hxxps://dimar[.]social-media-network[.]com/c/p/tc/599/97035126-a25a-42e4-89a6-a3aff4696e6c-e45ffefa-2b01-4ec0-9175-2717dc564ace/

Resubmissions

29/07/2026, 08:14

260729-j439wsfb5810

29/07/2026, 07:55

260729-jsdj4aydme10

Analysis

user interaction
yes
max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
29/07/2026, 07:55

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://dimar.social-media-network.com/c/p/tc/599/97035126-a25a-42e4-89a6-a3aff4696e6c-e45ffefa-2b01-4ec0-9175-2717dc564ace/
Sample260729-jsdj4aydme

Score

5^/10

microsoft discovery phishing

Malware Config

Signatures

Detected potential entity reuse from brand MICROSOFT. 2 IoCs

phishing microsoft

flow	pid	Process
34	3468	msedge.exe
34	3468	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3468	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134297853404453357"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2370214745-1838013427-2987045292-1000\{164D0197-A950-439F-AE28-9691393D0A63}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2092	msedge.exe
2092	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe

Suspicious use of WriteProcessMemory 35 IoCs

description	pid	Process	procid_target
PID 3460 wrote to memory of 4788	3460	msedge.exe	85
PID 3460 wrote to memory of 3636	3460	msedge.exe	86
PID 3460 wrote to memory of 3468	3460	msedge.exe	87
PID 3460 wrote to memory of 772	3460	msedge.exe	88
PID 3460 wrote to memory of 3636	3460	msedge.exe	86
PID 3460 wrote to memory of 3636	3460	msedge.exe	86
PID 3460 wrote to memory of 772	3460	msedge.exe	88
PID 3460 wrote to memory of 2128	3460	msedge.exe	89
PID 3460 wrote to memory of 2128	3460	msedge.exe	89
PID 3460 wrote to memory of 2128	3460	msedge.exe	89
PID 3460 wrote to memory of 3760	3460	msedge.exe	90
PID 3460 wrote to memory of 3760	3460	msedge.exe	90
PID 3460 wrote to memory of 3760	3460	msedge.exe	90
PID 3460 wrote to memory of 2040	3460	msedge.exe	92
PID 3460 wrote to memory of 2040	3460	msedge.exe	92
PID 3460 wrote to memory of 2040	3460	msedge.exe	92
PID 3460 wrote to memory of 5036	3460	msedge.exe	93
PID 3460 wrote to memory of 5036	3460	msedge.exe	93
PID 3460 wrote to memory of 5036	3460	msedge.exe	93
PID 3460 wrote to memory of 916	3460	msedge.exe	96
PID 3460 wrote to memory of 916	3460	msedge.exe	96
PID 3460 wrote to memory of 916	3460	msedge.exe	96
PID 3460 wrote to memory of 4416	3460	msedge.exe	98
PID 3460 wrote to memory of 5100	3460	msedge.exe	99
PID 3460 wrote to memory of 4416	3460	msedge.exe	98
PID 3460 wrote to memory of 5100	3460	msedge.exe	99
PID 3460 wrote to memory of 3584	3460	msedge.exe	101
PID 3460 wrote to memory of 4652	3460	msedge.exe	105
PID 3460 wrote to memory of 5080	3460	msedge.exe	106
PID 3460 wrote to memory of 2944	3460	msedge.exe	107
PID 3460 wrote to memory of 3536	3460	msedge.exe	114
PID 3460 wrote to memory of 3536	3460	msedge.exe	114
PID 3460 wrote to memory of 1464	3460	msedge.exe	115
PID 3460 wrote to memory of 1464	3460	msedge.exe	115
PID 3460 wrote to memory of 2092	3460	msedge.exe	117

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://dimar.social-media-network.com/c/p/tc/599/97035126-a25a-42e4-89a6-a3aff4696e6c-e45ffefa-2b01-4ec0-9175-2717dc564ace/
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffb1433c188,0x7ffb1433c194,0x7ffb1433c1a0
  2⤵
  PID:4788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1760,i,4592086294677302120,13348225119315739104,262144 --field-trial-handle=2884,i,9685514050022015248,749262077920216869,262144 --variations-seed-version --mojo-platform-channel-handle=2880 /prefetch:2
  2⤵
  PID:3636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1848,i,9722679348058207184,14976486398105407286,524288 --field-trial-handle=2884,i,9685514050022015248,749262077920216869,262144 --variations-seed-version --mojo-platform-channel-handle=2916 /prefetch:3
  2⤵
  - Detected potential entity reuse from brand MICROSOFT.
  - System Time Discovery
  PID:3468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2268,i,3483137783148384967,7640659512690718464,524288 --field-trial-handle=2884,i,9685514050022015248,749262077920216869,262144 --variations-seed-version --mojo-platform-channel-handle=3044 /prefetch:8
  2⤵
  PID:772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3424,i,17868793873008601309,5734030578995089299,2097152 --field-trial-handle=2884,i,9685514050022015248,749262077920216869,262144 --variations-seed-version --mojo-platform-channel-handle=3456 /prefetch:1
  2⤵
  PID:2128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3440,i,5190117812331926408,14891735259600900550,2097152 --field-trial-handle=2884,i,9685514050022015248,749262077920216869,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
  2⤵
  PID:3760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4112,i,5712151839475916070,12362331683115258366,2097152 --field-trial-handle=2884,i,9685514050022015248,749262077920216869,262144 --variations-seed-version --mojo-platform-channel-handle=4320 /prefetch:2
  2⤵
  PID:2040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4100,i,10049337291163636005,5574383643378307992,2097152 --field-trial-handle=2884,i,9685514050022015248,749262077920216869,262144 --variations-seed-version --mojo-platform-channel-handle=4276 /prefetch:1
  2⤵
  PID:5036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5028,i,993901361445320279,6014873772237186707,2097152 --field-trial-handle=2884,i,9685514050022015248,749262077920216869,262144 --variations-seed-version --mojo-platform-channel-handle=5052 /prefetch:1
  2⤵
  PID:916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5208,i,9314973094257569892,5984577548320420659,524288 --field-trial-handle=2884,i,9685514050022015248,749262077920216869,262144 --variations-seed-version --mojo-platform-channel-handle=4944 /prefetch:8
  2⤵
  PID:4416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5200,i,2023129206483864366,15663128705814151541,524288 --field-trial-handle=2884,i,9685514050022015248,749262077920216869,262144 --variations-seed-version --mojo-platform-channel-handle=5276 /prefetch:8
  2⤵
  PID:5100
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5972,i,7118662860170492709,803007148708048695,524288 --field-trial-handle=2884,i,9685514050022015248,749262077920216869,262144 --variations-seed-version --mojo-platform-channel-handle=5988 /prefetch:8
  2⤵
  PID:4636
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5972,i,7118662860170492709,803007148708048695,524288 --field-trial-handle=2884,i,9685514050022015248,749262077920216869,262144 --variations-seed-version --mojo-platform-channel-handle=5988 /prefetch:8
  2⤵
  PID:3584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3524,i,12044663993305121558,6530187710781469217,524288 --field-trial-handle=2884,i,9685514050022015248,749262077920216869,262144 --variations-seed-version --mojo-platform-channel-handle=4692 /prefetch:8
  2⤵
  PID:4652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5988,i,13929970166389398709,7399891851015810105,524288 --field-trial-handle=2884,i,9685514050022015248,749262077920216869,262144 --variations-seed-version --mojo-platform-channel-handle=3680 /prefetch:8
  2⤵
  PID:5080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5984,i,16208416942420284564,8599164333860280353,524288 --field-trial-handle=2884,i,9685514050022015248,749262077920216869,262144 --variations-seed-version --mojo-platform-channel-handle=4420 /prefetch:8
  2⤵
  PID:2944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5504,i,10453123217467271149,5303370638184489777,524288 --field-trial-handle=2884,i,9685514050022015248,749262077920216869,262144 --variations-seed-version --mojo-platform-channel-handle=4388 /prefetch:8
  2⤵
  PID:3536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3336,i,113941390996838068,2932368163087207774,524288 --field-trial-handle=2884,i,9685514050022015248,749262077920216869,262144 --variations-seed-version --mojo-platform-channel-handle=5772 /prefetch:8
  2⤵
  PID:1464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=748,i,9810427473250464710,3395528531495168718,262144 --field-trial-handle=2884,i,9685514050022015248,749262077920216869,262144 --variations-seed-version --mojo-platform-channel-handle=1716 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2092

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1684

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 deae8ba3a07225fe9f1490e4968fd83f8d308707a88a6d3d541d8ab416841ddf
MD5 1fcf11901014bf515178c91bdb7a6c5c
SHA1 4746b018067d9671617515224b7697b27fd2fc5f
SHA512 6059830103275d34e1aa4dd4e8d4177b6c2b684b2b3ad5417753387a227c838c0b258e662c78853cf649656ebd762f5d160c10349cd19ac1953380bd6572c660
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7p:fwUQC5VwBIiElEd2K57P7p
TLSH
T16EB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 39b8627875fea5ac5c5bfb887da12c15116e3fe81f200852c71d5699102c9044
MD5 e3962be2eb3bd350a67bf6309159a1cc
SHA1 c10632202b95ed6f7f4475b6483bf5196e4c5578
SHA512 d12d4acc23b51c071fbc9bf4db2f0575a6b43ec7894b272035e4c01dfce30099cd3ef90a1009dd1e6284cfbcf7a37fd3b79490739946700a2c61ec578374cbe6
TLSH
T173D08C677A0E7815E72F8231A413E360A76B4072A5629702F324C81DA9BC8D85BE63D7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a59087fbda784cffb013f4e2a0bf13a7fca483c48e8a7fc15fa022402eb25d72
MD5 dd54db185d82309b854bfa7657ba4600
SHA1 d01c14e8b4dec85ed2e1671545a868fd7ad4fa95
SHA512 f014ab84dd934b90e006883b74ad349d05f60071e57d2cf0bdf8a9bce118654c92139263e082094b602f6900a71e9a7848754994a2ea88642b2376121b581d07
TLSH
T165D08067354D7815E71F42319413D350576B4072A562D702F314C41D957C4D857D53D7
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 1ba388c69455bb3ed058d71d8cdbb66ff0b1d6c80049c71394c6078da30f6aaa
MD5 fb207489e9342f89c1b167e0ce92a163
SHA1 e8979ef19de2ff9725aa83038125fb20fb621942
SHA512 2638d3c8c3f051f9367e2947bb2c5365715784ad37d8ff5bfd4764cfc150ada5ec49e87905ef908ac61a39e9a337b58a8880a038456c57e807239d303c78a2e5
TLSH
T19561EA380262C84CD3A8153CF1D15234747F858A8A1B6E556E14BFFDE5C9731A1D6D0B
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58702a.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58702a.TMP
Size 3KB
SHA256 cfd9f2b6012ced34fdfd6b6b079dd307b7ef518094b1b3ddbb98b6724c0da10e
MD5 79c9066eabd5346f22476e4934bb74cf
SHA1 4e73f1bfbbcd1bb45ca87ced16e2ecbe5bf0b4ed
SHA512 e3ec4b7fbd71ecb0ee18b7cb751d2a9251ed25caacd454cdf8d680756649807a7221dc4d8561c61ef23838376359697e70d9a940cdeed6d28a1e68efda3f238c
TLSH
T19C610C380262C84CD36C153DF1D15234743F868A9A1B6E652E14BFFDE9C9B31A1D6C0B
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

d57c0ca5-f3fa-45cb-b98a-d32e603ead73.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\d57c0ca5-f3fa-45cb-b98a-d32e603ead73.tmp
Size 2KB
SHA256 b33679514fd00de7b3d0cbb1c15f1a0ae2651894366e9371400e231cc21a492e
MD5 f32e74c771e46fc43dd8649ffad7daca
SHA1 0384e022c105f2fa087326f4da7a0757d37bc99e
SHA512 0f7b020019e6275dc74dc955540056f8fbbcb1496fb8195ef926aa2ec196ecff76f14cd2a52992637bcfa7baafc34959eb659ff6caac84214fcd744375d615c5
TLSH
T129417BF78BE1856D8E115AF0AA18AE1BCE2D0516831C3C69C9D4EF2B97E3471E101A5B
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 e774b058f6dcaa8a758f42d35a9f37ec41b878ed8eedabc81de1340b983b7904
MD5 ff74dece04f394139fefb947b62e5f99
SHA1 d1fc6780e3e4aeb35f2211665b185f6c893d4661
SHA512 3ff1d2252146571b3838ae3c71b5643c5b8ff503fc43dc4159c0ac9c2faf08897666e8bea025dc517ba7afde0e26677336f4be97f51e5cb42b5b609735581abf
SSDEEP 192:sxZ9RayM/jK1Ml8Mkt/fsslcsLCIdppkHW6+WNHQ34/YHFAYlIgrJ:sxZ9MMt/fssl1LrqHb44/69
TLSH
T1FB52E8166A389977CCDBD209BA557F53D5F50472E6900E48A9FCCA0C04E6BED231781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 5b77782e9e6bfb9f3bcc94e350d6d40998f40a721d0c95958eb033f0abb9b4e1
MD5 f91e8751105acfcc8a9cc7e67742081a
SHA1 72c42efa483ab04f49c0c53c11ece59b96e05fb5
SHA512 041ea8100f48db44c9e7dda52b1d9b2c559f4ea6a29717cba1413099d8d44c6970f61644d59070634fad2fe82ebf739cff02cc549c813162dbaf0ee4cf5c656e
SSDEEP 192:sxZ9RayM/jK1Ml8UQekt/fssyc3LCIdpXkHW6+WNHQ34/YHs3RlIg5xJ:sxZ9Mq1t/fssyKLr0Hb44/Vp
TLSH
T1F752D7166A3859B7CCDBD209B9517F53D6F51872E6940E48A9FCCA0C00E6BED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 8e0be51a43c04a5aa7940bce8ec3c0f04cf6224b70bbed630af977497344e064
MD5 1d5c24087b4a2a9be2c8b7c51e56fd94
SHA1 8d97ce8bbed14c09f617ec1aa4627c812464f98c
SHA512 448b45073b2868d5266cfc49862242836c01cdbe1abfba6c5a046abe093b1cedc395a1910be5c8a4d395d0e43d10ec1563298e79f2c40a9391d50c606149812e
SSDEEP 768:qhUZYTMWvg0Po8F1+UoAYDCx9Tuqh0VfUC9xbog/OVOeLlPZ4RBroVP0eo:qhUZYTMWvg0Pou1ja7eLZmR6CL
TLSH
T176D20A2B280CCB7E4F844E9DEC266F963ED801CB5A584D5447EA894C03CB6EF512B59B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 53d5406e1198d217b61ac2dfe50f1ac231f13c514c3ed8109ccb875682ee3018
MD5 7f93781e3ee37b1f7a5b76a5f197d8b8
SHA1 44e6379dbf97ae60dfae83883bdc6d07699f01cd
SHA512 26a9ba2295b497b4d353d169cea24c0e50c69f974b3e03df7dc07561aea87b1e4804e11ce01918db147c5a4dbcb1abe32f3662425d30ea83e7b595063800112e
SSDEEP 192:EU1HQHeGbg0GwQHU1gsK4Dm9+2Ns7sPA8GSH:EUFQFU
TLSH
T15BD1265271BA02422D3E2B1893D4875FCE4276633018E52F3BAC41B18E67E629DFC9DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5905c3.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5905c3.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 41f072d45228e42762a1e365638bc20599083157440999ad357858c5fa0e3786
MD5 30b7e28ac14914e726cb28e245e349b4
SHA1 dc37f51ea6bccfcc594a87258e2b174b7abec6c6
SHA512 c8ccf446d6476f61cc9cde6575e3bf6aaf8130164028c6b719cfec9b89d17109312447bf719b417f14eadf2554a50df8e125a208242e4e4d62c3784d24f2bfcc
SSDEEP 192:ubLsNM0fQ6A8o3ttp6QmiU1g1ST4zX5Obd+jFO/aouJFd+2J4QLPqUU8:gsNM0fwd2CSczX5od+hO/VuXd+27LXU8
TLSH
T1A1321A366928AC768DE3E295F44736539FB51067DB882FC4D2EC1B0C01EB6AC231BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 953347f74116dc06e19a19a7974e37e41d80a24a77a086d0d7d4bc35d7255e12
MD5 e351c49763d1dbd9945c5f582f589bbb
SHA1 aaf043a86e23460a38ab1bbf0594e5b7a48abc40
SHA512 3c21a1461ea8503981473d3696a901b32e071a8acc767f1bab61561d5481e852594b8cec4aaa11e44259d872a13e2eada52204c54418543c0ace9e9bf3a332ef
SSDEEP 384:eiFiZcIAzsNE8TUNTUlIlHwd23SczX5od+hO/VuXd+2NLXScjmwK2:1FQcVwgfLOgO9utlNLX1ju2
TLSH
T189D219F259DB8836D9AE9747A77E2D028EBCD063F5845A84B3D85A0CCC961BFC307911
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 83e8cbebd381ef7be92f0cd68651f7f4d423ffe77a288a71d7f4d4f003750dfb
MD5 937febf1cbbd43095065bd3abb00f09f
SHA1 294e342ef3b1cdc593fe2277f27701ce5964eed2
SHA512 8aee0d05197efcadb22109a056771bf6b55ad32dd4097bfb3b8b950bdb47c798031e21141e1a626e18bbd767a9264e18810cf9d68d9d1f8eaebeefad20faa4ff
SSDEEP 192:AON1611WQmiUyOHSMGX5Obd+jFO/aouJFd+2UjJLPqUU6:AON16+fSMGX5od+hO/VuXd+2MLXU6
TLSH
T106122B36642CAC779DE2A595F48735538FA55167DA887FC0D1EC2F0C01DB6AC230BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 5cddab23839dcc87fb78611a3e50fc66edb340d83085dfe8b86a37d8630109db
MD5 f1fd7bdd6038ac14a1c179c094628cc9
SHA1 9aeb4cb63fdc6f321e812e5ff8cb57f9d009a8bb
SHA512 8682348639a750f837f6e7a46d51234b2bd17d52e99ed03d6a836e7b0d590f609d578d9de754050a1feb718e55262ef18799a6023880fbf75f81e212e5358bb4
SSDEEP 384:TZcIhsNMHwd2CSczX5od+hO/VuXd+27LXScjmwK2:LhELOgO9utl7LX1ju2
TLSH
T1D5927D336D28AC7699F6E155F88636178FB85073DAC82F84D5EC6B0C01E66BC131BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 23544a46a57c25cefe1fe3726ab0c351875c6a2f3473ab8422adb26a61ac7444
MD5 a8564f1ee8fc11156323675944f65735
SHA1 53f177166268357cf34b4eb6f0d8d175164f85f9
SHA512 b220245263ee68ed9e24909ccaebabb63f36cdb0363b7d01ec1bb1ba45bf86eab3f795370f3cc2886c50cb5137840d53411eb229a15b07b8f61d22cb24588136
SSDEEP 192:yONw61VWQmiUy+HgGX5Obd+jFO/aob/aLF36iU6:yONw6WbgGX5od+hO/V+LMiU6
TLSH
T1F002E935A9286C778EF2AE49F48777135FA52167EA942F84D6E81B1C00D769C2307827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

21d25a25-f5e0-43e7-9cbc-19970bd89dfa.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\21d25a25-f5e0-43e7-9cbc-19970bd89dfa.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 a605fd5bcd66380705ee84fab4fdd8de639a61f0b79ecf1703bc5c4d2e42142a
MD5 bb9f7440d6ae85f0f4889f684c9fe0c8
SHA1 e1b57ee79f6557307a1428890a2f51a0b049611d
SHA512 3834e81b0c6bf8a72033243356456a9ee5d83535f2b1d940156b6f91d34efb59bcfc5e4d3451d107b099f2bd2ea5613dc6f04f31cd8ec8b441b209e49f0ac536
TLSH
T142410958BAE91108B3B76F5AABF3A46E447ABD772E06D55D10110E4F0A76B40C8B1B33
MD5 SHA1 SHA512 TLSH

Submit Download