fc272df90d1d6f62359f09a64d46661eb09858e2331b4e54b06e72059cff8b74

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
27/07/2026, 12:36

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
XXTJTTJZZTJJ.html
Size 91KB
Sample260727-ptc8lseq6z
SHA256 fc272df90d1d6f62359f09a64d46661eb09858e2331b4e54b06e72059cff8b74
MD5 187a5aaa9d47ceb7c3f55deed8cb69ae
SHA1 54b7e688ab7bbeb49c6265fc2413c88752590975
SHA512 e591f6bba28a4ab0793e72a2db4c7804e7e89f877de171cf1cee054a659bad86efbbf5b9143cc9d6ced7022341b9eacf9111d259ae6aac495a2b0d95c31b0c99
SSDEEP 768:2d0/bwl89qcnDvhX9l6cFYylrl6R81th3qRQm87rMhsRZRRysyiAV573G2XYIsbC:2+7hGaYylERU6i+hsb1XYNLn
TLSH
T1EE93822AD510CAEE0E37C65EA0B0DD3576548905BCD4078FB7F590BCBEABAD5900EE12
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1684	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134296294200579024"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-668679576-120646659-2289335452-1000\{937D309F-EE50-4C7A-B775-6B6382D87C4E}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1916	msedge.exe
1916	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4300 wrote to memory of 1868	4300	msedge.exe	86
PID 4300 wrote to memory of 4672	4300	msedge.exe	88
PID 4300 wrote to memory of 1684	4300	msedge.exe	87
PID 4300 wrote to memory of 4672	4300	msedge.exe	88
PID 4300 wrote to memory of 4672	4300	msedge.exe	88
PID 4300 wrote to memory of 3124	4300	msedge.exe	90
PID 4300 wrote to memory of 3124	4300	msedge.exe	90
PID 4300 wrote to memory of 700	4300	msedge.exe	92
PID 4300 wrote to memory of 700	4300	msedge.exe	92
PID 4300 wrote to memory of 700	4300	msedge.exe	92
PID 4300 wrote to memory of 4444	4300	msedge.exe	91
PID 4300 wrote to memory of 4444	4300	msedge.exe	91
PID 4300 wrote to memory of 4444	4300	msedge.exe	91
PID 4300 wrote to memory of 3988	4300	msedge.exe	93
PID 4300 wrote to memory of 3988	4300	msedge.exe	93
PID 4300 wrote to memory of 3988	4300	msedge.exe	93
PID 4300 wrote to memory of 3572	4300	msedge.exe	94
PID 4300 wrote to memory of 3572	4300	msedge.exe	94
PID 4300 wrote to memory of 3572	4300	msedge.exe	94
PID 4300 wrote to memory of 1336	4300	msedge.exe	98
PID 4300 wrote to memory of 1336	4300	msedge.exe	98
PID 4300 wrote to memory of 2216	4300	msedge.exe	99
PID 4300 wrote to memory of 2216	4300	msedge.exe	99
PID 4300 wrote to memory of 3628	4300	msedge.exe	101
PID 4300 wrote to memory of 1624	4300	msedge.exe	110
PID 4300 wrote to memory of 520	4300	msedge.exe	111
PID 4300 wrote to memory of 4168	4300	msedge.exe	112
PID 4300 wrote to memory of 3452	4300	msedge.exe	113
PID 4300 wrote to memory of 3452	4300	msedge.exe	113
PID 4300 wrote to memory of 1916	4300	msedge.exe	115

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\XXTJTTJZZTJJ.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ff9a697c188,0x7ff9a697c194,0x7ff9a697c1a0
  2⤵
  PID:1868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1880,i,2913760653713137182,13755159478099095697,524288 --field-trial-handle=2328,i,1845516314254586840,17611121434005898854,262144 --variations-seed-version --mojo-platform-channel-handle=2360 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1688,i,4472299579917176234,10599065786113696065,262144 --field-trial-handle=2328,i,1845516314254586840,17611121434005898854,262144 --variations-seed-version --mojo-platform-channel-handle=2324 /prefetch:2
  2⤵
  PID:4672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2472,i,13997144388310148652,10246689672371031337,524288 --field-trial-handle=2328,i,1845516314254586840,17611121434005898854,262144 --variations-seed-version --mojo-platform-channel-handle=3040 /prefetch:8
  2⤵
  PID:3124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3448,i,9203269619969882623,3122242055259055564,2097152 --field-trial-handle=2328,i,1845516314254586840,17611121434005898854,262144 --variations-seed-version --mojo-platform-channel-handle=3464 /prefetch:1
  2⤵
  PID:4444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3440,i,12332721686981112473,3900956100805947960,2097152 --field-trial-handle=2328,i,1845516314254586840,17611121434005898854,262144 --variations-seed-version --mojo-platform-channel-handle=3456 /prefetch:1
  2⤵
  PID:700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4136,i,4795777663510275470,13082930360471148033,2097152 --field-trial-handle=2328,i,1845516314254586840,17611121434005898854,262144 --variations-seed-version --mojo-platform-channel-handle=4148 /prefetch:1
  2⤵
  PID:3988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4156,i,9141447201332259463,12080230400678747502,2097152 --field-trial-handle=2328,i,1845516314254586840,17611121434005898854,262144 --variations-seed-version --mojo-platform-channel-handle=4176 /prefetch:2
  2⤵
  PID:3572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5108,i,9359091541095659873,6624655926786714317,524288 --field-trial-handle=2328,i,1845516314254586840,17611121434005898854,262144 --variations-seed-version --mojo-platform-channel-handle=5132 /prefetch:8
  2⤵
  PID:1336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5112,i,2905201300131130979,14197917450066934034,524288 --field-trial-handle=2328,i,1845516314254586840,17611121434005898854,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  PID:2216
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5868,i,4339780115134214492,6192631401345452862,524288 --field-trial-handle=2328,i,1845516314254586840,17611121434005898854,262144 --variations-seed-version --mojo-platform-channel-handle=5884 /prefetch:8
  2⤵
  PID:3016
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5868,i,4339780115134214492,6192631401345452862,524288 --field-trial-handle=2328,i,1845516314254586840,17611121434005898854,262144 --variations-seed-version --mojo-platform-channel-handle=5884 /prefetch:8
  2⤵
  PID:3628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5932,i,11112641848879641528,18311784905761749195,524288 --field-trial-handle=2328,i,1845516314254586840,17611121434005898854,262144 --variations-seed-version --mojo-platform-channel-handle=4932 /prefetch:8
  2⤵
  PID:1624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5888,i,18387411832736682985,16688595533495673380,524288 --field-trial-handle=2328,i,1845516314254586840,17611121434005898854,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:8
  2⤵
  PID:520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5912,i,4337148104775872389,13102193226116509842,524288 --field-trial-handle=2328,i,1845516314254586840,17611121434005898854,262144 --variations-seed-version --mojo-platform-channel-handle=4948 /prefetch:8
  2⤵
  PID:4168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6380,i,2948744544833050792,2810855596841237165,524288 --field-trial-handle=2328,i,1845516314254586840,17611121434005898854,262144 --variations-seed-version --mojo-platform-channel-handle=4932 /prefetch:8
  2⤵
  PID:3452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6120,i,7006656741697531179,6907319183243332121,262144 --field-trial-handle=2328,i,1845516314254586840,17611121434005898854,262144 --variations-seed-version --mojo-platform-channel-handle=752 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1916

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3344

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 deae8ba3a07225fe9f1490e4968fd83f8d308707a88a6d3d541d8ab416841ddf
MD5 1fcf11901014bf515178c91bdb7a6c5c
SHA1 4746b018067d9671617515224b7697b27fd2fc5f
SHA512 6059830103275d34e1aa4dd4e8d4177b6c2b684b2b3ad5417753387a227c838c0b258e662c78853cf649656ebd762f5d160c10349cd19ac1953380bd6572c660
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7p:fwUQC5VwBIiElEd2K57P7p
TLSH
T16EB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CrashpadMetrics-active.pma
Size 16KB
SHA256 814d47aad78c212b52568b9c7b58d242899d490d3afebce66181cae50c880df5
MD5 8c7cdfea4284ba987d295d82a9c7ddd6
SHA1 7d1a3a66f2d64a383b230196ba89a263ce7ee957
SHA512 59c8229e834c944265aed4131c79f41f9f940a48651b9fb18800cef5bae36d17c7fd5880120c6fee8ce22a157b65bc63846b65765bc4dc86e15926dcce400d0d
SSDEEP 12:sf9iXhV0xoUZxCe+JKlkQuMRxCb8TXuYJ0IJpPK6BsyW1inPiz:U9iRqxoUZxWMk8xVTeYWI31BtXP
TLSH
T105724C85B34498FFC8835E7189BD27903774F6DF1F02866B6A6A760E2E271C84F44224
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 1c8e6fcbb66aba64fe595f222fc4117e00e82ccdc0eef2100a1b4f7babb04f87
MD5 398d1e7948d46a763209c466fdacd0fb
SHA1 b26f2c32bc106089a59ce779d792beaba59f92bf
SHA512 a0bbf31d803e7333d004f03de9c261732d00cceb5d82dd64b5f0decf8adc8b840891187c72bb21cce83873e6d4dd2fab89d4c7efa320afe2ef3589678dcb1424
TLSH
T1B6D080277A196004F3964175A483D7061319956129575711F310C44CA9775D553C11C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 5d2c4e39ddbeb0ac61628bae04f1ac5787600ec893b0e230d1a84d61470771a9
MD5 cd6e704306442404371caebfec7f5b29
SHA1 e4beab8b7820af3633bf7c75a5498a958a95832e
SHA512 de66681a9245e8ece7d7e2ea2080251c395f2aeb8a885ac007eaf16f2ee3a3e36610d2afc17be964a038704371cedfbe4da91143ebed5adac20dbda97768d6e6
TLSH
T13AD080273A196404F7964175A483D7061319956129579712F310C44C99775D553C11C2
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 381cb425481313d3a4e719a38174d9295a3bda4e31f748f047850129df58fc66
MD5 4b3b5be7139e431241a49afe86a24e66
SHA1 e6b5d51462bf93e04d105cf161440c68dfacd9f1
SHA512 98da7663d54d2d57b2e7174c05830bdcb9367bb29c01fe140f22d5cd8bd3ce6a4afc2070ca1d45016693e5ad574efe4048677e43b2d4169bb269b8c028676069
TLSH
T1C17180740D368FA6FBD041BF51F3E255747582D8F4131E36E19052382A2EF68A1ABD4E
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe584c46.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe584c46.TMP
Size 3KB
SHA256 7b3fafdc10032de9e8adb85dbcd33457afeeaf0840dfd4f157014f702eb26be7
MD5 ce9282f038e20e27ba766e22e6dc54e7
SHA1 7e68094b65c9142f6629b605b5e58df0ef08aa63
SHA512 47a8d5c99283c7d5c2ebba8e1bffdf5645098d974e74146f5fa44ea2ac9e49b9e1b7a4109fc10706a6dc03a4518eb92bb89468d0d559a14bc20648cc7b7ece41
TLSH
T1A8715E740D368FA2FBD001BF51F3E255747582D8F4131E36E19056382A2EF28A1ABD4E
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 478B
SHA256 203f0832c87e781358b8abb879c6162fa0a6663c2c32b8fff438769f118ca349
MD5 88f9f80b184815f01dee40d81d186a11
SHA1 16fde8cfa5f87960425667263ddf0731035e560b
SHA512 9b78cd5dcf5ba0c4297b67bae7e48b6a2f86b90916542cd7578744c6c9b6e1c1e6555b8a1fc1b76873b33fa670b59defb32c25f35ce09cf3486c2f0415c21deb
TLSH
T196F09EB3C3E455AE8A0442F05518AE17CF3D0402831C7D55C5D4AE2B83F2464D00099B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 289ae53fd7b74aa171c9ce2b9641cce9249f150f6c54a6e92178e3178e846a6b
MD5 82e28e9ee96f4705b9186550194db900
SHA1 e3bd020ccc66984f3702fe547e558ec9cfd23a41
SHA512 d34a9d2f77f8fcc0b8dc4f5bc38172f597b0343d6902815134d6c65d6d312af90aeeeeaac0ad9574baf3d1ada2153b2ab7ad1b4cabcc4df9712139be81cdf978
SSDEEP 192:sxZW+/yM/jK1Ml8UQgkz/f9s0ScIdpH+HW6+WNGYCCgrNXIg5XFJ:sxZW+7qzz/f9s0SFeHbGVpB
TLSH
T1F452C816AA3499B7CCDBD309FA51BF53D6F55472D2900E44AAFCCA0C04E6AED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 a8588436516d21de854f08b75b6b03d70b698cdecfc8f435a3d086c7a339c611
MD5 b32377eded37b00e5fd1a755f3a4709d
SHA1 ad1b23d0e65fa9387eb3526d600f31b2c80610c5
SHA512 4e4aff7eb39fd302ca310fd00b7e2c15be234911b67959e61cecf9192c9bfeae5a8b9261e4c5a77c68edce1134e2bc58058a957a6a88c3d9b793235d4ebc9a2c
SSDEEP 192:sxZW+/yM/jK1Ml8Mkz/f9sgQcIdpd+HW6+WNGYCkbrNXIgrJ:sxZW+7Mz/f9sgQFsHbGwp9
TLSH
T16142F916AA349977CCDBD309FA51BF53D5F95472E2900D44A9FCCA0C04E6AED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 b429841ec31cbcc1215a05ff96b4e01d78b20ff54e638c9b05b49b60d70cd876
MD5 18b3899cfa0e69a3a0a2110c60f0b4cf
SHA1 81ea84a2e17a5adf03c775d4dc713d4e05d1c7ac
SHA512 5693db74f5a4b27e867c38ade25c6bc74249f939729ecb91f440270f7eae2177cac35b69e98d615bf88d6dc63ce711f4149796bf5acb6a15923a2753dbc3a4f8
SSDEEP 768:te8bqn+WvSCt68F1+UoAYDCx9Tuqh0VfUC9xbog/OVnZLlRTKVAroK:te8bqn+WvSCt6u1jaCZLbWVLK
TLSH
T1E2D20B3B280CCB7E4F845E5DED266F962DD801CB6B988D4447FA884C03C76EA511B5DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 a3cbb4aadc6a45b0df2d18f40c37875f0187c7d9878ac0f40e5482ee4cc48a9d
MD5 f524874cc2b7970f1d5ae539ff901e54
SHA1 bd54b78b13a4a67f5bd389770ad093581ca596b1
SHA512 b48cfa7bc582fc7aa6fdea9dd2a92718496ee3d0b066717913870124423ba9568b7edc1c965aefb6ae3a7b9db87eb7ef510924df916db2aaaea718266f002dcb
SSDEEP 48:KQ5IZKSMkzy+FYf7t33duT6QIZDdKsc0NdIVNjCzMyI/KHqsvyJz:KQ5aKSMayawK7aoygKHqOaz
TLSH
T13D916206B57B160538BE29189156C936DE81306B7658E46F3FB808E20BA7E124EFDCCC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0e8db573-fbb0-4c68-8ce5-1ad6e6d182e7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\0e8db573-fbb0-4c68-8ce5-1ad6e6d182e7.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 882f875f2dc57e26a0a7c2b405d26191fc9087cc1e0683befd0d86081bc75ea9
MD5 41dac3f81b511e3c832e2ecf76866b51
SHA1 b6c8d0dbffb19ef4979641d7fdb8a5f2ec9d2b69
SHA512 4653c29fd6a2056a347dbe7496ee74643b897e3ec7c9dc7e1a92abeddd27425bcf3b28f9be72fc820c8ed7f93bab4a1d0b520ad24de5f25115e694d08b2d24d8
SSDEEP 192:uJLsNZfQFHsr03bi6WQmiU17cg4Ea+jiOm4HoEGnamDX5iqqU8:isNZf7NVCPEa++OrIEwFKU8
TLSH
T1DC323836A8789C335DE7A645F58B32139FE4506BDB892F94D6EC1F0C00DB69C130A92A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 a54bb9f6b6ce2046d9c98dc693877a4f11cab824250bce3ff1b2df8024154962
MD5 bc59b67fa9193b4a9b99b6cc8f591f95
SHA1 c55cab54f5a877a8f74ac51aafe67bdcaa6c769e
SHA512 7e3e587b765225c4f417a341d7ddfc894384c3d65f67236d741cbffb41d8ec718b1261e66f44566701779dbd77d55cd4c175fc6153aa61f49e304ade75e0d974
SSDEEP 384:EiFPzsNA8TUNTUlIlR7NVCPEa++OrIECFKOObjI9G6w7sp:fFrDwgLi8a/OcECFK29MK
TLSH
T139826B379878CD77AEA79B55F58A32139EF050BBCA896A94E7CD5F0C01DB19C030AC15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 787d41d4e7c917c5e9d126da0c2263ae3e33ab22341249abfdfb3f7f225b58f6
MD5 70defc6ae015ba42cd4e1b384c7b7f03
SHA1 897fd2424475e3fa66bf0157fb8026900fcfdeae
SHA512 e076466c92e7e66ea0e5463c20724815a4ec3bfc162ffbdd61c6bff1d52b93e378dcba4f3dc5bd238073a6c7d774167556b2666fd5e93a67657711557170fd0c
SSDEEP 192:vONy6Db6QmiUyjLHBa+jiOm4HoxRgDX5TiU6:vONy6u6HBa++OrI4F+U6
TLSH
T11A02F93968385CB79EE26E49F88B37279F94107BD9562B84DAD81F0C00D765C2347826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 16KB
SHA256 a74a47a562e2886926b5da695805bb470c5d4119b37ad3fb26aa96b0a0671d88
MD5 fd8d8ed537d60ac55dc5b3f625a07b1c
SHA1 565524df2c75512d86a6bc855c4b1ed311dac58d
SHA512 3042507b86ca2f3f47a5cfb04a1397dbc41a5557f6f56c319945d7829038e9f60dcbaf356e6b47362e98322a63b6392d7e5c3e6c35ec57744de48f38a7e212af
SSDEEP 384:MsNZR7NVCPEa++OrIEwFKOObjI9G6w7sp:Mai8a/OcEwFK29MK
TLSH
T1C1727C36A8384C739DE79615F58B35139EE090BBCB8D2F84E6DD5F0C05DB6AC530A81A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 6079f057215e9867f5c94da0ad09194da264caf5b120bf651d1ed884fc64f81b
MD5 f5a89ddc7d831ed28a9055872acf7129
SHA1 a319dab83ac177ee95f025a64dc91b20ef16394b
SHA512 b2e025b52c7a675939c16af49d2c52bbb09c586747c8e42e76232735b3ece9960bc5b7859dce439dfa767cbf60aeab770df87dfe2c06dcb58edf0a086f6656b4
SSDEEP 384:EiFPzsN78TUNTUlIlR7NVCPEa++OrIEnFKOObjI9G6w7sp:fFrKwgLi8a/OcEnFK29MK
TLSH
T1B9826B3798788D77AEA79B55F58A36139EF050BBCA896A94E7CC5F0C01DB19C030AC15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 017175e8fc0a5776a89738ec954f12a64b08c91f327b9d9062cded1401f68fa2
MD5 b0e2778484bda905e482b7cf16684381
SHA1 ab33380a1c0230f55aed2140dd8251a51c4598b8
SHA512 0a5f5b123f9274f41a642fb0025d64c29157ca0fd6e9842118f8bb6f437ee9144ebd412fd7e8bd2249aea38621daa666568dd3a4c9abcaf3932ec8b8b63026f6
SSDEEP 192:vON06Db8QmiUyGLNBa+jiOm4HoEGSNzDX5iqqU6:vON06kxNBa++OrIEnFKU6
TLSH
T101121936A8789C735ED26545F88B36139EE44137DA8A7F84E6DC1F0C00EFA9C134B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 e68a069fc5ab05ded8c4a7ae5454b0b9d0bb21c6d7da445c5675e26fa28f895f
MD5 157cfa8f63a278e769afe4b94dca087f
SHA1 a2f4b10efa49b5f4d55ea32d9882c455658ea9f6
SHA512 521a099cab97a06b41bdae8fd19da482ed92a0a8e95d8ece57ff0c2976d324788a55e9190c1fe91bc05c2669f225ba803584810b854016d0a316af82a16b32c7
TLSH
T1FD413758A6F91108B3B36F1AABF7A86D887F78272E07D49E10150D4F0A62B40C871B37
MD5 SHA1 SHA512 TLSH

Submit Download