hxxps://www[.]entrepreneurapj[.]com/

Analysis

user interaction
yes
max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
29/07/2026, 02:01

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://www.entrepreneurapj.com/
Sample260729-cfxc4styev

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2672	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134297641158984025"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-889581200-2041691093-2048517887-1000\{CC54D80D-40F0-4368-A70E-5B01F50B76FA}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2348	msedge.exe
2348	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 3824 wrote to memory of 3132	3824	msedge.exe	85
PID 3824 wrote to memory of 2672	3824	msedge.exe	86
PID 3824 wrote to memory of 764	3824	msedge.exe	88
PID 3824 wrote to memory of 764	3824	msedge.exe	88
PID 3824 wrote to memory of 764	3824	msedge.exe	88
PID 3824 wrote to memory of 4812	3824	msedge.exe	89
PID 3824 wrote to memory of 4812	3824	msedge.exe	89
PID 3824 wrote to memory of 1664	3824	msedge.exe	90
PID 3824 wrote to memory of 1664	3824	msedge.exe	90
PID 3824 wrote to memory of 1664	3824	msedge.exe	90
PID 3824 wrote to memory of 3668	3824	msedge.exe	91
PID 3824 wrote to memory of 3668	3824	msedge.exe	91
PID 3824 wrote to memory of 3668	3824	msedge.exe	91
PID 3824 wrote to memory of 4668	3824	msedge.exe	92
PID 3824 wrote to memory of 3160	3824	msedge.exe	93
PID 3824 wrote to memory of 4668	3824	msedge.exe	92
PID 3824 wrote to memory of 4668	3824	msedge.exe	92
PID 3824 wrote to memory of 3160	3824	msedge.exe	93
PID 3824 wrote to memory of 3160	3824	msedge.exe	93
PID 3824 wrote to memory of 4328	3824	msedge.exe	96
PID 3824 wrote to memory of 684	3824	msedge.exe	97
PID 3824 wrote to memory of 4328	3824	msedge.exe	96
PID 3824 wrote to memory of 684	3824	msedge.exe	97
PID 3824 wrote to memory of 2192	3824	msedge.exe	100
PID 3824 wrote to memory of 4884	3824	msedge.exe	102
PID 3824 wrote to memory of 4884	3824	msedge.exe	102
PID 3824 wrote to memory of 3652	3824	msedge.exe	106
PID 3824 wrote to memory of 3844	3824	msedge.exe	107
PID 3824 wrote to memory of 3720	3824	msedge.exe	108
PID 3824 wrote to memory of 2824	3824	msedge.exe	109
PID 3824 wrote to memory of 2824	3824	msedge.exe	109
PID 3824 wrote to memory of 2348	3824	msedge.exe	117

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.entrepreneurapj.com/
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffbd8d7c188,0x7ffbd8d7c194,0x7ffbd8d7c1a0
  2⤵
  PID:3132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1724,i,12547452741684682813,12819511278206343793,524288 --field-trial-handle=2452,i,16289302772072960246,17687776706924745907,262144 --variations-seed-version --mojo-platform-channel-handle=2480 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1672,i,7552819776163786917,4138649407246929760,262144 --field-trial-handle=2452,i,16289302772072960246,17687776706924745907,262144 --variations-seed-version --mojo-platform-channel-handle=2448 /prefetch:2
  2⤵
  PID:764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2532,i,11056515729301316329,13321610181395905989,524288 --field-trial-handle=2452,i,16289302772072960246,17687776706924745907,262144 --variations-seed-version --mojo-platform-channel-handle=2780 /prefetch:8
  2⤵
  PID:4812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3424,i,5034210381152416265,16730800431941390616,2097152 --field-trial-handle=2452,i,16289302772072960246,17687776706924745907,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:1664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3444,i,15942333079311199895,3647511076491237410,2097152 --field-trial-handle=2452,i,16289302772072960246,17687776706924745907,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:3668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4244,i,8952859064498852490,14437270819311807146,2097152 --field-trial-handle=2452,i,16289302772072960246,17687776706924745907,262144 --variations-seed-version --mojo-platform-channel-handle=4276 /prefetch:1
  2⤵
  PID:4668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4264,i,11373834048772064566,8438702183837760859,2097152 --field-trial-handle=2452,i,16289302772072960246,17687776706924745907,262144 --variations-seed-version --mojo-platform-channel-handle=4356 /prefetch:2
  2⤵
  PID:3160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5100,i,5501253798826564466,11629006799711334338,524288 --field-trial-handle=2452,i,16289302772072960246,17687776706924745907,262144 --variations-seed-version --mojo-platform-channel-handle=5140 /prefetch:8
  2⤵
  PID:4328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3640,i,17531025013014339044,7039692607274832923,524288 --field-trial-handle=2452,i,16289302772072960246,17687776706924745907,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:8
  2⤵
  PID:684
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5860,i,6889657297458703845,10038388019620928752,524288 --field-trial-handle=2452,i,16289302772072960246,17687776706924745907,262144 --variations-seed-version --mojo-platform-channel-handle=5876 /prefetch:8
  2⤵
  PID:3312
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5860,i,6889657297458703845,10038388019620928752,524288 --field-trial-handle=2452,i,16289302772072960246,17687776706924745907,262144 --variations-seed-version --mojo-platform-channel-handle=5876 /prefetch:8
  2⤵
  PID:2192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6352,i,8816462706075310339,15953026257931892090,524288 --field-trial-handle=2452,i,16289302772072960246,17687776706924745907,262144 --variations-seed-version --mojo-platform-channel-handle=6316 /prefetch:8
  2⤵
  PID:4884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4288,i,9570896847858337741,16783344850553322225,524288 --field-trial-handle=2452,i,16289302772072960246,17687776706924745907,262144 --variations-seed-version --mojo-platform-channel-handle=5872 /prefetch:8
  2⤵
  PID:3652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4292,i,3990925272202933448,5909449192064667109,524288 --field-trial-handle=2452,i,16289302772072960246,17687776706924745907,262144 --variations-seed-version --mojo-platform-channel-handle=6224 /prefetch:8
  2⤵
  PID:3844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4352,i,11581628718172452145,14249129216083982356,524288 --field-trial-handle=2452,i,16289302772072960246,17687776706924745907,262144 --variations-seed-version --mojo-platform-channel-handle=5880 /prefetch:8
  2⤵
  PID:3720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5356,i,6014164795315741720,6935744373419125365,524288 --field-trial-handle=2452,i,16289302772072960246,17687776706924745907,262144 --variations-seed-version --mojo-platform-channel-handle=5340 /prefetch:8
  2⤵
  PID:2824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6128,i,9955562578700729645,11289720967970606205,262144 --field-trial-handle=2452,i,16289302772072960246,17687776706924745907,262144 --variations-seed-version --mojo-platform-channel-handle=6112 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2348

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:860

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 11d3c4c52f9fc9cd2b10a22b48769759f994fd6364f9a0fc145f4cd2c2a22e9d
MD5 4751cf705a737c4226029624bf43b9a8
SHA1 fd8cf726ee3f8f75b97147829de5553530caa82c
SHA512 46e3fedbf7fa14bdc2b3aad129f2879a9d24252f5d7bd9b55766bc32a6b82ea77aaf193bcdbdf4423e3b67ef84955e589b6077609344091ef72204c1d50b0dab
TLSH
T17ED09B307A58A58BD14360F1A4114B4115375557205397757521508E9E98055B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

29d12522-dac1-4d1e-91ac-78ad0fb9d986.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\29d12522-dac1-4d1e-91ac-78ad0fb9d986.tmp
Size 27KB
SHA256 1b625c761fe66027712d30cb37a27f4c4be7954aed5b53827b4a68bd54814a44
MD5 8fa5708d757c6a1eb6786179bcb2c69a
SHA1 cbb90ea6d5125ba0885ea35056b500a731f35620
SHA512 d6c84792547fe81ccce352439f7c861b4b5849973ad9fc349a066d10c7703ba17891b3851efae880b9774914b9f3631002a0b9bcebb514976e88b8ae484c1d5a
SSDEEP 768:cUyvIZwWvu+Q+8F1+UoAYDCx9Tuqh0VfUC9xbog/OVDFLlwmW73roMbqh:cUyvIZwWvu+Q+u1jamFLeR7kMk
TLSH
T121C2F92B240CCB7E5F801E9D9D5A6F9B3EA802C7A7588D4047FD994C02C77EA512A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_0000ba

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ba
Size 1024KB
SHA256 42e92ec31e055be91e0bc42892bfedbc8f56ba495d123c4b9aa33d80966b79fa
MD5 62fd8d0b73a9f7e5b7ade8bebbf565f8
SHA1 76054d7437dfc4c0c052626b9ef35f737f349cb4
SHA512 6de4f9368fe6cabdf9e4245c0558dff1d46894822f8630bdc2c6fa5ea0f3f7b61e356f7cdb6b9dc657564092c822f1aee8f24924e73783476a7e832a16670826
SSDEEP 12288:iincEtBCpdCP6apTgmb6XevTq6jqSJwohm0xhdyG1K73nUBXpdQbR0tYdw+KLGFw:i4BudCPpBWOLhJRhyh73AXpdQbRHC/
TLSH
T1852533262BD199BDDA458F5C36B925483E4C5E23C38BACDE55ED4AAC4782EC03B1CC53
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000c6

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c6
Size 1024KB
SHA256 06ba6be6d8bcf97f69a610875b5201da51004f8861f9b2bf0c58e3070e9e1592
MD5 015b38af0c7611e63ca66342a627facf
SHA1 7038e16c6b9f1205e6da6ebd747f67ee32f3735e
SHA512 20cdcf6d820be2c2489599465de99c0071301cd4d2aba340c1ae6b14dba77989b3cd25d1cd347e6666171da93702e91d55f9bf5ae0fc6b6f7b73ee9a1df67d96
SSDEEP 24576:KzdoQqYGJuKy/lajIfcHPlDD73zI1j0ntSCHYu:K5oWGtyNYIkHPxD73zICntLYu
TLSH
T1BF2533BA5F2D322D239C84C305377F4EB991C0EBF7CA2D2149D4CA297759D9622219F4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 b1c285cf38f73412a6a8e744b1814ad84ff6fcab3e22c8036a546d2ef62d47ea
MD5 043866ded6e79d551dd21cb6e9908e60
SHA1 f181c5c898e38b59c2789d28ff6571670846ab11
SHA512 526efd8154917ca0cae49a91244dfe2937e990fa9c7816a2c63fbddeea0607b795b4bc4b5a5d04033a1e53bcfadf6c5725c50d7cba359ad52e7993888dd7e18e
TLSH
T1C8512FF106A20B95DF7902B1A2F01B0139B583DDF56B7E8841869A7DBA3BF63463107C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 fc68f888344fc61ba09d9014364196a15844241165c76eaf68b3363403483b82
MD5 5e7e32fa887bef53d88eb5ee28ce0f31
SHA1 d327733641211c454146110b20beaeee25c4fb18
SHA512 118ea8815ff92a719acb12014baaea17e8d2987dceeb9d9cfbdd508df398ebdcef8c0af85721fd3931dbc42da15d95347d9c644ecdcfc494968872c2077d7653
TLSH
T1A6510BF006A20B85DFB902B1A2F11F0039B583DDF46B7E4941869A7DBA3BF62467107C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 7KB
SHA256 d37d559e5e878b4c129530457e9701d7628fe265f0cbbb2ebe8cf8bf9607f46c
MD5 be4a5e3d5918846c7d40c617bd402abf
SHA1 17e932471e3ecd92d64d0d724da6d444a9f06dad
SHA512 76bd8fe11087702fbf764739e307d8d6318078248c1fd01ec2c827400786c81b1e6ce1e971ae72155d48102a4b157e0717171fa6baa79254b347f9bedf1a2989
SSDEEP 192:DN0lOpELxereG0NkPDD8nT4oV661sh1Rc8PDVRl+D/1W:DN0lOpELxereG0NkPDD8nT4oV661sh1N
TLSH
T1D7F179B7C3DAC22DD84116F59A14AA27CE1D1E19432D384DCDDDAF9BA3F28B0D20165E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 aa10bf07b0d265bed28f2a475f3564d8ddb5e4d4ffee0ab6f3a0cc564907b631
MD5 807419ca9a4734feaf8d8563a003b048
SHA1 a723c7d60a65886ffa068711f1e900ccc85922a6
SHA512 f10d496ae75db5ba412bd9f17bf0c7da7632db92a3fabf7f24071e40f5759c6a875ad8f3a72bad149da58b3da3b816077df125d0d9f3544adba68c66353d206c
TLSH
T18DB01269E5507CFF074A83A41428B463C3FF0047421C8ABEEA3873AD42A21FE0828C57
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 d149701c89f8be55d281685d5e69de171aa9e11e243fd8ecfa755f4eee96b7c7
MD5 a7aaa044a71e6c4292d240104fdbf6cd
SHA1 fbd61b8a6bbe330090317d6cb028c6dc02c54565
SHA512 b710f8511b708fca4b2419d99f3754e7dc544e7560b5663d102768965805b31e4775b1585e7d633e71c0a50f302895ed10080a333844a8a854d9145ba1526d6e
SSDEEP 192:sxZ5VsRk5k0H/fUBscW5VIxIdpw5iYHW6+WNO5rNU/Y9IK65pAzU+GSIgrJ:sxZEPA/f0scWzWHbx/k9
TLSH
T18322B7166E7899778CCBE309BA25BF13E6F5403291941E59E6FCC61C04E7ADD230780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 ca064d6f537f95239eaa915839ba18b21a5dadc2f7a194d5e04760c612f8c05e
MD5 5bd5a0e7b8cecb5e4313cb5d24738b9f
SHA1 a10d01d6220414aacd9d3000d7568b96ccbb2913
SHA512 1b33b5d2a43150ea39fdef25d8bd4d522feea87577a7ee3f78a84fa9a908e447828bfd4e1bcf00e1b5a09fe99fec527e5947143e65c405804c3f33d8673feb3c
SSDEEP 192:sxZ5VsRk5k0H/fUBs0p0G5VIxIdpw5iYHW6+WNO5VNtdY9IKM5vAzU+GSIg5n0J:sxZEPA/f0sm3zWHb6dAO
TLSH
T1CB32C8566E6859B78CCBE209BB25BF13E6F5503291D11E58E6FCCA0C05E7ACD230780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 b02f3864076dc19f135ead8956872635d46037c2763153a05f43d6c32b540cc3
MD5 13790d2c4bfb09e4fe4757dbcee98379
SHA1 60222a7bbe64dc8e4f06729ed179cc4f1ce919e9
SHA512 457a48f544963954be17a7dc4302c2614fcef32129ce94da5d85d40ae64f439086e46a197222a6c9c4521099f141c927c9055ff4876d4f55d83d027a7eb4ef31
SSDEEP 192:sxZ5VsRk5k0H/fUBs0pW5VIxIdpw5iYHW6+WNO5SN+XY9IKD5pAzU+GSIg5neJ:sxZEPA/f0smWzWHb+Xbk
TLSH
T1BC22B7166E7899B78CCBE309BA25BF13E6F5543291941E59E6FCCA0C04E66DD230780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 88b084dab32fecd86a34d2013540a5e3bdc796fbb448c0a2fc6261303ee981c0
MD5 73aad01656bb80035383759e931ce7dd
SHA1 057c450dc79c5bb3118ba8e221a9299335524b67
SHA512 35747bbb9fcb3acefe81857172ed17858c25872f4231202fd09124a40a7ac405274046552c01763ebba94e6bdfbcb7d4243da07c7b86dc44d86d885d65c50a6d
SSDEEP 96:KaRklRnHnqlPKZThqKLfTzqHxJSrBDaAYKhy+iVoZFf7Xkn76P59kKBB53ktlFat:mTXjiVoZFf7Xe76B9hB53ulFaf0Lg
TLSH
T197B12412B13B029238BF681D93A58A778E8131677914E97F7FB801518F26E522DFC8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe593afc.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe593afc.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 ac29cb11be9fd4e2be7362b9b008e2354d63c4e2a7723a64c51f58c8a0103285
MD5 fd12be9395adf2660454815ad0aeeb67
SHA1 c6679ff8b32c8997a65a852f408bb39edcf81629
SHA512 604fd23ff0b0ee9ffa22f7b46e91a386e1498e0400eb1a88f0f704817825a1fe775341050367a19df4fc27313e1c26a7ae35c75192fdcf5e1d5acf277fbd280f
SSDEEP 384:/ZcIhsNpq6vvAziAske+CndHeRemD0ScjmwuX:Xhuv0avfEFY1jiX
TLSH
T1ED928F326D781CAAABE6A145F48635138FF89173DAC52FC0E5ECEF0D01DA5AC0316926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 bc018ba5ac73d24a4177940d857b4ff52569113d316a97d0acf7c7aed8ab9add
MD5 6edbf9c0c2e7a5d85d414b66e4f20c1a
SHA1 4971ea613391acf2cd7cd252419be7803643e7a0
SHA512 b4c2c43260b22ca586dd78b37a99c497ad2c79ca87183bdca03ef15ef1dbbc153a18c1ec58ed823c2d9029940cbd5b859d412a05644021572964b5baf7635488
SSDEEP 384:DiFiZcIZzsNL8TUNTUlIlT6vvAziAlke+CndHeRevD0ScjmwuX:uFQZGwgUv0vvfECY1jiX
TLSH
T1FCD23BF258D7487ADAAE5703A77D2D128EBCD063F5856A80B3D89A0CCD961BFC306811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 7a53265ae4d1fb8694085e6d6f4a7f1adc425cc7c9f16a4cbcd5376b63673936
MD5 23b09e20b1c3ff71bd189836a15df029
SHA1 1dd69d634065c24dd8d76e2d582966dd9764c210
SHA512 f92f208fe334a0427890f67bc773db469444cc190f3acd3438476f27e66404facccb690ddd05acd1a588843ca64774c0e042be472ca5104d62903bfc8310c31d
SSDEEP 384:JZcIhsNpT6vvAziAske+CndHeRemD0ScjmwuX:Bhzv0avfEFY1jiX
TLSH
T1FC928F326D781CA69BE6A145F48635138FF89173DAC52FC0E5ECEF0D01DA5AC0316926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 8e4ff22690d53ec12a60828f9143ecfd530fee6a5d933223388b1e04bec6b0b8
MD5 17c9a3746892c758eaebc78e5f17561a
SHA1 1b32a3228e97c27d105a0fdb8adc401bd133eb21
SHA512 b5301505875401bb1c7bb6731e540a189471da59778e57764537469cd15c26cfa27a0c6481a60c5f954e4aa09714a8dedbe9be9f881d7c8d6d01c97f32535c3e
SSDEEP 192:z4ON/U6v+YLhXQmiUy5o5Kzoh+CGp+Fdes9omOQNJCH+6q+0U6:sONs6vzXmkh+CndHeReOD0U6
TLSH
T1D6121B36AD781CAB5FE2A541F48735135EA89277EE863F80E5EC5F0C01DF69C1346416
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 143b691bf664fecd6eb1ff29cbc308a9790886fc03d01056a8ecfd5665cc8114
MD5 6d524f3a5f48ac1854efeed23ab6cc27
SHA1 2b11b15763b5ccbd7c94003099037bf657a9be49
SHA512 fd41b22d052165c7529e73a42b184ceacb42c9c5b7232d88ecee83764a48e931ed8de5eeee824549bc36d6bb2d2ba5526f95e6c154459276e9598530fc9cf047
SSDEEP 192:JONii6v+YLNQmiUy5/5KZh+CGp+Fdes9odus+JPU6:JONii6vz/TZh+CndHe9eU6
TLSH
T15302EA356D381CAB9FF26E45F58736135FA8117BE9923F84D9E85F0C01D765C2306826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0e5b06d0-289e-4b33-8152-95a98dae4d9e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\0e5b06d0-289e-4b33-8152-95a98dae4d9e.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 aa10d1488c0c4fcbc8e0dd8fd3bd36c0310c73497dfd4bbfc089a722a270b214
MD5 01c13541d8675a388624ffbb76652ab7
SHA1 fafaa5dd01cd2bec9356df4e8af57f9d73a21cce
SHA512 ae499dc7ca9933b32ab1f4dd3545fcba87debe99e5d1abf8f3411da3ed6d10b884f975cd9857c6bd1c96590bc369bf7ceec971905daf5ef0af69c40bb1b43842
TLSH
T12B410948B6EA1104B3B77E5AABF6A96D887E78332F47945E00110E4E4A72B41C871B37
MD5 SHA1 SHA512 TLSH

Submit Download