2c1ccde9b565d42a3e0b4fb126c4f42201aeffa47fb8eb94ad1f848899cde97e

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
20/08/2026, 06:37

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2c1ccde9b565d42a3e0b4fb126c4f42201aeffa47fb8eb94ad1f848899cde97e.html
Size 11KB
Sample260820-hdrmqstyht
SHA256 2c1ccde9b565d42a3e0b4fb126c4f42201aeffa47fb8eb94ad1f848899cde97e
MD5 b06a4e4d3dae559e5892fbf11ae14524
SHA1 5485eec0b0f7c72c6bf0dff783fd599cc7540ed5
SHA512 0758fcb301c9580245cc463954e81bac2e211dff1b3e9f3fadf650f1424dd6d34615903c235dd3b06c6d4f36bb5529d716e6c569a8e759a6024bcedb7722bf9e
SSDEEP 96:97ePvZZBKagP7iKjdwKUU0kZZCAWxhna33/Wah6bSiDq9a8fPphYZbg779ZC52VH:CBQb/pCbTa33rSKRPQ5Ka2VYO5
TLSH
T1E7324D6889C0E837081706D659267F8FF0E4847AC7B58511A8FF9EC3DB80EB6612674F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2268	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134316814598055427"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-876885714-46325919-1482798410-1000\{F8165585-8F8C-4D6D-AC10-39B48289DCCC}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2120	msedge.exe
2120	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 2652 wrote to memory of 1660	2652	msedge.exe	86
PID 2652 wrote to memory of 2268	2652	msedge.exe	87
PID 2652 wrote to memory of 4136	2652	msedge.exe	88
PID 2652 wrote to memory of 4136	2652	msedge.exe	88
PID 2652 wrote to memory of 4136	2652	msedge.exe	88
PID 2652 wrote to memory of 3832	2652	msedge.exe	90
PID 2652 wrote to memory of 3832	2652	msedge.exe	90
PID 2652 wrote to memory of 4340	2652	msedge.exe	91
PID 2652 wrote to memory of 4340	2652	msedge.exe	91
PID 2652 wrote to memory of 4340	2652	msedge.exe	91
PID 2652 wrote to memory of 2056	2652	msedge.exe	92
PID 2652 wrote to memory of 2056	2652	msedge.exe	92
PID 2652 wrote to memory of 2056	2652	msedge.exe	92
PID 2652 wrote to memory of 2476	2652	msedge.exe	93
PID 2652 wrote to memory of 2476	2652	msedge.exe	93
PID 2652 wrote to memory of 2476	2652	msedge.exe	93
PID 2652 wrote to memory of 396	2652	msedge.exe	94
PID 2652 wrote to memory of 396	2652	msedge.exe	94
PID 2652 wrote to memory of 396	2652	msedge.exe	94
PID 2652 wrote to memory of 1684	2652	msedge.exe	98
PID 2652 wrote to memory of 1684	2652	msedge.exe	98
PID 2652 wrote to memory of 3660	2652	msedge.exe	99
PID 2652 wrote to memory of 3660	2652	msedge.exe	99
PID 2652 wrote to memory of 4216	2652	msedge.exe	101
PID 2652 wrote to memory of 3356	2652	msedge.exe	104
PID 2652 wrote to memory of 5076	2652	msedge.exe	105
PID 2652 wrote to memory of 3840	2652	msedge.exe	106
PID 2652 wrote to memory of 4316	2652	msedge.exe	107
PID 2652 wrote to memory of 4316	2652	msedge.exe	107
PID 2652 wrote to memory of 2604	2652	msedge.exe	114
PID 2652 wrote to memory of 2604	2652	msedge.exe	114
PID 2652 wrote to memory of 2120	2652	msedge.exe	115

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\2c1ccde9b565d42a3e0b4fb126c4f42201aeffa47fb8eb94ad1f848899cde97e.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x218,0x23c,0x240,0x210,0x264,0x7ff88f74c188,0x7ff88f74c194,0x7ff88f74c1a0
  2⤵
  PID:1660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1764,i,15158149978793727604,9856985437001727209,524288 --field-trial-handle=2240,i,15450677640172736451,2637834324334231521,262144 --variations-seed-version --mojo-platform-channel-handle=2276 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1636,i,10424362934961684228,7653676958182780330,262144 --field-trial-handle=2240,i,15450677640172736451,2637834324334231521,262144 --variations-seed-version --mojo-platform-channel-handle=2236 /prefetch:2
  2⤵
  PID:4136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2044,i,14626372453412550676,17985437880997079051,524288 --field-trial-handle=2240,i,15450677640172736451,2637834324334231521,262144 --variations-seed-version --mojo-platform-channel-handle=2736 /prefetch:8
  2⤵
  PID:3832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3408,i,15426960894585888429,6326019535809104416,2097152 --field-trial-handle=2240,i,15450677640172736451,2637834324334231521,262144 --variations-seed-version --mojo-platform-channel-handle=3420 /prefetch:1
  2⤵
  PID:4340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3412,i,7551837552827840152,14997208180930145349,2097152 --field-trial-handle=2240,i,15450677640172736451,2637834324334231521,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:2056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4136,i,16136847897641080257,18329335049731069522,2097152 --field-trial-handle=2240,i,15450677640172736451,2637834324334231521,262144 --variations-seed-version --mojo-platform-channel-handle=4144 /prefetch:1
  2⤵
  PID:2476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4088,i,6499580544385206875,16550030255466803099,2097152 --field-trial-handle=2240,i,15450677640172736451,2637834324334231521,262144 --variations-seed-version --mojo-platform-channel-handle=4152 /prefetch:2
  2⤵
  PID:396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3840,i,2252888528061485670,17164879926306751663,524288 --field-trial-handle=2240,i,15450677640172736451,2637834324334231521,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:8
  2⤵
  PID:1684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3812,i,11694999519977714165,790431205673153176,524288 --field-trial-handle=2240,i,15450677640172736451,2637834324334231521,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  PID:3660
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5572,i,14789431212617450032,13621651178445178626,524288 --field-trial-handle=2240,i,15450677640172736451,2637834324334231521,262144 --variations-seed-version --mojo-platform-channel-handle=5928 /prefetch:8
  2⤵
  PID:1916
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5572,i,14789431212617450032,13621651178445178626,524288 --field-trial-handle=2240,i,15450677640172736451,2637834324334231521,262144 --variations-seed-version --mojo-platform-channel-handle=5928 /prefetch:8
  2⤵
  PID:4216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4932,i,335254343078742115,9601233919464901748,524288 --field-trial-handle=2240,i,15450677640172736451,2637834324334231521,262144 --variations-seed-version --mojo-platform-channel-handle=4884 /prefetch:8
  2⤵
  PID:3356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4856,i,12862646014165496150,8281511340965356418,524288 --field-trial-handle=2240,i,15450677640172736451,2637834324334231521,262144 --variations-seed-version --mojo-platform-channel-handle=4172 /prefetch:8
  2⤵
  PID:5076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4868,i,12259305028238136104,2530575037316464311,524288 --field-trial-handle=2240,i,15450677640172736451,2637834324334231521,262144 --variations-seed-version --mojo-platform-channel-handle=4192 /prefetch:8
  2⤵
  PID:3840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3840,i,5649867472037178329,3244328574470672741,524288 --field-trial-handle=2240,i,15450677640172736451,2637834324334231521,262144 --variations-seed-version --mojo-platform-channel-handle=5144 /prefetch:8
  2⤵
  PID:4316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4152,i,13008378873663872217,9630194213448731244,524288 --field-trial-handle=2240,i,15450677640172736451,2637834324334231521,262144 --variations-seed-version --mojo-platform-channel-handle=4908 /prefetch:8
  2⤵
  PID:2604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6176,i,16632575930972436148,2951185697580038714,262144 --field-trial-handle=2240,i,15450677640172736451,2637834324334231521,262144 --variations-seed-version --mojo-platform-channel-handle=6156 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2120

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5068

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 680ea733e4d93c3a661de50f1ba5f3b70eca0d8b6480c8062eed9f189a600953
MD5 357d314524c7deb89c6da0431825b98a
SHA1 ef0672d9f937448a5b9f15c4e64b6a2d226d8595
SHA512 cc9fcdc22264d381d85fc4586f178876356c1c95cd4f68c1e4e2ef4ce51cd2b00bf8d5e91fc8d8006c3c0129d82cfa89ead4c0f4d9896590a4e10733f00b1cfb
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7h:fwUQC5VwBIiElEd2K57P7h
TLSH
T191B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 6de34b260036ecaa4ce5839bc4a7ff7495e50b7b94349b12d9f840ca0e76da3b
MD5 56d82099872fb501c566d072ae897035
SHA1 2c96501551fc13c09496780960d8e7ccb4957b77
SHA512 c4b4017256caf25e88f146e6104134cddfd15089203e8e74c5196627fc92897f9fe7e3fc5c8305032be88e9409cdbc5dfe1e81017fcd5e38b3579b3d823b4a41
TLSH
T160D0C073378C7C00EA090170D013C3031FA7855824C39F03B100C01C54B43D9738B093
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f5dece638cd89af82b06bd2fcb3d1738eef64d2275be237184ea8bff7af3fdfa
MD5 f19ec2293392af872f10929c41627e26
SHA1 0576f5277c470f5bb8c3f4d3786ca8d967d0a33e
SHA512 4cc85dc71d34bb516f8fe45b565a6a9b4cda255a931f33289247ed84150baf0e2df40fc87109df41771553b92545ed858197cdd3d673694c83458cf9812aa9dd
TLSH
T16CD02272268C6C00EA090170D01383021EA6855824839B03A100C01C44A52D9728A093
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 357B
SHA256 0328eb283202c452ce2334a7e0575a6e01b463f3c7b11844d206ba2d4c73b378
MD5 2208607efca5b151cb995a425589df65
SHA1 0e034f858907c0734e2beeac9495539b4e341d4d
SHA512 27542d218675c9cb5bdf235a97eaf52cca673cfd2ca331a91459874d0ad984d7bf4f42789b3d6220c5e9aff31b57135cde57b00c57b9efbba4d24b3236740298
TLSH
T17EE0D8FCA298C1A9A50DB787DDE8521CC83672079E8CD5752214AACC5452001C744CE4
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 59136210a7c91acc539e9b758f7debddc0cf323cc71413c359cb984d293e068f
MD5 3d9dde43c9a2bcefee1e3579041a3493
SHA1 94b099fcfae123245960a94057c708bf2f58970f
SHA512 3066fbe568ee3b2ac109b3e8f79e6a4193905304dc9ddfd789279f364b97db49ea4fa3b42dead6d6624232bbb04c6adacb15b749ff9e1902a51a9c6457f3263c
TLSH
T1D2613B3401A113A1D3901572D0E36E0139738DD94EA7CF2E527FA7FDE635BA24C2E058
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe589ae3.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe589ae3.TMP
Size 3KB
SHA256 2425f30d3cc1610c0aedc5a8b00537a887d813974018fa6e2ce6480927bbc0d0
MD5 feda9a01d4c43749a6721d7e7cbe4e66
SHA1 a900d718264c4e653272cc18d0f36795462d658e
SHA512 3b062aa9be4f0abaff803258a1c78080e145293669b67854066e1483df20812d36639415a390d6c713e75dac7d40eecfcc53d6ecd303925724e5aeb54273d930
TLSH
T152612A3502A113A1D3500572D0E36E0539738DD94EA7CF2E527F97FDE635BA24C2E048
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 96112ed7d1d7b3e7302348351fccbf402a6a2e911b85a1799b4e580e358faaea
MD5 486cf322adfdf43ae11e9ae963a92ed7
SHA1 4e6c4f4b1b6021b32fead73c116d91a96e0c4f2d
SHA512 e888e64c9349b52d12667470328b8c79a48ba7e81740e8a516d246554b9f9ffa2e666eeb95a1babf544a6083e8a600b6ac8b4c26744e07b5310b7c29634c5ba5
TLSH
T1A5117DB3C3D585AE890116F05A28AE2BCE2D0505831C7C1999D4EF2797E3475E10155F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 cc6b6f058a4cc8c79a99a5946ba7f7af7096cb16da21de81781037790a8cfc20
MD5 a493100c947c8aadd812a7ecbf7ff946
SHA1 3245bb5e6e38ec88c9f2a168e728bfae45b60d81
SHA512 dc09dcf83db9ba53c07ecff152c32ddd47a9ff0745ab6389d602c0b16e54f11fcfdab011e8d3094a7f79bc89726cdc4f61d4e904988693fb101acccdef5e912f
SSDEEP 192:sxZ1RryM/jK1Ml8Mkw/fzsfIxIdpdJHW6+WNGYwKtCdIgrJ:sxZ1DMw/fzsfI6vHbGl9
TLSH
T1E042F901AA34A97BCCDBD20DFA55BF53D6F5457292900E44ADFCCA1C04E6AED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 4de6a8765c7d797cad35195447df5e8a18d09c9d3af8388afb8a5d35aa2af475
MD5 fd9e4c9737fcd6adb560991932bc886c
SHA1 9d5c8d96b24280bc1de408c528da8da77f6d4468
SHA512 681061efabc9aa01789d705bae1fa88a3d4cb46bde531a80649a063d235dae40acc166843965408b7974e36b6bdbecb9228af01368cd6100ee1980774cee8edb
SSDEEP 192:sxZqRryM/jK1Ml8UQkkw/fzspnLIdpHJHW6+WNGYwNWudIg50J:sxZqtq/w/fzspnUpHbGze
TLSH
T17152D611AA34A97BCCDBE20DB945BF53D6F5447292940E44ADFCCA1C05E6BED220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 e19a19175ef17ac1758d3ea2fdd76327f7defe9d100ea64096e742c401a53d03
MD5 045334e0c1fcec54aa004f1a17bb8688
SHA1 fa1725f4b00fce5bcca573d2e2631e175ebbd699
SHA512 0c7faed2c6283d0992d51d2fc2c57b70823ed6bff1e1e49eaf4fada25f0d9ee74e4adea546207fa1c78f9d9d1760987dd789c6fdd251e7199d0ab38d8e8d905f
SSDEEP 192:sxZqRryM/jK1Ml8Mkw/fzspnLIdpHJHW6+WNGYwNWudIg50J:sxZqtMw/fzspnUpHbGze
TLSH
T11B52D711AA34697BCCDBD20DBA45BF53D6F5447292900E44ADFCCA1C05E6BED220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 44cb54b816665d66a399763ae171a11c76689d7653468342046d691e182fc54b
MD5 6c081779d157ba282d51001b67fff2a2
SHA1 809462808bbd27c8619846b2ba25575804ba83d5
SHA512 2afd741b878420128c44fd65c55f72a549dbda0b7eb1995109b1f60992800dd5e428d628e8fcccf35111b281932930286dadd128d80885bea9bc4707d889d7f1
SSDEEP 192:sxZqRryM/jK1Ml8Mkw/fzspnLIdpdJHW6+WNGYwcxCdIg50J:sxZqDMw/fzspnUvHbGRe
TLSH
T1D552E811AA34697BCCDBE20DFA45BF53D6F5446292800E44AEFCCA1C05E6BDD220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 63d8f25fd29b73b6dd512161fe3e8d683c2443a80ebbb9a0fe71a9d10bb71cdc
MD5 41c2a4771b38e084b151cf96b8ed0372
SHA1 ffc4878b5b6e9a03f275f5667bc2a6d798532df1
SHA512 bf324950dbe3f6e42964ae19982705ab40e9e6ae93b51643a43b8dfb6f8d535a8105ee5466bc201d5c776dd107e0d6aa88683ea231a60e5d3f5bcf78d121a2c9
SSDEEP 768:QV4jeXmWvmKLE8F1+UoAYDCx9Tuqh0VfUC9xbog/OVhPLlrZ+dProhac/al:QV4jeXmWvmKLEu1jacPLZQdcre
TLSH
T163D2093B280CCB7E4F844E5CED26AF976ED801CB6A584D5047FA894C03C76EB512B49B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 89cbd825d4adf2d0503c09074bdd3cdf4be78aafcd9245817d547a495f66a41a
MD5 2b582f0359916403251c98628f70eb1f
SHA1 d7ee2acd6a97e499deabf58e0053e726fc8da043
SHA512 c46a0fc8b098a50c610ca4ce72d55b0968e1bdcdb41587812ea648536b2295652744d0a3a74d01b2b8908f6d9bdc3581302c3b4066cd5a9416160db9041a27fd
SSDEEP 24:KdQf3kVaadCC+4SO+lIjY+Kitham+1EwuSmEMt8ofyXYiflO/aUdo0Q4gM+DIjKd:KAJIdKawQvy1bI1KYcgMOIXKnqQnyhz
TLSH
T17991871531BB17463DBF250CD29096EAAB4171A3740CB42B3BE900714E6BE658CFD8DE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe593668.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe593668.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 f130ab34f292c1e67ce0d6413d7146b0426f3dae627c69d21a3b84d555363da6
MD5 b581691746e4258a4485ae2e5b3e44de
SHA1 7e44a6cab45e46ab09b8bc58d7a69209b79c5e67
SHA512 f6d1917d2840b18d63fe92686620a60c95df67845d30278ade1333c4cb3c2795602b314508930686b73c41cf73993d5e4efa90b5e7c5348822fe14b6c2b15dce
SSDEEP 384:GZcIhsN8AxttEaf+DO5YShxJrpFTliv/woU:Uh8WCWONThDJig7
TLSH
T116827D316C789C775DF6E289F44736139FB840279AC96F84D8DCBB2D00D96A9230BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 28b149d7082cbf17d63a4d8d3af7b769eb8ebf5c8a537086a2a9c9675dd545bf
MD5 45041f2cd1f4208a03b8d9b07997f7fc
SHA1 442dfe4ccb9e6e89bdbdad8fd4fb47dabf12eb98
SHA512 7723955a8fba73a2bbaa712834e99c9ef321a0c31410be8961c892db3442814f708bb6ff0327d1d3f8d36d53af3e8fb96509e1f748574f461173429eca2e10b7
SSDEEP 384:aZcIhsN8PxttEaf+DO5YShxJrpFTliv/woU:YhfWCWONThDJig7
TLSH
T1D1827D715C789C775DF6E285F44736139FB850279AC96F80D8DCBB2D00D96A9130BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 9e536cc9c35393b5192107a9fb6baa78c903583534e1f6fc79fa4093dc00a1d0
MD5 bc6447124df2f8bf43717657341afb0e
SHA1 84d2271cf186f32f8099f614aacd38a009963067
SHA512 ca32b4bfe59238ce8ec884f3e08e6e55324e852891acb445c919b4ec43e125d19df200ab9ed75194b240b298a0c30d0afef9e14ed910001aa34a916e8c0b594b
SSDEEP 384:BiFiZcI/sN08TUNTUlIlPxttEaf+DO5YShxJrjFTliv/woU:oFQ/hwgNWCWONThRJig7
TLSH
T1FFA26D725CA8C87BADF6A785F94636138FB44067C9D5AB90E6DCAB1D009A5EC130BC21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 3fdb05aebe458cbf9a8af9cbf7a6c9f1efeeb1882b589a1d47f1d606bc48b4e5
MD5 aa096e70931388c266cd952bb964b272
SHA1 0a8c14232a25f67986e07a35ebeb14d0cbe016ac
SHA512 daa58b5518153a197879d0538d71ee2748b3d93354d07ff457f3ede914c35fefa30877700a7aff6a4ff650982973a954fbb7b3f367ef65c25d386e6197a54969
SSDEEP 192:EONt6hZ0QmiUytQpc/+jVlO1TY55wOZ2nU6:EONt6oxpu+DO5YA20U6
TLSH
T19F02E9356C686C778EE2AE45F48777235FE4112BE9956F84EAE82B1D00C779C2306836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 1f999a9c1e616b6808de0bd259fb3249669df29db8aea1378ec99f42f245a8d3
MD5 4f3856e7451ba8f0c4dbf5080fa70f0d
SHA1 db052d7a41948b7ec81e275956cf335afd1a866c
SHA512 eb38576ef578aa0ee605189830e60f05a60a43808d0c0866226575b215559bd896d8f878a04bab38a002220135e4e0973ed901731410d743b170400846f6fc7b
SSDEEP 192:qONd6hZHQmiUyPQGc/+jVlO1TYSbFuSJrH5cOq9qqlU6:qONd6NJGu+DO5YShxJrq9TlU6
TLSH
T16312E8356868AC374DE2A585F48736138FE45227EE857F85E5DC3B1C00DB6AC230AC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c451e2c5-257f-4115-ad4c-25c7b24b0987.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\c451e2c5-257f-4115-ad4c-25c7b24b0987.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 699c165346d87b5efed07897a17a9ea83b8a4ec132a4e1fb98a69e1e116cdf74
MD5 3b2b43013ee1f448714538bba34f9218
SHA1 f6f2de09c5e455a6eb0c3de215e528c5c0cb2c81
SHA512 0532bde9925ebe41a419c12b18ee64d125c0b48e4f49d41d48e27ade3b3675cddf64c5a62c9fded4d0de9497f2cf33a434a9ecc08d0c8046e3f41e73dd006122
TLSH
T1F3410D58B6F9114CB3B76E4AABF6756D487BBD772F06D49E10010E4F0A22A40C8B1733
MD5 SHA1 SHA512 TLSH

Submit Download