9736bbeaffcff299cf099342cb9ad154f7cddf40eaadf6e3ee6af671a14fb46a

Analysis

max time kernel
149s
max time network
157s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
14/07/2026, 18:35

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
newsite/aj+carchitects.html
Size 7KB
Sample260714-w8l8dsbs3q
SHA256 9736bbeaffcff299cf099342cb9ad154f7cddf40eaadf6e3ee6af671a14fb46a
MD5 9be5858631d96d03ecd50819a49f1912
SHA1 47512699ddd12e9221f5be5b5b60a6735e1d7db6
SHA512 c0a6b67d1e84dd80cb90f6c0cd16e146ed6ceafb55aeb89d2fa2f0b16375b2ed1de905a76cbda7765e190d626a99b40f254dc85a1e39710e9f04de0baa99b0fa
SSDEEP 96:k2mSxeZQQYju1mFeDhE8AhkmcS4YhL3hLsSQNHK3J:k2mSxeZTYju1tDhE5hk+4u3hdQVgJ
TLSH
T118F1106559C0503302B381896EA27BAEFEA28187D70B8A4571EC2BCF5FF3E06CD13455
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4732	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134285277711816242"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-876885714-46325919-1482798410-1000\{8FAEF2D8-9054-4330-AD7A-C21CCE081F8A}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1144	msedge.exe
1144	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3908 wrote to memory of 2600	3908	msedge.exe	85
PID 3908 wrote to memory of 4732	3908	msedge.exe	86
PID 3908 wrote to memory of 5100	3908	msedge.exe	88
PID 3908 wrote to memory of 4304	3908	msedge.exe	87
PID 3908 wrote to memory of 5100	3908	msedge.exe	88
PID 3908 wrote to memory of 4304	3908	msedge.exe	87
PID 3908 wrote to memory of 4304	3908	msedge.exe	87
PID 3908 wrote to memory of 2440	3908	msedge.exe	90
PID 3908 wrote to memory of 3348	3908	msedge.exe	89
PID 3908 wrote to memory of 2440	3908	msedge.exe	90
PID 3908 wrote to memory of 2440	3908	msedge.exe	90
PID 3908 wrote to memory of 3348	3908	msedge.exe	89
PID 3908 wrote to memory of 3348	3908	msedge.exe	89
PID 3908 wrote to memory of 2292	3908	msedge.exe	91
PID 3908 wrote to memory of 2292	3908	msedge.exe	91
PID 3908 wrote to memory of 2292	3908	msedge.exe	91
PID 3908 wrote to memory of 5004	3908	msedge.exe	92
PID 3908 wrote to memory of 5004	3908	msedge.exe	92
PID 3908 wrote to memory of 5004	3908	msedge.exe	92
PID 3908 wrote to memory of 3156	3908	msedge.exe	97
PID 3908 wrote to memory of 3156	3908	msedge.exe	97
PID 3908 wrote to memory of 1028	3908	msedge.exe	98
PID 3908 wrote to memory of 1028	3908	msedge.exe	98
PID 3908 wrote to memory of 4780	3908	msedge.exe	100
PID 3908 wrote to memory of 1100	3908	msedge.exe	109
PID 3908 wrote to memory of 4060	3908	msedge.exe	110
PID 3908 wrote to memory of 2508	3908	msedge.exe	111
PID 3908 wrote to memory of 1716	3908	msedge.exe	112
PID 3908 wrote to memory of 1716	3908	msedge.exe	112
PID 3908 wrote to memory of 1144	3908	msedge.exe	115

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\newsite\aj+carchitects.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x27c,0x7ff88f74c188,0x7ff88f74c194,0x7ff88f74c1a0
  2⤵
  PID:2600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=1900,i,12984019141377835354,13572205903657685409,524288 --field-trial-handle=2236,i,6951875044007872167,13986559509404671025,262144 --variations-seed-version --mojo-platform-channel-handle=2272 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --subproc-heap-profiling --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1684,i,13765488146667042330,12512414350412596247,262144 --field-trial-handle=2236,i,6951875044007872167,13986559509404671025,262144 --variations-seed-version --mojo-platform-channel-handle=2232 /prefetch:2
  2⤵
  PID:4304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=1868,i,16033028170490855736,18312374461635052110,524288 --field-trial-handle=2236,i,6951875044007872167,13986559509404671025,262144 --variations-seed-version --mojo-platform-channel-handle=2464 /prefetch:8
  2⤵
  PID:5100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --subproc-heap-profiling --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3464,i,2353855233642574740,16486728427551012971,2097152 --field-trial-handle=2236,i,6951875044007872167,13986559509404671025,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:3348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --subproc-heap-profiling --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3468,i,6049901283794758803,12873712684746771816,2097152 --field-trial-handle=2236,i,6951875044007872167,13986559509404671025,262144 --variations-seed-version --mojo-platform-channel-handle=3544 /prefetch:1
  2⤵
  PID:2440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --subproc-heap-profiling --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4216,i,17761718317732785711,11098537655086445372,2097152 --field-trial-handle=2236,i,6951875044007872167,13986559509404671025,262144 --variations-seed-version --mojo-platform-channel-handle=4236 /prefetch:1
  2⤵
  PID:2292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4260,i,1713358554510671619,11874062065891197306,2097152 --field-trial-handle=2236,i,6951875044007872167,13986559509404671025,262144 --variations-seed-version --mojo-platform-channel-handle=3456 /prefetch:2
  2⤵
  PID:5004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=5128,i,15842227827889975191,11281030371387389664,524288 --field-trial-handle=2236,i,6951875044007872167,13986559509404671025,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  PID:3156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=5136,i,9611300211299183576,14761302580639942577,524288 --field-trial-handle=2236,i,6951875044007872167,13986559509404671025,262144 --variations-seed-version --mojo-platform-channel-handle=4900 /prefetch:8
  2⤵
  PID:1028
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=5916,i,9918139220725671099,7561557518623706019,524288 --field-trial-handle=2236,i,6951875044007872167,13986559509404671025,262144 --variations-seed-version --mojo-platform-channel-handle=5932 /prefetch:8
  2⤵
  PID:2132
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=5916,i,9918139220725671099,7561557518623706019,524288 --field-trial-handle=2236,i,6951875044007872167,13986559509404671025,262144 --variations-seed-version --mojo-platform-channel-handle=5932 /prefetch:8
  2⤵
  PID:4780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=4796,i,3657548499645019315,10226540955015429971,524288 --field-trial-handle=2236,i,6951875044007872167,13986559509404671025,262144 --variations-seed-version --mojo-platform-channel-handle=4824 /prefetch:8
  2⤵
  PID:1100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=4800,i,2005824762326359255,10576353845989962852,524288 --field-trial-handle=2236,i,6951875044007872167,13986559509404671025,262144 --variations-seed-version --mojo-platform-channel-handle=5984 /prefetch:8
  2⤵
  PID:4060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=4784,i,157372064990655113,6589648795191818227,524288 --field-trial-handle=2236,i,6951875044007872167,13986559509404671025,262144 --variations-seed-version --mojo-platform-channel-handle=6272 /prefetch:8
  2⤵
  PID:2508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=5300,i,17460081583512960611,1929214184966171952,524288 --field-trial-handle=2236,i,6951875044007872167,13986559509404671025,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  PID:1716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --subproc-heap-profiling --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5752,i,7087500853734519801,11206360974337873393,262144 --field-trial-handle=2236,i,6951875044007872167,13986559509404671025,262144 --variations-seed-version --mojo-platform-channel-handle=6196 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1144

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4400

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 9420686d12b2cba6dc69896d607eadac629280a010e5358a4872ab9753f24ed7
MD5 8be6e81804d8b903ae07c11b2e53e3d9
SHA1 817c41cb00b05a8f2040323b93c6416b92dbc01b
SHA512 c2cfff48ebb312975aa2615d841d0badff185589ad3a3f5e8420c2ea0eb5dc0e5354d917cc43d57bec169a63d4fa21d66e91dc3e195592ece23d37fff7c04680
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7R:fwUQC5VwBIiElEd2K57P7R
TLSH
T1CDB3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 6de34b260036ecaa4ce5839bc4a7ff7495e50b7b94349b12d9f840ca0e76da3b
MD5 56d82099872fb501c566d072ae897035
SHA1 2c96501551fc13c09496780960d8e7ccb4957b77
SHA512 c4b4017256caf25e88f146e6104134cddfd15089203e8e74c5196627fc92897f9fe7e3fc5c8305032be88e9409cdbc5dfe1e81017fcd5e38b3579b3d823b4a41
TLSH
T160D0C073378C7C00EA090170D013C3031FA7855824C39F03B100C01C54B43D9738B093
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f5dece638cd89af82b06bd2fcb3d1738eef64d2275be237184ea8bff7af3fdfa
MD5 f19ec2293392af872f10929c41627e26
SHA1 0576f5277c470f5bb8c3f4d3786ca8d967d0a33e
SHA512 4cc85dc71d34bb516f8fe45b565a6a9b4cda255a931f33289247ed84150baf0e2df40fc87109df41771553b92545ed858197cdd3d673694c83458cf9812aa9dd
TLSH
T16CD02272268C6C00EA090170D01383021EA6855824839B03A100C01C44A52D9728A093
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 19ea2cba5ce0e71e26964be40d062ebc38669ea898995e728ae38c7a6ef840d6
MD5 185be4ca10735c8302d52f60650b9511
SHA1 de45bfbc6ed3df8fd086ada6bc97d6537d81546f
SHA512 5f5dd3ed2657111cf792c5dd808c419fec87829ba9e7eca6a66e4d0e66e48b619202ae3d949f2cc550c06a6a7ed22ba45ee95cba5b2d8ca78ba32ac99a9a41fd
TLSH
T168613B3401A113A1D3900572D0E36E0139738DD94EA7CF2E527FA7FDE635BA28C2E458
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58a0fe.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58a0fe.TMP
Size 3KB
SHA256 dc8bac5f51cb72de712d4ffe3cfac02b1385e42101602cee19614d4ee15ac3b9
MD5 d207283637a691d8e2e204357ae7e497
SHA1 bfff366537ca778ba2e51e1e3c3227ce83ac8f3a
SHA512 87cdb6aaf9a71cac08a407e10ba38cec8931bb82c9d675c2e9c9bce185735a43ef6cbc659ef72b17ee9cefb0d1346740f3c68686a0d2ee1d321681a73d6c8446
TLSH
T153613B3402A113A1D3500572D0E36E0539738DD94EA7CF2E527F97FDE635BA24C6E048
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 5f37a69648206d1126fcfdbf4a59f28650bdf648b27c80bad84db5527dbd45ea
MD5 14086ccdb8e0c6670e2e702aeb461b57
SHA1 8f77cc82b88c22424ffe26b0fd66035c728a0005
SHA512 f7c5eeca546a5ce9472f1abb4e37821e53bbc019babe3c2650e1bc6a4655455b199105c2ac6a295a99c368046aa03f64d5fec36da0836fd2d229f5408361289a
TLSH
T13E217DF7C3E5866E9A0156F06A24AE1BCE2D0506432C7C5989E4FF1B93F3475E10159F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 49533be638da1cde9cfb761c99278322b8f66338fcc574cbc80321d91c4b7372
MD5 9acc232ee3dcc712849c47e1646bfc20
SHA1 7fde22b344c87f9823327e176bf89569bbc9034c
SHA512 f752228adb463df2a566769e2922059cbc8e9dfb73c45ba89dbff80b7b40b7b1c085ea71d5cc56fbdc686c543893b3a3d7ed0a7f108a62273ce34f650cdfc4da
SSDEEP 192:sxZ3R5yM/jK1Ml8MkA/fxsgWXIdpd3HW6+WNGYwKalPIgrJ:sxZ3vMA/fxsgW4FHbGN9
TLSH
T14442E9116B34997BCCDBD209FA417F43D6F5443292940E44AAFCCA0C09EABED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 54db85de8b19de733ffb393991143384636e306130175b00cc188d17b55c8e47
MD5 8f345a6af03ee7ae37376e917161a99d
SHA1 16547ab6180211f7451b831da435e2ce247038a4
SHA512 be5699aea7a52dee6090a7d44a12add7666c4252d48f7941c16b010481655739cbbc0a6f40f14eea39bad55d61b23c5e7e634ab04c0e5be9ba670ed864f2169a
SSDEEP 192:sxZ3R5yM/jK1Ml8UQmkA/fxs8iXIdpH3HW6+WNGYwmPuPIg5YJ:sxZ3vqNA/fxs8i4XHbG3a
TLSH
T1DC52F9126A34997BDCDBD209FA417F93D6F5447292940E44AAFCCA0C09FABDD221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 38712e30973fbb24b9cc5c1d60e5a457c6e295cba5839214dd8bc9e9d2f930a9
MD5 a00245f06492aacaa79726d27aa34a27
SHA1 286608e59da1ff6eef38d1eaa1c64fbc90970837
SHA512 bbca6645498d9de4005c42dae589ca74211ad1480331606f8b0c60d3e8088ebc3252bf2b9893d5828386f052d3bc9c0ae90f10c843020017ec0661ed291b7a7b
SSDEEP 768:3M4jeXmWvmKLE8F1+UoAYDCx9Tuqh0VfUC9xbog/OVhPLlrZ+dMrohjcJar:3M4jeXmWvmKLEu1jacPLZQdXyi
TLSH
T1F3D2F93B280CCB7E4F844E5CED26AE976ED801CB6A584D5447FA494C03CB7EB512B49B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 b845b811bf61af9251305044df681b4104880f426f3b28f5a7c09e98297c7c89
MD5 d02839d2921dff45f25dc81a0506a6ea
SHA1 7dcbc9972633501b0dc80f50f38f882834396214
SHA512 2409a4b90808d4022defc95ae17fbf9ff8480b7e67005ce7d6e3e3476b22559394db55a9b7ca8221730d170d03cb1f8a193b30e766e4753d77e808af177e5e8b
SSDEEP 48:KAJIdKawQvy1bI1KYcgn/CFJn5FzSVgCIthzKMqEjzYPjToNFQyk:KAJWKaw62bGKYcTQ4Kh+Wz
TLSH
T11A91031130BB16923EBE250C93949B564781B163721DA52B3FEA44714F2BE270CFE8DE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0a7b51eb-fbee-40af-b764-6d8bea993ce9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\0a7b51eb-fbee-40af-b764-6d8bea993ce9.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 31b60644ff3866c1382f392f7a741822675d9b6a3487a7cf553bfa9f82f3c642
MD5 b29bcfb2a990173caf4e287968880bd8
SHA1 b35f952a40a51322223a8e8fbd52a05acb66c5bf
SHA512 d4cf0bd2aabb2ec5be526ca7fd017fedea7024a229481f99fb57d2ae60e5aeaf6ace23209dd2b86ee90bcee09a77b10c3ba9ad04c096800183bb4b7ab262164a
SSDEEP 384:ytNn/s3n9SfsNKwuq6z5Gf+DO5YShxJrCFeOObjI9G6w7nw:yj+9U1WWONThUe29Mw
TLSH
T109928D3258689D338DE29A95F4873A679FF8816B96C53F88E6DC7F0C04DF6AC0316815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 084dd83dc33589a7c0ed9d1a6a6039688bd1d305a3ce897695ea354d178908df
MD5 c4d37c9c7718833305b110c184f34d25
SHA1 8280b3b38154833caa2dcda365d0e4086eb04b49
SHA512 36e78ae396fd2847bb9414aa8f682ee3cb5acf472b0ecefe759d9edd23d85c6d0b3d11ba18fe689bc36d3a82dba9640d76c5743abf58a5d6952041bbac6c1f5a
SSDEEP 384:XiF1tNn/s3n9SlzsNS8TUNTUlIltuq6z5Gf+DO5YShxJrGFeOObjI9G6w7nw:SF1j+9aDwg8WWONTh4e29Mw
TLSH
T1F1A25B335858CD3B9DE29F95F54B36278EF441ABC685AE88E6DC6F0C04DB1AC0346C14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 f022a5c8387e1ad98be8e0d8afadf92804a4225bbb78c4abe8f12c4976acf14f
MD5 35e9d144c217ff5d883d3cbae9cd003c
SHA1 f2a113fd9c5639af0ba3445b4b1cbe318b78f96e
SHA512 d77bf5761120b63d6ff9439196dc0084c972bd1e16a8b39525c7b73fb269309c5bae11f8616b2b4bb29e2bee21a4cc87b4e2bba3bdd48cd1f0af9aa4f188aef1
SSDEEP 192:EONt6hZ0QmiUyi0pc/+jVlO1TY55wOZOnU6:EONt6oapu+DO5YA2sU6
TLSH
T1B602F9356C786CB78EE2AE45F48777235FE4112BE9956F84E6E82B1D00C779C2306836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 7691ff8a375fd461b69d6d73851ce0949d0b2c5403f4c39e02cd0f159b7e5b31
MD5 6fec854dcd5b90c8ebe75bbd5ebaa94b
SHA1 da79d107d247dbd0a424ff0f00ad7c5cf223bc75
SHA512 c9cac13dfa2ce8c6cb5dc77c9824673fc2cbe5346b8eb2348ed9871936bb38eed092d2e22c34ea190364bfa0837bca14ee3c378061c74eb4245abfe0eff1d57e
SSDEEP 384:xtNn/s3n9SfsNKtuq6z5Gf+DO5YShxJrCFeOObjI9G6w7nw:xj+9UYWWONThUe29Mw
TLSH
T1E1928D3258289D338DE29A95F48736679FF8816B96C53F88E6DC7F0D04DF6AC0316815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 fb2c01b5a24238e4675bb5f475024ec0b34197a0dd8ccfac93936ead48ae8bf3
MD5 3133ed5f2e533f4aed671dd7f75391ef
SHA1 c8e5897a020856016dcb9bcc59e964dd3a85a2c9
SHA512 c6171d186f0d677c3212cbb72ffce7ec5a67db0049b1126ace2131a73063be23d5fae92fe3bc920ee79e989f1d25ea5e0704e1e8f9181762aa1a7c687b80333b
SSDEEP 192:6ON76hZjQmiUyl0Sc/+jVlO1TYSbFuSJrU5cOqVq/U6:6ON76RTSu+DO5YShxJrn9eU6
TLSH
T1F112FA3268689C375DE2A941F48736538EE45127EA85BFC5E5DC3F1C04DF6AC234AC25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

130bb2c5-7ff2-4bb3-84bd-5ead10a91573.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\130bb2c5-7ff2-4bb3-84bd-5ead10a91573.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 6f6a4c2e10c27906723a4373059f76d5bcf57d887855555bd04726363eaa506f
MD5 f0755dcc81d7e8422336377c35b260f7
SHA1 efef2d535ee11c393459e8175dcba4422770cc72
SHA512 9d039d67216b4a2a3c8fdba9e04a6620e51152f9587f9e70fca5a6fe32014c64a5fc1fa88a259bbd236d38d1695d9dbb8fb7d2351f9b19c72e8beeb58a0cf448
TLSH
T11041F46CA6FE1148B3737E5AABB2A96D487BBC772E06C55D00110D4F0A62B00C9A1B33
MD5 SHA1 SHA512 TLSH

Submit Download