hxxp://verisure-cvm-pro[.]deepgenai[.]io?entity=32896852

Resubmissions

14/07/2026, 12:16

260714-pfevaaev3s3

14/07/2026, 08:31

260714-ke4pssby513

Analysis

user interaction
yes
max time kernel
148s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
14/07/2026, 12:16

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://verisure-cvm-pro.deepgenai.io?entity=32896852
Sample260714-pfevaaev3s

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
824	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134285049687582101"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2937465464-4167303362-2236413517-1000\{C4C47EF7-4B99-43C2-953D-CC9020D4EAF2}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2296	msedge.exe
2296	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe

Suspicious use of WriteProcessMemory 33 IoCs

description	pid	Process	procid_target
PID 1800 wrote to memory of 3788	1800	msedge.exe	88
PID 1800 wrote to memory of 824	1800	msedge.exe	89
PID 1800 wrote to memory of 2132	1800	msedge.exe	90
PID 1800 wrote to memory of 1212	1800	msedge.exe	91
PID 1800 wrote to memory of 2132	1800	msedge.exe	90
PID 1800 wrote to memory of 2132	1800	msedge.exe	90
PID 1800 wrote to memory of 1212	1800	msedge.exe	91
PID 1800 wrote to memory of 4924	1800	msedge.exe	92
PID 1800 wrote to memory of 4924	1800	msedge.exe	92
PID 1800 wrote to memory of 4924	1800	msedge.exe	92
PID 1800 wrote to memory of 2260	1800	msedge.exe	93
PID 1800 wrote to memory of 2260	1800	msedge.exe	93
PID 1800 wrote to memory of 2260	1800	msedge.exe	93
PID 1800 wrote to memory of 5032	1800	msedge.exe	95
PID 1800 wrote to memory of 5032	1800	msedge.exe	95
PID 1800 wrote to memory of 868	1800	msedge.exe	96
PID 1800 wrote to memory of 5032	1800	msedge.exe	95
PID 1800 wrote to memory of 868	1800	msedge.exe	96
PID 1800 wrote to memory of 868	1800	msedge.exe	96
PID 1800 wrote to memory of 940	1800	msedge.exe	99
PID 1800 wrote to memory of 3540	1800	msedge.exe	100
PID 1800 wrote to memory of 940	1800	msedge.exe	99
PID 1800 wrote to memory of 3540	1800	msedge.exe	100
PID 1800 wrote to memory of 4652	1800	msedge.exe	102
PID 1800 wrote to memory of 1464	1800	msedge.exe	103
PID 1800 wrote to memory of 1464	1800	msedge.exe	103
PID 1800 wrote to memory of 1464	1800	msedge.exe	103
PID 1800 wrote to memory of 1608	1800	msedge.exe	112
PID 1800 wrote to memory of 4360	1800	msedge.exe	113
PID 1800 wrote to memory of 3748	1800	msedge.exe	114
PID 1800 wrote to memory of 3024	1800	msedge.exe	120
PID 1800 wrote to memory of 3024	1800	msedge.exe	120
PID 1800 wrote to memory of 2296	1800	msedge.exe	123

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://verisure-cvm-pro.deepgenai.io?entity=32896852
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x234,0x23c,0x240,0x238,0x260,0x7ffaf7dbc188,0x7ffaf7dbc194,0x7ffaf7dbc1a0
  2⤵
  PID:3788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1760,i,3448618987124296768,4200077752798517068,524288 --field-trial-handle=2328,i,1314682912620749431,15901912379742781698,262144 --variations-seed-version --mojo-platform-channel-handle=2956 /prefetch:3
  2⤵
  - System Time Discovery
  PID:824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1632,i,1683264640147797594,2577564656205101283,262144 --field-trial-handle=2328,i,1314682912620749431,15901912379742781698,262144 --variations-seed-version --mojo-platform-channel-handle=2324 /prefetch:2
  2⤵
  PID:2132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2340,i,17994937568295481367,5317406313789157419,524288 --field-trial-handle=2328,i,1314682912620749431,15901912379742781698,262144 --variations-seed-version --mojo-platform-channel-handle=2996 /prefetch:8
  2⤵
  PID:1212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3456,i,12807264343842612617,13201209147545250899,2097152 --field-trial-handle=2328,i,1314682912620749431,15901912379742781698,262144 --variations-seed-version --mojo-platform-channel-handle=3532 /prefetch:1
  2⤵
  PID:4924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3460,i,6776152870520091552,6746637369693155613,2097152 --field-trial-handle=2328,i,1314682912620749431,15901912379742781698,262144 --variations-seed-version --mojo-platform-channel-handle=3536 /prefetch:1
  2⤵
  PID:2260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4136,i,5963578069419006149,3057713201529406672,2097152 --field-trial-handle=2328,i,1314682912620749431,15901912379742781698,262144 --variations-seed-version --mojo-platform-channel-handle=4184 /prefetch:1
  2⤵
  PID:5032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4180,i,13642193097510169539,6231799078766330599,2097152 --field-trial-handle=2328,i,1314682912620749431,15901912379742781698,262144 --variations-seed-version --mojo-platform-channel-handle=4208 /prefetch:2
  2⤵
  PID:868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5100,i,188133704659291205,12325277091686334567,524288 --field-trial-handle=2328,i,1314682912620749431,15901912379742781698,262144 --variations-seed-version --mojo-platform-channel-handle=5132 /prefetch:8
  2⤵
  PID:940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5016,i,8831464366450383134,15628891613264027177,524288 --field-trial-handle=2328,i,1314682912620749431,15901912379742781698,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
  2⤵
  PID:3540
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5900,i,13197641820389668013,8054961563322390280,524288 --field-trial-handle=2328,i,1314682912620749431,15901912379742781698,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:8
  2⤵
  PID:5116
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5900,i,13197641820389668013,8054961563322390280,524288 --field-trial-handle=2328,i,1314682912620749431,15901912379742781698,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:8
  2⤵
  PID:4652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=6204,i,11616769824001865974,1750137940622975355,2097152 --field-trial-handle=2328,i,1314682912620749431,15901912379742781698,262144 --variations-seed-version --mojo-platform-channel-handle=6212 /prefetch:1
  2⤵
  PID:1464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4512,i,5276416755905975687,7585152673714183739,524288 --field-trial-handle=2328,i,1314682912620749431,15901912379742781698,262144 --variations-seed-version --mojo-platform-channel-handle=5108 /prefetch:8
  2⤵
  PID:1608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6028,i,7522840522188178070,9205454160592249510,524288 --field-trial-handle=2328,i,1314682912620749431,15901912379742781698,262144 --variations-seed-version --mojo-platform-channel-handle=4260 /prefetch:8
  2⤵
  PID:4360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4180,i,760594405592857469,7789546475058041962,524288 --field-trial-handle=2328,i,1314682912620749431,15901912379742781698,262144 --variations-seed-version --mojo-platform-channel-handle=3712 /prefetch:8
  2⤵
  PID:3748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5248,i,13436524633217153840,10629427476700179887,524288 --field-trial-handle=2328,i,1314682912620749431,15901912379742781698,262144 --variations-seed-version --mojo-platform-channel-handle=5192 /prefetch:8
  2⤵
  PID:3024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=3752,i,1911844535726523029,11924646910509333424,262144 --field-trial-handle=2328,i,1314682912620749431,15901912379742781698,262144 --variations-seed-version --mojo-platform-channel-handle=6056 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2296

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1652

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 994380ffd288a5f1a9acc9eb76a487a55b12cc1daec839d811240f6cbdc4da3a
MD5 f5ed4946834be586ac6410ed88740a7c
SHA1 6108ce368e8b3bb8012956bb25606c3b16835c7b
SHA512 76bf60b37c50422ab125edd3da70629e685408a106655a9b7e5cb6aa7b6a9000c76d8ac2f5dc85e58e893b61bef9b539b9488ac894f1fc1338a58944dc9f4711
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P77:fwUQC5VwBIiElEd2K57P77
TLSH
T1E5B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3eacdfce7dc5d437b4447cf27ab297d2d39d13a22d53487691f060212cddb6b2
MD5 77a76342e47369b91c295856d0d136ad
SHA1 bac334fe99bd25a56aeb5cf09b273fd394730180
SHA512 5594ac61907f341c5e00a7e62a64d33fde684c855aa9b27d0c2756986334fbea5ebaf894d13dfedefe84d1f7ad65aaa17fb6b204714ed08460f06e4ed17ce733
TLSH
T1AAD012223A48F441DB4942709103CF453B26146024579A06E259D86D58B41D453D66C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7aa2bb81937fdcdafd5d33143cfe61093f5233469b36757de171e12cc0c6215f
MD5 6503f091cfa7258a2190ed65490b1bdd
SHA1 d722a7fd3cd82ec30e4846b9511ec1c22b9dacfd
SHA512 5f2a6a53348e4e1b7810b77abe2dd4c597357ba365cf029977f0efbbb203eab9dfb7771c9edb3561b6d22c8b7354c34611905cfbaab36c763b9d3334beb40b4c
TLSH
T1BAD012223A48F441DB4942709102CF453B26146024579A06E259D86D58B51D453D66C2
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 08b1f22db6cbd8ee70e951b6733f4582ff8fab64b2a10e6bc7474b70276edecd
MD5 858247f81d144eeeeb7677f82567c2ff
SHA1 8ba009cf661fb825688fafe9246b4c313bfb63fa
SHA512 e03bd54d74e21d24555bb578cab8b2e1970f47b00ae83a072f53ee947d64e071e1bad5933f9648f3813196787760e13cdcfbb715fbefe337edd960749dcf3d2e
TLSH
T1A6717F59C65D0C91E7601DF9EEF2B27130B284C80993CED5A61049FF670ABE98C6F807
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 04eb1538b2c1e53f6e084a157b42ae6ca6afed6eb72eac1e61c5a5fe54105cd0
MD5 0e14236f549130e024956ff84039de71
SHA1 ebc6199428a03b49fa61600cc625a480485f9154
SHA512 04be04fadea879e4cd565e3061c30e5a3f5d0aa9c54153af5006cec26bc20c6c7b262a1bfbcc23488c21e8e83b12433b2e3dbab5dc1692d2f4386904a06a020a
TLSH
T1BC717159C64A4C91E7601CFAEEF2B23130B254D40953CED5962044FF670ABE94CAF807
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 c12f179ff5dfe3e23681c29c091ad326edffba5a7123ade8c64d17544b998674
MD5 6dbb78fa25d31e79d5e315a59376576e
SHA1 936ccb357b0712f3015ed82d2c97c236167bb9c3
SHA512 22e5787b485eeda2eec269fc5ec11dd2fe558c1da16a0635cb2cd64d8a01fa308730d3a031df93b73541db0f1822ef78878978a2ab0e4b7d3c56b3ba7a435b02
TLSH
T1B1719359C64E0C91E7601CFAEEF2B23130B284D80953CED5952044FF670ABE98CAF807
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58533c.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58533c.TMP
Size 3KB
SHA256 ccc9459472388cfae69ab27bafea802c95c72450c247a93e0541ef59750efb8e
MD5 9cb1cb7457bf3cf2514a7407bce80bc4
SHA1 2a348cc1977712b5056032a0fe8c518044f03570
SHA512 84f6dbe9998b3333c771f73b7a60864bb6e2f68c11fa76675af507cfe163b413ba9bc96eb52b09a455d5640bc91aa0fda8a4d3bbfc705eeb03e84ea248ea8aa6
TLSH
T1AA717E59C6590C91E7601CF9EEF2B27130B284C80993CED5A51449FF670ABE98C6F407
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 e30c622d49b36993244b46700e81134130d23079b39e01b5d629addd13856002
MD5 1f615e172d51fb4d6d50497319be0c89
SHA1 717aedf8ed15381fef4f638c441c683267607cce
SHA512 6ef8f29dcf1f8c335f356cfd2cbf3f827a53ef603f57c5fd701330fe3cf4da10d62b54663d9bfa9c839b6cc8a027c86a067950f5d037aac84ad411a7694aadc5
TLSH
T19041AAF783E5856DDD2116F0AB147E2BCE1D091543283D2A89E4EF8BA3E3471E101A8F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 f55ed02904ece8a38aac486bc23e7b83b1033caa786e87a9a323cada1493e278
MD5 969e12671c1e519d0bcf3cece52cf581
SHA1 53606bd5a43e48955b319f1c1662c9b43ffd3de1
SHA512 b8e98c9f14dd7e249b162b6047285fd5ed8d900d2165890129428c64b85883253ad844bf40d035795d8629bfc42f30b9a6352cdf3f42cdfa452488ce8d886ef6
TLSH
T14341ACF783E5856DCC2116F0AB247E2BCE1D095583283D2A89E5EF8B93E3471E50158F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 ff9c3d321e7510da2326cb633d732f7fce2e235a058423715ea76d3d012d517f
MD5 f4ce264aeb4cc00613e53eb572468a58
SHA1 c24b6b54a0c064914facaf52bff033e2f44bccd4
SHA512 60e7db5e5002114da7ef3b2c96f0804fad1e2d017c108ccc5e3b05b66297650d9a9ffadc5a4a1963c77a77caf8391d4132907f0ea8fc57e9f93526baa6c9df98
SSDEEP 192:sxZSRhyM/jK1Ml8Mkh/fQs/S2yIdpBlUHW6+WNcg3/YL5lEuqIgrJ:sxZSpMh/fQs/S274HbT/d9
TLSH
T14C52E8126A34597BCCDBD609FA45BB53D6F50472A6900D84AAFCCA0C04E6BED2217C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 36bb2fd94fe18129360f70623b89db6a8f864bc26527dce5b6bd879f3612f0c4
MD5 1404b36e21014f3fe3e4dd388571bbaa
SHA1 b26b00a7e3847411972c13882e13f4e38e528731
SHA512 44f474cbd0b38c269ef4ec4c688ad763bd6d8798a5530626783c8196999bf53d69ac48705cc0928dabf1f1ed807396209ba2c3ac8dd9b206e32a407d4974fd28
SSDEEP 192:sxZmRhyM/jK1Ml8Mkh/fQsVS1cIdpBlhHW6+WNc43dYLvjEuqIg5WJ:sxZmLMh/fQsVS1FlHbXdb8
TLSH
T15F52F8126A34597BCCDBD209BA45BF93E6F4446396900E84AAFCCB0C04E6BDD2217C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 facb64b707fb4a7dc098155af71d390618c46dba8af3c8235fdc53de8a927eb2
MD5 af5b167306bc5433a83d91b7dd3939ff
SHA1 8c43154788b08fb46a3aea568ef6e1841be761f1
SHA512 141cc514d77a5919078c41854293aba7585e255cacecdec412c732ccdc03594c6bd3d301ac7932fbce5817f07a3b8a3391121c522fbbbd3ed1011599c0a85f33
SSDEEP 192:sxZmRhyM/jK1Ml8UQUkh/fQsVS1cIdp/lhHW6+WNc43dYLqSsnuqIg5WJ:sxZmLqvh/fQsVS1FDHbXdXV8
TLSH
T19052F9166A34597BCCDBD609B941BB93E6F4447296900E84AAFCCB0C05E6BED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 29c9e02f7e234a598184bda05252bed3a815e30b462db8236b8d7a54b293696b
MD5 918458efad9bd44d6a7fe5a0e4b232b6
SHA1 ad04a1e03d52ab5c137a85c41a5d86ff4ff6e645
SHA512 53c2493a003b443b4156850d778154fc9f7041c83217435c8fc46744a343ea5302264301597bcbafab016ca644cc28569c6dbbd4beae6dbbf9f4fd433712a02e
SSDEEP 768:zLs6pD1WvxzWj8F1+UoAYDCx9Tuqh0VfUC9xbog/OVEILlWwJNFroVU:zLs6pD1WvxzWju1jahILIsN+VU
TLSH
T163D2FA3B680CCB7E4F841E5CEC2A6E966DD801CBAB98899447FA444C03C77EA512759B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 cda42340ef55f518c1586efc0ae324929e789c18e3d51fdf3d3fc881b590066d
MD5 9526d3ab93fdd868a73ebed6f02f7027
SHA1 8eea4d9311a6dd918d58bacb2556961a64df6c5f
SHA512 f0246dbb186373abf82712880e2bc9c5bf768b9e60b2eb7caf9ebf822cc7af00574ad2ca457b05e81428ead16fbbde5d6ab2950eb784d8028eaeb2da0e363cb1
SSDEEP 96:KUAAKtePiwQKFWvC6EKfKuurmKA8DlCpF/fvyBF:iiDqHzp2lCpF/fvYF
TLSH
T1DDC12D02717B0A023D7E1F0CA265872A9B427273301CA92B3BED44754E6AE394DFD5ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe58f121.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe58f121.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 c3364bb3050b13be4f883f9e96f22eba1caad4b4ac393e6e7af0a1bf35fb6c78
MD5 8741c9e82e0bf655a1f50c379729ced3
SHA1 8141285cf3ee01d856ea2edbd475d44e80575b6b
SHA512 0b236803cd9bf1f62afd8e7266084a0bd4912c74572e084487805b675839327885ebed437aae533ca507eb6c638c2d835e26408854ca41b63b8f1c968b2c1f95
SSDEEP 384:SiF1tNn/s3n9StzsNW8TUNTUlIlgawATka99d/VfQfwOObjI9G6w7xUc:ZF1j+9+rwgVttfzQY29Mj
TLSH
T150C24BF248D7497AD9AE4B47F77E2D138EBCC1A7B5852980B3985A0CCC865BFC306815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 b1303e8ea64ab666f16c55acbf5640736b2f370eadb8ea8ef82b8fa0f1145499
MD5 8597fb00ac007a67f22858d915d4ad44
SHA1 0f3febc575730c267f101d153c0078856202d675
SHA512 8559e7d3953ecbcefe8d5f6170751f20ed0bd1659f266e5f790f65178102afa59483f27698c364cd41538b43ce9d7e680929b70fddc443d2482e1b24996464c3
SSDEEP 192:qONt6O7+3hQmiUywsGttb0j+Fd/9UgGf36W8rU6:qONt61MGt99d/9af3t8rU6
TLSH
T1D002C6356C786CB78EB2AD49F58727235FA5117BE9962F81D6E81E0C00D766C2343827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 5a5c3c7649862a68ba18aa4ff10adf1dd49d121377d9b2c590fec9ed10c08c40
MD5 0da946e6d09c8f409e914750ff226207
SHA1 d843d3d0e9d4cf91fc30a63a40f7873147141fa7
SHA512 6b03204a4342dad7c8802b3a19bc17332a28a26b138eb4fdcb1670440fe63bfbc753e3f643c57997f5223cade85e7063c7fa08a038c9a7f4ef18c97b5717cc45
SSDEEP 192:BON36O7+3aQmiUyDskttb0j+Fd/cQzDR8cNfpqUQU6:BON368lkt99d/VfjfwU6
TLSH
T1741219366C685CAB5EE2A585F58336139FB54177EE8A2F80D5EC5F0C00EB96C2306C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c1b61688-3a46-48c8-801e-d1d8739def2f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c1b61688-3a46-48c8-801e-d1d8739def2f.tmp
Size 19KB
SHA256 4bfc415bcc61dfd5b61a12ac542b0a574a100d66d69351a5a2ce5d62704c2664
MD5 3bb1a5de3446bda235ccbb93b2c75359
SHA1 920272f63bc6451c5caad70b4a72760b998498e9
SHA512 b0fc0728918ebf56c151b9a0e76d4760a7cb30daddde6dff8690530280d9c506eb17bfa5210f059b56802e32dad044939e205b817f6899981b092432ec3295fc
SSDEEP 384:DtNn/s3n9SfsNWSawANka99d/VfffwOObjI9G6w7xUc:Dj+9UDjtfzfY29Mj
TLSH
T1CC92AE366C385D778EE39585F58736179FF481BB978A2E84D1ECAF0C01CB9AC1312816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6f9fb6ff-385c-4a9a-a265-4941211009e5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\6f9fb6ff-385c-4a9a-a265-4941211009e5.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

f89b1152-9bdd-41b0-9149-6845063fc522.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\f89b1152-9bdd-41b0-9149-6845063fc522.tmp
Size 19KB
SHA256 892f40d62ea8f693f27e6e929eb91af98c71c96901a3cb201b62445c4b138a52
MD5 0d8df90b7cdb245d9405d994cf3fdf3a
SHA1 159982b7128e9f8f49132f8763339b8f887d2510
SHA512 95c3e23c37605cabc1f5426c3ccb4c0b4986723f0ed53a325eed4f02dc4ae0a2edd2c3f48a062baa47f3c0e6e1e5d38fa9c23037cceb881a947091757f66a75b
SSDEEP 384:+tNn/s3n9SfsNWgawANka99d/VfffwOObjI9G6w7xUc:+j+9UZjtfzfY29Mj
TLSH
T17F929E366C385D778EE39595F68736279FF441BB978A2E84D1ECAF0C01CB9AC1312816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 ad8a3ac5f896af8b28deb5101e66ec5fc4fafffd53eb9b99ee128611bd92654d
MD5 5f1c23dbcf99aa5a3deab0b968c6c682
SHA1 b25077087a879ac712759245176bc14f71e2ab20
SHA512 35ea57aa31b3026a7f25841ebd2a6729fc55c2b2c5341fab9e2641479978da6ed1c2c2ec25444ca98d19fefae70961f326baa378be55bf593a37e0f3a1d9c053
TLSH
T12741375CA6F91048B3B37E5AABF2A86E487FB9272E47945D00010D8F0762E40C862B37
MD5 SHA1 SHA512 TLSH

Submit Download