0f02762b1e5f226d60defa1d0b447aa9e928037e093abc03ec4bf7ed10713c43

Analysis

max time kernel
148s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/07/2026, 21:28

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Quicken.html
Size 20KB
Sample260730-1blb2szzct
SHA256 0f02762b1e5f226d60defa1d0b447aa9e928037e093abc03ec4bf7ed10713c43
MD5 db3a160d5f174a2b9265cdfddb0d7d37
SHA1 1a212d1328945c0374dc60bf65cb44bd181ab771
SHA512 11d6bf3c28ee4fd16c4c58b8dc1cd452679ebc3eb9f8066ed0c612b6f9ea7cfe1cdbb0cc6bdcb972047cb1bce4b069dbaf4a6e8e8a5cf2b3a36f2c3b8acdec6c
SSDEEP 384:vv/LWa0R7DMlT4Fqik0Fpbh/xQ6kezRW2BvjaepBQan1PEIXgNUlJibqYwFLmnN2:zIXEM010Ph/xQ6kezRWYvjrBPP9IziaU
TLSH
T17C92AFBB5683226E3DC761A557EB73042A70E943D656CAB03ECC97484F425C8A1D36BC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2072	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134299205199012118"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2370214745-1838013427-2987045292-1000\{659F1880-1A1D-4BA6-AAB7-0D2EDADC7F0A}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4468	msedge.exe
4468	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
1360	msedge.exe
1360	msedge.exe
1360	msedge.exe
1360	msedge.exe
1360	msedge.exe
1360	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1360	msedge.exe
1360	msedge.exe
1360	msedge.exe
1360	msedge.exe
1360	msedge.exe
1360	msedge.exe
1360	msedge.exe
1360	msedge.exe
1360	msedge.exe
1360	msedge.exe
1360	msedge.exe
1360	msedge.exe
1360	msedge.exe
1360	msedge.exe
1360	msedge.exe
1360	msedge.exe
1360	msedge.exe
1360	msedge.exe
1360	msedge.exe
1360	msedge.exe
1360	msedge.exe
1360	msedge.exe
1360	msedge.exe
1360	msedge.exe
1360	msedge.exe
1360	msedge.exe
1360	msedge.exe
1360	msedge.exe
1360	msedge.exe
1360	msedge.exe
1360	msedge.exe
1360	msedge.exe
1360	msedge.exe
1360	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1360	msedge.exe
1360	msedge.exe
1360	msedge.exe
1360	msedge.exe
1360	msedge.exe
1360	msedge.exe
1360	msedge.exe
1360	msedge.exe
1360	msedge.exe
1360	msedge.exe
1360	msedge.exe
1360	msedge.exe
1360	msedge.exe
1360	msedge.exe
1360	msedge.exe
1360	msedge.exe
1360	msedge.exe
1360	msedge.exe
1360	msedge.exe
1360	msedge.exe
1360	msedge.exe
1360	msedge.exe
1360	msedge.exe
1360	msedge.exe
1360	msedge.exe
1360	msedge.exe
1360	msedge.exe
1360	msedge.exe
1360	msedge.exe
1360	msedge.exe
1360	msedge.exe
1360	msedge.exe

Suspicious use of WriteProcessMemory 33 IoCs

description	pid	Process	procid_target
PID 1360 wrote to memory of 4296	1360	msedge.exe	87
PID 1360 wrote to memory of 2072	1360	msedge.exe	88
PID 1360 wrote to memory of 4920	1360	msedge.exe	89
PID 1360 wrote to memory of 4920	1360	msedge.exe	89
PID 1360 wrote to memory of 4920	1360	msedge.exe	89
PID 1360 wrote to memory of 1016	1360	msedge.exe	90
PID 1360 wrote to memory of 1016	1360	msedge.exe	90
PID 1360 wrote to memory of 800	1360	msedge.exe	92
PID 1360 wrote to memory of 1440	1360	msedge.exe	93
PID 1360 wrote to memory of 800	1360	msedge.exe	92
PID 1360 wrote to memory of 800	1360	msedge.exe	92
PID 1360 wrote to memory of 1440	1360	msedge.exe	93
PID 1360 wrote to memory of 1440	1360	msedge.exe	93
PID 1360 wrote to memory of 3984	1360	msedge.exe	94
PID 1360 wrote to memory of 3984	1360	msedge.exe	94
PID 1360 wrote to memory of 3984	1360	msedge.exe	94
PID 1360 wrote to memory of 4592	1360	msedge.exe	95
PID 1360 wrote to memory of 4592	1360	msedge.exe	95
PID 1360 wrote to memory of 4592	1360	msedge.exe	95
PID 1360 wrote to memory of 4796	1360	msedge.exe	98
PID 1360 wrote to memory of 4796	1360	msedge.exe	98
PID 1360 wrote to memory of 620	1360	msedge.exe	99
PID 1360 wrote to memory of 620	1360	msedge.exe	99
PID 1360 wrote to memory of 3924	1360	msedge.exe	101
PID 1360 wrote to memory of 4656	1360	msedge.exe	110
PID 1360 wrote to memory of 2820	1360	msedge.exe	111
PID 1360 wrote to memory of 4916	1360	msedge.exe	112
PID 1360 wrote to memory of 3924	1360	msedge.exe	113
PID 1360 wrote to memory of 3924	1360	msedge.exe	113
PID 1360 wrote to memory of 3924	1360	msedge.exe	113
PID 1360 wrote to memory of 4900	1360	msedge.exe	114
PID 1360 wrote to memory of 4900	1360	msedge.exe	114
PID 1360 wrote to memory of 4468	1360	msedge.exe	116

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\Quicken.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x264,0x7fffd884c188,0x7fffd884c194,0x7fffd884c1a0
  2⤵
  PID:4296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1840,i,7442647527086076137,13375346330495375241,524288 --field-trial-handle=2264,i,16700320103440459139,8759519613161953972,262144 --variations-seed-version --mojo-platform-channel-handle=2484 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1636,i,5214345901016027055,277082370218735583,262144 --field-trial-handle=2264,i,16700320103440459139,8759519613161953972,262144 --variations-seed-version --mojo-platform-channel-handle=2260 /prefetch:2
  2⤵
  PID:4920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2316,i,6715589475905228958,1751961613792393338,524288 --field-trial-handle=2264,i,16700320103440459139,8759519613161953972,262144 --variations-seed-version --mojo-platform-channel-handle=2492 /prefetch:8
  2⤵
  PID:1016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3440,i,9086920348154057764,11863252548842267335,2097152 --field-trial-handle=2264,i,16700320103440459139,8759519613161953972,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3448,i,3126531809906656704,12467809104423303362,2097152 --field-trial-handle=2264,i,16700320103440459139,8759519613161953972,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:1
  2⤵
  PID:1440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4172,i,2338894298455553952,15382130771248422574,2097152 --field-trial-handle=2264,i,16700320103440459139,8759519613161953972,262144 --variations-seed-version --mojo-platform-channel-handle=4180 /prefetch:1
  2⤵
  PID:3984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4240,i,1174332623943481245,10667688154745332888,2097152 --field-trial-handle=2264,i,16700320103440459139,8759519613161953972,262144 --variations-seed-version --mojo-platform-channel-handle=4312 /prefetch:2
  2⤵
  PID:4592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3644,i,9397527449203097822,8599712566324633579,524288 --field-trial-handle=2264,i,16700320103440459139,8759519613161953972,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
  2⤵
  PID:4796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3632,i,4647865930948323308,8440615884862845245,524288 --field-trial-handle=2264,i,16700320103440459139,8759519613161953972,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:8
  2⤵
  PID:620
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5884,i,493758928815482392,5704430033075645303,524288 --field-trial-handle=2264,i,16700320103440459139,8759519613161953972,262144 --variations-seed-version --mojo-platform-channel-handle=5900 /prefetch:8
  2⤵
  PID:1888
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5884,i,493758928815482392,5704430033075645303,524288 --field-trial-handle=2264,i,16700320103440459139,8759519613161953972,262144 --variations-seed-version --mojo-platform-channel-handle=5900 /prefetch:8
  2⤵
  PID:3924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4348,i,12349993980678929570,13325030475493284928,524288 --field-trial-handle=2264,i,16700320103440459139,8759519613161953972,262144 --variations-seed-version --mojo-platform-channel-handle=4524 /prefetch:8
  2⤵
  PID:4656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4340,i,474398098145852180,14650221447102904867,524288 --field-trial-handle=2264,i,16700320103440459139,8759519613161953972,262144 --variations-seed-version --mojo-platform-channel-handle=4196 /prefetch:8
  2⤵
  PID:2820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4444,i,1738732189069566425,6022160943828564032,524288 --field-trial-handle=2264,i,16700320103440459139,8759519613161953972,262144 --variations-seed-version --mojo-platform-channel-handle=5896 /prefetch:8
  2⤵
  PID:4916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=3620,i,16138412098419189145,9617245137167279992,2097152 --field-trial-handle=2264,i,16700320103440459139,8759519613161953972,262144 --variations-seed-version --mojo-platform-channel-handle=3420 /prefetch:1
  2⤵
  PID:3924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5748,i,3338307187876321156,17266454819845778503,524288 --field-trial-handle=2264,i,16700320103440459139,8759519613161953972,262144 --variations-seed-version --mojo-platform-channel-handle=5760 /prefetch:8
  2⤵
  PID:4900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5832,i,16392467244903776010,16674116147879593038,262144 --field-trial-handle=2264,i,16700320103440459139,8759519613161953972,262144 --variations-seed-version --mojo-platform-channel-handle=6600 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4468

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2776

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 deae8ba3a07225fe9f1490e4968fd83f8d308707a88a6d3d541d8ab416841ddf
MD5 1fcf11901014bf515178c91bdb7a6c5c
SHA1 4746b018067d9671617515224b7697b27fd2fc5f
SHA512 6059830103275d34e1aa4dd4e8d4177b6c2b684b2b3ad5417753387a227c838c0b258e662c78853cf649656ebd762f5d160c10349cd19ac1953380bd6572c660
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7p:fwUQC5VwBIiElEd2K57P7p
TLSH
T16EB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 39b8627875fea5ac5c5bfb887da12c15116e3fe81f200852c71d5699102c9044
MD5 e3962be2eb3bd350a67bf6309159a1cc
SHA1 c10632202b95ed6f7f4475b6483bf5196e4c5578
SHA512 d12d4acc23b51c071fbc9bf4db2f0575a6b43ec7894b272035e4c01dfce30099cd3ef90a1009dd1e6284cfbcf7a37fd3b79490739946700a2c61ec578374cbe6
TLSH
T173D08C677A0E7815E72F8231A413E360A76B4072A5629702F324C81DA9BC8D85BE63D7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a59087fbda784cffb013f4e2a0bf13a7fca483c48e8a7fc15fa022402eb25d72
MD5 dd54db185d82309b854bfa7657ba4600
SHA1 d01c14e8b4dec85ed2e1671545a868fd7ad4fa95
SHA512 f014ab84dd934b90e006883b74ad349d05f60071e57d2cf0bdf8a9bce118654c92139263e082094b602f6900a71e9a7848754994a2ea88642b2376121b581d07
TLSH
T165D08067354D7815E71F42319413D350576B4072A562D702F314C41D957C4D857D53D7
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 4f5aac30c7a266c0983a0778d1cef7ede4bee1726ef58a40ae91f2e9e4be3bf8
MD5 febae1f32a05ade790e2a613233f921b
SHA1 f093b49d0e675d78fc25aeabfe989eaaa5222f6a
SHA512 2bb06732ac3396a1af939845dc3686c5f82b241c98f70fbad2f301042ded39bec1ed44859bf10ecf15e7e436cdae8560f340e97d5a9704a47b7baade59cae186
TLSH
T1E5615CCB0A0A54B2FF1501B0DEE1E69035B3C49C5A1F09DA0D0057B5B701BE1CAF67CA
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5853c8.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5853c8.TMP
Size 3KB
SHA256 db57975929f0163acfba63b34b38af49d924bd0a922e2640b937749ce9291156
MD5 b8cd20e38d8613e874c72ad478696ea0
SHA1 783da7d329851ea4c61d30d6bb2e2754aa73e675
SHA512 68795e7aef40010f390332ccfb5d8e51dc811e5df8811c230166a7c9647f9339a3f196b83853febba49a33f4cfa632d95845b8ddc7fc6143bb3d553208c97c03
TLSH
T17F613BCB0A0A44B1FF2501B0DEE5E69035B3C49C5A2F19DA0D1467B5B702BE1CAF67CA
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 2ff4f960867d9b99912d5d7e27ae50b5240c4ca3f6c79542a2f2cf361af94624
MD5 6538765fb5eaeaa249471746cfe377d6
SHA1 f814a7e266dfddb053158876de2826583b577d2e
SHA512 0b82d8ab6342f42343b024565abba2419cc6851e2ae3cf856661b19d4e0dae0298945d9835d74efda8287088ba249ec700f77bab16df2b56c24e8a85f1f71f17
TLSH
T1FF318CF6C2E4C66ECD0257F0AA186E2BCE6E0914831C7D1A89E5FF5B93E2471D10199F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 a90ee1ca3ea8cbb15d21b7c91220e4cd28cfd848b931487b0ff1fb8eef9a142b
MD5 2202d1e7961e7b3438dd023e04d69833
SHA1 4dec086773aab089a047f9614ac48fbedf6e789f
SHA512 dc0f687ef255180189e56e6ae2ba58aa7894a36d12465dc5ccd0a1211e69d542b1c4494fe45a9e2b7446ced7aed32d923986454a382d58cdecf38b39f310d707
SSDEEP 192:sxZ1RKyM/jK1Ml8Mkd/f9sOxDIdpdMHW6+WNGYHjdRHIgrJ:sxZ1QMd/f9sOxceHbGC9
TLSH
T1BE42D816AA345977CCCBD20ABA55BF53D6F94572E2900E44A9FCCA0C04E6AED2317C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 f6a117d86f1e7828074d4c5acb14b3e56f2a60f3c86316c818a2b806c2cb2492
MD5 9d377989400fe52f5b1a56e5a3530e95
SHA1 dc8c9661d154d2dfe2b308e514165cedcb035f55
SHA512 6dffd693f7ddd509979a3d1956147e0936a34c9f5c2c5a93e3031bd9c414f24b61b609aafe69de299ff2ea3928c8998cd52cce6134eede7aa26e336cdf6f13c2
SSDEEP 192:sxZ1RKyM/jK1Ml8UQ4kd/f9spH2DIdpH2mHW6+WNGYH9Q0HIg5VJ:sxZ1Qqbd/f9spH2c9HbG0Z
TLSH
T12052D716AA345977CCDBD60EBA41BF53D6F94472E2900E44A9FCCA0C05E6AED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 8d0884fc66b6176d494d37740104b02e9161721e2ea98e8d11e0587440c7fcfd
MD5 01aab6ab46469ba1f3695465b2731f8a
SHA1 93bc800fc5fa54883ea809b07c9bac14eb743e17
SHA512 6f9324c0ee177bdafb79f042dbfeac4b87439f3a8126b9b391334084d8d7e7fafb0aeb744bf517036eb1e9a677c82cd547b73a246174a90255dc560ca53f5c7a
SSDEEP 768:cHUZYTMWvg0Po8F1+UoAYDCx9Tuqh0VfUC9xbog/OVOeLlPZ4R/roVX01J:cHUZYTMWvg0Pou1ja7eLZmRsu1J
TLSH
T12DD20B2F280CCB7E4F844E5DEC266F963ED801CBAA584D5447EA894C02CB7EF512759B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 d15322a7d219a05ce86de5739542c7198123c856517a594e1baf740a660c34bb
MD5 eba499142a59d8fce245d36774faa941
SHA1 960c8bdea565f0cc94ddee3be82e155f134d1648
SHA512 cf832d3b1af509560d342541b49614c03c1bebf9a70850236982ec6733ffdc05c98a85df762252af598de3ed3d96644d31687e945b6c3809a76260dadd63a071
SSDEEP 96:KA1eK2AIhWKi8i2tGKOYrkPwE+e+6g25JS06K6PSC6uEsRqUzHIDsoqiS2git9SH:Eol9gJBH
TLSH
T110D1E60271FA02513C7F2A0C92D6AB569E8172637214E42F3BED04B64E6BD209DFD9DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe58f066.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe58f066.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 b3cdcc388be13093811581dd5ae5ed81cbc20797e15181071266368aa9b457ab
MD5 9feab2410e6b28d223eca5940d1f3a5f
SHA1 986d3fcaf61ca7419ed2b9da75f0fe4c6b252178
SHA512 6b0154cb742a607d9ba1d80758bb0cc21aeb98c46b14c3605bf028eeeed60165816b95cef40b648b26d06a197e378165fb1ece2ae8c82ed1d7143e5a11523b23
SSDEEP 384:u4ZcIhsNnQW0MxE5+JvzX5od+zOId4Lr5OObjI9G6w7wtAI:JhP+xOyO04B29Mwt5
TLSH
T10B928D32AC389C765AE7F556F48A35274FF89077E7D86F80D1DCAB0C05AA9AC1316C12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 25c8515ceeedff233d3a862737908bd528628ecb830f597852797d45b894a419
MD5 55364fb05e499203384dfc8a619ccf7d
SHA1 6435a5b77fc0148c43e4eb53889f55164ab9bac8
SHA512 1862bd39df029774e836f00f59a9905dc22327302ab97910befd380945b983c827e5ecb194480f5dd9051d778e2005edd2b1cda1732ee6de8e8a7351145c5b2b
SSDEEP 384:+4ZcIhsNnXW0MxE5+JvzX5od+zOId4Lr5OObjI9G6w7wtAI:Zh8+xOyO04B29Mwt5
TLSH
T11D928D32AC389C765AE7F556F48635274FF89077E7DC2F8091ECAB0D05AA9AC1306C12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 ff666ca4849c0ac9c16e75ecaa7872fdc85e34a59ad360aac3f75c5859d9e398
MD5 9c5d13e8afa5ca91f31c0438df2cf362
SHA1 043c1d5cc801fde8333471de3552772c3c2238ee
SHA512 219b23e4a82b498157079ab0c6dd469cd7baf1f1b8802d2f3150b470f1d12382b6e02cc9ba868d6446ade704d865b6f410a1c9f09d3f8edc92509ccbfadb6220
SSDEEP 384:WxiFiZcI2zsN58TUNTUlIlXW0MxE53JvzX5od+zOIdALr5OObjI9G6w7wtAI:9FQGQwg/3xOyO0AB29Mwt5
TLSH
T1F5D228F258D78876DAAE9B47B77D2D124EBCC067F6946A40B3C89A0CCC565BFC306811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 35f0371a6926c65e277626efaca7d47b20f712ed37ec2e36b2b7b0fe65f45251
MD5 1dc79ac5b420effc208609bd39c436ae
SHA1 4121ad6c1f0ca5c8fd69c7cdba32c96bd46e790b
SHA512 71adbd4b090fefc84febdc58cde77adee9a27f7112944a2c3e62e693c93e6176a2ae0160b4be597994b4ad6498bc127e47abbf9ed198e179544a76888e89e76b
SSDEEP 192:yONZ61VWQmiUyaLgGX5Obd+jvOIF/aX3+YU6:yONZ6W7gGX5od+zOIIeYU6
TLSH
T12702E93568286CA7CEF2BE49B58777135FA4206BEA546F80D9EC1B1C009769C2347C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 752d51864c5f9d257e2db4f02f0105d74d3fd14bc23b42cf6609533a8551f81b
MD5 456e46a596b473a1bba924a2a8519ebb
SHA1 edf39cb81d63c47a3b608e9fcdeafcc0003dd7a6
SHA512 46d5aacc5ba29e5e0c9986f60e24bbc8c21380831dad22dce9061aa176c64e88b8a7b2018afa71b156c9cb374267097b4d39562c166f5b3d97903b6828c76548
SSDEEP 192:JxONC61M5WQmiUyrqLJtGX5Obd+jvOIdXjJWqvr5U6:JxONC6yU6yJtGX5od+zOId1Lr5U6
TLSH
T1C9120A36A828AC774EE2F995F48732135FA55067EA857F80D5DC2B1C05EF69C230BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f98392fc-b991-4eac-86e4-4058093cfcc8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\f98392fc-b991-4eac-86e4-4058093cfcc8.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 414368fed8f4017943db6a6f76293ccfaef10476f4b8a1a2259835288bb9ccd7
MD5 037a29905d800d0d3baaac3d2d5c2a09
SHA1 f73f6a7f8b5883961aceca5ca8bededea24aef20
SHA512 ab4e1629c55cba59107623780beef4fd69200f894338e69247e6c52ba760d4161589801d9f5af52d36abe05ad20f36cdc86e7f8169ce9aece96265f05f33833f
TLSH
T1F84127A8A6EE0148B3B76E5A9BF7686D487EF9372E06D45D10110E4F0533A40C87173B
MD5 SHA1 SHA512 TLSH

Submit Download