hxxp://www[.]ucc-apac[.]com/

Analysis

user interaction
yes
max time kernel
149s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
23/06/2026, 07:50

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://www.ucc-apac.com/
Sample260623-jppsysa14r

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1300	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134266746647805727"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1788976790-1541110888-1636651838-1000\{5B94DE96-B0F2-4ECE-B648-7258F4348F0D}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3336	msedge.exe
3336	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
1812	msedge.exe
1812	msedge.exe
1812	msedge.exe
1812	msedge.exe
1812	msedge.exe
1812	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1812	msedge.exe
1812	msedge.exe
1812	msedge.exe
1812	msedge.exe
1812	msedge.exe
1812	msedge.exe
1812	msedge.exe
1812	msedge.exe
1812	msedge.exe
1812	msedge.exe
1812	msedge.exe
1812	msedge.exe
1812	msedge.exe
1812	msedge.exe
1812	msedge.exe
1812	msedge.exe
1812	msedge.exe
1812	msedge.exe
1812	msedge.exe
1812	msedge.exe
1812	msedge.exe
1812	msedge.exe
1812	msedge.exe
1812	msedge.exe
1812	msedge.exe
1812	msedge.exe
1812	msedge.exe
1812	msedge.exe
1812	msedge.exe
1812	msedge.exe
1812	msedge.exe
1812	msedge.exe
1812	msedge.exe
1812	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1812	msedge.exe
1812	msedge.exe
1812	msedge.exe
1812	msedge.exe
1812	msedge.exe
1812	msedge.exe
1812	msedge.exe
1812	msedge.exe
1812	msedge.exe
1812	msedge.exe
1812	msedge.exe
1812	msedge.exe
1812	msedge.exe
1812	msedge.exe
1812	msedge.exe
1812	msedge.exe
1812	msedge.exe
1812	msedge.exe
1812	msedge.exe
1812	msedge.exe
1812	msedge.exe
1812	msedge.exe
1812	msedge.exe
1812	msedge.exe
1812	msedge.exe
1812	msedge.exe
1812	msedge.exe
1812	msedge.exe
1812	msedge.exe
1812	msedge.exe
1812	msedge.exe
1812	msedge.exe

Suspicious use of WriteProcessMemory 33 IoCs

description	pid	Process	procid_target
PID 1812 wrote to memory of 3220	1812	msedge.exe	83
PID 1812 wrote to memory of 1300	1812	msedge.exe	84
PID 1812 wrote to memory of 896	1812	msedge.exe	85
PID 1812 wrote to memory of 896	1812	msedge.exe	85
PID 1812 wrote to memory of 896	1812	msedge.exe	85
PID 1812 wrote to memory of 3028	1812	msedge.exe	86
PID 1812 wrote to memory of 3028	1812	msedge.exe	86
PID 1812 wrote to memory of 1016	1812	msedge.exe	87
PID 1812 wrote to memory of 3116	1812	msedge.exe	88
PID 1812 wrote to memory of 1016	1812	msedge.exe	87
PID 1812 wrote to memory of 1016	1812	msedge.exe	87
PID 1812 wrote to memory of 3116	1812	msedge.exe	88
PID 1812 wrote to memory of 3116	1812	msedge.exe	88
PID 1812 wrote to memory of 736	1812	msedge.exe	90
PID 1812 wrote to memory of 736	1812	msedge.exe	90
PID 1812 wrote to memory of 736	1812	msedge.exe	90
PID 1812 wrote to memory of 3500	1812	msedge.exe	91
PID 1812 wrote to memory of 3500	1812	msedge.exe	91
PID 1812 wrote to memory of 3500	1812	msedge.exe	91
PID 1812 wrote to memory of 3612	1812	msedge.exe	95
PID 1812 wrote to memory of 3612	1812	msedge.exe	95
PID 1812 wrote to memory of 3612	1812	msedge.exe	95
PID 1812 wrote to memory of 1640	1812	msedge.exe	98
PID 1812 wrote to memory of 1640	1812	msedge.exe	98
PID 1812 wrote to memory of 3732	1812	msedge.exe	99
PID 1812 wrote to memory of 3732	1812	msedge.exe	99
PID 1812 wrote to memory of 2268	1812	msedge.exe	103
PID 1812 wrote to memory of 3548	1812	msedge.exe	115
PID 1812 wrote to memory of 2656	1812	msedge.exe	116
PID 1812 wrote to memory of 2532	1812	msedge.exe	117
PID 1812 wrote to memory of 5112	1812	msedge.exe	118
PID 1812 wrote to memory of 5112	1812	msedge.exe	118
PID 1812 wrote to memory of 3336	1812	msedge.exe	121

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://www.ucc-apac.com/
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2b4,0x7ffd39b6c188,0x7ffd39b6c194,0x7ffd39b6c1a0
  2⤵
  PID:3220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1836,i,104141331924012838,17599373933968642659,524288 --field-trial-handle=2300,i,16368356602624802353,750885248251574154,262144 --variations-seed-version --mojo-platform-channel-handle=2328 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1696,i,8712421680901206312,16836905563313864759,262144 --field-trial-handle=2300,i,16368356602624802353,750885248251574154,262144 --variations-seed-version --mojo-platform-channel-handle=2296 /prefetch:2
  2⤵
  PID:896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2564,i,16428536380015529529,2124984527929036904,524288 --field-trial-handle=2300,i,16368356602624802353,750885248251574154,262144 --variations-seed-version --mojo-platform-channel-handle=2572 /prefetch:8
  2⤵
  PID:3028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3412,i,11805273716126008917,15732073749045355829,2097152 --field-trial-handle=2300,i,16368356602624802353,750885248251574154,262144 --variations-seed-version --mojo-platform-channel-handle=3456 /prefetch:1
  2⤵
  PID:1016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3436,i,7331040959764274937,16386425667543901804,2097152 --field-trial-handle=2300,i,16368356602624802353,750885248251574154,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:3116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4208,i,13644313016666639356,7534843923030492674,2097152 --field-trial-handle=2300,i,16368356602624802353,750885248251574154,262144 --variations-seed-version --mojo-platform-channel-handle=4228 /prefetch:1
  2⤵
  PID:736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4248,i,4494977965793137859,15445968676027924328,2097152 --field-trial-handle=2300,i,16368356602624802353,750885248251574154,262144 --variations-seed-version --mojo-platform-channel-handle=4256 /prefetch:2
  2⤵
  PID:3500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3616,i,4977389139634567989,2880127477176595158,2097152 --field-trial-handle=2300,i,16368356602624802353,750885248251574154,262144 --variations-seed-version --mojo-platform-channel-handle=5068 /prefetch:1
  2⤵
  PID:3612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5184,i,11519171252365904688,10170463388649092118,524288 --field-trial-handle=2300,i,16368356602624802353,750885248251574154,262144 --variations-seed-version --mojo-platform-channel-handle=5040 /prefetch:8
  2⤵
  PID:1640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3688,i,4028347153152690116,17509533253765089627,524288 --field-trial-handle=2300,i,16368356602624802353,750885248251574154,262144 --variations-seed-version --mojo-platform-channel-handle=5252 /prefetch:8
  2⤵
  PID:3732
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5908,i,5462527616400256414,4315519367613776479,524288 --field-trial-handle=2300,i,16368356602624802353,750885248251574154,262144 --variations-seed-version --mojo-platform-channel-handle=5840 /prefetch:8
  2⤵
  PID:2756
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5908,i,5462527616400256414,4315519367613776479,524288 --field-trial-handle=2300,i,16368356602624802353,750885248251574154,262144 --variations-seed-version --mojo-platform-channel-handle=5840 /prefetch:8
  2⤵
  PID:2268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6224,i,10801170989903430326,6749378931881718311,524288 --field-trial-handle=2300,i,16368356602624802353,750885248251574154,262144 --variations-seed-version --mojo-platform-channel-handle=4256 /prefetch:8
  2⤵
  PID:3548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4336,i,14534317761768092518,5421278156460728852,524288 --field-trial-handle=2300,i,16368356602624802353,750885248251574154,262144 --variations-seed-version --mojo-platform-channel-handle=3620 /prefetch:8
  2⤵
  PID:2656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4328,i,2345529381969853839,17154639346170874154,524288 --field-trial-handle=2300,i,16368356602624802353,750885248251574154,262144 --variations-seed-version --mojo-platform-channel-handle=4436 /prefetch:8
  2⤵
  PID:2532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5468,i,11167811037060473584,4915097134995769878,524288 --field-trial-handle=2300,i,16368356602624802353,750885248251574154,262144 --variations-seed-version --mojo-platform-channel-handle=5432 /prefetch:8
  2⤵
  PID:5112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6140,i,5727249352532781909,13031998550708280499,262144 --field-trial-handle=2300,i,16368356602624802353,750885248251574154,262144 --variations-seed-version --mojo-platform-channel-handle=6120 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3336

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4696

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 92b83a0e542b7bb3ed324c35b5f2a40c47a6351981065b804e4d9d80ddd6d7ee
MD5 9ea20a12d0c030ae7f84014f382662b7
SHA1 7912569189cf07c1ce092a268e67e9f391b7c8c7
SHA512 39ca414f13163c8479fe7650ae0dd1607b267fe3f319c09aec7bd5f68448e9ac604351069bf6b166b3f897d3afb5d7f35e609b9fc72b9debbcb05bad8fad7d81
TLSH
T132D02B20FF04E002D1072172540047100E0848902093C140E030441CDCEC804D395307
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 6088e1cf6ce2e8920b5e856b6ae642603fc1d6daf77fce075980d887ec0bc315
MD5 7331be6efa9847c92f23d4c0ff22d666
SHA1 4326b718aa36376137e219c7e82fc52927b6ce25
SHA512 757354386c4a478c35c905db6533bb5a68ba2a397142a3c02b4bf58ba03525bdd9e371d16acf629a15e71b737df36406a2c3a7d7e65f32bbdce4668f12229e4d
TLSH
T15F716C78034100A1EBF00171B3F225E9B17568EDFE2B8D9A305C84F96AB936CD41C96F
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 9458d91d2f67d132b39d5dd39b6196a658a4098f592c6232064f42943a1271ed
MD5 368d1fb85a0be6f7c122fd4edd95aff7
SHA1 732c02924ff53bbe52cecfc75b75e3d946e3db61
SHA512 bf2ee4f3cfea2a8f225ee8f24da2f65ab027df0799325d01dfa691fef9518f4f64ba446cafeab38adf702438c79ae72610993fa6199867de7b345bcfa056620d
TLSH
T14251ADF3C3E4867DDC6156F4BA1A2D2BCD190910932C3C5BC9E0AF4B53D2860E201A8F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 2ee76a371e277d8f6984aedd8fd120bfa6e8249fdd74bac02a36d7cd8c52fa31
MD5 73469b7bba534c43291434ba72db6db4
SHA1 fd48a78d4ff45953bcfe0fa4e0ac26355b02286b
SHA512 ad9a8e92981ba8483b6b5ea11510f69721d33b7ee40db0e7b9bf889bafb7d01982cdded7b0fb2d9e63494fa65b8ea80799a3edc89433da09e672d79d0d32020f
SSDEEP 192:sxZJRQyM/jK1Ml8Mkg/f3sycuVGIdp9GHW6+WNhUPE/YvGi6JPIgrJ:sxZJ+Mg/f3sycmMHb5/jF9
TLSH
T1D552D712AA345977CCDBD209B955BB53D6F90573A2D40E48AAFCDA0C04E6AED3207C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 65f3d10b4fed6de289c79da60f37acc39eb11dfbd8be09d30c46c2416d7b56e1
MD5 e7cc7f1fb7819dcba658aa7744f4a852
SHA1 4f4c8f0d3d8fe4ab9b8f939e3446057618661943
SHA512 98a1c0bdfb40149f1db79b31a20aa79b37a4d7ab951e36abba8ab101adf96ef22f88a08c0c19fb3e22bc2f1b51577ef481ec14e5caa3e9747fec3774d386dd65
SSDEEP 192:sxZJRQyM/jK1Ml8UQEkg/f3s+huVGIdp3GHW6+WNhrXX8PE/YvptvJPIg5tJ:sxZJ+qfg/f3s+hm2HbJn/yFt
TLSH
T16562C812AA345977CCDBD219B955BB53D6F90473A2D40E48AAFCCA0C04E6BED321781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 490fd01f8b2cf07d5ba959b986d9c09dd75fa696d2d12fde390844339ac5425d
MD5 f448740f6180be1f95e49691ad337310
SHA1 1bd7a9d50eb2aa59993a272e5624ad1dd2ce38f6
SHA512 851f74795bfe91a72b1f16f261dcbaf7876c7be35fac1562c75a8f269ea981ee5f82734547ccb0f4a10cf5019ef3d74cb2a03f9308c1d3d895636fae53af9a8b
SSDEEP 768:gWseJ3xWvhfyn8F1+UoAYDCx9Tuqh0VfUC9xbog/OVYcLly0ppbroyu:gWseJ3xWvhfynu1jaVcL88poH
TLSH
T15FD20B2B680CCB7E4F844E6DEC2A6F966EE801CB57984D5487FA884C02C77EB51174DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 0f561170952dc103efba9541d73017e758b83ad9c6afcaf0f8c7de471ba1c728
MD5 0fe7a4abf18ac2192f10d4497168c666
SHA1 bf007161af56a30e78132c4e7d5c4e9e4715b18e
SHA512 80988515b03f9634f0f1b14a08dfa220704f5e41f20cac06efe31dec169941922fc67209f8d918ef63d3c2f39414549be127069a77f859b29261873e5e1d61d3
SSDEEP 24:KdxwLfxwyxwRxwIaxwNdxwBxwhxwx4xwlxwB+xwsIjxwdxwxKixwOhaxwzxwx1EW:KYHIhKggkXyh+IHKnKIXyxmIHKbaMs
TLSH
T1B0919A16367B06423C7E2548B2A795375F4132A73418E8AF7FB850A10E26E122DFCCED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

favorites_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\favorites_diagnostic.log
Size 1KB
SHA256 c5ef31151ca30d6b287066f8663b84d011b0461c0b99ca52992e74e403df1285
MD5 5a1880d3986e24bbf5c9efa62af5e114
SHA1 9df90a2eae4ccf72e9d30870f30043830c4f0b7f
SHA512 56037dafb488a940ad075471cedc8deba840c2f61b28aaa8d9dbb5cea197a570928715d8fcf450749dcf8f01dcc6e93f1ed07e25227eb31af1b9cc7cf6f3c928
TLSH
T1A82153D0D3FB2645AE8DAA51D22B9407F4A13A9B260E5C71336E51F41F44C160B6EE39
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 1f38e3f518a129e75b76e648f817b8c23d9cb2e17c34fd5e3ef7e226dca6afc0
MD5 af040c91e49ccdfbf2dc01636749769b
SHA1 a975b681a6ff991d84caef0c1b46ffe83381cb09
SHA512 7ab3fe7b8b99b3dceb7791a03da5684576c6b4bc74a14791c67c59e6719fdfea8da4a46861fa4471368ae0394c72402a389edc0c67d150ce774dd15706d84fc3
SSDEEP 384:0tNn/s3n9SfsNVLlq/MCHN7vCZU20dbJrY+EDM:0j+9U49oN8UtVhY+EDM
TLSH
T1EB624B32AC749C7B99A3A585F44B37175EF8817B97C13B98E5EC6F0C01DE2AC130A916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 f15848214d7bebc3899d0eac156298ad144b4e7282b7a41ca0cee1444acb7cc7
MD5 c73a827225b7f53aa511a087fe92d4e2
SHA1 7c25f70310bfa2cdfb6599b31eb4fd2727b5ba9b
SHA512 1d2350e262385b3c4af041e74b7697a59098a0d37686d9bce2f86bedd9b5dd648710d2aeb215164d929c56f0ce26ae944ccb97206b1fd8d61942397faf9a5bbf
SSDEEP 384:XtNn/s3n9S4zsNVKlq/MCHN7vCJU20dbJrYYEDM:Xj+9Xv9oNIUtVhYYEDM
TLSH
T19792D5F158E75836D99E9347A33E2E074EBCC12776C02A44B7D86A0CCD8A27FD306916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 a767dd5a9b510881c42ff9cf8cd40159c01dd8a4c7c3597d51127ff9a686bb0c
MD5 35b93fa053155dee87ee8650f3fa20f9
SHA1 5a355618c23cf29c8b40cb636ab093a01e19a119
SHA512 9d35ab259e3fef60f2b3845d36ca98d75aa4307a532a5a0657f99e63241ddc374dadf3d8245e43cb09b316c634638975f81c203a8ce3fdfafea4df7cdeb62147
SSDEEP 384:ktNn/s3n9SfsNVKlq/MCHN7vCZU20dbJrY+EDM:kj+9Uv9oN8UtVhY+EDM
TLSH
T195624B32AC749C6B99A3A585F44B37175EF8817B97C12F98E5EC6F0C01DE2AC130B916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 9KB
SHA256 5664f5e53081a547735d709a8ec18b2f04106661b8b66e5db372c5ba3a6ed6d1
MD5 bcfa5303e8ecc6d6019c3e4d31c2c1d2
SHA1 1f53069230db8d61331c3ffea6ab5d3ca0a84b7d
SHA512 1d1512eedbc488a745773885fe9d660e3feeafc5c8c610013a2ae023a102658c2eb7af58172072b2b171127a4612a44737f32197b55ac38966ed04c5577d0c7a
SSDEEP 192:+ONg6vMfPQmiUyEnihTwz+FdLD1WSJrYQ80IbqvU/u:+ONg6UfRNindbJrYVEU/u
TLSH
T16D120A32AC749C6B6D53B545F08B32175EB4917BDAC4AB54EADC2F1C01DA6AC230B816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 4353b4c2fc3c4395b960112ba66b2f25ee95a6e17e128746999a99cc43304952
MD5 853ad20a7e7c409bd5f17de02fb625be
SHA1 81dee34f0fbe3cb3a7605a130f7bb9566502f090
SHA512 447ec1395f239e3da13640f4b5d8ccab08b91a59260f896c67618517f141517a09693d9e5a82d859f84baee3cda8af79c944e664f88cf24fbce7664b91633393
SSDEEP 192:lONr6vMtPQmiUy1nThTwz+FdLDf847Y6U/u:lONr6UtRiTnd/HU/u
TLSH
T187021A35AC786C6BEAA3AD46F48A37175FA4507FA6D05B50EAE82F1C01D765C1303827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 2de4cb7c010ab6919443e14ab3db0feed428e97a051a8eb6b0097e7bd9d6dbec
MD5 5b687e4cca3fcde27e2cfca3a1b1ff1a
SHA1 f1b8b510e65c2b7dcfa28ec53f2f87cca307e7a6
SHA512 924b59c3d309fbeec2d23ef87a11e3399f899802ce2976293456005fdcf8fba91c3d6741b1721c6a7d5487d18809a53f018bbd8791323a01b5e723febfe52ae5
TLSH
T1DB414C58B6EA1158B3777E5A9FF6B4AE487A79772E06C49E00110D4F0662F00C871737
MD5 SHA1 SHA512 TLSH

Submit Download