hxxps://status[.]giljo[.]ai/

Analysis

user interaction
yes
max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/07/2026, 00:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://status.giljo.ai/
Sample260702-ar1tkagy2q

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1012	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134274256607961210"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-889581200-2041691093-2048517887-1000\{071D06DC-CEC4-40D9-A539-79DA9ABBD554}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3252	msedge.exe
3252	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 1680 wrote to memory of 1500	1680	msedge.exe	85
PID 1680 wrote to memory of 1012	1680	msedge.exe	86
PID 1680 wrote to memory of 1056	1680	msedge.exe	87
PID 1680 wrote to memory of 1056	1680	msedge.exe	87
PID 1680 wrote to memory of 1056	1680	msedge.exe	87
PID 1680 wrote to memory of 692	1680	msedge.exe	89
PID 1680 wrote to memory of 692	1680	msedge.exe	89
PID 1680 wrote to memory of 2164	1680	msedge.exe	90
PID 1680 wrote to memory of 2164	1680	msedge.exe	90
PID 1680 wrote to memory of 2164	1680	msedge.exe	90
PID 1680 wrote to memory of 4624	1680	msedge.exe	91
PID 1680 wrote to memory of 4624	1680	msedge.exe	91
PID 1680 wrote to memory of 4624	1680	msedge.exe	91
PID 1680 wrote to memory of 4476	1680	msedge.exe	92
PID 1680 wrote to memory of 4476	1680	msedge.exe	92
PID 1680 wrote to memory of 4476	1680	msedge.exe	92
PID 1680 wrote to memory of 5060	1680	msedge.exe	93
PID 1680 wrote to memory of 5060	1680	msedge.exe	93
PID 1680 wrote to memory of 5060	1680	msedge.exe	93
PID 1680 wrote to memory of 3644	1680	msedge.exe	100
PID 1680 wrote to memory of 4116	1680	msedge.exe	101
PID 1680 wrote to memory of 3644	1680	msedge.exe	100
PID 1680 wrote to memory of 4116	1680	msedge.exe	101
PID 1680 wrote to memory of 2708	1680	msedge.exe	103
PID 1680 wrote to memory of 1028	1680	msedge.exe	118
PID 1680 wrote to memory of 4732	1680	msedge.exe	119
PID 1680 wrote to memory of 4008	1680	msedge.exe	120
PID 1680 wrote to memory of 1576	1680	msedge.exe	123
PID 1680 wrote to memory of 1576	1680	msedge.exe	123
PID 1680 wrote to memory of 3252	1680	msedge.exe	129

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://status.giljo.ai/
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ff8e5c1c188,0x7ff8e5c1c194,0x7ff8e5c1c1a0
  2⤵
  PID:1500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1976,i,6039978778424313227,1236381528737610648,524288 --field-trial-handle=2300,i,8454854927358564967,12478588057845532071,262144 --variations-seed-version --mojo-platform-channel-handle=2336 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1764,i,2724716167958133671,4475107457705537461,262144 --field-trial-handle=2300,i,8454854927358564967,12478588057845532071,262144 --variations-seed-version --mojo-platform-channel-handle=2296 /prefetch:2
  2⤵
  PID:1056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2584,i,5542746708231098810,2885855627527036653,524288 --field-trial-handle=2300,i,8454854927358564967,12478588057845532071,262144 --variations-seed-version --mojo-platform-channel-handle=2248 /prefetch:8
  2⤵
  PID:692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3448,i,15575763834381171927,16872273264577660234,2097152 --field-trial-handle=2300,i,8454854927358564967,12478588057845532071,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:1
  2⤵
  PID:2164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3472,i,1990142705994236050,5953360403003240527,2097152 --field-trial-handle=2300,i,8454854927358564967,12478588057845532071,262144 --variations-seed-version --mojo-platform-channel-handle=3572 /prefetch:1
  2⤵
  PID:4624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4196,i,5093024705379624055,13884483591712628888,2097152 --field-trial-handle=2300,i,8454854927358564967,12478588057845532071,262144 --variations-seed-version --mojo-platform-channel-handle=4232 /prefetch:1
  2⤵
  PID:4476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4228,i,322313094036170817,3879045291553479118,2097152 --field-trial-handle=2300,i,8454854927358564967,12478588057845532071,262144 --variations-seed-version --mojo-platform-channel-handle=4256 /prefetch:2
  2⤵
  PID:5060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3652,i,901897228330193521,619450068798873987,524288 --field-trial-handle=2300,i,8454854927358564967,12478588057845532071,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:8
  2⤵
  PID:3644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4940,i,993042868070463769,6540705011207159907,524288 --field-trial-handle=2300,i,8454854927358564967,12478588057845532071,262144 --variations-seed-version --mojo-platform-channel-handle=5220 /prefetch:8
  2⤵
  PID:4116
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,6903880111155647677,14145724099755559230,524288 --field-trial-handle=2300,i,8454854927358564967,12478588057845532071,262144 --variations-seed-version --mojo-platform-channel-handle=5920 /prefetch:8
  2⤵
  PID:3048
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,6903880111155647677,14145724099755559230,524288 --field-trial-handle=2300,i,8454854927358564967,12478588057845532071,262144 --variations-seed-version --mojo-platform-channel-handle=5920 /prefetch:8
  2⤵
  PID:2708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3644,i,13154632812601748399,1831683715484511877,524288 --field-trial-handle=2300,i,8454854927358564967,12478588057845532071,262144 --variations-seed-version --mojo-platform-channel-handle=4308 /prefetch:8
  2⤵
  PID:1028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5956,i,14276751770725039549,6184459027427953911,524288 --field-trial-handle=2300,i,8454854927358564967,12478588057845532071,262144 --variations-seed-version --mojo-platform-channel-handle=4236 /prefetch:8
  2⤵
  PID:4732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5936,i,81932950699820565,9420467336862550606,524288 --field-trial-handle=2300,i,8454854927358564967,12478588057845532071,262144 --variations-seed-version --mojo-platform-channel-handle=6368 /prefetch:8
  2⤵
  PID:4008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2928,i,7884390103308845867,7938809728563585995,524288 --field-trial-handle=2300,i,8454854927358564967,12478588057845532071,262144 --variations-seed-version --mojo-platform-channel-handle=5424 /prefetch:8
  2⤵
  PID:1576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5188,i,10987846852924071847,17493493258530484310,262144 --field-trial-handle=2300,i,8454854927358564967,12478588057845532071,262144 --variations-seed-version --mojo-platform-channel-handle=6136 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3252

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2912

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 11d3c4c52f9fc9cd2b10a22b48769759f994fd6364f9a0fc145f4cd2c2a22e9d
MD5 4751cf705a737c4226029624bf43b9a8
SHA1 fd8cf726ee3f8f75b97147829de5553530caa82c
SHA512 46e3fedbf7fa14bdc2b3aad129f2879a9d24252f5d7bd9b55766bc32a6b82ea77aaf193bcdbdf4423e3b67ef84955e589b6077609344091ef72204c1d50b0dab
TLSH
T17ED09B307A58A58BD14360F1A4114B4115375557205397757521508E9E98055B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 701082e4ac35f878dc5ff6eb27989aae9d20d9b5662643e20b3acd1720b367fc
MD5 2b3686986ce1fd99f079eb226e8b0a8b
SHA1 0d2cdee36351378b91ed7f6ecdb43457fe4d7b5d
SHA512 937da61c495fd21a02bb76a63556dec83ce132f1d1830ff8d9af6212d15f1844766dd4abadd15ea61b48f8ae03b52baca44c99117714c705da840dbff8f116dd
TLSH
T182D09B303A58A98BD54360F1A4104B41153755572053D7757521508E9E99095B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 1babb3cd822e806703d68b463028e217f310b33cdbd6a48109d4801b827a2d18
MD5 5cfc6358f3719273f9b0ecd678625937
SHA1 bc1d03f7c2db671bfad97788990d92bb953004f2
SHA512 8ba64c4d6db8bdfbdf7d8c852b71ddb98458ef749be6a8e767823d9495c7a83f514e2e779a6efb06dbac0c73c6e3ba73802b02e26c6e97b0cad35716161e3397
TLSH
T17761E834022146F5D3EA123294D30E8C75B586F6F9077E0B69D4DCF7E7A5F520029946
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58acb6.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58acb6.TMP
Size 3KB
SHA256 6f5f14dc23a0c2ded96b17ba63f42779e24cf828aa003591c3d7e35aedd02a4d
MD5 030f9c9f3a3cf08beb68a3a9029d649f
SHA1 3a31490e205402966268d66faa3e6c228af89be8
SHA512 0a3264e180175f57e6aed654fcb1703ba824d5cb7f289f5a8dc26e47600e56a9e339641bc4c67de04de03e4aeaf98c8cbd40a727051aee5bea502088987712ed
TLSH
T1C461E835022186F5D3EA113298D30E8C75B586F6F8077E0B69D4DDF7E7A5F520029946
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 4b133186acf16f1ff9962a586c8c832c6122a4ba83260f2b8662a39082c1e869
MD5 11130c31ea1f5774ac5c8c6ecd2414ff
SHA1 22273adeca5ab570c6610da04b81cbae9f208591
SHA512 eca8a1f3a641a5544e7d8842d89d6b3c234516594ccf3aa94f98a15a2edef28dfef32ab0fed4c21b60c511b0b6b758fa04d97f7a743dad8fd493765bc7bd2912
TLSH
T1414199B7C3E4856E8D5156F0AA246E2BCE2D0955832C3C2AC5E4EF9B93E24B1E14194F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 ee71099d6413719799ab8c6239878ce2fb310e9639b057048d93ed6ed0ab0dab
MD5 7384c9c80a94996b2bad720b4c1bc4f2
SHA1 a24e1d5e126da3661edfa7235281de56f960f11a
SHA512 3b62314961d67dc24a2376da853a38069c994cd8d6a4a8be53d274c091290ab9d8b5e89fe50c220448acb843e7018124d5dae63d59b861e6d16bcc90857934ca
SSDEEP 192:sxZEPRyyM/jK1Ml8UQZkE/fes+Sb1gIdpQaHW6+WN5zXc/Y9IVPEPIg5lJ:sxZEPEqaE/fes+eDbHb5g/kN
TLSH
T16C52D7126A349977CCDBD209FA55BB53D6F44572D2A00E48AAFCCA0C05E7BED220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 2adcdefe992000426824d0772f818491badfc2a4af83532542bc946880360687
MD5 5ff705625a74b5f99b3b5eb3a6a9afd0
SHA1 d07ba6c0ad7e8131d8f01ced799beb595cfc252e
SHA512 2cd67c411cdee9e7e54ffd3e1a7ce96a0ed98fabd09cfe88827bc4fa3ed56cfaeeb05d5c3dcc6cd06ae6a10513c013ca268b500746a75170e9815f8607a04fc0
SSDEEP 192:sxZEPRyyM/jK1Ml8MkE/fes0SZ1gIdpGaHW6+WN5zXc/Y9IjkEPIgrJ:sxZEPEME/fes0gDlHb5g/H9
TLSH
T17752E8126A349977CCDBD209FA55BB53D6F50572D2A00E489AFCCA0C05E7AED220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 bfda06041f0c141e6bdd4a61e7a49dcd961233340698e89ae6bc589db2a3797c
MD5 a9437b0f4c7964e2c8c04784d8456e3a
SHA1 d0fcd979183909d24cab7cf5bedf93a5aef3461e
SHA512 c4cd64e883d6823f6f884421601558509cd0a69748aab518c9cc7a765a466232c1c974bb84d72edbd6fceb968d2c194b4d2f666ce0d1778452a01bc00e8c7786
SSDEEP 768:Ipcv21wWvu+Z+8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjFLlwmWNHro0g66:Ipcv21wWvu+Z+u1jaeFLeRNU0K
TLSH
T166D20B2B280CCB7E4F841E9CED2A6F8A6DD801CB57988D5447FA894C03C77EB511B59B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe594a7c.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe594a7c.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 13d2ed5aeb3b20c75bc1c6e75162ca5ceb758472fe8e16860235fded5cd004a7
MD5 52268bdde676984caf5b8dad8b869624
SHA1 4f751d0e4298a03fca5ab8afa103d3cea3b20e83
SHA512 4b0bba5e7f19e288ff1ad4445c4bbef6c0e0cadd0b626d3e7af79f39bb75e8f71c7e7a5550137432a25d48d2584f0b7a183fec193ed571f0827fc2174a86f0c6
SSDEEP 384:siF1tNn/s3n9SSzsNg8TUNTUlIlC/6VzibL4e+C6BRuxMrJrZ/IbKl8BhBTPLBlp:XF1j+9RRwgLILi4MrhhyKl8BvTPaC
TLSH
T1FFC229F258D7487AD9AE5B47E73E2D074EBCC163B5812A50B3985A0CCC9B1BFD306914
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 79c6a90af3d2c3f180aba879fbe36f0ed733e1f7bfa4df0cc9c995fc18bebafc
MD5 ceddd8dd798b8371961ead00d324c82d
SHA1 15982142bca323ad449b4fa63ef2329188785ffb
SHA512 438105ce24032519d79ae4b177c0e14ab9a39b06cdf96c5c7dad94294ead9537370938c343499ab73f3a362b194f5554ec719354e02058e7968d2df790cd596e
SSDEEP 384:btNn/s3n9SfsNgC/6Vzibq4e+C6BRuxMrJrZaIbKl8BhBTPLBliC:bj+9UxtLi4MrhIyKl8BvTPaC
TLSH
T1DA927E36AC640D6B4EE29A48F507361B5FF88177E6852F9095EC7F0C05DF29C630AD29
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 254b6296f710f03791f9c99db947a2ecd27bd2d96106e6bee8387bad20654bfa
MD5 ef79877bd59ae201f7e2f3153612a7f1
SHA1 977aded14271af79b4136a3a20546e0032b4e0f4
SHA512 28a27b93cc049b95c4e647be43f1ecee916adf16f02839241dc35be7d4e9c485a58f47efed497ea3a81862238e11795ef309d2c74a4d3f8352b416829f383232
SSDEEP 192:JONx6v+YLNQmiUyyrZh+CG66BMAuxYusGlU6:JONx6vz/3Zh+C6BRuxuOU6
TLSH
T1DC02E93AAC681C7B9FF2AE05F58726275FE81177E6962F80D9E81E1D01D764C2306826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 b69db581c01d7ca2f8f10e77eec255638cae37ccda3d093761a8546a3beeab5e
MD5 2f0571b655e4ec76b073da2a7981be23
SHA1 68648f1d952744ed3ea87490fa27fcddd27312b1
SHA512 5023cfe1133ac96787fbc057d96e49f7ea1459def25fd9575f4156c1b4cd72c083a20020de946dcca12f3e113ddc8661bcb3868d6c0ff4c5481b7bf493d6fde6
SSDEEP 384:5tNn/s3n9SfsNgp/6Vzibq4e+C6BRuxMrJrZaIbKl8BhBTPLBliC:5j+9UitLi4MrhIyKl8BvTPaC
TLSH
T14D928E36AC640D6B4EE29A48F507361B5FF88177E6852FA095EC7F0C05DF29C630AD29
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 6f725c7b5caf5b2a2ff2e7ba58bf9f413566588efad6d12ed86073284006635b
MD5 b1128de8028f40108e022b3e37805d01
SHA1 9538d12fb25c1d76a84f821aaae72ef7c5bb6b2b
SHA512 162df73b23562db99d47b1e8ba9810a58ce783cf91190f58c9c965335a78424906314a31e8d472ab479c796b0330640a1cddb685f2bcdc85d549e339e860d8de
SSDEEP 192:GONB6v+YLDQmiUyUrIh+CG66BMAuxMcSJrZUCHIhq+U6:GONB6vzZXIh+C6BRuxMrJrZNIbU6
TLSH
T11C120A36B8645C7B5EE2A944F48735176FF94127EA8A3F90D5EC2F1C02DF65C230A816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

53aea706-fa08-4e55-a797-ae283da23ab6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\53aea706-fa08-4e55-a797-ae283da23ab6.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 c04911300ba0a093472d0b9559ffcf4f4d069f1d6dc080a83a44b6a6ecd8ec20
MD5 be5789d27c9760fcf301598c3ae462cc
SHA1 b9cc42dce98de7a38df68a1b05e31489b9d6edd9
SHA512 daa9ffcd7fc201bbac39ccbd3691f5376c8a9cc1a158ff6efb88ea548df67bc5c6ae333bf5e5a26c6ce3757b7788bbf4bc2abf6b9df7702bcee44a0ec5347259
TLSH
T19241F9A9A6ED1108B3B76E5AABF6685D447BB9722F06945D00110E4F0A26F408872B37
MD5 SHA1 SHA512 TLSH

Submit Download