d3bae5fbcecd4cdecd616a6ff322cc1a5f69c435b1422135a264efc6f4581770

Analysis

max time kernel
148s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
24/08/2026, 06:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
130313075.html
Size 32KB
Sample260824-gzdsbstdmd
SHA256 d3bae5fbcecd4cdecd616a6ff322cc1a5f69c435b1422135a264efc6f4581770
MD5 4b72463ca2388457c0d76b393eb9ed35
SHA1 80f7a05dcd2cc5db112be3fb4c31743d65cebbf2
SHA512 72a8fc2054e988619380b3ac15a4f8aab5e24e7968500e1a82efab068c32e6d5acfd28fea2713b6bbeae44f75ae28c134765f6ce476d108bcd0f0bc5f8d320cd
SSDEEP 768:HJkO8xO2AXD6EWGUxy6rVz4xrcM8JZOS63Uf9Mw+k84OS2jaIME72o/zwOQKxiMB:HJP8xO2AzQGUxy6grw8/SeuF+Xq4s2xd
TLSH
T1B9E245D076D0E4171BCD0E73BF4EBDA9D42A9CA32494BA4782A4B78C25B9117C5E8CF4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4180	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134320256618961366"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-668679576-120646659-2289335452-1000\{357DAFFB-2F83-46BD-80FD-3D07E3765A93}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
780	msedge.exe
780	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3560	msedge.exe
3560	msedge.exe
3560	msedge.exe
3560	msedge.exe
3560	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3560	msedge.exe
3560	msedge.exe
3560	msedge.exe
3560	msedge.exe
3560	msedge.exe
3560	msedge.exe
3560	msedge.exe
3560	msedge.exe
3560	msedge.exe
3560	msedge.exe
3560	msedge.exe
3560	msedge.exe
3560	msedge.exe
3560	msedge.exe
3560	msedge.exe
3560	msedge.exe
3560	msedge.exe
3560	msedge.exe
3560	msedge.exe
3560	msedge.exe
3560	msedge.exe
3560	msedge.exe
3560	msedge.exe
3560	msedge.exe
3560	msedge.exe
3560	msedge.exe
3560	msedge.exe
3560	msedge.exe
3560	msedge.exe
3560	msedge.exe
3560	msedge.exe
3560	msedge.exe
3560	msedge.exe
3560	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3560	msedge.exe
3560	msedge.exe
3560	msedge.exe
3560	msedge.exe
3560	msedge.exe
3560	msedge.exe
3560	msedge.exe
3560	msedge.exe
3560	msedge.exe
3560	msedge.exe
3560	msedge.exe
3560	msedge.exe
3560	msedge.exe
3560	msedge.exe
3560	msedge.exe
3560	msedge.exe
3560	msedge.exe
3560	msedge.exe
3560	msedge.exe
3560	msedge.exe
3560	msedge.exe
3560	msedge.exe
3560	msedge.exe
3560	msedge.exe
3560	msedge.exe
3560	msedge.exe
3560	msedge.exe
3560	msedge.exe
3560	msedge.exe
3560	msedge.exe
3560	msedge.exe
3560	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 3560 wrote to memory of 4336	3560	msedge.exe	87
PID 3560 wrote to memory of 4180	3560	msedge.exe	88
PID 3560 wrote to memory of 2264	3560	msedge.exe	90
PID 3560 wrote to memory of 2264	3560	msedge.exe	90
PID 3560 wrote to memory of 2264	3560	msedge.exe	90
PID 3560 wrote to memory of 2012	3560	msedge.exe	91
PID 3560 wrote to memory of 2012	3560	msedge.exe	91
PID 3560 wrote to memory of 3848	3560	msedge.exe	92
PID 3560 wrote to memory of 4172	3560	msedge.exe	93
PID 3560 wrote to memory of 3848	3560	msedge.exe	92
PID 3560 wrote to memory of 3848	3560	msedge.exe	92
PID 3560 wrote to memory of 4172	3560	msedge.exe	93
PID 3560 wrote to memory of 4172	3560	msedge.exe	93
PID 3560 wrote to memory of 2144	3560	msedge.exe	94
PID 3560 wrote to memory of 3608	3560	msedge.exe	95
PID 3560 wrote to memory of 2144	3560	msedge.exe	94
PID 3560 wrote to memory of 2144	3560	msedge.exe	94
PID 3560 wrote to memory of 3608	3560	msedge.exe	95
PID 3560 wrote to memory of 3608	3560	msedge.exe	95
PID 3560 wrote to memory of 4128	3560	msedge.exe	98
PID 3560 wrote to memory of 4944	3560	msedge.exe	99
PID 3560 wrote to memory of 4128	3560	msedge.exe	98
PID 3560 wrote to memory of 4944	3560	msedge.exe	99
PID 3560 wrote to memory of 3032	3560	msedge.exe	101
PID 3560 wrote to memory of 628	3560	msedge.exe	110
PID 3560 wrote to memory of 3552	3560	msedge.exe	111
PID 3560 wrote to memory of 1348	3560	msedge.exe	112
PID 3560 wrote to memory of 4612	3560	msedge.exe	114
PID 3560 wrote to memory of 4612	3560	msedge.exe	114
PID 3560 wrote to memory of 1036	3560	msedge.exe	116
PID 3560 wrote to memory of 1036	3560	msedge.exe	116
PID 3560 wrote to memory of 780	3560	msedge.exe	117

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\130313075.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x264,0x7ffe7821c188,0x7ffe7821c194,0x7ffe7821c1a0
  2⤵
  PID:4336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1824,i,7449209164659983681,10432277889930212977,524288 --field-trial-handle=2016,i,12905209238436794288,251942816615052512,262144 --variations-seed-version --mojo-platform-channel-handle=2076 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1636,i,13830845683473084318,18191813086170370452,262144 --field-trial-handle=2016,i,12905209238436794288,251942816615052512,262144 --variations-seed-version --mojo-platform-channel-handle=2024 /prefetch:2
  2⤵
  PID:2264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2524,i,16253605798954059506,10619304763156062562,524288 --field-trial-handle=2016,i,12905209238436794288,251942816615052512,262144 --variations-seed-version --mojo-platform-channel-handle=2544 /prefetch:8
  2⤵
  PID:2012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3456,i,14733465843452448047,15214962489981684869,2097152 --field-trial-handle=2016,i,12905209238436794288,251942816615052512,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:3848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3444,i,10311044841327271326,5827920135113791494,2097152 --field-trial-handle=2016,i,12905209238436794288,251942816615052512,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:4172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4264,i,14644362531310361069,2033847033028857295,2097152 --field-trial-handle=2016,i,12905209238436794288,251942816615052512,262144 --variations-seed-version --mojo-platform-channel-handle=4344 /prefetch:1
  2⤵
  PID:2144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4276,i,7195677697557672119,18272048366481746988,2097152 --field-trial-handle=2016,i,12905209238436794288,251942816615052512,262144 --variations-seed-version --mojo-platform-channel-handle=4656 /prefetch:2
  2⤵
  PID:3608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3752,i,14869154726327152451,1224963159555010236,524288 --field-trial-handle=2016,i,12905209238436794288,251942816615052512,262144 --variations-seed-version --mojo-platform-channel-handle=5144 /prefetch:8
  2⤵
  PID:4128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3720,i,6065476277660661044,14784355129753556478,524288 --field-trial-handle=2016,i,12905209238436794288,251942816615052512,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
  2⤵
  PID:4944
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5696,i,15844407123287270754,14249723131256918570,524288 --field-trial-handle=2016,i,12905209238436794288,251942816615052512,262144 --variations-seed-version --mojo-platform-channel-handle=5780 /prefetch:8
  2⤵
  PID:4808
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5696,i,15844407123287270754,14249723131256918570,524288 --field-trial-handle=2016,i,12905209238436794288,251942816615052512,262144 --variations-seed-version --mojo-platform-channel-handle=5780 /prefetch:8
  2⤵
  PID:3032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5900,i,2570036883259920864,17204063955237745201,524288 --field-trial-handle=2016,i,12905209238436794288,251942816615052512,262144 --variations-seed-version --mojo-platform-channel-handle=4272 /prefetch:8
  2⤵
  PID:628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5932,i,15979542666322110118,1944231348591274912,524288 --field-trial-handle=2016,i,12905209238436794288,251942816615052512,262144 --variations-seed-version --mojo-platform-channel-handle=4716 /prefetch:8
  2⤵
  PID:3552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5904,i,13597653466356787076,2549838012874626811,524288 --field-trial-handle=2016,i,12905209238436794288,251942816615052512,262144 --variations-seed-version --mojo-platform-channel-handle=6336 /prefetch:8
  2⤵
  PID:1348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2388,i,11234042779626142468,2313462849908724664,524288 --field-trial-handle=2016,i,12905209238436794288,251942816615052512,262144 --variations-seed-version --mojo-platform-channel-handle=5900 /prefetch:8
  2⤵
  PID:4612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5812,i,15722435792451087919,2089068281935919868,524288 --field-trial-handle=2016,i,12905209238436794288,251942816615052512,262144 --variations-seed-version --mojo-platform-channel-handle=5216 /prefetch:8
  2⤵
  PID:1036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6096,i,17987872440836193387,2490279657672026961,262144 --field-trial-handle=2016,i,12905209238436794288,251942816615052512,262144 --variations-seed-version --mojo-platform-channel-handle=5484 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:780

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3928

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CrashpadMetrics-active.pma
Size 16KB
SHA256 814d47aad78c212b52568b9c7b58d242899d490d3afebce66181cae50c880df5
MD5 8c7cdfea4284ba987d295d82a9c7ddd6
SHA1 7d1a3a66f2d64a383b230196ba89a263ce7ee957
SHA512 59c8229e834c944265aed4131c79f41f9f940a48651b9fb18800cef5bae36d17c7fd5880120c6fee8ce22a157b65bc63846b65765bc4dc86e15926dcce400d0d
SSDEEP 12:sf9iXhV0xoUZxCe+JKlkQuMRxCb8TXuYJ0IJpPK6BsyW1inPiz:U9iRqxoUZxWMk8xVTeYWI31BtXP
TLSH
T105724C85B34498FFC8835E7189BD27903774F6DF1F02866B6A6A760E2E271C84F44224
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 81240d13af4ca099e1358c75991e3fa5640dbb3aac72c2d98006f6159bf74aa0
MD5 96dd753cd2d8557b97ab2cd76f7fc6cf
SHA1 81697ccb13fb04a07bd47b552b3607597251f36d
SHA512 355c412a688a71b124e85c0527177b3f97efceb2a5553f8428e0913940daffd3bd176f5476b940c64eee52d543f0568112ac073984d9a64015adc15cbef552de
TLSH
T174D09224BA29A149E282007AA881EB565219DA95296B9622E620C44DBD2B925A3851C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4bf0783d55eb083b4adaa03ed8b76a2bd35b0819c8ad2530a78e1b8d6856010b
MD5 7a50c2e276f05b686e8cb6c95b86650f
SHA1 bc892af04a9d6b1bee8047f67518d676df864301
SHA512 f1d02fd9f067323214d78de08172e1a78028eba76f4754436f4d77b849e8422865dcea22be13f21c36ac2c5807b393c1dffdb0a3217c3353a517a0467461a474
TLSH
T19BD022203A28A008E282003AA880EB020208CA80282BC322E220C00CAC2B820A3800C2
MD5 SHA1 SHA512 TLSH

Submit Download

36dead39-f2c1-4808-9905-feadaf697224.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\36dead39-f2c1-4808-9905-feadaf697224.tmp
Size 30KB
SHA256 6af282cc36ad0f62f771c5efda91d99e9ad0cae90d7e6523871d521beb43954e
MD5 3233ed4343d9e554dd150f133ab4e842
SHA1 87b09a81b6679e0402e4876d19e11b427337268a
SHA512 4dfb867c1ed721c9e5b51fbe1b2f5435d5b6f9c5167270fd39d429d37402839ced93a540a77ba2e7886e18bf3c555a7bf7e3df9279860762e1cbdf2fa7df4fac
SSDEEP 768:wF8bqn+WvSCt68F1+UoAYDCx9Tuqh0VfUC9xbog/OVnZLlRTKVTroT:wF8bqn+WvSCt6u1jaCZLbWVgT
TLSH
T1F9D20B3B280CCB7E4F845E5DDC26AF966ED801CB6B988D4447FA884C03C76EA511B5DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 a2e548a35e22271f825d8579da18df429cd453af71e545e6aeb821925f665531
MD5 c379ba1b0b4f7c3d0e966bca24004cb2
SHA1 282fd7eb6713d25a66dd55be8a977a40f2243bc2
SHA512 c609ff2fa7bdd49fb0492b7f23d3aa809feecaab42f21da735fdef6e2690ed3baa98c3b8068eac84326450d93c73f68e7df164d5c0ac225410366b0f17a0d188
TLSH
T19A7181F40A0B8B61EF73833AE5D2128471BEC5D8F9435F5E51E05B3D2088FA1CA79526
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58a15c.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58a15c.TMP
Size 3KB
SHA256 3a39e1f1f49cb48436001211f22ab34c4841ab69a877ea9d47b414c2aa1f061b
MD5 dfc8dc7a7fe3f527abe611108b499b3c
SHA1 65d58395c3c793bf4ebff1034c332e55cc3679b0
SHA512 6d7f93f9b02f9c4c7282f9655e6d530984ceaef151f2b437d72bbe27a21a762c44e63752a9b26d5716413a4c08045cd54d295ba92428a0f1861bfecb4c779747
TLSH
T1D27170B4090B8B61EF73833AE5D1128471BEC5D8F9935F5E51E00B3D2088FA0CA69526
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 769ac11a0907bdc41512ef73e11fd2aa96076b321b0b5271d03ccc873d91b5ee
MD5 ea9bc06a8766f47d8bf8330b56dd072a
SHA1 7a908dbf2bfcd3d0efa5770c31a681874765892b
SHA512 1d29bf065b0d5199aa6825820408e1ddaa02c5a66ca48f6db09d1960a427a2dfd6cf30d5f7dd32d4b8bdfa1f2860b95b5d56b16b2f3a76097d6d54803a51e051
TLSH
T16A11BDF3C3D5856E890156F05A24AE2BCE2D0505421C3C19C5D4FF2783E3076E00155F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 099f2e0f2b490244d26882dd51fe8096e51660e258ef58c10e54e13a6a993099
MD5 8284f05a9f6cf64cafb9d4f55ef006ab
SHA1 3395c73017c442c728c50320c63074c26e1e712f
SHA512 b65e64285d4ce4fe68fbc55b8347365d5ce47b19c6ce8824cb067faa8b489bc908a14acfa2d389986dd64c3caca1d21fce1d3330102ac4bdd3352385318e335c
SSDEEP 192:sxZoRgyM/jK1Ml8UQ3kK/fcsnrg5IdpHzHW6+WNGYCz9rJMIg5qLJ:sxZoOq0K/fcsnrgSTHbGlesd
TLSH
T16D52F8116A389977CCDBD20DFA45BF53D6F9147292940E44AAFCCA1C04E6AED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 93a7e18bb0c64a2e43c02ab7d5ed5bf0815ddab2af157ed12482ef6ade037977
MD5 c392735aa1dba10ddd3424ec348c65ae
SHA1 19fe7799fee167661aca76cc2e3b481ecb03fe0e
SHA512 c6d6202e3b46014403fe367644ead5e2b275641fec04a13a8e28bc58d98ef919f520189805520af9e835d0c7a17b3538317bde1aa5c795bb17a1cea7aa32626c
SSDEEP 192:sxZoRgyM/jK1Ml8MkK/fcsqrq5IdpdzHW6+WNGYCkMrJMIgrJ:sxZoWMK/fcsqrqSdHbGBe9
TLSH
T19A42E9116A34A977CCDBD209FA45BF53D6F91473D2940E44AAFCCA1C04E6AED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 811bf7ffa1a04b531f8f6b3a9130cf815321ec559931c45d6ae75b41a54f0d4d
MD5 7cbc5bba1f47036372cb99aca0cda935
SHA1 cb9638238085a61619624cdf283cbd3972dcc165
SHA512 87c35616c94256b91e2bc11ed8a79a36dc25f648dedd13d61115f0c5ca35719e8e6a0028f669e22319abd71bf83d0957db6c6069dc734a7003eeb772d269a174
SSDEEP 192:sxZoRgyM/jK1Ml8MkK/fcsnrg5IdpdzHW6+WNGYClqrJMIg5qLJ:sxZoOMK/fcsnrgSdHbGCesd
TLSH
T15352E8116A346977CCDFD209FA45BF53D6F9147392940E44AAFCCA1C04E6AED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe593ca2.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe593ca2.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 4d1e8454ae4237a4f4b22ce9857d9e68590b27ed6f877dc491087d1685291486
MD5 04bce3f9fc649b484efc32e7879bbaf7
SHA1 350b5b0d450951dcbdd3e84e9c3f79a94bf2ee52
SHA512 87f4b4c8b45eace4876a60d3a37b9bf76668e530ff4c714894519baca8bce0fddc24963318762a5beef043369ad476654ad186d0da59d4dae18942aeb95c3e74
SSDEEP 192:uWLsNlGdQEKsvbiEFQmiU1+i14Ea+jpOmZv6QamzqhU8:DsNlkFyaTqEa+9O5YaU8
TLSH
T13E3219366D789C765DE6A584F84B36139FF40067DA8D2FA4D6DC5F0C00DB69C230B92A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 a1f8ccaa0288f26e4e95a7f093def777ccdcadb62f570a2af5249f998139ab88
MD5 1818821b8a47aaffdb1d0ea9058031e6
SHA1 9d57d82ce7e4acc81f42c8bc06bf8fb9b30e0b12
SHA512 f2e3c82346c4cbfbdf2098a5a13245c63ad3ab6f07228f6d1edb2b98e00f551960eb226568950f7aa5f66465db98ec9c76ce0369b306449614f91996ef917dc1
SSDEEP 96:EqONkCQsjpf1bxX5ih/cIPURHl8h4otop5rQnD0BfPgvE5BzatIRdy+plOmZ8Con:vONa6Db6QmiUyY4HBa+jpOmZvxRgFFU6
TLSH
T1EB02F8356C786CB79EE26E49F88B27279FD4103BE9962B50DAD85F0C00D764C2347827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 26b73bcfa16ddec62753c4bc7d081ee69301b4efd450462e9cd23156c80b0f79
MD5 af8db4eaea6e366318e4b95b16ebc332
SHA1 701115490cc0099d85876311b98f0b5e3de927a9
SHA512 3b1f0ec9417f13fc4fcc4c43ada59fecf63c5183b8512d2ea5ebe69e898db1e1c88eba7b51164b8e1806b8ee5f0630c8dcbd33f438b24c8cddd2783320724756
SSDEEP 384:ciFiZcI+sN/8TUNTUlIl+FyaTqEa+9O5ZaivnuQom:HFQ+OwgSHBaMO5ZaifuQV
TLSH
T104A25C335D688C7AADF99A84F94A3617CFF44067C9CAAA60E6DC9F1C00DA59C130BD25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 22218a9e30de1fea1d7eac794b87dfaf241e0dbac6487718a399f24cf01aec43
MD5 702e7fd6b24a981abcb74b13ba2ad84d
SHA1 9d46cd14309ab0f061b6d35bbb23b0e4d7066fbb
SHA512 a9e758b95899d82efb55dd4827a912a7a073fd200d6cc92d0cda2814e5c383fbf0a985b0a536d8951f2a1796fcdf0aa6fd291bc9916ddb02f2925389fa9fc0e7
SSDEEP 192:uYm+xasuheOwQxMGsNl+QEKsvbiEFQmiU1+i14Ea+jpOmZv6Qamzqht4/tyAefK5:mZcIhsNl+FyaTqEa+9O5YaivnuQom
TLSH
T190829E325D789C725DF9A184F88A36179FF84027D6CE6F50D5EC9F2C00EA9981307D2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 8f15a71753444fa84bdddde33cc02dbc1cdda1f4c8de0feb47364cc30bd76992
MD5 9156d7ecee757c2783c97dd917c28404
SHA1 8f52c0e7eff4966613eb670bad7b24d791337fce
SHA512 b6a305b03f516f9374be6b8de548ab6b3427712da9c95db9f08e6d270fbe76ab55007f409790ea5b9db76614c3e63d806d4602dd84cc679057ec0a6ea758f2e2
SSDEEP 192:wON46Db/QmiUyp42Ba+jpOmZv6KNzzqhU6:wON46ph2Ba+9O5+aU6
TLSH
T1CB12193679789C775DE16884F88B36139EE44027DA8E6B90D5DC2F0C00EB95C234B827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 82971c21a8b300f772a1f424230b14ec23baf59018499c46bb1c58ab7f044979
MD5 57a9cf051e9204e2233b82d89746211f
SHA1 7b72d8bcc8d8bbd7af2dbd5c6142dbd290c9075f
SHA512 70ade14214c4b8796e9c0c7ad006022c3c667241f75666e1c272f816b520d68ab4622d3da63f2d416f006e39ef9a241a5ff9477fd80e633de38edf29c5a80ade
TLSH
T191415A5CB6EA1008B3B36E46ABF7A86D887FB9372E0AD55D10010D4F0622B40D9B1737
MD5 SHA1 SHA512 TLSH

Submit Download