f5a30c8879eb23f80664f7d6b3f888be96715536ee051b6dd25df475ae58e7ad

Analysis

user interaction
yes
max time kernel
149s
max time network
146s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
04/08/2026, 03:42

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
3zpxxKAb.html
Size 2KB
Sample260804-d9dcrscd96
SHA256 f5a30c8879eb23f80664f7d6b3f888be96715536ee051b6dd25df475ae58e7ad
MD5 379f624d115435d0d9acacebcd9f8cc9
SHA1 0252664d779eccf1fa270ea13cf6b66580cf969f
SHA512 8af96f82721971bb6de6aaefd9b77c1734d1758089c92b2e39d770c505eac312b57cbe5d3e148270b84fae4de4f9dcc4dabf3c9dede478137de0e1d140d05e87
TLSH
T165416123D90480258661E589F0E9B71D8023938FDB225C4067B4B5EFA0D7FE1C2762E9
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3060	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134302885387537905"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1074038928-2032447174-945360078-1000\{60077C20-DC0C-4A98-A973-C9E535E04E60}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1324	msedge.exe
1324	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe

Suspicious use of WriteProcessMemory 34 IoCs

description	pid	Process	procid_target
PID 1984 wrote to memory of 1676	1984	msedge.exe	84
PID 1984 wrote to memory of 3060	1984	msedge.exe	85
PID 1984 wrote to memory of 4520	1984	msedge.exe	86
PID 1984 wrote to memory of 4520	1984	msedge.exe	86
PID 1984 wrote to memory of 4520	1984	msedge.exe	86
PID 1984 wrote to memory of 2092	1984	msedge.exe	87
PID 1984 wrote to memory of 2092	1984	msedge.exe	87
PID 1984 wrote to memory of 3216	1984	msedge.exe	89
PID 1984 wrote to memory of 3216	1984	msedge.exe	89
PID 1984 wrote to memory of 3216	1984	msedge.exe	89
PID 1984 wrote to memory of 1288	1984	msedge.exe	90
PID 1984 wrote to memory of 1288	1984	msedge.exe	90
PID 1984 wrote to memory of 1288	1984	msedge.exe	90
PID 1984 wrote to memory of 824	1984	msedge.exe	91
PID 1984 wrote to memory of 824	1984	msedge.exe	91
PID 1984 wrote to memory of 824	1984	msedge.exe	91
PID 1984 wrote to memory of 1144	1984	msedge.exe	92
PID 1984 wrote to memory of 1144	1984	msedge.exe	92
PID 1984 wrote to memory of 1144	1984	msedge.exe	92
PID 1984 wrote to memory of 1968	1984	msedge.exe	99
PID 1984 wrote to memory of 1840	1984	msedge.exe	100
PID 1984 wrote to memory of 1968	1984	msedge.exe	99
PID 1984 wrote to memory of 1840	1984	msedge.exe	100
PID 1984 wrote to memory of 2180	1984	msedge.exe	102
PID 1984 wrote to memory of 2168	1984	msedge.exe	111
PID 1984 wrote to memory of 8	1984	msedge.exe	112
PID 1984 wrote to memory of 3724	1984	msedge.exe	113
PID 1984 wrote to memory of 4048	1984	msedge.exe	122
PID 1984 wrote to memory of 4048	1984	msedge.exe	122
PID 1984 wrote to memory of 4468	1984	msedge.exe	124
PID 1984 wrote to memory of 4468	1984	msedge.exe	124
PID 1984 wrote to memory of 2576	1984	msedge.exe	125
PID 1984 wrote to memory of 2576	1984	msedge.exe	125
PID 1984 wrote to memory of 1324	1984	msedge.exe	130

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\3zpxxKAb.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ffef4a8c188,0x7ffef4a8c194,0x7ffef4a8c1a0
  2⤵
  PID:1676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1968,i,14478732751607406551,14553084864000301434,524288 --field-trial-handle=2304,i,1822413884021037434,1955475697445747514,262144 --variations-seed-version --mojo-platform-channel-handle=2340 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1768,i,844527642546227608,2693428147225557749,262144 --field-trial-handle=2304,i,1822413884021037434,1955475697445747514,262144 --variations-seed-version --mojo-platform-channel-handle=2300 /prefetch:2
  2⤵
  PID:4520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2492,i,12254119542827857144,7544949832629214987,524288 --field-trial-handle=2304,i,1822413884021037434,1955475697445747514,262144 --variations-seed-version --mojo-platform-channel-handle=2760 /prefetch:8
  2⤵
  PID:2092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3460,i,18429803976942434094,8321549901718039526,2097152 --field-trial-handle=2304,i,1822413884021037434,1955475697445747514,262144 --variations-seed-version --mojo-platform-channel-handle=3536 /prefetch:1
  2⤵
  PID:3216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3464,i,12001302872783113925,10005180322187034222,2097152 --field-trial-handle=2304,i,1822413884021037434,1955475697445747514,262144 --variations-seed-version --mojo-platform-channel-handle=3544 /prefetch:1
  2⤵
  PID:1288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4272,i,7673571053504572038,16123363710387635023,2097152 --field-trial-handle=2304,i,1822413884021037434,1955475697445747514,262144 --variations-seed-version --mojo-platform-channel-handle=4268 /prefetch:1
  2⤵
  PID:824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4400,i,7387311947470388150,5982085663035634641,2097152 --field-trial-handle=2304,i,1822413884021037434,1955475697445747514,262144 --variations-seed-version --mojo-platform-channel-handle=4416 /prefetch:2
  2⤵
  PID:1144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,6996188670360783148,4857139548369887702,524288 --field-trial-handle=2304,i,1822413884021037434,1955475697445747514,262144 --variations-seed-version --mojo-platform-channel-handle=5192 /prefetch:8
  2⤵
  PID:1968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,1899980964276052094,13583492170868604110,524288 --field-trial-handle=2304,i,1822413884021037434,1955475697445747514,262144 --variations-seed-version --mojo-platform-channel-handle=5212 /prefetch:8
  2⤵
  PID:1840
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5880,i,2979517221404839544,17450288463568272656,524288 --field-trial-handle=2304,i,1822413884021037434,1955475697445747514,262144 --variations-seed-version --mojo-platform-channel-handle=5896 /prefetch:8
  2⤵
  PID:4972
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5880,i,2979517221404839544,17450288463568272656,524288 --field-trial-handle=2304,i,1822413884021037434,1955475697445747514,262144 --variations-seed-version --mojo-platform-channel-handle=5896 /prefetch:8
  2⤵
  PID:2180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3680,i,17501930523890885012,8820829910896030925,524288 --field-trial-handle=2304,i,1822413884021037434,1955475697445747514,262144 --variations-seed-version --mojo-platform-channel-handle=4416 /prefetch:8
  2⤵
  PID:2168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4428,i,9215303138780650049,9706257210871333539,524288 --field-trial-handle=2304,i,1822413884021037434,1955475697445747514,262144 --variations-seed-version --mojo-platform-channel-handle=6412 /prefetch:8
  2⤵
  PID:8
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3532,i,1641628123813271958,12001705890489726012,524288 --field-trial-handle=2304,i,1822413884021037434,1955475697445747514,262144 --variations-seed-version --mojo-platform-channel-handle=4480 /prefetch:8
  2⤵
  PID:3724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5416,i,7265962685439956647,13747296114688906155,524288 --field-trial-handle=2304,i,1822413884021037434,1955475697445747514,262144 --variations-seed-version --mojo-platform-channel-handle=2120 /prefetch:8
  2⤵
  PID:4048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5860,i,14441023780056946511,13005651989383406018,524288 --field-trial-handle=2304,i,1822413884021037434,1955475697445747514,262144 --variations-seed-version --mojo-platform-channel-handle=6408 /prefetch:8
  2⤵
  PID:4468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=760,i,12547758587830050452,11122050433941983895,524288 --field-trial-handle=2304,i,1822413884021037434,1955475697445747514,262144 --variations-seed-version --mojo-platform-channel-handle=5656 /prefetch:8
  2⤵
  PID:2576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6344,i,7130126127756526892,2631260061756545551,262144 --field-trial-handle=2304,i,1822413884021037434,1955475697445747514,262144 --variations-seed-version --mojo-platform-channel-handle=1248 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1324

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4152

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8c5b1a407270ca9ae8bec8f20cc56244f3bde6f042890a4cabcdf4df3d21fdad
MD5 16f782e6f4d4592598936b2f29b6b339
SHA1 5c8c22b7f56af2b2e0d9978418f077cc8fd13c41
SHA512 28b2f7186b910539fa22408b47131fb16874b4c2192a721a69393efd7812da561ea9977b8af678cd3a9e37c23f186f876d7086a20afe28b16659db70955cf16f
TLSH
T15DD09232B7C9E241E14232BAA81447826E2A4A68259AC2176478844CEC6984AA79D28B
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 b28cb7be2bb68a6cda7ff7689f0ec4acdf8699e4818545d4dd692148ce1d64d2
MD5 a712889d00fb4f0945d13b925681156a
SHA1 1448cbfbc2c620e016aa5e6fccd0ac75e74ef2d1
SHA512 65f51cf451d5f77c9e695462e66abc873922db3c3999c172526727c2356a5a29052ce4b77ead44b02780ca80f6b290696b7633f537570254f36e7374ce0d04a5
TLSH
T12ED09B3277C5D541D5423276A41447816E164568159AC2175474444CDC69445579D147
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 3da8e082652f4d0e7bf65846a49aaf4cf3809d18709fd712b762379c6f398cb6
MD5 dc16eb9f61167d88ed20515acc944896
SHA1 c0b2cd8e01af7828c0924605df9a4e51c027480b
SHA512 4102d932be034684ed7725e550e115d91796aae1923b0e2523bbe96afe48f956e09a53200ad6c7989e363072f5e08c7ce992f681c8d37e08d4636b636d44d3fb
TLSH
T165E026C586C8C22FB600E45753BC878CC2E03A4FDEC8EE9E1B24C5887503044A6A2BB8
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 7bd92e0c87b0c012a808a0054336b1e2226f84cbdbe37e55fb013408ceced7a8
MD5 04ec47b0fb08d65ec8aed28ee50772ba
SHA1 7db83bba0f180c3d73aa4f454cb27345092c8f76
SHA512 64c9c55ba00e0bff34d773389c381c6a19bc6fe013f5558c0e577d9425e26dbc5e25020a4e826b448263d87abbe2aae2b62c4d1450792debc34eb18f6f1e24e9
TLSH
T1C571F756334248B6EFD6013DCCE206C17AB1B299495B0E6A15709F7E77CC72F0D2048C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58b997.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58b997.TMP
Size 3KB
SHA256 fba23d4cde5c6d2449b1800ae3a8661e5645bc046fb41677e8d9c6cc7fcfa955
MD5 e67933cdea9ba3f46ec5e1349646f10d
SHA1 6ff600f345379b73b07090b1175765f834c5f2ae
SHA512 2d082b3fcc78eab84fe5739c8afe353deadb2296ce3a625295849ae931d724ddc791f4c1a039902941850cf5c4c1097e55b74463c94f4f3d7b8c4ee6709a34fe
TLSH
T15B71D655334248B6EFD6013DCCE206C57AB1B199491B0E6A15B05B7E37CC72F0D2048C
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 7b3ce52749a00e37f2d5286b0547b5abbda7e267f064aa27aa1bb6ebc095ddea
MD5 c6c786b06f05d88ece7fee75ef098c82
SHA1 fd486119b593839da5a2c7ba59893fd9984050c9
SHA512 ac84b789c9c2a9e558ca57c814ceada5ab47f6e7da2aafbb112b821457cfd413caa6cfe5f13d4938e23234a2315bacd200fa0ada4fc4730e9db44f5a21130ed1
TLSH
T145117DF3C7D5856E891116F05A28EE2BCE2D0615821C7C1999D4FF6B93E3075E001A9B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 8cfccd4bba2f34d67fb7bc0fd8376a5d75734bfe715a71dda6871f9086ecc416
MD5 92d6bfe0a03e337ab48b389e52545680
SHA1 e30c0654da95c9b6b229d8143c739dc804c43e53
SHA512 4041d0141100127a9976ce3b831d37dd59d57d180c606631188c2acfe712d1fea788bedd4a4f33c15c59f98447dcfa000ff7acd99bd8e4affa5abe2b0072e541
SSDEEP 192:sxZZRWyM/jK1Ml8UQmkO/f/sP2FIdpHNHW6+WNGY49tuQIg5YJ:sxZZEqNO/f/sP22tHbG/6
TLSH
T1D7520915AA3459B7CCDBD20DFA41BF53D6F50472A2941E44AAFCDA1C04E7AED220382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 2b120e1099a2e3cad4705b0d03654a81c0ca8dadfb8581359d125019e8d639cf
MD5 c510ebadf457e65a740887c04c45a2b9
SHA1 f367d4e3eff2629897219e9c816fe4d6f92d6e0f
SHA512 b870930a3c85edb4e1c8c9aa6926069c5e738d21d3e63e2876c2586deaabda0b8b6e0fa832a7cce67fb1294402c2298008d6038dca8e488fd9945a57fe0b5f96
SSDEEP 192:sxZZRWyM/jK1Ml8MkO/f/s7FFIdpdNHW6+WNGY4wouQIgrJ:sxZZEMO/f/s7F2rHbGJ9
TLSH
T1D142F911AA34A977CCDBD20DFA517F53D6F90472A2941E44AAFCDA1C04E6AED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 4cb1ff499237a5fd74aeb55dc1950aebf2c5f8bce5c4be30cfde44e779c57629
MD5 6968822145e8c846a4f9255795712963
SHA1 c07c26652a671ab4dbba9361d4a88193439a36c5
SHA512 574af5c04d1236de8d505d9d990f8df7740de75a16e575337d38ddadd516dad38f7ef447999ea293d22523d1cc56871476063ed343386847b24405895dabee82
SSDEEP 768:xt8iJPNWvx76r8F1+UoAYDCx9Tuqh0VfUC9xbog/OVsALl6opd3roykWJUnZ:xt8iJPNWvx76ru1jahALocdkYUZ
TLSH
T195D2FA3B680CCB7E4F844E9CEC266F966DD801CB5B988D5447FA884C03C76EE51269DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe595589.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe595589.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 830d358dd41c24f41c1bbbc96066fdb10dcb259012f98a972d14d708209e6c26
MD5 f25ca49be66af5be57217ca3e549b0db
SHA1 6e5ca3baa2643d079e4fadb71a541607e9a1f7b0
SHA512 53b2e64a1bb14e1cae4f7c83e1aecd10dd2b89c10f204b8b9af894c0906b80018f26b7c837f6921079489fad91ee40056fb961c953872c16d056bc79f011c63b
SSDEEP 384:WZcIhsNim45XGkM8YyEXW3rBeRs9JKgqijUkA:EhD3MorTjKgqmUkA
TLSH
T1BA929E705C78697BD9F3B955F48636274FF4802BD7C87FA0E6EC6B0C00CA598531AA26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 fb94c2aa8a2ad336d87efb5e9a72456208fb8fa3f9d62f1e25b65584bdc6d8a0
MD5 14df3778838d4317c34bced67d6e8afc
SHA1 66470e0c9e263c697bb1e72f66a2c6a368953bad
SHA512 f8ba795ec3071372cfd0b4421b0d388bc80d2f126143c016b92cd04f097ff902fbf4ed46d3eac6d2b43467eac43c6c6443c9d949217c2c1100c3b51a6a91717d
SSDEEP 384:yZcIhsNiZ45XGkM8YyEXW3rBeRs9JKgqijUkA:AhE3MorTjKgqmUkA
TLSH
T1E5929E705C78697BD9F3A955F48636274FF4802BD7C87FE0E6EC6B0C00CA598531AA26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 6b0ddb7942d19f874435cb301d063642467cdcdc5bc5be36454efa93dfb26418
MD5 d10e7b005b9a250345d2b850a553f52f
SHA1 9722d7357061da80aef23f16018394d75eb74dbf
SHA512 b9e6544c7700bddb40bc49b63018c658998229313bdad8f65e878f242ec325c871c7f8ca8e8f3b4cc8faa4ad5e6217a033e4796bd6961f791c1f2b05015a4ed1
SSDEEP 384:GiFiZcI9zsN68TUNTUlIlm45XGkM8YyEXWcrBeRs9JKgqijUkA:tFQFDwgH3MZrTjKgqmUkA
TLSH
T196A26D724CA8997BDDF7AE85F54A36178FF48027D6C4BFA0E6DC6A0C009A59C130AD25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 811c2cf25b9285aeda76c21e49280f5207b1f5ccda80130499532fcb1b350b4c
MD5 8232f304ddd92767ddab62df7d9a5b24
SHA1 51bba6ad80e87ddbcd1cceaae0dedad8eae2c810
SHA512 a6e61cc0c13d88eb51de8e89cf8bb7bfb47fb5fe1f2675574a3a2c458c5bdeb2f4424929769f5d04cc3ef49aab3e756e805c1663ce6511efe092da632af947a5
SSDEEP 192:gONS6kDfQmiUyx9Z903tjzorYbracQikzU6:gONS6ghiZ9M8YyKmU6
TLSH
T12102C83568782C6B8EF3AE49B44B27275FE4112BEAD52F84DAE81B1C00D765C1346926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 973110ed1494537885e501357aab5a2160e1b8648b798bc7644b0cabc07cd709
MD5 bc6c4206650b0c210549ec47103ec17e
SHA1 1a26d3058fac6ce17699c7e0a3c8d36cf8e6ec39
SHA512 44492f18d3b430560b67d50999b5a08dff6d654f333e3cef45ee1c54edde3b655119e4ccfd8467ec0660e08533dabd8b2e98bfecf3072f6f639149488983ab59
SSDEEP 192:2JONb6koQmiUyL9S903tjzorYbraEXH6FdcRtqmU6:sONb6BaS9M8YyEXWyrU6
TLSH
T11B121C356C786C6B8DE3A955F48732239EA5412BEBCD7F90D5EC2B1C04DF29C130A926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 cd839191e8a965ac0a2fdb01025b92d17c8cae8ff6f92cba36ab0599edbc4478
MD5 37b6daf3ad4696f0829c0459e34b2eaf
SHA1 6adf1749bf78a907370d9a9d68e7a355877d5e67
SHA512 98f7c2e4c82e9cc2813a49a86767d02bb65632ca9364f04da940d18e15bd6acd7c74ee7c64da003f8ac58411cf963947eb2eeb9233c3e48cd3aced8eb6e75cc1
TLSH
T1F341FA6DAAFA1148B3B76E16ABF6A46E447B7D772F46D45D00010D4E0633B40D8B1B37
MD5 SHA1 SHA512 TLSH

Submit Download