hxxps://gifts-donutsmp[.]net/gifts/858036035164

Analysis

user interaction
yes
max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/09/2026, 17:39

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://gifts-donutsmp.net/gifts/858036035164
Sample260910-v8ac6awsbs

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2268	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134335355580573249"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3053180483-1881419501-3594244048-1000\{FF10F39A-5A11-48A7-B3A3-FACE90CD18B2}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2360	msedge.exe
2360	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe
5972	msedge.exe

Suspicious use of WriteProcessMemory 31 IoCs

description	pid	Process	procid_target
PID 5972 wrote to memory of 2996	5972	msedge.exe	87
PID 5972 wrote to memory of 2268	5972	msedge.exe	88
PID 5972 wrote to memory of 3844	5972	msedge.exe	90
PID 5972 wrote to memory of 3292	5972	msedge.exe	89
PID 5972 wrote to memory of 3844	5972	msedge.exe	90
PID 5972 wrote to memory of 3292	5972	msedge.exe	89
PID 5972 wrote to memory of 3292	5972	msedge.exe	89
PID 5972 wrote to memory of 4124	5972	msedge.exe	91
PID 5972 wrote to memory of 600	5972	msedge.exe	92
PID 5972 wrote to memory of 4124	5972	msedge.exe	91
PID 5972 wrote to memory of 4124	5972	msedge.exe	91
PID 5972 wrote to memory of 600	5972	msedge.exe	92
PID 5972 wrote to memory of 600	5972	msedge.exe	92
PID 5972 wrote to memory of 5876	5972	msedge.exe	96
PID 5972 wrote to memory of 6104	5972	msedge.exe	97
PID 5972 wrote to memory of 5876	5972	msedge.exe	96
PID 5972 wrote to memory of 6104	5972	msedge.exe	97
PID 5972 wrote to memory of 404	5972	msedge.exe	99
PID 5972 wrote to memory of 1768	5972	msedge.exe	103
PID 5972 wrote to memory of 1768	5972	msedge.exe	103
PID 5972 wrote to memory of 1768	5972	msedge.exe	103
PID 5972 wrote to memory of 3656	5972	msedge.exe	114
PID 5972 wrote to memory of 3824	5972	msedge.exe	115
PID 5972 wrote to memory of 3664	5972	msedge.exe	116
PID 5972 wrote to memory of 116	5972	msedge.exe	117
PID 5972 wrote to memory of 116	5972	msedge.exe	117
PID 5972 wrote to memory of 6124	5972	msedge.exe	120
PID 5972 wrote to memory of 6124	5972	msedge.exe	120
PID 5972 wrote to memory of 5752	5972	msedge.exe	121
PID 5972 wrote to memory of 5752	5972	msedge.exe	121
PID 5972 wrote to memory of 2360	5972	msedge.exe	122

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://gifts-donutsmp.net/gifts/858036035164
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x290,0x7fff738cc188,0x7fff738cc194,0x7fff738cc1a0
  2⤵
  PID:2996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1812,i,7110151129441123599,3532024472685974867,524288 --field-trial-handle=2340,i,8141685028268386029,4412424331886337269,262144 --variations-seed-version --mojo-platform-channel-handle=2412 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1664,i,3503129032113401207,8281913699576657139,262144 --field-trial-handle=2340,i,8141685028268386029,4412424331886337269,262144 --variations-seed-version --mojo-platform-channel-handle=2336 /prefetch:2
  2⤵
  PID:3292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2364,i,6082740636128234917,2993803562524403069,524288 --field-trial-handle=2340,i,8141685028268386029,4412424331886337269,262144 --variations-seed-version --mojo-platform-channel-handle=2444 /prefetch:8
  2⤵
  PID:3844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3488,i,13454531171391096698,1670596541532099359,2097152 --field-trial-handle=2340,i,8141685028268386029,4412424331886337269,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:4124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3480,i,7597270483402542440,7705013221379216878,2097152 --field-trial-handle=2340,i,8141685028268386029,4412424331886337269,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:1
  2⤵
  PID:600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4836,i,17163425054482616891,3118511920081839758,524288 --field-trial-handle=2340,i,8141685028268386029,4412424331886337269,262144 --variations-seed-version --mojo-platform-channel-handle=5036 /prefetch:8
  2⤵
  PID:5876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4876,i,4714241596864391414,11232968829154286554,524288 --field-trial-handle=2340,i,8141685028268386029,4412424331886337269,262144 --variations-seed-version --mojo-platform-channel-handle=5052 /prefetch:8
  2⤵
  PID:6104
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5744,i,8101480147584441976,593439798849611791,524288 --field-trial-handle=2340,i,8141685028268386029,4412424331886337269,262144 --variations-seed-version --mojo-platform-channel-handle=5816 /prefetch:8
  2⤵
  PID:2676
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5744,i,8101480147584441976,593439798849611791,524288 --field-trial-handle=2340,i,8141685028268386029,4412424331886337269,262144 --variations-seed-version --mojo-platform-channel-handle=5816 /prefetch:8
  2⤵
  PID:404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=5856,i,10405583966971460563,2644124137400806412,2097152 --field-trial-handle=2340,i,8141685028268386029,4412424331886337269,262144 --variations-seed-version --mojo-platform-channel-handle=6212 /prefetch:1
  2⤵
  PID:1768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6496,i,14200002748341376167,9975897623346401780,524288 --field-trial-handle=2340,i,8141685028268386029,4412424331886337269,262144 --variations-seed-version --mojo-platform-channel-handle=6500 /prefetch:8
  2⤵
  PID:3656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6480,i,4953430599262779838,9095262364282213246,524288 --field-trial-handle=2340,i,8141685028268386029,4412424331886337269,262144 --variations-seed-version --mojo-platform-channel-handle=6504 /prefetch:8
  2⤵
  PID:3824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6476,i,16592983347999057529,1797541368188397478,524288 --field-trial-handle=2340,i,8141685028268386029,4412424331886337269,262144 --variations-seed-version --mojo-platform-channel-handle=6352 /prefetch:8
  2⤵
  PID:3664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2844,i,12306055354581155424,3702844139573769010,524288 --field-trial-handle=2340,i,8141685028268386029,4412424331886337269,262144 --variations-seed-version --mojo-platform-channel-handle=6428 /prefetch:8
  2⤵
  PID:116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5028,i,1213612326232178668,6730815103261296592,524288 --field-trial-handle=2340,i,8141685028268386029,4412424331886337269,262144 --variations-seed-version --mojo-platform-channel-handle=6752 /prefetch:8
  2⤵
  PID:6124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5060,i,7737757579139019830,7452689009138587737,524288 --field-trial-handle=2340,i,8141685028268386029,4412424331886337269,262144 --variations-seed-version --mojo-platform-channel-handle=5780 /prefetch:8
  2⤵
  PID:5752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=4828,i,8532928966444605639,1996537163005635745,262144 --field-trial-handle=2340,i,8141685028268386029,4412424331886337269,262144 --variations-seed-version --mojo-platform-channel-handle=6404 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2360

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2848

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4456

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 9300dc4b11c647d4484e20f994dffbbd9939379d590fc7dedf9875372c431ce1
MD5 b031933009b03b3dcfc6f363760f83dd
SHA1 a9d3126d19c73dafd7e12a688bb3a802627790ee
SHA512 f606a12a9a0879bb3f7d6c9bcb6e3754434b9f0d8f1d351e8104aef087c326f689af5174eddcb6a3cd1f1d07864ff544fc76e73f8b76bf6d4330e19666cb7b28
TLSH
T18FD012BA2A4E7010F26D4A31B416CB00776D15A12852A705E22D944C99A90A562C62C6
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8da58a9b03c676d64167caf3657c5315a0b78038e3ae23bfef432a40d8d22290
MD5 81f1d957977f2d73471366011b7128bf
SHA1 c3403bfa34ee45b494966cf8be9bed08da2c5168
SHA512 171afd7f20b750bc0bdc1fc9fd4cf14984e63031e562c60a7b1bab3112c84572ebc63669b744e0e5399b2f5453039fb86937cf7ab417a72da7f1ad931c88f0c5
TLSH
T152D012B62A4A7010F2694A31B456CB00776D15A12852A705E26D945C99A90A566C62C6
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 6ff7cf783a4ec4cb600999ead4de5c34c1fcb34705414af1d4eda02967a0fea7
MD5 b797eb40a61664a0d7bafda02583c5a5
SHA1 816bda59b8a4deb5799c2b963e2c296aa979fdff
SHA512 0bc3741e18e202bcea6aee8c3cf33991587cfa6a841178abd0cd9de4e5425809a6f099abcf2b7e216053fe5fb539685a48b7821068a02f565b1db792d49ca0ba
TLSH
T1FDE026C807C8C63FE680A6CB4575770D82903F1A92CCAA0A2750A8883402640EAA6590
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 d1804357b1514be547a67e02ab9ac1f29d4887303db82ad911b0305971d93d87
MD5 2c2f91d97bcc6b43d8b1bda030f15c95
SHA1 cd787d1bdd1d6adf8b30236d59a5f1c8c28d4888
SHA512 fd5318f884fb5a6c2ba46f5fd57b057ef546be7256c3af59c8fa0f82030a2156f7f05820479101fba6b5f3a8d35861cb8980ac0a04c61f9240a7d5fdb077fd38
TLSH
T1DFE02B76C961EC2708FE4B19B01D9746E70013273641498F3B3C81098FB0A3745C985C
MD5 SHA1 SHA512 TLSH

Submit Download

f_000099

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000099
Size 88KB
SHA256 d61384d7a5af3781b1e7bffdda5e60e4554019c449b896f22a56486b5a23c05e
MD5 a334927078cb9727dfb8c3c2cbb8b70d
SHA1 0a8ed4d59660f082d9223b704f47d5586abc2039
SHA512 c798c0595a028c6ae572c7640feb3681f1503919e66a7c5222e24b0fde86606b6db97afc9648ce0f73b85315ddec127c8fdba663ea2ac4cc5fb91ca7843e2e59
SSDEEP 1536:XUpoh1p3Seu1vZLqcT+9Pn6AtvWw1BhSvySsU1iedA5sYSnXGFKPpNsjg:E+LylZL766RJvySs9iYyWFqNP
TLSH
T1E39312F868F1564A15E0B35BA309BAD561FEE8FE17A7614ED1443F14332920A68E3CE4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 4KB
SHA256 9bb0adb9f45e8ce7b0f71f0c6ff822a501eb7fa6b862fac86d027a7be0feba46
MD5 96e7b531111aaf24c89373e6f5a31d95
SHA1 608e0355b22cd9a28a2b37f710323eea2fca59ed
SHA512 21cf744ca16242d0ad19d9d7a49d707a3feb65d214b0e21daa0c6228b87226869ee0c214e38ccdfc447ac0eea801d12f320b3c04f7d70fe81df8185c806d2138
SSDEEP 48:2l5tJHWFPXCocE8hWNgbTYYgXEa6pinxi+zSUntwcQ5wXOEBWANl9:2jWFPB7GTYRXEa6pQ4a4c6iBWA9
TLSH
T15091943D4A82CEF0E7D2223155E135E739F194EAF5733F4E00E0A472702AB60999A9DC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe59548f.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59548f.TMP
Size 3KB
SHA256 2573dc5089b15b4a177b5be995eedad22531bef62555b00e6972fbf5f572c1be
MD5 c1e1ad9b7787bb39c54c09f7193a7337
SHA1 d3d9add19f2cb57cda6f7067cf95814365a90396
SHA512 58cceb5517dabf2ca395056180de20bfd24acff135df1fc0cbb15362cfdaa2086ae14059e174b89191a8eb991b4dd5c9bf6eb299cf0caff770cd651ed18a5543
TLSH
T14F71823D4A92DEF0D7D2223155D131D73EF195EAFA337E9E008024723119B209DAA9DC
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 a27689578943ef1d3d717c1a7f25e2c8566f7291aeb2b0cb18bab9c6c75714ac
MD5 b5de9ca0c1b3bb287b120784a4cbac53
SHA1 c77733f6e7b661b3e4663578a4bf61b536a68cf7
SHA512 beee0592d38a4fda9fb2d213cfa5fdbfec2bd12df4622a732340344dac42534f7d65738ff47454d9f0ee6a55f6029a603b7bdb5e2bbb2bdf2ba3e702e35ef7d1
TLSH
T15571CCF793F4866D8A1292F4AA186E2BCF1D0515432C3C99C4D4EE5BA3F34B0E14164E
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 364d19b9d4232ec1c7c7b2107137317ac4e1bf730866d9114b056a801597e7c6
MD5 8bbf7df8ca8459a0bccc08a729b52211
SHA1 5ebac33152b0406832b3c557219cb3d2fd9a2a36
SHA512 85c9643b00c644cc801d4c35d07bb9241ebfbeb9d39aa97caeeb82f8169aad1bbe230c10fc84cd0cbcd16d16d46212e84074e02e264ee0aa0d9d47bb049d1e99
SSDEEP 192:sxZ0uURP0yMvZjK1Ml8Mkff/f/vsf5aZdZ5zodpS9HW6+WNnmlXYvKuYdOaIg5fx:sxZ6wM3/fXsf5azU2HbQXbfRx
TLSH
T14C62F9166A34597BCCDBC619F6457F93D2F85163A2945E8499FC8A0C00E7BED220382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 5432beb3a2de3dc0c52b761c14e39d141d7e82c681ff0fc5f8a35fac57f2d3bf
MD5 8e81be9665969802d9dd0a1d2d33e0cd
SHA1 7b29594888ecc65781826179efc779cec2157724
SHA512 a86ced83e03fe16aef1d28c9303759d9361447305e5bd97136d61fb9fb59f6b56bc4fe6fe0f50fc66760fbd8bb8d994aa7c5d3f6ef14cf8da71268b1b6914a90
SSDEEP 192:sxZ0uURP0yMvZjK1Ml8UQEkff/f/vsfsZdL5zodpSxVHW6+WNwtmlXYv/YDOaIgn:sxZ6wqf3/fXsfsz+wHbfX9fRx
TLSH
T1247209166A34597BCCDBD619F545BB93D2F85163A2945E84AAFCCE0C00E7BED220381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 3b11962b5aa0b65d5bd5986b5f6e78a3bf9e7d925642518b6c0dc48590c54a11
MD5 8a59cd44ce4995023908e8a732ca58cb
SHA1 68bad00ff0e7077cc3ac2826dbc39e5a3017f6ae
SHA512 018bb64bc77b6fde4e4702854b3cf62b62588d3c4865464a678f55b91fab59729c41a336d3d1b49dd94b85307fe1743ab40b6e8de76336baa257a43230e822e7
SSDEEP 192:sxZ0uURP0yMqZjK1Ml8Mkff/f/vssP5aZdZ5zodpS9HW6+WNnYR/YvUuYdOaIgjx:sxZ6NM3/fXssP5azU2Hb4/5fjx
TLSH
T1F462E9166A349977CCDBD609F645BF93D2F95163A2944E8499FCDA0C00E7BED220382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 d3ed28410c95bcdd49b775e999633ec95a9fd79e43121075d441a0e078c22041
MD5 f69e750b13c549c16996bde771106f07
SHA1 f3ce7bce220e59cf4ead817ef6423038f0d78324
SHA512 f942c9f08562a4828ba0e5eddd4688fc3995511e90fac2e939ef5f22ba5105f580b294d4c4e56e3adef92b0304627a7501a96a18e13b795a929ffee8b420600b
SSDEEP 768:ZYsv8Od/hWvFvmX8F1+UoAYDCx9Tuqh0VfUC9xbog/OVA0LlEe9NsQroIRLO:eY8Od/hWvFvmXu1ja10Lm2NuIq
TLSH
T19BD20B3B680CCB7E4F840D9DEC2A6F966DD801CB66984D5447FA884C03C77EB521B59B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 26KB
SHA256 e5f0fa7422fea155df5a7882f251622b417700ec19226abce2f432fa0e864d21
MD5 393dd806921f5f14934ad4de9ab1061f
SHA1 b94b16036c1970fb3b41b3f4c254b0230ef0a344
SHA512 55b14bd890f1f67ddb28aead2a0e8d875305dca91d8565dce9b446f59f327ed7d19a322aeaa62d3b90a4318548d0f6dae4c1ed93e3edd8f7f6d7479730c93508
SSDEEP 96:Ko7iKcsW23iKoM7LKKc026WEKjKkAAK9Gq+xGKqkJ7yKkc++dmKWI94gK966GbGA:05ppxnY753RNBvRJJdt7p5J9DTxf37S
TLSH
T1C8C24416713E0212397E2948B3A696364F4235A37458E4BF7FB810A14F66E225CFDCED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 32KB
SHA256 d55c492fbeb788f79477b9fd8a96ecb7048556a233bf8a0ca450455c2728ad00
MD5 46ed6047e51210e28d036606c1bf05bf
SHA1 26dc109abdd973d04fd643ba702e437431f95b2e
SHA512 8bf049256efc3794bf6d4ab9573a4eff5defcf6a0ec929dab6fb18ffd30911d943a7cdb3b0e2bcf16136753e749a7eb262b50fc2121364bc1fde8904fbec57cc
SSDEEP 384:n4JiFiZcIQ3sNb8TUNTUlI4IQckCru3CphifWGZsjl/nY1gT8msa+VYUkty/7Ig4:1FQQ3qwgpkdM5GZIPY1gTFhgfqv
TLSH
T1CBE2A3F298D789B7E89E4B87A73D2D4299FCC153B5885A94B7C81D0CCC961BFC306816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 ca2931cf3d32781cb9e90833b2f34cba2b88a6a86a6a177bf701f3a88e7f4a93
MD5 b8c3a72af5d285f499b4b2bbb90eda93
SHA1 9be75c518ec00ae604b47456e9d81ce4f202d7ef
SHA512 33919d1debff4e5f906ab7f013c03d6895e8d709a8bc11d58c315345126b7d71737f31aa9081326b3a74ec31e6bbdb5f20dea8fd85690713e871d312628a7372
SSDEEP 768:pcFccps36wgbkU695GZIPY12TFI8p0GLC:es3sq9KQI8p0GLC
TLSH
T14BC25B32EC58DAB7ECD74F98B74A3547DEE091638A9CAAE4DACC5D0C009B1DD530B816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 bc8f0660ecb7320ca3a5fae88930da6a07b08e8606925b0738d5103166ab154c
MD5 6b05100a64f15fbd1f9f8e6210a65c97
SHA1 0fbebf532b4c9c83ddfeda4a5b4312caf8d59675
SHA512 285e932fab9ffdf4eb15a8734ba08b470e4ec77726ba783d928dad6c73ce063dfbbd9de4ebf5d74bfbf179109b6f68df155706571aa6d35599729b1cde456c20
SSDEEP 384:npqiFiZcIz3sNb8TUNTUlI4IQckCrQiCphifWGZsjl/nY1RT8msa+VYUkty/7Ig4:phFQz3qwgpkCM5GZIPY1RTFhgfqv
TLSH
T10CC23A32EC64DAB7EDE78F95B74A3647DEF08163898C9AD4D5C85E1C009719E130BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 3ce19098c25a82a54fb059764c4e0117b2f80513ed67d38302cd24489717deef
MD5 e929ecf517fabe6ef8008e456ad8781c
SHA1 7885c9ad9377a2f94f307bcd9ab4c2333cbb7272
SHA512 b9ce0cb4fc943b19812a602b9521cbd31edd0738b0d09beeb2a9b420ddb4010109841b9a55d10b8232a49bc822aad3dc9090cf832e5eb97971e039d061e0be93
SSDEEP 384:np8iF9CcmyWCs3sNQ8TUNTUlIm2QckCr9lLKphifWGZsjl/nX8pke4KV8p0GLxty:pnFccps3hwgbkU9k5GZIPX5I8p0GLC
TLSH
T139C26C36EC58CABBEDD74F89B74E3A07DEE0516789AC9AD4DAC85D0C00971DD030B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 8a154e3411983bb82cea1060d2636396f770a0e2137a15d1991dd9a14af92d05
MD5 bc69130f545a29a32c4954807aa2f4a9
SHA1 f206ddab7f0f4b41ef0b4bbe0b02d3ab71e9c560
SHA512 5546c0a28d3e4a04681663aa3599aaff1c573147ed0ec19864c36031a3aaa36dfaedd2b5db4ed70fcdcd17b0ec22d54dfa2121aca91347228d0b79852d5e8917
SSDEEP 384:nmiFiZcIz3sNb8TUNTUlI4IQckCruiCphifWGZsjl/nY1RT8msa+VYUkty/7IgKv:NFQz3qwgpkoM5GZIPY1RTFhgfqv
TLSH
T16BC23A32E864D9B7EDE74F95B74A3643DEF08163898C5AD4D5C85E1C009719E130BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 b6f5d7b6213a3b5fed3dd96d429b42edfda1ebf4205eef902752c7bfc841a5ca
MD5 a3d2fb1a17f77810df45d94ba2cb235c
SHA1 74d2770125d8bbbdd8b829c50d0929926b126452
SHA512 b53d1a50e11b3e6aa60788867edcad9b4ce18d0762a64981fe21739793773945e1292a188769517b5088e41544cefe49d11df41afe4822c0cacf8d14c8e83d56
TLSH
T152412B58B6F91108B3B77E5AABF6686D487FB8372F46D45E10010E4F0A22B40C862B37
MD5 SHA1 SHA512 TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download