf5EgHbGiDG
TLSH
T1EE22A5126E78A97B8CC7D219FB15BF13E6F9503291951E58E6FC861C04E7ADD220B40F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 b6d452b7cfa054847b593fe1c7658a1535c0e063af277fe5689206a8d1644cdc
MD5 91e563906ffa4c28addeb8bfe6d027d6
SHA1 391373fb4203f2399f64112280040ff7b8c33658
SHA512 1dbd2c71c5c8a0b9e69208a4280e7caa1109736299b06b33c38cf902997b2b5e4736db929794487ca50645f9dc8ac404f461cef3214a49f52b6c91122c3b05d2
SSDEEP 192:sxZYRck2/fosY5bIdpdqHW6+WNGYCkdrTHIgrJ:sxZYx2/fosY5EgHbGiD9
TLSH
T19A22A6126E78A97B8CC7D21DFA15BF13E6F95032A1951E58E6FC861C04E7ADD220B40F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 a7f47fb94b5a254efe5e9189eee2c5df67bbd0d798fb01fb78c472d41e3216b8
MD5 3eaaef8e675ebceaec04a04541d25912
SHA1 dead920ffdaf382250ac695541154041ed85d7bd
SHA512 e7f5e4051841c3fabc7b2be9a324443f52e8ac05a49d6b5f3dfd51954844789843b6f9c4fa240dcb03bd03d1c0772d4a79133b6a4c24d32ef799803d10b3a948
SSDEEP 192:sxZYRck2/fosf5bIdpdqHW6+WNGYCkadrTHIg5aJ:sxZYx2/fosf5EgHbGI+DE
TLSH
T1C122B6126A78A87B9CC7E219FB15BF13E6F9503291951E48E6FC861C05E7ADD220B40F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 dccf8570705119c572a2a9e664d9c4cd3dea6f57bdf1e207995d29309c6a3593
MD5 8bf4e33669d2ca8eeaed73d18b3210f2
SHA1 0709f16ccd9670a24472c9f931c945a78c7ebcc2
SHA512 7e2c0bfd0e94d76a0a955ba947bce30e1e6a09e3e3baaa9578d5ad42a93b5f5d6626d65eda89370564fdd4135ef855cfc863774f8a073b2ad8680c8b59787341
SSDEEP 768:miqbUj+WvSCs68F1+UoAYDCx9Tuqh0VfUC9xbog/OVHZLlRTKr5roj:miqbUj+WvSCs6u1jaaZLbWryj
TLSH
T179C2E93B340CCA7E4F801E9DDD5A6F972E9802C7AB588D4447FA994C02C77EA512A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe590f58.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe590f58.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 1b0ebf804cd9376b2b7ef601092ff881034f74bb1b698c6423684f8139f2da3d
MD5 b417eae9e6e01815be2344ea436e9f09
SHA1 461c15a3df844659ea6496de586decbbc3541111
SHA512 14db1fafab5f41f12cf351c97750e44dcb55856d45baa5d2fd3d9184314aa3f058512fab0ecd601d5f1c8128378ffc3b33ef4bc28a098ed31e5bcb39e41ccf77
SSDEEP 384:mZcIhsNLX0YBAuEa+lOy+HVYo5Y/F+LBNj5oBVZo9:0h8Sa8Oy+VCdWN5ibW
TLSH
T1D1828E7268785C765CA6A245F88736075FF8803BD6C97A94C5DCAF0D00DEAA8131FD2E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 8dcc90929157c0b9acb0d26a0dc3d47fe1f021b5801182208f2609c929392508
MD5 6c118918172437dd8d3fe5073e9bb2e0
SHA1 c77bc35513beb361cffc4bbc000315ca1301c7cd
SHA512 ffc6aea90e3b62a049fb99322f6588ef39d2d5bc1e9ed7a18af139c5fa4098d7f2526f8b9227f481710d9cdb16aaa8529b8f588cdcc842005f0f22594fd98ec2
SSDEEP 192:vONf6Db6QmiUy9VHBa+jpOmN+BRg/XRrU6:vONf6uyHBa+lOy+I/BrU6
TLSH
T1AC02E73968786CBB9EE26E49F48727279FD4203BD9566B94DAD80F0C00D765C234B836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 f2ee77f24030ba24dd19d8a8ea9407586d9e925d6fc90ca97808d1edef64d592
MD5 90e4193b5415214d513c307897fab783
SHA1 498818092df80316cb56c3842a22f78f8fe09f09
SHA512 a0a69c2ddd0d111152e03bf0fca804e23e268fd177573f0861595005949dd2a213674cfbd9c04d123dd7f7f30658a786e67662a5dfe57ca89c55907955fc2b90
SSDEEP 384:sZcIhsNLa0YBAuEa+lOy+HVYo5Y/F+LBNj5oBVZo9:6hpSa8Oy+VCdWN5ibW
TLSH
T1A3828E7268785C765CA6A245F88736079FF8803BC6C97B94C5DCAF0D00DEA98131F92A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 26f199ad5ebf2dc3e1e8d8153f441d2b48ecab6e0ab7f6d8bec4b128f993be5a
MD5 48fd09e1b124d2a9619740c8cf71fcf6
SHA1 7f9379763f513f5d28084fb1f3e915c383918baa
SHA512 0c21a0e9328a68bb585dc4447d395081576d4399141e6f3292ef64599cc6dc77a69699b09eec4ba7f4b950b75e81ebc37a09500e34430124adef5b8fc83fc61a
SSDEEP 384:5iFiZcI0sNV8TUNTUlIla0YBAuEa+lOy+HVYo5X/F+LBNj5oBVZo9:QFQ0gwgcSa8Oy+VpdWN5ibW
TLSH
T179A27D7358B88C7AADA65B45F94A32078FF4407BC5C9BA90D6DC9F0C10DB69C134BD29
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 bc5f515c31f5f5f5c5c6a6c30c373c25ccf9f1777b1e2432e997194b3410e0fe
MD5 166844c13d20d973c90e955a85c1b5ab
SHA1 aae4dfbc924fe1cc392ab36393ddcc01428fea46
SHA512 53f6f37fa89ffa93ff1628fe3745e6d97ad4f9b1c49191b6650c9d10769019f50ba5dcd05e22151dc2f079982e03fc1139414b17072f6879148d21a5261ddd74
SSDEEP 192:nONm6DbwQmiUycV7Ba+jpOmN+HVPPwo5dNz/NdqyU6:nONm6YZ7Ba+lOy+HVYo5z/FU6
TLSH
T19312293664786C775DE26984F88736139EE8412BDA4A7B95D6DC1F0C00EFA9C234F827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 821ab89a7cc8ff1f75836b61a6815f59ffb789b9a102f80461b829786901ecb0
MD5 86209ad212fcbb853d6c3daa9c489d0c
SHA1 580330744f858a901f5bfe8253b58b7201ad0ec9
SHA512 1319b9c26450dbf2021b16fb376af5841fa9a5ccadbdc615fb33a410f7e7df1766561f6aaf76b8aa095dc4011b5cbb645c3c58ad73bfbc4f8570fa351b1de2a5
TLSH
T112412C5CA6FE1108B3776E569BF6686D487FB8772E06D49D00110D4F0A63E40D971737
MD5 SHA1 SHA512 TLSH

Submit Download