76cb4dca5fa51c994fe02000638ba69cc4a6cdaf6b3f0cc7d3c69f6a47bc2226

Analysis

user interaction
yes
max time kernel
149s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
23/08/2026, 11:40

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
browse.html
Size 424KB
Sample260823-ntaxtaab32
SHA256 76cb4dca5fa51c994fe02000638ba69cc4a6cdaf6b3f0cc7d3c69f6a47bc2226
MD5 32168fcb985c3e32c4ea033b74d400d1
SHA1 fcd4ed267cdf583d0d05992c692e2763567a0b43
SHA512 96242de59e40b5462128317c6913849fc438f54667f39c6a6eeb82c537c6e0c14f808e8db3472c6a5112b77f477b06ca0e2665a25dc0dc590fd2a240ccecee82
SSDEEP 12288:fvWHvrcfso7WIK3zfuUOOR1UD2574Y4LS0wecyR:fvDso7WIK3zfuUOOR1UD2574Y4LS+
TLSH
T1D89429F9A9402F7EA7C7C753884CBE5F9BBA855213406E7867CDCE4C15EDB4A3022246
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
736	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134319588650969655"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-540052884-2969440504-464782435-1000\{6A74BFBE-9E35-4759-AED5-3458890A50B2}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3472	msedge.exe
3472	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe

Suspicious use of WriteProcessMemory 35 IoCs

description	pid	Process	procid_target
PID 4864 wrote to memory of 4400	4864	msedge.exe	84
PID 4864 wrote to memory of 736	4864	msedge.exe	85
PID 4864 wrote to memory of 2168	4864	msedge.exe	86
PID 4864 wrote to memory of 3596	4864	msedge.exe	87
PID 4864 wrote to memory of 2168	4864	msedge.exe	86
PID 4864 wrote to memory of 3596	4864	msedge.exe	87
PID 4864 wrote to memory of 3596	4864	msedge.exe	87
PID 4864 wrote to memory of 2760	4864	msedge.exe	88
PID 4864 wrote to memory of 2760	4864	msedge.exe	88
PID 4864 wrote to memory of 3832	4864	msedge.exe	89
PID 4864 wrote to memory of 2760	4864	msedge.exe	88
PID 4864 wrote to memory of 3832	4864	msedge.exe	89
PID 4864 wrote to memory of 3832	4864	msedge.exe	89
PID 4864 wrote to memory of 1804	4864	msedge.exe	91
PID 4864 wrote to memory of 1804	4864	msedge.exe	91
PID 4864 wrote to memory of 1804	4864	msedge.exe	91
PID 4864 wrote to memory of 2976	4864	msedge.exe	92
PID 4864 wrote to memory of 2976	4864	msedge.exe	92
PID 4864 wrote to memory of 2976	4864	msedge.exe	92
PID 4864 wrote to memory of 1200	4864	msedge.exe	96
PID 4864 wrote to memory of 1200	4864	msedge.exe	96
PID 4864 wrote to memory of 3188	4864	msedge.exe	97
PID 4864 wrote to memory of 3188	4864	msedge.exe	97
PID 4864 wrote to memory of 700	4864	msedge.exe	99
PID 4864 wrote to memory of 1836	4864	msedge.exe	105
PID 4864 wrote to memory of 1836	4864	msedge.exe	105
PID 4864 wrote to memory of 1836	4864	msedge.exe	105
PID 4864 wrote to memory of 2336	4864	msedge.exe	116
PID 4864 wrote to memory of 4724	4864	msedge.exe	117
PID 4864 wrote to memory of 2660	4864	msedge.exe	118
PID 4864 wrote to memory of 1760	4864	msedge.exe	120
PID 4864 wrote to memory of 1760	4864	msedge.exe	120
PID 4864 wrote to memory of 404	4864	msedge.exe	126
PID 4864 wrote to memory of 404	4864	msedge.exe	126
PID 4864 wrote to memory of 3472	4864	msedge.exe	127

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\browse.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ff92152c188,0x7ff92152c194,0x7ff92152c1a0
  2⤵
  PID:4400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1884,i,12622320670004590849,16325943162792580107,524288 --field-trial-handle=1384,i,6738288363245035702,1929635923956589665,262144 --variations-seed-version --mojo-platform-channel-handle=2584 /prefetch:3
  2⤵
  - System Time Discovery
  PID:736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2312,i,15955676435837970855,3798612946398609554,524288 --field-trial-handle=1384,i,6738288363245035702,1929635923956589665,262144 --variations-seed-version --mojo-platform-channel-handle=2592 /prefetch:8
  2⤵
  PID:2168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1640,i,10160955496899724428,16858510829099372988,262144 --field-trial-handle=1384,i,6738288363245035702,1929635923956589665,262144 --variations-seed-version --mojo-platform-channel-handle=2548 /prefetch:2
  2⤵
  PID:3596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3436,i,4416337921848102306,4235414939387091045,2097152 --field-trial-handle=1384,i,6738288363245035702,1929635923956589665,262144 --variations-seed-version --mojo-platform-channel-handle=3464 /prefetch:1
  2⤵
  PID:2760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3440,i,4934510664774427425,912107394393699682,2097152 --field-trial-handle=1384,i,6738288363245035702,1929635923956589665,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
  2⤵
  PID:3832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4196,i,4692460489517363586,280099812930912210,2097152 --field-trial-handle=1384,i,6738288363245035702,1929635923956589665,262144 --variations-seed-version --mojo-platform-channel-handle=4212 /prefetch:1
  2⤵
  PID:1804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4228,i,13468692921766537424,5833210451912247773,2097152 --field-trial-handle=1384,i,6738288363245035702,1929635923956589665,262144 --variations-seed-version --mojo-platform-channel-handle=4268 /prefetch:2
  2⤵
  PID:2976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3652,i,12101086529407331746,15799733807045345150,524288 --field-trial-handle=1384,i,6738288363245035702,1929635923956589665,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
  2⤵
  PID:1200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,13414623734725089793,9101837406161033035,524288 --field-trial-handle=1384,i,6738288363245035702,1929635923956589665,262144 --variations-seed-version --mojo-platform-channel-handle=5164 /prefetch:8
  2⤵
  PID:3188
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5940,i,5374643976529870395,18039542131023662510,524288 --field-trial-handle=1384,i,6738288363245035702,1929635923956589665,262144 --variations-seed-version --mojo-platform-channel-handle=5708 /prefetch:8
  2⤵
  PID:4596
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5940,i,5374643976529870395,18039542131023662510,524288 --field-trial-handle=1384,i,6738288363245035702,1929635923956589665,262144 --variations-seed-version --mojo-platform-channel-handle=5708 /prefetch:8
  2⤵
  PID:700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=6212,i,15718005466045646957,12811108131838611477,2097152 --field-trial-handle=1384,i,6738288363245035702,1929635923956589665,262144 --variations-seed-version --mojo-platform-channel-handle=6272 /prefetch:1
  2⤵
  PID:1836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5116,i,16601619583789742296,12745922419092102096,524288 --field-trial-handle=1384,i,6738288363245035702,1929635923956589665,262144 --variations-seed-version --mojo-platform-channel-handle=5564 /prefetch:8
  2⤵
  PID:2336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5708,i,11820979051655963098,17441303121233111549,524288 --field-trial-handle=1384,i,6738288363245035702,1929635923956589665,262144 --variations-seed-version --mojo-platform-channel-handle=3732 /prefetch:8
  2⤵
  PID:4724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5496,i,17650383224875825689,16222896445202100168,524288 --field-trial-handle=1384,i,6738288363245035702,1929635923956589665,262144 --variations-seed-version --mojo-platform-channel-handle=4528 /prefetch:8
  2⤵
  PID:2660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5400,i,16335633488733450193,18285401451273284324,524288 --field-trial-handle=1384,i,6738288363245035702,1929635923956589665,262144 --variations-seed-version --mojo-platform-channel-handle=560 /prefetch:8
  2⤵
  PID:1760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5876,i,18287096178520160790,5555245872193336942,524288 --field-trial-handle=1384,i,6738288363245035702,1929635923956589665,262144 --variations-seed-version --mojo-platform-channel-handle=5208 /prefetch:8
  2⤵
  PID:404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5160,i,7474580577201022036,18434453910692152816,262144 --field-trial-handle=1384,i,6738288363245035702,1929635923956589665,262144 --variations-seed-version --mojo-platform-channel-handle=6156 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3472

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1100

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 f0ead82c3c8a4cd9959a8cd1cef74705c67e276b4a574243e75c890cb0b0b8fe
MD5 f8a5a8774310485121aa8917052b352c
SHA1 78542cc17bce16f7d0117a4beed6ae29c39c3042
SHA512 94c06ac4086f7321e54c95657a2fc0769092ed3577572d27a9a75f404a57f6b0c02e9bb5c1e8c0c285a577d89a5801c60face4ebf1cee334d6be346c240f09ad
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7C:fwUQC5VwBIiElEd2K57P7C
TLSH
T1D5B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 cc11c2ba3ec4cb292b61dd36af338e083bb0ce5868e654b17f3c58ecf3c8fdfb
MD5 22bfe5ff5070c92c37e54f6f278efd25
SHA1 2fc94025f3a738879f1fcececb95937cbaa0cdd1
SHA512 b57abd220e674cf733b39ea299fc66d6fe964ab448ae0758482efe80597e3678909cd989b9635acc0317001af0fe6dbbbccfd3cf110ec5ad1b9e4c084de22188
TLSH
T16FD09220B719A2C3E24704BA94A6AB52A916C57AA0B7F7017232640CAE65089F28F192
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 201729318e073e437978c4f830a6df095e397d14193bbab8cb94016e3e0e1540
MD5 038903102cb76ddedd18207430e00005
SHA1 e694b970e01eb43fddfb00d36857e2b64f8c931b
SHA512 bacb50167c8d736bccc259f2ffbffff915c7c6dc188c6c2c1476ded8cbd822ff968f690173d1b8e35c352ec62f9ace3913a556b80bc1a59211be000ee9ea7447
TLSH
T17DD092207759A6C3E24704BA94A5AB52A916C57AA0B7F7027232640CAE66089F28F192
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 a47c6e963656fbc6eea949d8bb5105b38da78aa15a1a46175b39cb4a6e8eec34
MD5 da364b92c646b1fe313a968d6d43e66d
SHA1 f05bbe2f01b635d7212806dc2c73eb82f981b432
SHA512 377c8ca4e08fdd4333fdb81497a3f3f73f5c044684d0627042f547545a5319754142c5a6d5ee04ccf0851bfbe78d893faca258c313e6a1aa32040c63be88ac8e
TLSH
T18271B634551653DFF7E602B290C12255F6328DEAFE273D411F2375B45E01FA08169389
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe582a57.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe582a57.TMP
Size 3KB
SHA256 85074ef9229bd9219ebaeda9705ea3ce5149115ccd6f3c77f217af14daeee3ab
MD5 9b4acbd7930b49106b041cc2e8daa9f9
SHA1 84849f719a118fd8ccd6018c7c1c4dbab64999a3
SHA512 9d120b9e5a80d90381fb73c9acad082e18ed28e5e4bd33a00d793389a88a69e86a03283247367e81b09b27276d8249451bb5738c38ddb67466e7466db3b2ae9d
TLSH
T18971B534551653DFF7E602B294C12359F6328DEAFE273E412F2379B49E01FA08169388
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 0b77e6dfef4b2abc483605db4413c230a91326d3a3c1226eb1327d3003fe97b6
MD5 3f73f054928008a2c6942897a60143d4
SHA1 43f5b8ca8ca1c39ca8bb5c34fe2e85d8883aaba3
SHA512 7cc727955da032de4af5d15388c48ae67885a8fd003a540f93822c539586453a794fe4fb4eaf0fa33c146b457680f0faf4908415fdf5d5b14eed173957540c13
TLSH
T1A2215EF783E5867E8A1152F09A24AE2BCE1D0517432C7C6589E4BF2797F24B5E00165F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 a6f80b3b256c3ccc761e831fe98c81baf660c2e04c84955fbb5bbd8d67986af0
MD5 30cd0482f4282292e4f3d567a8e379e9
SHA1 d16954c15ab9ac3fc8c5fd00645785f3c1ae269d
SHA512 37070f084af57ec3cce7b170bf9ccde3f80fed70a4d4627c7e35da5d5b07b8773b779bd0a008e70cbe703826eb322ef0ce1b1ad059022e399a0df6a41322095f
SSDEEP 192:sxZzR/yM/jK1Ml8UQ/k0/fOsYnLIdpHyHW6+WNGYIn6yAIg5fJ:sxZzlqs0/fOsYnUSHbGIn
TLSH
T12652E711AA345977CCDBE209F945BF43D6F84572A1900E48A9FCEA1C04E6AED2207C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 4243ebf46984c587ad36f250f512c48c057fbb3845abcd7a9ea3bafdee994df6
MD5 c6874f30827fdb6d071ed6e8d3c0675f
SHA1 37c74f230aa2ee16e87e71ba06a075a0ce5186ab
SHA512 13934d3d21d9b46e91fb9ba61e3e3c374c6757bb2872292fa901765d31e7ddaacfe4d771b82b9a879b7ec30607f8f28cf23428fd67e5f03adf615c50e33c5afa
SSDEEP 192:sxZzR/yM/jK1Ml8Mk0/fOsQtLIdpdyHW6+WNGYIkncAIgrJ:sxZzlM0/fOsQtUkHbGC9
TLSH
T1E942E711AA346977CCCBD209F945BF53D6F94572A2900D48ADFCDA1C04E6AED2207C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 51b8f5a9a6552f4ea837a04e6097254a94a579c8535adbb4b612d9880e46a4f9
MD5 38fd0227779edc05a5ab7032cbdda85e
SHA1 1e38e2f5ce6f384129d86e0fe566be91508371cd
SHA512 199e94479ad01f09b8a687d1cd3b2153827773a90805504ab275667efd49af2ea8b5098ee8756c232b184c2835cd258321f222bf53ab058d4d7cde1d8b59f30d
SSDEEP 768:m0sqxXlWvJD6T8F1+UoAYDCx9Tuqh0VfUC9xbog/OVk4Ll6AR99rof2Y:m0sqxXlWvJD6Tu1ja54LAs92fD
TLSH
T193D21C3B694CC77E4F840E5DEC266FD76ED801CBA6988D5447FA884C03CB2EA11165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 68d515a9b580b972ff878bfbc0a3509481ed1242c8fe866ef8974797b5ad1230
MD5 dd9adf0aafceaca0d8b0a8fd278f7036
SHA1 bc7235e2e9de27c49ce96c94570816829fd3ccd4
SHA512 a98acd47172d912e1fc93020738d49963e62e6cf796b8718c069febfe0d32e2a0dec7a8d8febdf355a376b8a6e9e94093f46f01354357bf8c9739ccccb47b61c
SSDEEP 48:KPYNs4iCiac6vpI9IaKGveOaS4K7H2oTy3JMdIdKegIvyNHIFKMkooyIPKJ:KYbaKYIKvdCKegCeHuKMknyUKJ
TLSH
T152A12119357A0212387D28A8B26A99375F413A63701DE47F3FB850660BA7E120DFDDED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe58c7cf.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe58c7cf.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 fbecf3e278bf461c9019a020b0689189704fa509f7ca83ebb5e145dc3d33ee29
MD5 e81da0159bc2af3ea03ff28d45fcd10a
SHA1 198847f038539f5eff7c43f1734326b0a7850d88
SHA512 f51abaf1a7443271c165c0e7295735319d0932773010915ac6388515d4ba917ff1a5da056865b6cda86bfdba01efc6972bebc662f7aa5c44dc5c1c4c62462a79
SSDEEP 384:UiFiZcIgsNn8TUNTUlIl+qbxJUVRNmd2OYoeJSivBuFoq:vFQgWwgJqHmRwSiZuFt
TLSH
T1E8A28E734C649C7B5EB6AA45F98B31078FB48177DAC9AA5096ECAF1C00DB5EC030BD15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 1ba5d3d7d42db0ad442006ac9a243a520876034f4556b9dce32026ef91ce1a59
MD5 43985c6e5c4103fa4b65641f7085b8fb
SHA1 fdbceb8ec36a91d340c86bd1374bc3647a0b3c94
SHA512 3f07ea82fe53ab56877c0e6708e60bdf3fd84d821b31b61041fa90d11e7dabf45637ec0dd3e4587298a97a497abdce24f94ec10c4a2a069324e3387b85d88530
SSDEEP 384:DZcIhsNd+qbxJUVRNmd2OYoV1SivBuFoq:bhGqHmRPSiZuFt
TLSH
T173828D714C346C674AB6A146F48735079FB89127ABCD6F4445FCAF2D00DEAE8131BD2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 cf6cf3015a6b8e14237dd8ab370c925a50ed2401fd44cbf858c9876cce6af53c
MD5 13cc3f38792b037b2d738bb276e00fbb
SHA1 f8cc5a50e1145d979723136e2f961b40816d562b
SHA512 51e45c3230ef678a02881384f83f358caa73fc93fd6172791f6e1270cbc8817fca2af117c14e971a995fb452cb35e30605a3b7d26a76523d4522a32ecb5e922b
SSDEEP 192:tON06JkRtQmiUyrpW+RN5+Fd107sh3WRHJU6:tON06UrSW+RNmd28CJU6
TLSH
T15002B935AC382C7B8EF26D0AB58737135FA4116BBA952B84DAE81F1C01D765C2307D27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 4244b1353033fa73e5d51ccfbbffd069b387c7cafd5a82583e751ab757bbfec8
MD5 e98f4b9b9bab52ca04defb5137e30bfe
SHA1 5540f3f799e60f0ece124c23a982950606fb3b7a
SHA512 fd682c93190e0d4c94af7686d9796a541a75f4f27de64ad8c086baa7884b7388459f8f9f4d0327cab782445838a56d368949311d866f5bc55775459cbfc6a455
SSDEEP 192:jONw6JkRxQmiUyLp0+RN5+Fd107ptpefPwoUeVcUqngU6:jONw6UPE0+RNmd2OYo4SU6
TLSH
T18412FA356C286C6B5EE37946F48735135FA89227EE893B8495EC2F1C01DF6AC130AD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 4f04609b127edbc31805107f7c5c480a3b3b935af0825c5265ab347ba8ed2628
MD5 e37ad801c48ebf189f8e9ade6a0cb81b
SHA1 9707b763fc6813a6d7cfaae56e10184a87bc77a0
SHA512 8ee49e58609e1b325bbc4b4bf607ad67d67ba817da455ba864deb298281ffec4e5a7e1a151d3a8c02d2bb15c67d1094fef24d308880527f68d188ac407f847fb
SSDEEP 384:lZcIhsNdPqbxJUVRNmd2OYoV1SivBuFoq:dhPqHmRPSiZuFt
TLSH
T1F6828D324C346C774AB6A146F48735079FB89127ABCD6F4445ECAF2C01DEAE8131BD2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 7fbf82f53f8a28f81665c2ee90eef86460c9247acf05374a95b7ad97a9c5faf0
MD5 afb75ba29e234ed7d2b11a062425405a
SHA1 88fc2a3be05e0334cad96ac60fef6257c44a8dd3
SHA512 1a520f050f912f1218f85c3b5be587c102cd08e018565611009b177cfca59faaf242ccb52d4eff4ca08136deb8cc250a173f7b652694880bd1526a5063104603
TLSH
T1A141485CA6F91148B3B76F5A9FF2A5AD487BBD772F06D44E10010E4F0622A40DC61B37
MD5 SHA1 SHA512 TLSH

Submit Download