0e3df7e8abedbf3619ed39c5ee87a9299b7f03ab61a9ec9c525912ab6800f7c7

Analysis

max time kernel
148s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/08/2026, 23:38

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
resources/public/index.html
Size 383B
Sample260830-3m3ftatzhs
SHA256 0e3df7e8abedbf3619ed39c5ee87a9299b7f03ab61a9ec9c525912ab6800f7c7
MD5 e582b9106fb430459c697d4c5a519c25
SHA1 418242c0ee36e592982e3569c6bbb78f7274546a
SHA512 dcc2c76bda2f6567f90161911ab49600cd7896ee5607a4bfb842439189745156941c20d32b09d64b2554f1184b413f0b9f7399ec10013452cd45b791a39c96a3
TLSH
T112E0DF43C0E18809D32182700CC1F15D4BA2F6DBA7CA6D49B98A20898FC0B90CED72E9
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
656	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134326071518920567"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1074038928-2032447174-945360078-1000\{8AE6186B-B954-4C6E-A9AC-7AE2F94E467C}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1316	msedge.exe
1316	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3164	msedge.exe
3164	msedge.exe
3164	msedge.exe
3164	msedge.exe
3164	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3164	msedge.exe
3164	msedge.exe
3164	msedge.exe
3164	msedge.exe
3164	msedge.exe
3164	msedge.exe
3164	msedge.exe
3164	msedge.exe
3164	msedge.exe
3164	msedge.exe
3164	msedge.exe
3164	msedge.exe
3164	msedge.exe
3164	msedge.exe
3164	msedge.exe
3164	msedge.exe
3164	msedge.exe
3164	msedge.exe
3164	msedge.exe
3164	msedge.exe
3164	msedge.exe
3164	msedge.exe
3164	msedge.exe
3164	msedge.exe
3164	msedge.exe
3164	msedge.exe
3164	msedge.exe
3164	msedge.exe
3164	msedge.exe
3164	msedge.exe
3164	msedge.exe
3164	msedge.exe
3164	msedge.exe
3164	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3164	msedge.exe
3164	msedge.exe
3164	msedge.exe
3164	msedge.exe
3164	msedge.exe
3164	msedge.exe
3164	msedge.exe
3164	msedge.exe
3164	msedge.exe
3164	msedge.exe
3164	msedge.exe
3164	msedge.exe
3164	msedge.exe
3164	msedge.exe
3164	msedge.exe
3164	msedge.exe
3164	msedge.exe
3164	msedge.exe
3164	msedge.exe
3164	msedge.exe
3164	msedge.exe
3164	msedge.exe
3164	msedge.exe
3164	msedge.exe
3164	msedge.exe
3164	msedge.exe
3164	msedge.exe
3164	msedge.exe
3164	msedge.exe
3164	msedge.exe
3164	msedge.exe
3164	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 3164 wrote to memory of 3688	3164	msedge.exe	83
PID 3164 wrote to memory of 656	3164	msedge.exe	85
PID 3164 wrote to memory of 4344	3164	msedge.exe	86
PID 3164 wrote to memory of 4344	3164	msedge.exe	86
PID 3164 wrote to memory of 4344	3164	msedge.exe	86
PID 3164 wrote to memory of 1772	3164	msedge.exe	87
PID 3164 wrote to memory of 1772	3164	msedge.exe	87
PID 3164 wrote to memory of 1240	3164	msedge.exe	88
PID 3164 wrote to memory of 1240	3164	msedge.exe	88
PID 3164 wrote to memory of 1240	3164	msedge.exe	88
PID 3164 wrote to memory of 4500	3164	msedge.exe	89
PID 3164 wrote to memory of 4500	3164	msedge.exe	89
PID 3164 wrote to memory of 4500	3164	msedge.exe	89
PID 3164 wrote to memory of 4980	3164	msedge.exe	90
PID 3164 wrote to memory of 4980	3164	msedge.exe	90
PID 3164 wrote to memory of 4980	3164	msedge.exe	90
PID 3164 wrote to memory of 896	3164	msedge.exe	91
PID 3164 wrote to memory of 896	3164	msedge.exe	91
PID 3164 wrote to memory of 896	3164	msedge.exe	91
PID 3164 wrote to memory of 3796	3164	msedge.exe	97
PID 3164 wrote to memory of 4556	3164	msedge.exe	98
PID 3164 wrote to memory of 3796	3164	msedge.exe	97
PID 3164 wrote to memory of 4556	3164	msedge.exe	98
PID 3164 wrote to memory of 4304	3164	msedge.exe	100
PID 3164 wrote to memory of 4380	3164	msedge.exe	107
PID 3164 wrote to memory of 4688	3164	msedge.exe	108
PID 3164 wrote to memory of 1764	3164	msedge.exe	109
PID 3164 wrote to memory of 632	3164	msedge.exe	111
PID 3164 wrote to memory of 632	3164	msedge.exe	111
PID 3164 wrote to memory of 1936	3164	msedge.exe	112
PID 3164 wrote to memory of 1936	3164	msedge.exe	112
PID 3164 wrote to memory of 1316	3164	msedge.exe	113

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\resources\public\index.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x28c,0x7ffbc33ec188,0x7ffbc33ec194,0x7ffbc33ec1a0
  2⤵
  PID:3688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1956,i,7758559881006333622,16826891131194846087,524288 --field-trial-handle=2316,i,11975354196628762111,6032237631528562959,262144 --variations-seed-version --mojo-platform-channel-handle=2352 /prefetch:3
  2⤵
  - System Time Discovery
  PID:656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1744,i,5985523037790637073,7044757318005139570,262144 --field-trial-handle=2316,i,11975354196628762111,6032237631528562959,262144 --variations-seed-version --mojo-platform-channel-handle=2312 /prefetch:2
  2⤵
  PID:4344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2636,i,1748267039001187005,13053255823577012177,524288 --field-trial-handle=2316,i,11975354196628762111,6032237631528562959,262144 --variations-seed-version --mojo-platform-channel-handle=2632 /prefetch:8
  2⤵
  PID:1772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3464,i,13892309821222061970,16444262502961244857,2097152 --field-trial-handle=2316,i,11975354196628762111,6032237631528562959,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:1240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3468,i,2234568743794818423,2018579820845632783,2097152 --field-trial-handle=2316,i,11975354196628762111,6032237631528562959,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
  2⤵
  PID:4500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4264,i,7947527489549614379,921711325437993973,2097152 --field-trial-handle=2316,i,11975354196628762111,6032237631528562959,262144 --variations-seed-version --mojo-platform-channel-handle=4304 /prefetch:1
  2⤵
  PID:4980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4276,i,17956721267723310295,812489054341151759,2097152 --field-trial-handle=2316,i,11975354196628762111,6032237631528562959,262144 --variations-seed-version --mojo-platform-channel-handle=4412 /prefetch:2
  2⤵
  PID:896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,16966349509477388088,2614816254249759744,524288 --field-trial-handle=2316,i,11975354196628762111,6032237631528562959,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:8
  2⤵
  PID:3796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5132,i,15221801086342088197,12455106037228644392,524288 --field-trial-handle=2316,i,11975354196628762111,6032237631528562959,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:8
  2⤵
  PID:4556
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5744,i,5221545120438504794,18115513372373316573,524288 --field-trial-handle=2316,i,11975354196628762111,6032237631528562959,262144 --variations-seed-version --mojo-platform-channel-handle=5760 /prefetch:8
  2⤵
  PID:3964
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5744,i,5221545120438504794,18115513372373316573,524288 --field-trial-handle=2316,i,11975354196628762111,6032237631528562959,262144 --variations-seed-version --mojo-platform-channel-handle=5760 /prefetch:8
  2⤵
  PID:4304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4412,i,2117275982949589689,3307853309030616557,524288 --field-trial-handle=2316,i,11975354196628762111,6032237631528562959,262144 --variations-seed-version --mojo-platform-channel-handle=3644 /prefetch:8
  2⤵
  PID:4380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4920,i,15098214098851897563,3036165707162320607,524288 --field-trial-handle=2316,i,11975354196628762111,6032237631528562959,262144 --variations-seed-version --mojo-platform-channel-handle=560 /prefetch:8
  2⤵
  PID:4688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4904,i,12952274763893186892,6404836066638085472,524288 --field-trial-handle=2316,i,11975354196628762111,6032237631528562959,262144 --variations-seed-version --mojo-platform-channel-handle=5760 /prefetch:8
  2⤵
  PID:1764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5460,i,3716971672079253247,9563306179514163328,524288 --field-trial-handle=2316,i,11975354196628762111,6032237631528562959,262144 --variations-seed-version --mojo-platform-channel-handle=2916 /prefetch:8
  2⤵
  PID:632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5220,i,13522244379100636022,16248792245991043529,524288 --field-trial-handle=2316,i,11975354196628762111,6032237631528562959,262144 --variations-seed-version --mojo-platform-channel-handle=5372 /prefetch:8
  2⤵
  PID:1936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6108,i,2280938262876588798,12425247039705516859,262144 --field-trial-handle=2316,i,11975354196628762111,6032237631528562959,262144 --variations-seed-version --mojo-platform-channel-handle=6000 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1316

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4472

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

8710e8aa-358b-4f43-9ce5-2f5cd16b7dfe.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\8710e8aa-358b-4f43-9ce5-2f5cd16b7dfe.tmp
Size 8KB
SHA256 dcd8ad77dac1c1aefa184e3fa71999a8314e478d7072d448802cf1dc12540211
MD5 2aef5745de2066dce5974939731cf519
SHA1 0795d398058b24fe2f18a3c3466a3f311ce6202a
SHA512 7b3422c11b991ba685ba762e821f216479db36bea1b20b07bcd1beef9235cbc70c0b2c00455ed38790e9110f206ce4516263d281528605df89bb7aae772be93e
SSDEEP 96:ZqONkfQsjpfmUTmDK5ih/cIPURHl8h4otop5z5D/BhPwivh50xy0SFYKcAxZYDMc:gONf6kDfQmiUylJZ903lKvQiUBRxU6
TLSH
T1F602F839A8786C7B8EE3AE05F48637275FA5216BEAD02F84D9E41B1C44D764C1307837
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8a42bfb8-0df4-45c6-94f7-3546b910365e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\8a42bfb8-0df4-45c6-94f7-3546b910365e.tmp
Size 21KB
SHA256 1ab06610215314c51fef42e0750806c5b7028e4aee85a2e6f0ee7be7a44fa5a1
MD5 d9be548ee1c9e6c2644916917892a498
SHA1 e8b61be7c100772974f2048a03767b2f1e243a00
SHA512 7205af4b0e005bc402bdfc628f32234abad28308ad6ac0c92fca7aaedb972563a2a73ee06c0f2bfa857d29ebeda0f47b5f063a6589bec5a66d98c0b4da931b0f
SSDEEP 384:+iFiZcIlsNm8TUNTUlIl40l5wlYp/3rkIKyE/zdU3t4/LHQvd8qeO:VFQlPwgvJiFU36svZ
TLSH
T194A26D728C94997F9DB7AA44F84B32138EB98077C994AF94F2DCAB1D019B1DC030BD12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8c5b1a407270ca9ae8bec8f20cc56244f3bde6f042890a4cabcdf4df3d21fdad
MD5 16f782e6f4d4592598936b2f29b6b339
SHA1 5c8c22b7f56af2b2e0d9978418f077cc8fd13c41
SHA512 28b2f7186b910539fa22408b47131fb16874b4c2192a721a69393efd7812da561ea9977b8af678cd3a9e37c23f186f876d7086a20afe28b16659db70955cf16f
TLSH
T15DD09232B7C9E241E14232BAA81447826E2A4A68259AC2176478844CEC6984AA79D28B
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 80775c7ba7a0bc9ff666f5ef7f2cabf7f46c4e18841540c95181b5a586fb25fb
MD5 b248c5e2a2bf72de197c05f8229029e2
SHA1 e2e5e27f8d5917e835586b6fc4174a5a5a425387
SHA512 1ceab060c18e3b782169161c3dacff678c2834a7a9f2d721c158bba49cc2ef29e358134cac8b84256252d105209f0774993e5dbb1fce893720f369ba5a077125
TLSH
T1596170A9216284D3E7633670F0D2C2827870BBB61B53DF9AC160A87EF5097118FA1C17
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 a30637c23448dad1bb67674f78c7d08e6b08d076ba10af47706967eb239164b3
MD5 80bf711c924dcc50a52a1018babe3f3e
SHA1 a6f681942b5d193dd6586746540b2d78e57be4d3
SHA512 f6ec4901c9c9be1c89b10314769d979b53cce48ca5517aa2de33a53480b5046158d54a0fdbba819fdc703bd88eefa5ce2b7a3f107ae57b074b38f719ad382673
TLSH
T1D3117DB3C7D595AE8D0516F0AA28AE1BCE2D0905821C7C19C9D4EF27D7E3475E10155F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 f49de31a6034f1477d685b70ca7e688d62eacac3da86ecb6765022dd32a5302b
MD5 1869c6293342e022aa37c4accc8f0ce0
SHA1 be88fd5bf5c4c615ec52bdf5243ee277920d57b7
SHA512 9ed623a44f6ff51fc522667e34049c634daad29442f7086348639e3c9136870c75f913fbc63b3f754130fc2141f88ca35e4213d9b5a3d894a84881a7e8677151
SSDEEP 192:sxZARmk9/fhsgcgbOIdpdCyHW6+WNGY4wedBgIg5ZJ:sxZAb9/fhs5gzsyHbGC5
TLSH
T1A822B7126E78A97B8CCBD20DFA15BF43D6F9503295905E48A6FC861C09E77DD220B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 33accf7a4a7613ac3a0bdd0595211918bed614cc81343d3b648ab22b434f0e3c
MD5 4c49f984f619dba8e95f234ac346ba14
SHA1 6a2098130cf736276813cd8d4ec9c70cf4f2d854
SHA512 72210b976223b3bae83e6e032a78be14638f744ce97699a37f9e92ee8e0b0b6788a9f289daf56435d6b976c1efbcc673d585323ad351113860d1e25db37443a0
SSDEEP 192:sxZARmk9/fhsgc3bOIdpdCyHW6+WNGY4N4gdBgIg5DJ:sxZAb9/fhs53zsyHbGTEP
TLSH
T16222B8526E78697B8CCBD20DFA157F43E6F9503295915E48A6FC861C09E77CD220B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 a4e70b3ae731288be86361d53d517e3d95bb7eef7a91aeef2b522d4cc9a6136a
MD5 af3f40c3ae478b5f773967b4eb5844f3
SHA1 c1c4dd8bb10a75fa3b31f40f3e1397aa2cc376b4
SHA512 42e39fe77e7ad8189850970d988f6a7f7a36f5e7fc74f37d3ff040e846e763a29e2cf4dc870942df74a0f2babf013760adac4398bcc3fe437ff492ff25f98959
SSDEEP 192:sxZARmk9/fhszcgbOIdpdCyHW6+WNGY4wedBgIgrJ:sxZAb9/fhsQgzsyHbGC9
TLSH
T18522B8126E78A97B8CC7D20DFA157F53D6F9503295905E48AAFC861C08E7BDD220B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 333ff87a2e1e02b2578f9fef7c980477263f4b329764e4efae2721732d42ad5d
MD5 3bbf04f6d08928812d146b50527006b5
SHA1 508c2f4699cd44ca950a98cb37452da6d0b287dc
SHA512 3045c93217d7b2918ae573db19e038f6cda5773e97a6ff00b4e37a7edc0e2df28019b6c94540b2e359aa0b3450725807cc40c5e053359322f99253dbc1ec2aa4
SSDEEP 768:TyqirTNWvx7jr8F1+UoAYDCx9Tuqh0VfUC9xbog/OVMALl6opTsroc7Unb:TyqirTNWvx7jru1ja5ALocT34Ub
TLSH
T120C2EA3B640CCB7E4FC01A9DDC5A6F973EA802CB5BA48D4047FA994C02D77EA51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 de7ae1e3f852adae0e408e6bffc646f8a88cf621016e89850e4997a645e189d4
MD5 d4ce4354ef8c00b3cf5b682a589a3f2a
SHA1 e3fa9f5e8e199389a0da8dc643566e2c53122986
SHA512 52b425aad50ae0cfd6c3d406ea2d7efc22f616ffea01de3fffc1a0d8a9aba8f3ced79fb1c3da37b01c6500f48e74a11f1608b8bd3c40a289afb3eba635c60283
SSDEEP 48:K0WoIbKxiMPyvdGxNHzvk/zQPIQVkKpBRPkFt0WwH2OIXKf6AX:K0Wo4Kxi2qCUKbCRO0Kf6C
TLSH
T1CD91FE4670BF02513C7F294C96A5962B178176A3B158E42F3BB900B21E67E244DFCDED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5a8ba7.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5a8ba7.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 f8e2f50faedf7adc2a27f87b612b3609da69cac142598569f592e74e06ca2300
MD5 1089813a569e30694d2745d8d477b2a5
SHA1 c5ed5dbe39fd703101f005325408b0d66b6e7433
SHA512 73a510a261af65fd25921d3a453ddd7d78c5e70e38c0e78131642ccb214878ed21cb90733842a04708f30b520d8bb2f3c5006342764417dca3af827752c77207
SSDEEP 192:FONxF6k1QmiUy3qJp903lKygF/DcRUmrqjU6:FON36OEQp9IKyE/kU3U6
TLSH
T194122A35A8B8687B4EE3A541F48732175FA58137DF886F94D5EC2B1C05DF69C430B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 e3f407ffd3ee5f6879478acfe5fbd8504e4453df9bf5226b69e8f8ba10c7afd7
MD5 0bc311edf33dedb9951bb9f80d803805
SHA1 3da60c604cd3c93cf23743aaeb6215943d2952e6
SHA512 d5407172f9f7e3ea66e504b044edd1a3882a6e63673d07670c853fa81c49f6f61085a97baf9a7c2a46606ea9fea35d6db0a7583431d8a09ab2590a1f851092a8
SSDEEP 384:4ZcIhsNm40l5wlYp/3rkIKyE/ERU3t4/LHQvd8qeO:GhfJiUU36svZ
TLSH
T14F828D719CB46C7A4DF7A145F88732079EB8C077DAD86F94E1ECBB1D05DA698030B912
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 0662cb41fc66f91d61aa4a88fac5afd4ada6701d1bd5c3357edd4e13b915d797
MD5 100b0e361e2e48c2d96ca5331c91cb93
SHA1 dc8b60445c347565ea28f865bb6701d975e1d26c
SHA512 7e30ae0a084a7df9d5354a7f4bc3cfddee366e8eb05222d34195baa7efaa16a635b81c3a40b081f00ba5534ceb01edf280a7765c9d2916900a2573e964570a5a
SSDEEP 384:oZcIhsNml0l5wlYp/3rkIKyE/ERU3t4/LHQvd8qeO:WhaJiUU36svZ
TLSH
T104828E719CB46C7A4DF7A145F84732079EB8C077DAD86F94E1ECBB1D05DA698030B912
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

169f5a20-7ddb-4a19-95ca-1d584a06d8ab.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\169f5a20-7ddb-4a19-95ca-1d584a06d8ab.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 6409de2c1d8ba9a85ee50704cc816f78b4e31187508ec551a146e13081c11654
MD5 894b09bb6db7a8c376a83fc3412451d3
SHA1 175e066cd33c35713f95c637779b323020c49349
SHA512 9f8cbcb73ca3d08a4a22d11ceb6f5a54ab7711149369f1bb01ef72b6444653b1188dbafe47c6980af67785d8ca9979137f0877e4090e1e2ebde89405b2888c0c
TLSH
T14941065CBBEA1109B3B37E5A9BF7A86D487FBD272E07945D00110E4F0A32A40C961737
MD5 SHA1 SHA512 TLSH

Submit Download