b97c228ebe5dce9728c61ffb9b4f8ca6a8029c45f6d9bd67cbda8f7b7058b7d2

Analysis

max time kernel
148s
max time network
135s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
23/08/2026, 00:23

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 176KB
Sample260823-apl8dsdj8t
SHA256 b97c228ebe5dce9728c61ffb9b4f8ca6a8029c45f6d9bd67cbda8f7b7058b7d2
MD5 544c1647a33c6247588da76914abf4a0
SHA1 01f2f6f113ca4e674d9cf54611685825c75ccef2
SHA512 17767fae8e1295838ffaec6e4205404ef7f69161c05324ef00f8928f74058c5a4b5ff0a459119043a10f368fd979fce76ca230d4b68baa4ecac7668b4b0ac037
SSDEEP 3072:hzWTIXcIA32fXTvPU290AeA3BPqQ0IhAngpP4+ge1pTs89tRTbMl/3CMJYTchhZy:hKacE2iTPbTrTXTABCMJ+cty
TLSH
T1100402BCFF6425FA4678F20ED32B3A14CAB9C8611C6AEDC773345CDD9BA8A10D085159
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1892	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134319182086524731"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-668679576-120646659-2289335452-1000\{AA7266D1-1574-441C-A396-80D77CEAD56C}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
372	msedge.exe
372	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe

Suspicious use of FindShellTrayWindow 42 IoCs

pid	Process
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe

Suspicious use of WriteProcessMemory 36 IoCs

description	pid	Process	procid_target
PID 4848 wrote to memory of 4464	4848	msedge.exe	85
PID 4848 wrote to memory of 1892	4848	msedge.exe	86
PID 4848 wrote to memory of 5024	4848	msedge.exe	87
PID 4848 wrote to memory of 5024	4848	msedge.exe	87
PID 4848 wrote to memory of 5024	4848	msedge.exe	87
PID 4848 wrote to memory of 3284	4848	msedge.exe	89
PID 4848 wrote to memory of 3284	4848	msedge.exe	89
PID 4848 wrote to memory of 2532	4848	msedge.exe	90
PID 4848 wrote to memory of 2532	4848	msedge.exe	90
PID 4848 wrote to memory of 2532	4848	msedge.exe	90
PID 4848 wrote to memory of 4556	4848	msedge.exe	91
PID 4848 wrote to memory of 4556	4848	msedge.exe	91
PID 4848 wrote to memory of 4556	4848	msedge.exe	91
PID 4848 wrote to memory of 204	4848	msedge.exe	92
PID 4848 wrote to memory of 204	4848	msedge.exe	92
PID 4848 wrote to memory of 204	4848	msedge.exe	92
PID 4848 wrote to memory of 4308	4848	msedge.exe	93
PID 4848 wrote to memory of 4308	4848	msedge.exe	93
PID 4848 wrote to memory of 4308	4848	msedge.exe	93
PID 4848 wrote to memory of 1788	4848	msedge.exe	96
PID 4848 wrote to memory of 1788	4848	msedge.exe	96
PID 4848 wrote to memory of 4860	4848	msedge.exe	97
PID 4848 wrote to memory of 4860	4848	msedge.exe	97
PID 4848 wrote to memory of 4860	4848	msedge.exe	97
PID 4848 wrote to memory of 1716	4848	msedge.exe	99
PID 4848 wrote to memory of 4392	4848	msedge.exe	101
PID 4848 wrote to memory of 4392	4848	msedge.exe	101
PID 4848 wrote to memory of 4716	4848	msedge.exe	100
PID 4848 wrote to memory of 4716	4848	msedge.exe	100
PID 4848 wrote to memory of 788	4848	msedge.exe	104
PID 4848 wrote to memory of 4516	4848	msedge.exe	113
PID 4848 wrote to memory of 2716	4848	msedge.exe	114
PID 4848 wrote to memory of 3648	4848	msedge.exe	115
PID 4848 wrote to memory of 4708	4848	msedge.exe	117
PID 4848 wrote to memory of 4708	4848	msedge.exe	117
PID 4848 wrote to memory of 372	4848	msedge.exe	118

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2b4,0x7ff9b409c188,0x7ff9b409c194,0x7ff9b409c1a0
  2⤵
  PID:4464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1888,i,2916260759012514437,17672805715902070271,524288 --field-trial-handle=2348,i,77788101298848892,327454111498705612,262144 --variations-seed-version --mojo-platform-channel-handle=2380 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1692,i,5974227121130983761,1095516848626172962,262144 --field-trial-handle=2348,i,77788101298848892,327454111498705612,262144 --variations-seed-version --mojo-platform-channel-handle=2344 /prefetch:2
  2⤵
  PID:5024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2252,i,13642041398643824710,12983866358063883263,524288 --field-trial-handle=2348,i,77788101298848892,327454111498705612,262144 --variations-seed-version --mojo-platform-channel-handle=2960 /prefetch:8
  2⤵
  PID:3284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3488,i,12274627998159052713,5939602417267182500,2097152 --field-trial-handle=2348,i,77788101298848892,327454111498705612,262144 --variations-seed-version --mojo-platform-channel-handle=3548 /prefetch:1
  2⤵
  PID:2532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3492,i,10004380025338307835,6159314704157522338,2097152 --field-trial-handle=2348,i,77788101298848892,327454111498705612,262144 --variations-seed-version --mojo-platform-channel-handle=3572 /prefetch:1
  2⤵
  PID:4556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4204,i,9401174541779543284,17192946117086495298,2097152 --field-trial-handle=2348,i,77788101298848892,327454111498705612,262144 --variations-seed-version --mojo-platform-channel-handle=4184 /prefetch:1
  2⤵
  PID:204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4268,i,9737311503797077309,9758769637657870598,2097152 --field-trial-handle=2348,i,77788101298848892,327454111498705612,262144 --variations-seed-version --mojo-platform-channel-handle=4376 /prefetch:2
  2⤵
  PID:4308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,4904077936375664854,45690818781873972,524288 --field-trial-handle=2348,i,77788101298848892,327454111498705612,262144 --variations-seed-version --mojo-platform-channel-handle=5124 /prefetch:8
  2⤵
  PID:1788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=5144,i,10827551174457420443,17980824811156104327,2097152 --field-trial-handle=2348,i,77788101298848892,327454111498705612,262144 --variations-seed-version --mojo-platform-channel-handle=3844 /prefetch:1
  2⤵
  PID:4860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5556,i,16084685905469522153,15181679490947070428,524288 --field-trial-handle=2348,i,77788101298848892,327454111498705612,262144 --variations-seed-version --mojo-platform-channel-handle=5544 /prefetch:8
  2⤵
  PID:1716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5792,i,10300044070868658339,3843392019389503816,524288 --field-trial-handle=2348,i,77788101298848892,327454111498705612,262144 --variations-seed-version --mojo-platform-channel-handle=5836 /prefetch:8
  2⤵
  PID:4716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5808,i,17260092421048738249,5221644213369833545,524288 --field-trial-handle=2348,i,77788101298848892,327454111498705612,262144 --variations-seed-version --mojo-platform-channel-handle=5852 /prefetch:8
  2⤵
  PID:4392
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6468,i,6152493852968458731,6978018697157599198,524288 --field-trial-handle=2348,i,77788101298848892,327454111498705612,262144 --variations-seed-version --mojo-platform-channel-handle=6268 /prefetch:8
  2⤵
  PID:4756
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6468,i,6152493852968458731,6978018697157599198,524288 --field-trial-handle=2348,i,77788101298848892,327454111498705612,262144 --variations-seed-version --mojo-platform-channel-handle=6268 /prefetch:8
  2⤵
  PID:788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4268,i,18114675179082935038,12280416108808477484,524288 --field-trial-handle=2348,i,77788101298848892,327454111498705612,262144 --variations-seed-version --mojo-platform-channel-handle=5008 /prefetch:8
  2⤵
  PID:4516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4256,i,14202939442858794697,1376471623669810014,524288 --field-trial-handle=2348,i,77788101298848892,327454111498705612,262144 --variations-seed-version --mojo-platform-channel-handle=6780 /prefetch:8
  2⤵
  PID:2716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4680,i,4402696773056334161,8882608287896182673,524288 --field-trial-handle=2348,i,77788101298848892,327454111498705612,262144 --variations-seed-version --mojo-platform-channel-handle=6292 /prefetch:8
  2⤵
  PID:3648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2032,i,7858465627381214558,18382628240674300499,524288 --field-trial-handle=2348,i,77788101298848892,327454111498705612,262144 --variations-seed-version --mojo-platform-channel-handle=5212 /prefetch:8
  2⤵
  PID:4708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1380,i,10487390800732095695,11057220451411483741,262144 --field-trial-handle=2348,i,77788101298848892,327454111498705612,262144 --variations-seed-version --mojo-platform-channel-handle=6696 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:372

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4756

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CrashpadMetrics-active.pma
Size 16KB
SHA256 814d47aad78c212b52568b9c7b58d242899d490d3afebce66181cae50c880df5
MD5 8c7cdfea4284ba987d295d82a9c7ddd6
SHA1 7d1a3a66f2d64a383b230196ba89a263ce7ee957
SHA512 59c8229e834c944265aed4131c79f41f9f940a48651b9fb18800cef5bae36d17c7fd5880120c6fee8ce22a157b65bc63846b65765bc4dc86e15926dcce400d0d
SSDEEP 12:sf9iXhV0xoUZxCe+JKlkQuMRxCb8TXuYJ0IJpPK6BsyW1inPiz:U9iRqxoUZxWMk8xVTeYWI31BtXP
TLSH
T105724C85B34498FFC8835E7189BD27903774F6DF1F02866B6A6A760E2E271C84F44224
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 81240d13af4ca099e1358c75991e3fa5640dbb3aac72c2d98006f6159bf74aa0
MD5 96dd753cd2d8557b97ab2cd76f7fc6cf
SHA1 81697ccb13fb04a07bd47b552b3607597251f36d
SHA512 355c412a688a71b124e85c0527177b3f97efceb2a5553f8428e0913940daffd3bd176f5476b940c64eee52d543f0568112ac073984d9a64015adc15cbef552de
TLSH
T174D09224BA29A149E282007AA881EB565219DA95296B9622E620C44DBD2B925A3851C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4bf0783d55eb083b4adaa03ed8b76a2bd35b0819c8ad2530a78e1b8d6856010b
MD5 7a50c2e276f05b686e8cb6c95b86650f
SHA1 bc892af04a9d6b1bee8047f67518d676df864301
SHA512 f1d02fd9f067323214d78de08172e1a78028eba76f4754436f4d77b849e8422865dcea22be13f21c36ac2c5807b393c1dffdb0a3217c3353a517a0467461a474
TLSH
T19BD022203A28A008E282003AA880EB020208CA80282BC322E220C00CAC2B820A3800C2
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 0b0dc216a1061cc811348a3a0e6de3dc879e21e9e7495d40324854d0dbfaca1d
MD5 f87c05ee784cda44a5af63e6032f8ddb
SHA1 3ed11fe7242a2456b8b41d43a811f196f40a8e32
SHA512 4c47e27b15ab270622f0ba2cdca49d13348fe781f8ed1a12d80bb4825ec7db39aff6850c8aa5afd5a2e7daf7b0ca636985ca578eca131b6342f108876c436efa
TLSH
T10361E63009E14B95E31133B083D2A5B0F4641EE8F917EE862390B8790620B6FCF156E7
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58c697.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58c697.TMP
Size 3KB
SHA256 83f728a436e698f2a93d30125ff25fa8626ab415b80c4c1d3a5a96a5dbb1fa53
MD5 05bb30efdd3ff4db60263e483cf34fd0
SHA1 005135caeab81148549edc565f4759983539422a
SHA512 035b8a6c1079f0126f497af20662e10a3c57df0376c5d8c24b52fcf9a27809a72f4332afc5ede1331efdae5baa5dfb38f8af09f27522292c4333dd308c6f5e85
TLSH
T16461D73409E14B95E31133B083D2A5B1F4641ED8F917EE962390B87D4624B6FCF156E7
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 613696aba27a358f4d01f2fea012b33612d866a5ba05d8d07e75150af52f8295
MD5 55550a27f47d046b32a6781faa506fe7
SHA1 a058e997e01603997dfc127e5a5aaf42bc4f20e0
SHA512 3152dd4fb171424a6f8ad1279a03f15418dfb369dd21c2c91bdce727151b7c512250fe165e259d9de1756144e858cef5a8158da8fa739ac84344c69b01a2e734
TLSH
T12B217CB3C3E5856ECA1116F09A24AE2BCE2D055642183C16C9E4FF1B93F2475E10255F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 134a0eb911f3a2f6228036ffe337979e2bba7090ab9156ddfa37db4f10d35ade
MD5 3d6347a442c3bf03c497578a658944a7
SHA1 78ab90fb3ffd6295ea3aebfcd3a9b2280698f8b5
SHA512 9f79aefa64fc3e545654d8b7f7c2f9cc056b4b03f95daa3e180a7aab2e663eb44f8ebf74d3f9fc0ade90a3e1326e46b64d8974efd5a0f4cf7c69b80ea6ae86d4
SSDEEP 192:sxZfRw9u/f9sbMiExfIdpdKHW6+WNGYCku5rC+yIgrJ:sxZfQu/f9sg9xQ8HbGrCt9
TLSH
T14822C8116E38A5774CCBE21DBB25BF13D6F9503291D51E98EAFC961C04E6ADD120B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 7778b672b1d5f95f7ac6a4161cf565388be83f8cff249e156ef9b7229bbd962c
MD5 36013c5ff00203e284db93f730144b59
SHA1 abe576f72d4b96507a6e14714db46a2ff9d2ab01
SHA512 80996f812a85a30cb1cb518cf594bb531073228e6cb112d1f4f6c1895338c72dd811f71ed0d2f0e091bea69a300162f3f20be3442cb0117e79995ac5daa3861a
SSDEEP 192:sxZfRw9u/f9sMMiExfIdpdKHW6+WNGYCku5rC+yIg5iJ:sxZfQu/f9sP9xQ8HbGrCto
TLSH
T15A22C8116E38A5774CCBE21DBB15BF53D6F9503291D51E88EAFC961C04E6ADD220B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 b9cf071b4d432889948a931267017ec943cd4bd8736281db3ddf60b113987cb5
MD5 eae7552515420bf6cc2b1c67f5c7cd63
SHA1 d5dc837eeba8ee389d7ee039a34ea0a2540d4517
SHA512 339d2f279356408922ada9948fd193c1eff19105273cf2a956083c853fd1c18375156f8ed10160d748f5d43fcf2d568d73b73f98b0d399eeba81ee6c5343bc7e
SSDEEP 192:sxZfRw9u/f9sMMiVxfIdpdKHW6+WNGYCGuBrC+yIg5IJ:sxZfQu/f9sPgxQ8HbGZCtS
TLSH
T1F322C9116A3869778CCBE21DBB15BF13E6F9503291951E8CEAFC961C05E7ACD120B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 3eb0e6b766c5eff7098a0f5a1f9d7b7bf2d576609c658a7271779bf122c095d0
MD5 3e9a172e2bab302226447d1ac82c609d
SHA1 f601802639b0f55b68f95d82557e57c0e0c4cd90
SHA512 bb973f2a1f27761840a569dfd3ddb3da63acb0a7943da4c62912a786806c02868a13ab361eb0a461a8ee09ebd22bea94e6ac7324737174b79ac0cf524c075e78
SSDEEP 768:Z7qbUj+WvSCs68F1+UoAYDCx9Tuqh0VfUC9xbog/OVHZLlRTKrSro2:Z7qbUj+WvSCs6u1jaaZLbWrJ2
TLSH
T11BC2E83B340CCA7E4F801E9DDD5A6F972E9802C7AB588D4447FA994C02C77EA512B4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

889c7b6e-39c1-408b-a094-7a7ae544dac3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\889c7b6e-39c1-408b-a094-7a7ae544dac3.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 54e0bb2068a6ae5f2878d1b7c411c1a83c7238d1453914d99e0156cb4880e350
MD5 68592a7225dc2283f24cb7a56656087b
SHA1 3670928a725f0f5e8136081455874e34fa29177a
SHA512 8f0a3599e9e1d8274905094435febdadea7d6e93f3192cd25effc4684cc09fcdbe61f9aa2287404d35bac06ed7af41e9ad92f87d7fff5be97e876cb8fe928a1d
SSDEEP 192:u2em+xasuheOwQxMGsNcjU3wQctbi0EQmiU11N84Ea+j4+FdCXmRy/Fayamxq7t+:RZcIhsNkUgU5xTEa+fd4aS6ivF+a5oW
TLSH
T1AD827C725C785C7628E6A144F8873A175FF880779ACE6E84D5DDDF1C00EA6E8130BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 df5958778b87939720bda54b907fc677fea9341fa71f684bc13a19f9e346237c
MD5 c2f5548d0bb00f8116c811124e5e6b12
SHA1 3b6b1a1c9814309a4c878a5a4d6c381aebdc53c6
SHA512 3bf49b195e42027e91a917ce866b566355af697f3457fc92cc69e2c8bff5214e5adcdc5a7af5b1968df5291af4049fa1e1314b339d015b3bd964061c431b9bd0
SSDEEP 192:vONL6Db6QmiUykkHBa+j4+FdCXmR2RgZiU6:vONL6uCHBa+fdFMU6
TLSH
T15802C73568786CBB9AE26E49F88737275FD4107BDA962B94D6D84F0C00D765C230B83A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 9f9346d16dbf18daf98b6e4084424254846449643dcaa467e64c585d0c6a19b9
MD5 3f5ba103006d878775e24bff0de63e09
SHA1 62ac3e2db130b898b00bb6c6f886102a30d58dde
SHA512 62e16fc5d66857977d6b3cd0bab9cbbf799b4bfad4d57b855908611d898083284b19a2c1f33017ecf25d6a33b6dc01a2cae45b4b1e9b1786fb700245435be9af
SSDEEP 192:uTem+xasuheOwQxMGsNcjUqwQctbi0EQmiU11N84Ea+j4+FdCXmRy/Fayamxq7t+:YZcIhsNkUJU5xTEa+fd4aS6ivF+a5oW
TLSH
T188828C725C785C7618F6A144F8873A179FF890779ACE6E8495DDDF1C00EA6E8130BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 c8860fb97bb9756c7500dc0ce7b3d8a418a758b92e026ae6f606218a3e5404d0
MD5 ffb0b80b781abd3a6d8aaca7281bb181
SHA1 37e3e6841e15e6d3b7ed6e5eb5b49d8b0fb2aee8
SHA512 562c852157c7a7bf986816ac818caa8764ea2a205645db5c4f9e974232b70773191c99868b4ec8f58d9869c71dafa68d0fbf5bec99bfeb723441a22ed2d65a41
SSDEEP 384:yiFiZcIEsNl8TUNTUlIlJU5xTEa+fd4aL6ivF+a5oW:5FQE8wgMoa6vL6iNl5d
TLSH
T14DA26D734C68887B69F6AA44F94A36179FF48077C9CABA94E7CDDF1C009A5D8130BC25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 9bc85552b84a7f25ea75bf7dd43b4e6f80b671d64f91f20224bcb421bbf18b34
MD5 d095a181eba4fa2a446ad2881b4f1757
SHA1 d1bd0761741ce4e103f30cf7fd13c93ddb716ae5
SHA512 d468da33f592ded347698afecd82a143f527568cd8885de60d94d3467730a4297fb028aff1924a1da267c6b27654023d047f6711da2f3c91fa783c2e2200cd24
SSDEEP 192:iONwV6DbZQmiUyykBBa+j4+FdCXmRy/FaCNzxq7U6:iON+6fSBBa+fd4aW6U6
TLSH
T14312F73668686C7B5DE26944F88736139FD45167DE8A7F90D6DC9F0C00EB6AC130BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2038c09d-73de-4782-b157-bd59ae2e9f95.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\2038c09d-73de-4782-b157-bd59ae2e9f95.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 17ccaf5ff4cb9ff3fe6528c1aa8cf66248a2c8a3074606eed4926e3033537da1
MD5 d8b4d29118d28e610e17cb7eb8b99638
SHA1 50e8b28ac114e1956b8e06ca9c50a628d62d5700
SHA512 871a516f6103755a908db4cad7f363b1e428dcd7fc043526b90d2d433cfeb2a88f0bbed075c2b92cb07f26b9284dfb7e7eb5b8b4eae73aca6f57180779e53f13
TLSH
T1E741075CB6FE1148B3B76E5A9BF6696D487FB9732F0AD05E10110E4E0A62B00C871B37
MD5 SHA1 SHA512 TLSH

Submit Download