hxxps://plan3media[.]us19[.]list-manage[.]com/unsubscribe?u=f63870e81facc9990e05350e6&id=d97a6689e4&t=h&e=b583112d8f&c=6090762a72

Analysis

user interaction
yes
max time kernel
149s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/07/2026, 09:37

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://plan3media.us19.list-manage.com/unsubscribe?u=f63870e81facc9990e05350e6&id=d97a6689e4&t=h&e=b583112d8f&c=6090762a72
Sample260730-lll9rsfb49

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1616	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134298778508118068"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-876885714-46325919-1482798410-1000\{559F2A44-FC15-4D44-8A7D-E9D87E757EEC}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3164	msedge.exe
3164	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2548	msedge.exe
2548	msedge.exe
2548	msedge.exe
2548	msedge.exe
2548	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2548	msedge.exe
2548	msedge.exe
2548	msedge.exe
2548	msedge.exe
2548	msedge.exe
2548	msedge.exe
2548	msedge.exe
2548	msedge.exe
2548	msedge.exe
2548	msedge.exe
2548	msedge.exe
2548	msedge.exe
2548	msedge.exe
2548	msedge.exe
2548	msedge.exe
2548	msedge.exe
2548	msedge.exe
2548	msedge.exe
2548	msedge.exe
2548	msedge.exe
2548	msedge.exe
2548	msedge.exe
2548	msedge.exe
2548	msedge.exe
2548	msedge.exe
2548	msedge.exe
2548	msedge.exe
2548	msedge.exe
2548	msedge.exe
2548	msedge.exe
2548	msedge.exe
2548	msedge.exe
2548	msedge.exe
2548	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2548	msedge.exe
2548	msedge.exe
2548	msedge.exe
2548	msedge.exe
2548	msedge.exe
2548	msedge.exe
2548	msedge.exe
2548	msedge.exe
2548	msedge.exe
2548	msedge.exe
2548	msedge.exe
2548	msedge.exe
2548	msedge.exe
2548	msedge.exe
2548	msedge.exe
2548	msedge.exe
2548	msedge.exe
2548	msedge.exe
2548	msedge.exe
2548	msedge.exe
2548	msedge.exe
2548	msedge.exe
2548	msedge.exe
2548	msedge.exe
2548	msedge.exe
2548	msedge.exe
2548	msedge.exe
2548	msedge.exe
2548	msedge.exe
2548	msedge.exe
2548	msedge.exe
2548	msedge.exe

Suspicious use of WriteProcessMemory 36 IoCs

description	pid	Process	procid_target
PID 2548 wrote to memory of 1824	2548	msedge.exe	86
PID 2548 wrote to memory of 2932	2548	msedge.exe	87
PID 2548 wrote to memory of 2932	2548	msedge.exe	87
PID 2548 wrote to memory of 2932	2548	msedge.exe	87
PID 2548 wrote to memory of 1616	2548	msedge.exe	88
PID 2548 wrote to memory of 844	2548	msedge.exe	89
PID 2548 wrote to memory of 844	2548	msedge.exe	89
PID 2548 wrote to memory of 3272	2548	msedge.exe	90
PID 2548 wrote to memory of 3272	2548	msedge.exe	90
PID 2548 wrote to memory of 3804	2548	msedge.exe	91
PID 2548 wrote to memory of 3272	2548	msedge.exe	90
PID 2548 wrote to memory of 3804	2548	msedge.exe	91
PID 2548 wrote to memory of 3804	2548	msedge.exe	91
PID 2548 wrote to memory of 3088	2548	msedge.exe	93
PID 2548 wrote to memory of 3088	2548	msedge.exe	93
PID 2548 wrote to memory of 3088	2548	msedge.exe	93
PID 2548 wrote to memory of 4512	2548	msedge.exe	94
PID 2548 wrote to memory of 4512	2548	msedge.exe	94
PID 2548 wrote to memory of 4512	2548	msedge.exe	94
PID 2548 wrote to memory of 692	2548	msedge.exe	100
PID 2548 wrote to memory of 2352	2548	msedge.exe	101
PID 2548 wrote to memory of 692	2548	msedge.exe	100
PID 2548 wrote to memory of 2352	2548	msedge.exe	101
PID 2548 wrote to memory of 4312	2548	msedge.exe	102
PID 2548 wrote to memory of 4312	2548	msedge.exe	102
PID 2548 wrote to memory of 4728	2548	msedge.exe	104
PID 2548 wrote to memory of 4928	2548	msedge.exe	115
PID 2548 wrote to memory of 760	2548	msedge.exe	116
PID 2548 wrote to memory of 3408	2548	msedge.exe	117
PID 2548 wrote to memory of 3756	2548	msedge.exe	122
PID 2548 wrote to memory of 3756	2548	msedge.exe	122
PID 2548 wrote to memory of 3840	2548	msedge.exe	123
PID 2548 wrote to memory of 3840	2548	msedge.exe	123
PID 2548 wrote to memory of 648	2548	msedge.exe	124
PID 2548 wrote to memory of 648	2548	msedge.exe	124
PID 2548 wrote to memory of 3164	2548	msedge.exe	131

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://plan3media.us19.list-manage.com/unsubscribe?u=f63870e81facc9990e05350e6&id=d97a6689e4&t=h&e=b583112d8f&c=6090762a72
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x25c,0x7ffd9d7fc188,0x7ffd9d7fc194,0x7ffd9d7fc1a0
  2⤵
  PID:1824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1684,i,16885381944705558893,9480694611045803245,262144 --field-trial-handle=2020,i,3893428731015200943,4718543253060637156,262144 --variations-seed-version --mojo-platform-channel-handle=2016 /prefetch:2
  2⤵
  PID:2932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2244,i,17957683237547912891,7674273525855212377,524288 --field-trial-handle=2020,i,3893428731015200943,4718543253060637156,262144 --variations-seed-version --mojo-platform-channel-handle=2248 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2328,i,2532544643434278046,15668843815896372733,524288 --field-trial-handle=2020,i,3893428731015200943,4718543253060637156,262144 --variations-seed-version --mojo-platform-channel-handle=2712 /prefetch:8
  2⤵
  PID:844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3432,i,9342580007826642501,6413713574988490553,2097152 --field-trial-handle=2020,i,3893428731015200943,4718543253060637156,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:3272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3436,i,8891158412309809412,4062370511208159474,2097152 --field-trial-handle=2020,i,3893428731015200943,4718543253060637156,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:3804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4196,i,5003102637022599651,9630413366342507429,2097152 --field-trial-handle=2020,i,3893428731015200943,4718543253060637156,262144 --variations-seed-version --mojo-platform-channel-handle=4208 /prefetch:1
  2⤵
  PID:3088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4268,i,12399011414613470301,571420723057995068,2097152 --field-trial-handle=2020,i,3893428731015200943,4718543253060637156,262144 --variations-seed-version --mojo-platform-channel-handle=4452 /prefetch:2
  2⤵
  PID:4512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5664,i,9158125668339772284,10088893298240387879,524288 --field-trial-handle=2020,i,3893428731015200943,4718543253060637156,262144 --variations-seed-version --mojo-platform-channel-handle=5416 /prefetch:8
  2⤵
  PID:692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5672,i,7003970816704698901,10302227456375030970,524288 --field-trial-handle=2020,i,3893428731015200943,4718543253060637156,262144 --variations-seed-version --mojo-platform-channel-handle=5660 /prefetch:8
  2⤵
  PID:2352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5844,i,17514930679655082907,11234732653061149534,524288 --field-trial-handle=2020,i,3893428731015200943,4718543253060637156,262144 --variations-seed-version --mojo-platform-channel-handle=5848 /prefetch:8
  2⤵
  PID:4312
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6208,i,9067314864719288651,16462952740683621030,524288 --field-trial-handle=2020,i,3893428731015200943,4718543253060637156,262144 --variations-seed-version --mojo-platform-channel-handle=6224 /prefetch:8
  2⤵
  PID:3876
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6208,i,9067314864719288651,16462952740683621030,524288 --field-trial-handle=2020,i,3893428731015200943,4718543253060637156,262144 --variations-seed-version --mojo-platform-channel-handle=6224 /prefetch:8
  2⤵
  PID:4728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4448,i,14903738587960750348,2524410678789414647,524288 --field-trial-handle=2020,i,3893428731015200943,4718543253060637156,262144 --variations-seed-version --mojo-platform-channel-handle=560 /prefetch:8
  2⤵
  PID:4928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4544,i,11812850244848011578,14179704689560852153,524288 --field-trial-handle=2020,i,3893428731015200943,4718543253060637156,262144 --variations-seed-version --mojo-platform-channel-handle=4464 /prefetch:8
  2⤵
  PID:760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4548,i,18047047539115353603,9102786896655896172,524288 --field-trial-handle=2020,i,3893428731015200943,4718543253060637156,262144 --variations-seed-version --mojo-platform-channel-handle=4224 /prefetch:8
  2⤵
  PID:3408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6284,i,8895669742158310386,16326006924481952033,524288 --field-trial-handle=2020,i,3893428731015200943,4718543253060637156,262144 --variations-seed-version --mojo-platform-channel-handle=4452 /prefetch:8
  2⤵
  PID:3756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4536,i,13927098714258234242,15728630444382349655,524288 --field-trial-handle=2020,i,3893428731015200943,4718543253060637156,262144 --variations-seed-version --mojo-platform-channel-handle=6080 /prefetch:8
  2⤵
  PID:3840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5516,i,4232787193881567725,10065945914529228406,524288 --field-trial-handle=2020,i,3893428731015200943,4718543253060637156,262144 --variations-seed-version --mojo-platform-channel-handle=784 /prefetch:8
  2⤵
  PID:648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6556,i,17770938664317057926,2678686873068817597,262144 --field-trial-handle=2020,i,3893428731015200943,4718543253060637156,262144 --variations-seed-version --mojo-platform-channel-handle=6492 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3164

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4152

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 8bd193269cbc0101b18807144d6cd741576381f849ecee6df4fd3079b1e2a2ea
MD5 7f4cc8bd47cae9e9cfcbdc3a9dea31d4
SHA1 6406135db9fdcf767dc9e78333ef0cb8dfd551a1
SHA512 894acd81265a2f42a77360eaacfcdb7e50c7d9b0a2718871318cc1ab538e27cb24b8d3dba4cdc1a6de030a8f0012aac3b2f7e8fbaaf939ef83c5f7ce1469a61f
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7S:fwUQC5VwBIiElEd2K57P7S
TLSH
T1A2B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 6de34b260036ecaa4ce5839bc4a7ff7495e50b7b94349b12d9f840ca0e76da3b
MD5 56d82099872fb501c566d072ae897035
SHA1 2c96501551fc13c09496780960d8e7ccb4957b77
SHA512 c4b4017256caf25e88f146e6104134cddfd15089203e8e74c5196627fc92897f9fe7e3fc5c8305032be88e9409cdbc5dfe1e81017fcd5e38b3579b3d823b4a41
TLSH
T160D0C073378C7C00EA090170D013C3031FA7855824C39F03B100C01C54B43D9738B093
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f5dece638cd89af82b06bd2fcb3d1738eef64d2275be237184ea8bff7af3fdfa
MD5 f19ec2293392af872f10929c41627e26
SHA1 0576f5277c470f5bb8c3f4d3786ca8d967d0a33e
SHA512 4cc85dc71d34bb516f8fe45b565a6a9b4cda255a931f33289247ed84150baf0e2df40fc87109df41771553b92545ed858197cdd3d673694c83458cf9812aa9dd
TLSH
T16CD02272268C6C00EA090170D01383021EA6855824839B03A100C01C44A52D9728A093
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 357B
SHA256 63daede2c2e479d639b37d4f6fe2a9bd28eeaba73d3aaed51db41c74940e19d8
MD5 9d533c8e5683785faa753f5558e857a4
SHA1 cca208af91d7aa58879bb4157f45712fceec30be
SHA512 1b77d7e589fa06b495979f79bf6229537830cd16ae3863ffda01b3afb84fb391ce2dea1bab33b361a6061c6a48d6f4367afc3b92ff25a2cabf67987fb11ee903
TLSH
T1A3E0D85EB680CBBCF118A747C15462A9DD377507A9CDD45D220D6DD87485800C3710C0
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
Size 158B
SHA256 249358b1eab901f0b034023569e7f01b1f94c9179591789d99d6f279761d6e1c
MD5 e3fe72c0f542fbb29d9eb8933eefb382
SHA1 fce9a5a6bf89b76d58b4c0f0c691531330ab3b3e
SHA512 f71315278d44c74df19833e56e16d62705ddd45cc9bbabd13be55f51927a3d7464736846a1c4bcda6770c5b8c0720e1defbfbddb5206de648079efb1a9250340
TLSH
T17EC080D9BD4D845FD385187E5716F00007906511942796171650FDC032419A01E29220
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 fbb7e33d651adfa6a13002f6f534a12b6311db728e8f02d28379294d8b68b87b
MD5 89dd6d28b9c4758a3683db750f8e9175
SHA1 e414a97177fa0eb60a105a34b12bcb1d25138a0f
SHA512 36a5e1fcdabc781f5ff3ff1622ff754a38190f6109f3212baf9ae660e5b82ed7583084ac01656a44d8c48e590dc11638dd7f845c76246542027ba1fae272f84a
SSDEEP 48:ooKVQEM3pNjIYbgOfotjDFrqj4cNBl+zg8hOkGHk0Wf4Bij+B0pxL1PT:ooKVSGOA9BOBN/z8IrBBij+B0XLx
TLSH
T15491C8D166C18163D361107BC5F0069835F8AAD08D338DD1A18E987EB9BB332C927E4F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe589045.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe589045.TMP
Size 3KB
SHA256 31bb0b105a0dba8c78ac6bdd88191dbad66029ee86f047d6209d6890acb5d126
MD5 8494a43e47e4d89f438a4ff0cd4ce0c3
SHA1 43a2a066e1eb62712c513e773b63317289a561a6
SHA512 a45516eabf46dd928f92cac8581fc58edc0c51e876864cc7b44b818177dcaa1c66feccbaa57c29453c10db70c2f808dd82efdc27414a70f3562c1be8feb2dd0d
TLSH
T11961D7C506920541E7611173C6F01AC836B1B0E1CE378EC5D286987E9ABB732CD2BB4C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 1b7ded7289e25ccd69dc029ab669842717bb50cf41203f90d93df82760070f35
MD5 59a677655d832e555153b00f83370be1
SHA1 365bac3ca1dee33e02f739026a5b1fae59977303
SHA512 cd2c461499bb8f00925c4c81d9d60ad89d60efc311272236166b7f48fb1b5a6061db49299a00c0b9a0a411edf045f48c13af4a031f1ea7a219d3623c4b8c05de
TLSH
T194416CF786E98A5FC91252F1A6286E2FCE2E0614831C3C1AC8D4AF9793E3471D10198F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 b0046b4da617c8c81fa6ba43c13fdde9c9c06a9ffc3cf26a6d059d28fb3826f9
MD5 1cb6ec990b93cc472929d0aeb7cf98b5
SHA1 8a563e1caaf448d9a1dd73a75f41a38899c9926b
SHA512 c7b4d4edf93d7fd4d2044fb1b7458a429694b28b0a00db31abfdd6e2097221ce317fa196217f6821eb62e862008d82fd23b5d58b78d2b1aa39b53593208f1689
SSDEEP 192:sxZ9RLyM/jK1Ml8MkC/fRs3ZVvIdpEe1HW6+WNhxp/Yw5s7KIgrJ:sxZ95MC/fRs3ZVAVHb5/d9
TLSH
T1A252E7166B349977CCDBD209FA55BF53D6F90522D2904E48AAFCCA0C05E6BED220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 d2fce041336780e04f85ce523bb4d66ea77c75c8ce1d0b74a1cf43f1eecebadf
MD5 d032949b402e548c4119b8130d905343
SHA1 1089df452d3718db562562558001be31062961e7
SHA512 372e78f69ad33614def47f11d53dd261fd09d2b52402fa80e05ccab603a04fc75f8f1b8021e01ec6e139b6cc78fea92ead970db9285be8e0844f214cc6d1a41d
SSDEEP 192:sxZ9RLyM/jK1Ml8UQ6kC/fRsVZYvIdpie1HW6+WNhxp/Yw01ZKIg5SJ:sxZ95qJC/fRsVZYAPHb5/Xk
TLSH
T15B52D71A6A349977CCDBD20AFA51BF53D6F54472D2904E48A9FCCA0C05E6BED220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 4086101c720302bbc32f50972bd885de26fe11121d1160bf37e019727036a142
MD5 3157ec43c1ef646d2c8a54d71266cc8e
SHA1 a9e7afdd8f46fbc976f0e733309e4cb8bbe0a27f
SHA512 359802f52b11ada39e43c72067e0deb5722bc2854c98185da204602969a833c2cb6e5f77c738bcd79f392b8fc916a7e385225bdd9424eb8f08392fa0c4145bcc
SSDEEP 768:zY4jeXmWvmKxE8F1+UoAYDCx9Tuqh0VfUC9xbog/OVhPLlrZ+dQrohO7ae:zY4jeXmWvmKxEu1jacPLZQd7U
TLSH
T166E2093B280CCF7E4F844E5DED26AE972ED802CB6A584D5447FA494C03C76EB512B49B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 617d4e853ad8e23afbb93dd2dff5b11833a8c908bddaa43a7c3ea34c21a9c5bd
MD5 7fe00d5b5cdb5121b23d070c92fb84c7
SHA1 aa3d0f7a48c6e9c9ad4f7a40391e470ce5632291
SHA512 36091f53834b0ced6126bdc3a4844581058015b05ef633c5b0f30836b9acabc24d4fb4696d005ed2473d72d99b1f80c69c7a93872dbce2a9a283eb959db86ae3
SSDEEP 96:KIdKKmIyaWEKvqcRQ1hfbvg7zmzZZgKh1ZHglpZWnxtCz:wR/9RQ1hfbvqzm1Zt1ZHypZWnxtK
TLSH
T124914B0530BB06523E7E25189660865B57A1B263705CF82B3BF810B60F6BD269CFDADD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 ee99e27c08543a803fe2f03bc29f59a67e6547fbfae35f4a6a296fcf4dd52b51
MD5 cb24dbbee040f5efe940841ef697ee9c
SHA1 0caf3479a0abf8d5458a1786ffc05c30f6549d94
SHA512 f46967e379b713036e2e8387d62b4d74c4b31bc7edbe74bbea05fe71d837b33fd7e54587f804f30dd000ad25a893f2c579f24eabe1d66cb046bd65453049b6ee
SSDEEP 384:XZcIhsNMgZFRyif+c8sJ8Xl+22FuOObjI9G6w7Gl:fhvq72llou29Mi
TLSH
T108928E366C389C779DE3A552F49B39134EF8913BD7D96B84D2FCAB0D04969BC030A415
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 3176e206504a87cdcc2967158a81814c5dc5e1a015a29977c17855533b1f3aef
MD5 f6059e2d499181e79f1e977aa520c9d1
SHA1 77437ab49c2ad72ba68795bc747b3a0519fb3962
SHA512 fcc143d84099cc7c3ee3ad802d4f45c21252009753d0197c3ce6e47af0dc7879adf8af24cd6b1572acc02a2db3e4cc3feee1cfb782b0446bdbc44be098f34142
SSDEEP 384:BFiZcIwzsNE8TUNTUlIlgZFRmif+c8sJ8Xl+2YFuOObjI9G6w7Gl:BFQspwgVq72llGu29Mi
TLSH
T1DDC229F658E78836D9AE5B13E77E2D124EFCC067B694A644B3D89A0CCC565BFC306810
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 f2ec7c4bb4e65a965e82ce88d0449f25594d9d00070b3c14de5a0357ee949cce
MD5 06a84099820a0b18638a83603ea57036
SHA1 3f0e4c65163c7d54b3175134ec1dca0a85b5b64b
SHA512 1d8ff138fc85cb9002ba16c114c59440d357ae4e7bcb8c9267e8307ae0a20a81852edd7600d4e59af6711df26097b3befeecf58d8426516c924eac1851e1bdbe
SSDEEP 192:EONC6hZ0QmiUyuFpc/+jVKjzorDoJmt5wOZeUU6:EONC6o7pu+c8sJmc2fU6
TLSH
T1A702D83568686C778EE2AE45F48727235FE4112BEA956F84D6F81B1D00C779C2346836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 72b9f0c1b73bff6c89b07a2ff1eee494da60ffd3d7c1afaf44a0c62803f7ee56
MD5 92de1e52d1b8befee7d79d81c0f56bf1
SHA1 b6de1c34db524f7920ed7156951ef60c87daa601
SHA512 a7da794294c7e5ea839483a42467119039bcb92209f641ae4defdbc5247011ec9aaeaf0ae89cfff832d54dc53c59a244ba704da458663f6c0e39abedb738b534
SSDEEP 384:uZcIhsNM/ZFRyif+c8sJ8Xl+22FuOObjI9G6w7Gl:MhMq72llou29Mi
TLSH
T135928E366C389C779EE39552F49B39134EF8913BD7D96B84D2FCAB0D049A9BC030A415
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 f75535fcfd408b70924fb69c8195a07bd49f7c1353ce08d54afa3b51d81dcb47
MD5 8bd24554856b5a66a0b6b45f08bf1407
SHA1 3dfbf4fb90f5a34cb63bb67f9d03ee370a56384d
SHA512 9e6091899d62efeca28d58501ccf55f86d94b5a780bf715eda43a1a59b0d732b8022c052d4bb6cd36b06ed3cf455803a6cbdb3637cf2f40178cb1b459e1fd9b3
SSDEEP 192:dONN6hZsQmiUyOF+c/+jVKjzorDoJ8Xl+2r5cOqfqJU6:dONN6ot+u+c8sJ8Xl+229uU6
TLSH
T10E120B366968AC675DD2AA51F48731134EE85127EFC5BF94D2FC1F1C00DFAAC234A826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ff76d85c-68ed-4529-9a6a-ad7af0e04b63.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\ff76d85c-68ed-4529-9a6a-ad7af0e04b63.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 d1786d7c2357b4d370e7395ec02dbab97592a16fa8241a8e9bceecba273daf83
MD5 540af3c8477091c0007b2ef8a28a64b6
SHA1 ce2ec38c2430013d0a6cb153be99ca9b2502c553
SHA512 1dec9cbde3686009c203362d9d07e51a2117cae929af96e7039b9d97bdc931a9120c8b498765105ee85f6cb96620d10f217a62a26cfad7486e4f6cc11de73ecf
TLSH
T16A412C58B6F91148B3B76E5A6FF7A96D487A78372E0AC45E10110E4F0A23F44C8B1B37
MD5 SHA1 SHA512 TLSH

Submit Download