hxxp://mastergrillhub[.]com

Resubmissions

25/09/2026, 08:56

260925-kv4pqsce93

25/09/2026, 08:54

260925-kt25hsty3j10

25/09/2026, 07:59

260925-jvlcqasy4m10

Analysis

user interaction
yes
max time kernel
149s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
25/09/2026, 08:54

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://mastergrillhub.com
Sample260925-kt25hsty3j

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4992	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134348000883042189"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-939655444-3071939294-1401108526-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-939655444-3071939294-1401108526-1000\{5B7BB605-D168-462B-8DAD-4F79B76299A7}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5984	msedge.exe
5984	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe

Suspicious use of WriteProcessMemory 36 IoCs

description	pid	Process	procid_target
PID 4180 wrote to memory of 4572	4180	msedge.exe	86
PID 4180 wrote to memory of 4992	4180	msedge.exe	89
PID 4180 wrote to memory of 3144	4180	msedge.exe	90
PID 4180 wrote to memory of 3144	4180	msedge.exe	90
PID 4180 wrote to memory of 3144	4180	msedge.exe	90
PID 4180 wrote to memory of 4228	4180	msedge.exe	91
PID 4180 wrote to memory of 4228	4180	msedge.exe	91
PID 4180 wrote to memory of 4928	4180	msedge.exe	93
PID 4180 wrote to memory of 4928	4180	msedge.exe	93
PID 4180 wrote to memory of 4928	4180	msedge.exe	93
PID 4180 wrote to memory of 2460	4180	msedge.exe	94
PID 4180 wrote to memory of 2460	4180	msedge.exe	94
PID 4180 wrote to memory of 2460	4180	msedge.exe	94
PID 4180 wrote to memory of 3228	4180	msedge.exe	95
PID 4180 wrote to memory of 3820	4180	msedge.exe	96
PID 4180 wrote to memory of 3228	4180	msedge.exe	95
PID 4180 wrote to memory of 3228	4180	msedge.exe	95
PID 4180 wrote to memory of 3820	4180	msedge.exe	96
PID 4180 wrote to memory of 3820	4180	msedge.exe	96
PID 4180 wrote to memory of 2248	4180	msedge.exe	98
PID 4180 wrote to memory of 2248	4180	msedge.exe	98
PID 4180 wrote to memory of 2248	4180	msedge.exe	98
PID 4180 wrote to memory of 1532	4180	msedge.exe	100
PID 4180 wrote to memory of 2756	4180	msedge.exe	101
PID 4180 wrote to memory of 1532	4180	msedge.exe	100
PID 4180 wrote to memory of 2756	4180	msedge.exe	101
PID 4180 wrote to memory of 2400	4180	msedge.exe	102
PID 4180 wrote to memory of 2400	4180	msedge.exe	102
PID 4180 wrote to memory of 2400	4180	msedge.exe	102
PID 4180 wrote to memory of 928	4180	msedge.exe	106
PID 4180 wrote to memory of 3292	4180	msedge.exe	114
PID 4180 wrote to memory of 5036	4180	msedge.exe	115
PID 4180 wrote to memory of 3976	4180	msedge.exe	116
PID 4180 wrote to memory of 5360	4180	msedge.exe	124
PID 4180 wrote to memory of 5360	4180	msedge.exe	124
PID 4180 wrote to memory of 5984	4180	msedge.exe	128

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://mastergrillhub.com
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x24c,0x7ffb40d7c188,0x7ffb40d7c194,0x7ffb40d7c1a0
  2⤵
  PID:4572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1768,i,3816271492536535819,1421068141863421428,524288 --field-trial-handle=2228,i,3309304043395480029,16464130261100512923,262144 --variations-seed-version --mojo-platform-channel-handle=2264 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1640,i,4948590292809441697,17674234842288286414,262144 --field-trial-handle=2228,i,3309304043395480029,16464130261100512923,262144 --variations-seed-version --mojo-platform-channel-handle=2224 /prefetch:2
  2⤵
  PID:3144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2528,i,6468936915957648146,8251794821250470784,524288 --field-trial-handle=2228,i,3309304043395480029,16464130261100512923,262144 --variations-seed-version --mojo-platform-channel-handle=2548 /prefetch:8
  2⤵
  PID:4228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3412,i,17456089530262168691,12966648145975912736,2097152 --field-trial-handle=2228,i,3309304043395480029,16464130261100512923,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
  2⤵
  PID:4928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3416,i,3320291335919934697,5042531677371411125,2097152 --field-trial-handle=2228,i,3309304043395480029,16464130261100512923,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:2460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4180,i,4077869687093927703,17627293555631301372,2097152 --field-trial-handle=2228,i,3309304043395480029,16464130261100512923,262144 --variations-seed-version --mojo-platform-channel-handle=4284 /prefetch:1
  2⤵
  PID:3228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4192,i,11052738641442369958,5595412640439975317,2097152 --field-trial-handle=2228,i,3309304043395480029,16464130261100512923,262144 --variations-seed-version --mojo-platform-channel-handle=4288 /prefetch:2
  2⤵
  PID:3820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=4904,i,1636173963971983800,509466732649476264,2097152 --field-trial-handle=2228,i,3309304043395480029,16464130261100512923,262144 --variations-seed-version --mojo-platform-channel-handle=5032 /prefetch:1
  2⤵
  PID:2248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3540,i,9295868810766896934,9524478871019378521,524288 --field-trial-handle=2228,i,3309304043395480029,16464130261100512923,262144 --variations-seed-version --mojo-platform-channel-handle=4260 /prefetch:8
  2⤵
  PID:1532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3516,i,16550519861285655763,6396878255770442281,524288 --field-trial-handle=2228,i,3309304043395480029,16464130261100512923,262144 --variations-seed-version --mojo-platform-channel-handle=3692 /prefetch:8
  2⤵
  PID:2756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=5540,i,10601769980165703782,10521981242915398268,2097152 --field-trial-handle=2228,i,3309304043395480029,16464130261100512923,262144 --variations-seed-version --mojo-platform-channel-handle=5528 /prefetch:1
  2⤵
  PID:2400
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5840,i,7389278176757274712,2527471105524791110,524288 --field-trial-handle=2228,i,3309304043395480029,16464130261100512923,262144 --variations-seed-version --mojo-platform-channel-handle=5880 /prefetch:8
  2⤵
  PID:4560
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5840,i,7389278176757274712,2527471105524791110,524288 --field-trial-handle=2228,i,3309304043395480029,16464130261100512923,262144 --variations-seed-version --mojo-platform-channel-handle=5880 /prefetch:8
  2⤵
  PID:928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5932,i,7303457329499938234,2931144797472052493,524288 --field-trial-handle=2228,i,3309304043395480029,16464130261100512923,262144 --variations-seed-version --mojo-platform-channel-handle=5948 /prefetch:8
  2⤵
  PID:3292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5968,i,8950274501649132199,9461310770493812384,524288 --field-trial-handle=2228,i,3309304043395480029,16464130261100512923,262144 --variations-seed-version --mojo-platform-channel-handle=6188 /prefetch:8
  2⤵
  PID:5036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=784,i,16846001685841015285,3895208270725062242,524288 --field-trial-handle=2228,i,3309304043395480029,16464130261100512923,262144 --variations-seed-version --mojo-platform-channel-handle=6196 /prefetch:8
  2⤵
  PID:3976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5392,i,5064824332255993200,10446307700992493320,524288 --field-trial-handle=2228,i,3309304043395480029,16464130261100512923,262144 --variations-seed-version --mojo-platform-channel-handle=3644 /prefetch:8
  2⤵
  PID:5360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6216,i,13147057941229285933,2582578452600347931,262144 --field-trial-handle=2228,i,3309304043395480029,16464130261100512923,262144 --variations-seed-version --mojo-platform-channel-handle=6384 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5984

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4388

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 63b3e051645c9957f53c538586c3b5463f3ba4412c230d66eb66f06ad6052604
MD5 0070abe22a07fb36149648973e990688
SHA1 c8a203457b36afa6d0ce9b56d26cb7817d832d37
SHA512 cda9b7179f6f997dac4ee0624ff9f92ed77b7c27218584fb07f6b2ebc24d10fc25d45c3d2781b766d834f82054e29ee150712e7ab7d7a11465c468d0f8a31fd1
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P79:fwUQC5VwBIiElEd2K57P79
TLSH
T175B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 9e411e40b2b1e7f1576e6c2cf3027d590d4c5916b7a5e41c1a711f9117d0f1e1
MD5 f86a69ac894860b8a7e2ac52b3c2987b
SHA1 835d87e07bf2af2a2410d66f27145dd25efdaad6
SHA512 6de1915f0367b482a80195c1b703b1007a524ab2a6815670db955de8dd4235e1faa888dde7fcefe1ccbf4dae73b9d41563a6a2f7e5d8d75bf2ff9783b485b777
TLSH
T1ABD02BF8DBD88120F033383400398283308C660420061120A873114C0C441C34225868
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 18eb5a70b8dc14ee5a30ef2a54b3e14abbda2b2d751a8e8abad286d8e92d8872
MD5 a2b3071ef6468d20d3499dac11b0df41
SHA1 e96a1ba764d6003a0c508557df66dec18df2a1e7
SHA512 144677b38dc2433c6ce2cd569ea8dac3d5f5013e173fcf4e0e6d6d88ad42c12001c58ec8fdf8229ee7476fa921cb946792037c4914570deac4969d9365895b19
TLSH
T113D02BF89BD88520F433383400388283308C660420065221A873114C0C451C34225868
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_00009b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009b
Size 64KB
SHA256 35a33507c3d420bc79e6bd51d4c5c733d8a304f43c61d220ba70c2da608d2eb4
MD5 99fe890a9a9650c59dac4987d479bb53
SHA1 27fb0db4b7d86464754fa7367146aa5d5701dad4
SHA512 1f38ea1f248063c45f6f9776309203c102e69bb666a558602cc3312da2f7ae41c1d60459b4d1189e78bd88d23a5a5723449d1aa8a8671071dba9e0f5494a7d60
SSDEEP 1536:/yKrimOp71jpBdxKfIlfQXR5uzUixqlXcfAeEZQd5Uw:6Kn6ZifIlfCuo+FYZQMw
TLSH
T1EF53019D1A33F2A0B59C7AF93602CEC843498E98BF33967213B72A6255E44FCF574854
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 d934afbc7038fc576f14fd15a7554e68d8a9ae71e56076457c670a63a1671dd7
MD5 2c44c47c0e85ad208f46c19b838976c2
SHA1 8e061680d4a34485506454b128d83cf709d5a152
SHA512 27d4c0c060e71ca30bf53a4ad36b66dcf2dbfcd9949fe823b0dea8813a27997497b540e206b79fde7d57a8d1f4c3ca130e8069a02ef658420b60838453d44018
TLSH
T13F711C8A85A0C59DF7D6707245E8C8EF39BE4C69B9B34F9162E5C7B42C06F84780C84C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe597332.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe597332.TMP
Size 3KB
SHA256 133fab9c89acb232adb3c3283c1abd913183f864b40301802b6818c863288427
MD5 5690b40b420f4de41dac2a1cc785f11a
SHA1 e185cb31af02c6180ab1b6347afb357751fa3741
SHA512 159b7feb42478c8dcbc4d5453d7d42f2ddbc6e4893d40b7769c5025a24ffc6d3c260c5f772bc8c3bcdeb53033b0995f744914e2961df5a8133c3dc456ffff904
TLSH
T17B61A58982A0459DF7D8613092E8D0EB3AFE8D62B5B34F9222E6D7B55C06F54B81C48C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 85c5c66cd180946e0828f2b7c22683e0819ec9ea501e63a6864d084bade23638
MD5 0bb0baa6533529ddf15e0a953982a4e5
SHA1 2fedf9e3e249be9a483a2969717ffda9c99fed43
SHA512 b57c13a65cab1b1f6fb222cc6e92ebff7658469624e51c4284ece62fd82ce83a7b30955e00ce4cf0d6ef064b22ad5e82b9fe3d1325fc7ceec1b52b98b9f1dd00
SSDEEP 48:YALlSM7PSG7N7q4sZzEst6Ks/bs4NCs9YskCKsuSLse13szVOsmaTlEsxysh/wha:DpTLpSzpKTN3EpW1KVVTlFz/wQ
TLSH
T1E69128A3C3EC816DC95166F4BA286E3ADF2D0924936C3C5AC8D89E9B93F5531D20158F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 f1c1f53f60178f74131b40dd9e4364087b2ca5482038dae8c4b0546fcd23b2d0
MD5 ef7fbfb1bc42f0d2311a2f4ebe073883
SHA1 e3689bf613a3d067a290bfad17440714e35de5bb
SHA512 27fc0a3a7cb9585d765b02d1df63e5b3c3917944531b1e7e0a3a600d8e8b06d71da2f740d69375696386d56fe1e278a2565176af2bb8f6489199a0692704d37b
SSDEEP 192:sxZtRHW9/fHs3n8FIdphB+HW6+WNGtmt/YapJOYiIgrJ:sxZtw9/fHs3nZqHbMW/vw9
TLSH
T1CA22CA166E38A93B8CCBE20DBA55BF13D6F9503295D11E48EAFC861C05E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 ec2377c379bbb18f602a4baa8fdf728a983392b85d8ab7e0ad47a6d2dc712ed2
MD5 e922a878d3132ba63e0c1a96dc7a4349
SHA1 c592788d7e05e806e11ca378869ed10bc1e6ed4a
SHA512 eb1ef623a37a79773369bb8f79db3eeac6e58015559f728c0494a4f5226202026917c19b535ece3b21746f6e33f12185f1759c029a86c9e39fc46ffd1171160f
SSDEEP 192:sxZtRHW9/fHsqLcn8FIdpzB+HW6+WNGwnBYapwYiIg50J:sxZtw9/fHsqYnZcHbtB4K
TLSH
T15A22CA566E38997BCCCBE20DBA55BF13E6F9503155D11E48AAFC861C05E77CD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 f8f6135efa41418f6ef9275c0ca9328a414475b8aad14b7ea7371b4cd946d20c
MD5 76a29f467744f15575bbf14ac147d478
SHA1 6d2d0802d3be826bcd9a9489939d81eecffe3a46
SHA512 85904239c7338f4c35f3420ae7c9f6579a3df65419968e16eb413dc9ae171fa9432088d703b8bdf965bca2b8d8a0081b07504a2954f402a7770ee80c601de88d
SSDEEP 192:sxZtRHW9/fHsq3n8FIdphB+HW6+WNGk7VYapUYiIg5eJ:sxZtw9/fHsq3nZqHb9Vgw
TLSH
T17622C9166E38A57B8CCBE20DBA55BF13D6F9503195D41E48AAFC861C05E77CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 cd2cc713ee8fd5ddbc970f1fea6fa366a304efdd0a85f6a1608f62914496cdb5
MD5 85fc680675d72223c05d3e8e3f9cdb58
SHA1 e4c3c2eab8c02b52fc80b11693e08301ae02d6fd
SHA512 341255b4ee850b708c15dcfdb0c9e574feda9b06616e0d2690300c7bdef4d2b83323f54be32424a3b0d5c040aa810c93360766b6773561dfa3c2682cc6ca56e7
SSDEEP 192:sxZtRHW9/fHsqLcn8FIdphB+HW6+WNGA39YapnYiIg50J:sxZtw9/fHsqYnZqHbB9hK
TLSH
T19522B9166E38A97B8CCBE20DBA55BF13E6F9503295D11E48AAFC871C05E77CD220741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 5c5060a2271bfc0f2d81d0a242cb6eec8cc2f59d83534dd73436afe2745b4ddf
MD5 5ab46f5d2cf6e1a7567c169dfe81b26f
SHA1 69ca3e36213ce63b03b19573ede9a1b80146f334
SHA512 2cd54785a9507fe290a816951b4a441f4a31fea668f62114f04f62dcca3a17a86749ab21f785ab17e5be5966c87e9b2c90f04235d8b6135f6172a9c84e786ee5
SSDEEP 768:kwWPcLKWvKeEe8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjlLlACy7nro4vfeUmR0Z:kwWPcLKWvKeEeu1jaClLiF704vWUmRQ
TLSH
T1D7C2EA3F644CCB7E4FC01A9DDC5A6FA76E9802C79A548D4047FE984C02C77EA912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 dbf92a1d6a94f0eed2125c27c8e7c0d3eea04e93faec2978c14690fdd01ed1e1
MD5 447036aca48e840566b52109140576c0
SHA1 ab9137550ad943730f19670597becbe5ac3daefb
SHA512 60c33da67ad9d43f6d6369484405132b9d2003677a1c94e3ea3fa8a39dd1c94dc61bea6782485665bf8d46da0d07499c330424d740a46983cab2a4391254a727
SSDEEP 48:K0XaDX5ZpCbBsxISnCK9n1NCxHSYE1XryL4neioS23bu1uIS63K9W1M3xAnY9eiT:KcMAK1qG2PuKUkjj2K48yqz
TLSH
T114916A01B0BB166039BD295C82A49B9E054232F33518E63B7BBD04A25D6AF5A0DFD9CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

24a4a04f-c02a-4d54-abdb-497b6150308e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\24a4a04f-c02a-4d54-abdb-497b6150308e.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 226e14feda54145dccc36c2e81a1abbd2fa0b551c8927e380cd67e96d7d20caf
MD5 f04f9538e4e51c310ef7b06ea7be5c52
SHA1 9e4ba4495532290ded03ec6c3bfbd06aadb6d29e
SHA512 a23419c3a085f757de53dce0070f416c706ab7f8857210d7a69fbf1fb542348686cf4d8914d4581e964ba8d7f674f342274e6bc4fc2ae5810c0c75fb8fff78e3
SSDEEP 384:wZcIhsN98851dz9zIGmhScxaGti7BtgOIwZOycLAioQ:OhgTh69ti7BXs78i/
TLSH
T15B827D36AD78AC7B9DF7A144F4873A135EB9C53796C86F90D4EC970D00DA258030BA26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 314f969081e650cbe48cee3d259db67ab262a7e1833a787d5ef4dbee073e45ba
MD5 7cfef5a1ce54dfc691d532c62fb645b8
SHA1 6979400ae9d73da6bce4071d66ad09f61f06fa36
SHA512 5a9f1404e127d38b9a58e011729fb77ff5dd5c2bc65e4bdab032a890ab1375a2c9626157e8dd8962547dd6c9375c619c7505d5b0a96ac4cd3e624bb528278f1f
SSDEEP 384:fiFiZcIBzsNH8TUNTUlIl9851dO9zIGmhScxaGORi7BtgOIwZOycLAioQ:qFQxSwgmuh69ORi7BXs78i/
TLSH
T190C23AF288EB987AD9AE5743B77D2E034EBDC067B5849A50B3D8460DCC961BFC306911
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 29e9e0f18231cf4b3046244002b40f519830a9adc5ecb783fa86e6a5d742bae1
MD5 2850ff41ce844fb6f9505e036682503c
SHA1 8c8cd55226a908c08cf997dfa899d7a9e3cb35f1
SHA512 bcdd9d6a3739c07fad0b4c8b0245280301d713343ce7b0466bc2a4a585301b9049ab0e0750adc985a99d3288708dae4833a955899e0fc99df88f1ebe076f07aa
SSDEEP 96:3qONk4Qsjpfe/tyng7X5ih/cIPURHl8h4otop5RYDJNBnP9ZvEI0IG2jb00eL0yt:aON86IE7QmiUyEJTPuIGmheLNC7sRjU6
TLSH
T1E202E939AC7C7C7B9EF3AD48F4877B236EA5112BA5952F84D9E81A1D00DB24C1307936
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 765115be9bf8e0199be9e547b3876f861d491ce3870af4f442fd4cb5a8992e31
MD5 a87e6695dc056b3af0edbe64eac3b3da
SHA1 8543b92efb9242a4e5c57dee4cddd16e2d7316ab
SHA512 ef33b117909c75d1192886eecd9833574c095bf02366137b3a1efdd477a465abbb652865f2d8bcb908acdb6a2f40b2a9fd3e4673335d75a368852e8f8d00d412
SSDEEP 192:aONQ6IEuQmiUyMJTfuIGmheLcxaFkK27H7g/AU6:aONQ6DqJfuIGmhScxaGzH7BU6
TLSH
T119120A36AC78BC7B5EE3A944F4833E235DA54227DB896F90D5DC1A1D00EF25C130BA26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 c65aac39d0aae5412dbb507b9773bbd649c4a5255e31e7642aff62471548a690
MD5 3a90da3169d9276d5af11619eeedd1fc
SHA1 e1bc1fb206888bc9989dba91b980b12d1704d534
SHA512 e3b3482597fb473ddd84594c17a8d823e270a1844a9c1aa4bbfe2d3985c66cc70ffa7271eafa21ae88fea2b93bc4b891d2211ad681cd9ea495cd8f0fb0611015
SSDEEP 384:fZcIhsN99851dz9zIGmhScxaGti7BtgOIwZOycLAioQ:3hBTh69ti7BXs78i/
TLSH
T118828D36AD78AC7B9DFBA144F4873A135EBDD13796C86F90D4EC970D00DA258030BA26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 851a17f657cad8a22eb33fe18032d2962a77cec9b686843ea9071df074cabf81
MD5 f3e6bb8ead6bccbcbb37ae873f431655
SHA1 16280f722ee57e6f80a7d56230a31311fd91a782
SHA512 492b2e34a9ac3c9771257f216e04462d8b775a374440faa5833b9a695c77a9b9c66488c8ceee9701daf168a0772413e5d254d816956992066590b1323e95ada0
TLSH
T1C8411A98A6E91148B3B76E5A9FF7A86E447FB8772E07D45D00110E4E0A62F40CC61B77
MD5 SHA1 SHA512 TLSH

Submit Download