hxxp://events[.]kiloapps[.]io

Analysis

user interaction
yes
max time kernel
149s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
31/07/2026, 08:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://events.kiloapps.io
Sample260731-kcdqlafe33

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4116	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134299600301357212"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1788976790-1541110888-1636651838-1000\{A475B9BD-281C-4C8B-9683-E8F4E93484D5}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1828	msedge.exe
1828	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe

Suspicious use of WriteProcessMemory 37 IoCs

description	pid	Process	procid_target
PID 4176 wrote to memory of 2024	4176	msedge.exe	85
PID 4176 wrote to memory of 4116	4176	msedge.exe	86
PID 4176 wrote to memory of 2444	4176	msedge.exe	87
PID 4176 wrote to memory of 2444	4176	msedge.exe	87
PID 4176 wrote to memory of 2444	4176	msedge.exe	87
PID 4176 wrote to memory of 2260	4176	msedge.exe	88
PID 4176 wrote to memory of 2260	4176	msedge.exe	88
PID 4176 wrote to memory of 5100	4176	msedge.exe	90
PID 4176 wrote to memory of 5100	4176	msedge.exe	90
PID 4176 wrote to memory of 5100	4176	msedge.exe	90
PID 4176 wrote to memory of 4552	4176	msedge.exe	91
PID 4176 wrote to memory of 4552	4176	msedge.exe	91
PID 4176 wrote to memory of 4552	4176	msedge.exe	91
PID 4176 wrote to memory of 3832	4176	msedge.exe	92
PID 4176 wrote to memory of 764	4176	msedge.exe	93
PID 4176 wrote to memory of 3832	4176	msedge.exe	92
PID 4176 wrote to memory of 3832	4176	msedge.exe	92
PID 4176 wrote to memory of 764	4176	msedge.exe	93
PID 4176 wrote to memory of 764	4176	msedge.exe	93
PID 4176 wrote to memory of 4468	4176	msedge.exe	96
PID 4176 wrote to memory of 4468	4176	msedge.exe	96
PID 4176 wrote to memory of 4468	4176	msedge.exe	96
PID 4176 wrote to memory of 3476	4176	msedge.exe	99
PID 4176 wrote to memory of 3476	4176	msedge.exe	99
PID 4176 wrote to memory of 656	4176	msedge.exe	100
PID 4176 wrote to memory of 656	4176	msedge.exe	100
PID 4176 wrote to memory of 2052	4176	msedge.exe	102
PID 4176 wrote to memory of 824	4176	msedge.exe	107
PID 4176 wrote to memory of 3076	4176	msedge.exe	108
PID 4176 wrote to memory of 8	4176	msedge.exe	109
PID 4176 wrote to memory of 4308	4176	msedge.exe	113
PID 4176 wrote to memory of 4308	4176	msedge.exe	113
PID 4176 wrote to memory of 2680	4176	msedge.exe	119
PID 4176 wrote to memory of 2680	4176	msedge.exe	119
PID 4176 wrote to memory of 2256	4176	msedge.exe	120
PID 4176 wrote to memory of 2256	4176	msedge.exe	120
PID 4176 wrote to memory of 1828	4176	msedge.exe	121

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://events.kiloapps.io
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ff805b2c188,0x7ff805b2c194,0x7ff805b2c1a0
  2⤵
  PID:2024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1936,i,12400043037698744216,1399957034467443670,524288 --field-trial-handle=2268,i,6148191036388834801,16374368235055587991,262144 --variations-seed-version --mojo-platform-channel-handle=2320 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1628,i,212805250584016055,1251901346989712994,262144 --field-trial-handle=2268,i,6148191036388834801,16374368235055587991,262144 --variations-seed-version --mojo-platform-channel-handle=2264 /prefetch:2
  2⤵
  PID:2444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2612,i,2369932686670048455,17514180703976707203,524288 --field-trial-handle=2268,i,6148191036388834801,16374368235055587991,262144 --variations-seed-version --mojo-platform-channel-handle=2784 /prefetch:8
  2⤵
  PID:2260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3464,i,12806388041300224002,4678884863567210185,2097152 --field-trial-handle=2268,i,6148191036388834801,16374368235055587991,262144 --variations-seed-version --mojo-platform-channel-handle=3536 /prefetch:1
  2⤵
  PID:5100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3460,i,5968055978606013105,6338645135490600439,2097152 --field-trial-handle=2268,i,6148191036388834801,16374368235055587991,262144 --variations-seed-version --mojo-platform-channel-handle=3532 /prefetch:1
  2⤵
  PID:4552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4240,i,11183432555328693128,17017480247605989769,2097152 --field-trial-handle=2268,i,6148191036388834801,16374368235055587991,262144 --variations-seed-version --mojo-platform-channel-handle=4244 /prefetch:1
  2⤵
  PID:3832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4296,i,10306008752443623876,13739865233485941735,2097152 --field-trial-handle=2268,i,6148191036388834801,16374368235055587991,262144 --variations-seed-version --mojo-platform-channel-handle=4344 /prefetch:2
  2⤵
  PID:764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3708,i,8699687318079179155,12307713017624366491,2097152 --field-trial-handle=2268,i,6148191036388834801,16374368235055587991,262144 --variations-seed-version --mojo-platform-channel-handle=3748 /prefetch:1
  2⤵
  PID:4468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3424,i,10295988272015811680,12748059089850588624,524288 --field-trial-handle=2268,i,6148191036388834801,16374368235055587991,262144 --variations-seed-version --mojo-platform-channel-handle=5240 /prefetch:8
  2⤵
  PID:3476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3484,i,13839219925984192601,5047798078625891052,524288 --field-trial-handle=2268,i,6148191036388834801,16374368235055587991,262144 --variations-seed-version --mojo-platform-channel-handle=3628 /prefetch:8
  2⤵
  PID:656
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5880,i,12500702921663947534,4477739094567059248,524288 --field-trial-handle=2268,i,6148191036388834801,16374368235055587991,262144 --variations-seed-version --mojo-platform-channel-handle=5920 /prefetch:8
  2⤵
  PID:4388
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5880,i,12500702921663947534,4477739094567059248,524288 --field-trial-handle=2268,i,6148191036388834801,16374368235055587991,262144 --variations-seed-version --mojo-platform-channel-handle=5920 /prefetch:8
  2⤵
  PID:2052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4352,i,561389675409066374,8282242504842124639,524288 --field-trial-handle=2268,i,6148191036388834801,16374368235055587991,262144 --variations-seed-version --mojo-platform-channel-handle=6248 /prefetch:8
  2⤵
  PID:824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4384,i,8951275961133831209,16806880738009144332,524288 --field-trial-handle=2268,i,6148191036388834801,16374368235055587991,262144 --variations-seed-version --mojo-platform-channel-handle=6272 /prefetch:8
  2⤵
  PID:3076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4376,i,7473784972573377804,8078495469327359532,524288 --field-trial-handle=2268,i,6148191036388834801,16374368235055587991,262144 --variations-seed-version --mojo-platform-channel-handle=4524 /prefetch:8
  2⤵
  PID:8
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2940,i,7402052577129919712,8022615491942798831,524288 --field-trial-handle=2268,i,6148191036388834801,16374368235055587991,262144 --variations-seed-version --mojo-platform-channel-handle=3984 /prefetch:8
  2⤵
  PID:4308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4296,i,4074737698152188971,8155633050945984233,524288 --field-trial-handle=2268,i,6148191036388834801,16374368235055587991,262144 --variations-seed-version --mojo-platform-channel-handle=6384 /prefetch:8
  2⤵
  PID:2680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5408,i,18059264272608840390,17601718700245943604,524288 --field-trial-handle=2268,i,6148191036388834801,16374368235055587991,262144 --variations-seed-version --mojo-platform-channel-handle=5844 /prefetch:8
  2⤵
  PID:2256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6124,i,3560418078318899670,14067859437602629405,262144 --field-trial-handle=2268,i,6148191036388834801,16374368235055587991,262144 --variations-seed-version --mojo-platform-channel-handle=5432 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1828

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:696

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 92b83a0e542b7bb3ed324c35b5f2a40c47a6351981065b804e4d9d80ddd6d7ee
MD5 9ea20a12d0c030ae7f84014f382662b7
SHA1 7912569189cf07c1ce092a268e67e9f391b7c8c7
SHA512 39ca414f13163c8479fe7650ae0dd1607b267fe3f319c09aec7bd5f68448e9ac604351069bf6b166b3f897d3afb5d7f35e609b9fc72b9debbcb05bad8fad7d81
TLSH
T132D02B20FF04E002D1072172540047100E0848902093C140E030441CDCEC804D395307
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7d64d2777f444a09968d6c155732e22d743fcf7c319c222bc06f6bb97808e489
MD5 89bc5edb6bd922f1cf8ec5536b066fa6
SHA1 c50aaf0fe1444780bb68ee7ab6e1c7468c2f303e
SHA512 77a1265c1484940562f1514202a0072e343efb323e1dcdb979fc9b7a2c69d85b814c076828b260c0b86a19e482ebb0a2df850f9b7c130a327861a7c56e26cde8
TLSH
T15CD02B20BF04E402D1072172540047100E0848902093C241E030441CCCED844D395307
MD5 SHA1 SHA512 TLSH

Submit Download

282fc87a-071c-49d1-a804-1928425d5548.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\282fc87a-071c-49d1-a804-1928425d5548.tmp
Size 10KB
SHA256 114727daa030cd92a03183dc3b75ac3a0ce4978e35d60aea7924a9ab60aa21bb
MD5 4cea43d4a22209a702c48807f30f847e
SHA1 9c30a78d893a2c95e83dbe674f2dade78d22f372
SHA512 d2c23f96081bc853e7cc2d70a289c714c17b85407e8129377766b244113bcf5362dee27225ed571c2bbc38a3732124c8d5d6e8ae20023ee6d8f46d494c10d148
SSDEEP 192:sxZBRvk1/ftswKEAVXIdpKlUHW6+WNGnr/YvdGAVVQIg5CJ:sxZBK1/ftswKEnPHbM/SMo
TLSH
T14C32B8566E28997B8CCBD20EBA55BF53E6F95032A1901E48A6FCD71C05E76CD130B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 79f905104a8a0fba6d2e4dc66342448ae1f7680e20cc4262c07636316bcfa0c1
MD5 d0fb03f8646fba60f7d571b7525d795c
SHA1 8cd60d2fb2ef245bb58e689cd3cc6c03d4c49dec
SHA512 3132561d43719f5bbdd9aa42846c5a115bf66dd5c6d3908c3a85c819198a049da25d63f46cb6e319616e6d63154b7ff2e56b1a5e755ff425b904105baa8d79cf
TLSH
T135E026C435CCC36FA2406487C16C538CC291374A93C8698A2700D89CB881144A7CA7A8
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 e3544617a3566bf1cdca0e73e92746e8979e6d80181c3a3ce32d7c3694a62e31
MD5 99b29c746d176cdc54b2f54d63b742c4
SHA1 eaeffd70abebce77e262d2da65440f33a52fa88c
SHA512 19c866e3110da4635f1f712d9c13566c551c3271b67e94c467ecdcd2e57139389062b8d508502a662bbb4e9f62c5a9880403308e4d8fe70fa9f0234220d6ddd5
TLSH
T13571E432159301B4EF40CA3398EA824D323781FBF90B9E535490087F290636CE75688F
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe589064.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe589064.TMP
Size 3KB
SHA256 92a30e4d525783e4cfebb923968bdf13ccd0d7036f948cf5f546b69dfec51a00
MD5 114e0da7660a6175480b3c2ea0b6945d
SHA1 3195db72f17c17dcf14769629f7d478db6bc350f
SHA512 a9cf9e3121ab273da7d11aa0ba9d047d3f028d8787e0263f4f37e65d32e7cee37f0af393b4ae0973a8d9625e70650e341add55aa054703ac9ac5be6df1320679
TLSH
T12A71D536159305F4EF40CA3398E9825D723785FBF90B9E535490087F290636CE75689F
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 48d8e4d3862b01246bd8d71903b95278286267ac6e3650320dfa49985429ceeb
MD5 ebd97bdef2fcb57298fcc5559c7983c7
SHA1 33182cdccd52cf569de617697b053ef0b27837cb
SHA512 a063de1df09f4d5d0840c976db2aa133b1e7fc679785f6c58d1b2a49ca10b0b007e9442645984c6f6884aaa96a1f924ac063d91828ea6cfffc6f1d10c61e521c
TLSH
T16731AAF3C7E58A6EC90152F45A246E2BCE1D0A14432C3D2AC9D5FF1BA3E2571E002A5F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 70c9a30491a3dbc083d5394edf401dd18c4fe228300ea954b87fbf04761cf116
MD5 ccf40332775608568af0ed1f3c3a2f5d
SHA1 7f23f09917561aceec71b03e7f07b58075eff117
SHA512 76d4bbc72c38493670c409b018e58597152bfc534b77af3efa9ae8975abf74e1e7de0dcda7a8e305df6b8fe921c242338c9e0f41f0ead683d7cc3637dd4151d7
SSDEEP 192:sxZBRvk1/ftsD+EAVXIdpKlUHW6+WNGnr/Yv2SAVVQIgrJ:sxZBK1/ftsD+EnPHbM/xM9
TLSH
T1A622B9566E38A57B8CC7D20EBA55BF53E6F95032A1D01E48EAFC961C04E66DD130B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 aab36a94d9d8fe646f046ce30645c6cf59d486cc1a9d53e65837164510d9916d
MD5 e8026fd7c5acfe0d27fedb2a1bee29cc
SHA1 3da76080dd54cd173ced94459de93a6128ad27e9
SHA512 e9ba01126df11e906186940ea6ec085c7ab18c78b173b615619fdff41e163e506e34f158ee51ad8eed2015e00fb87f61411e04892100e55e0b4acf3d61a19597
SSDEEP 192:sxZBRvk1/ftsw+EAVXIdpKlUHW6+WNGnr/Yv2SAVVQIg5QJ:sxZBK1/ftsw+EnPHbM/xMa
TLSH
T12B22C8566E38957B8CCBD20EBA55BF53E6F95032A1D01E48EAFC961C04E66CD130B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 949df6b4a33f86c13cf8c52150d2e8bb7764cf814200fa976b74ae6fe85dc50d
MD5 e8159a7b0c8b8f2c31189109d61abfe0
SHA1 4724bfa4938235a75fbeba776e0d5d402c13a818
SHA512 df5e15450f734d64a46d672a264f1ea499363bf4f39bc124fe6fafc56ece6a1ace80419396c015a64de2d59a8987338776562d084fd19d86b325d7548242ef8a
SSDEEP 768:9oee3rxWvhffn8F1+UoAYDCx9Tuqh0VfUC9xbog/OV4cLly0pberoiC:9oee3rxWvhffnu1jatcL88b1iC
TLSH
T1A7C2EA3B640CCB7E5F800A9DEC5A6F976FA802C7A7548D4087F9994C02C77EA512A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 43ba60e102de356664f50bdc565554ca83e3fde76f74173f71ddbeff4339e973
MD5 be47ea05593f3077a85bafb84dde570e
SHA1 4b4f65034ff92687c536ce54f15ea89d755263c5
SHA512 9763d672c3a80898ff77334bc97ef1e032e920d03a15b7f7bae95b2b00e08dd92f62f4438d96598b18aeba16a574834379407d9064805d224e4503221a26ab0f
SSDEEP 24:KdxwLfxwyxwRxwIaxwNdxwBxwhxwx4xwlxwB+xwsIjxwdxwxKixwOhaxwzxwx1E2:KYHIhKggkXypqI/Kva47ylVIhKeEUQ
TLSH
T1C591EF07747A02023CBD2958B2979637CE4535A3745CF4AEBFB904964E26E120EFE8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

favorites_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\favorites_diagnostic.log
Size 1KB
SHA256 dfea62da7f744494d54707c36549f2b519b0293f17d4b15c3ce1198e57bd1088
MD5 08a2b7639d42e57db5a14abbe1d8807d
SHA1 8eae805e6386121dbff541c51db607f898474b8d
SHA512 f7b23981ac3329afd0e09ef8014a0bab53377e6f1c8990495e1600d5faa8295697112dee293b95a40ea5587c2cb3e7c97d14da9a45dbe9bdd7a23e86cea343e5
TLSH
T17B212385F3AD38DD6E8ABD41C21E5413E4E17E5B174D58B1273E48F84F48C160E2ED25
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 6d6e9b6c20ecccdb77fa7b545488ee7b6a88d2567c61056ccada55a03c3f59a4
MD5 b5e5c031485aaed2ae8dff40f5e3eeb0
SHA1 188414860f98e04ddb61b8bcc9a6a63d104a1f12
SHA512 ff1d59b2b53502a22af82feb4a90d3d2963df09e9384d3e84bc7cfaa3c669a0e8034e9d2898b58dad27ee959e7b2751cf345c9e480824ac82bb2009e2abaa84a
SSDEEP 192:uNm+xasuheOwQxMGsNopQ9KGM7dSuQmiU1t/9j4MToqC5TagHFd3EP8z1rdqz/HN:fZcIhsNopf7Yqn9M55+YdUUrO/t
TLSH
T1D3625CB2AC749C3BEDE7E146F48A26135EF4916BE7C45A40A1ED7F1D00DA258130BD1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 0f6af830ac745486543f150bed8952a8aa63e04f94c4675dc36f42c3951f47d2
MD5 0252a87fec1f420120e5f79be1b5cbfc
SHA1 d46833cc9dff24cf7f50764f49fb61bf86ab47d5
SHA512 487692fc76fa32aead361650d42dc6e5d0b1a702e9a464f76348e544d44e8cf7a174007bb2dbcc7bc401f8c16e9ee337b2a4614d48cdf17fb7395c8a2fed237e
SSDEEP 192:uhm+xasuheOwQxMl5zsNomQ9KGM7dSuQmiU1t/9j4MToqC5TagHFd3ER8v1rdqz1:NZcIozsNomf7Yqn9M55+YdU6rO/t
TLSH
T1DA724CB2AC649C3BEDE7E146F48A36135EF4916BE7C85E40A1ED7F1D00DA258130BD1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 f85340591cec6af8c8a065ac3dd5027bc035cc31ed75600f515308c5048600c9
MD5 0562487b861f8c99bc0c1d28df91411b
SHA1 6179006e2590471b0dd3fb9835986ac20fe09ef8
SHA512 46af38631ec69961a009613d6fa7cc8f7f48d2db3ae0df2d60d3eb123ed63e49f6aee001db2253f2f411c6035e856df1deaf91f5bbe5f95cd71d42704d90517d
SSDEEP 192:lONz6vMtPQmiUyeLThToqC5Ta7847rNldU/u:lONz6UtR1T+5+7rZU/u
TLSH
T11902F87ABC686C7BEAA3AD45F48E27171FF4117FA5905B44EAE82F1D00D724C1307926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 8ee3cbf2a213cc58d3807db644c1f399000446bd2e4462efa4ad464862ddcd67
MD5 b339627b75f32e633af30265b36f4677
SHA1 7aff768d9846c2489c9e0d2a801aa33486ba2182
SHA512 cf2a2b6d7c1b20683c4bfbae52122d53227fb91a7bc472c8ce028ccad53c44ff894e66f5e7b7783cfa82de27b8365be27153b2912d3d3c9d73a96fcc63dc5db5
SSDEEP 192:uvm+xasuheOwQxMGsNomQ9KGM7dSuQmiU1t/9j4MToqC5TagHFd3EP8z1rdqz/HN:BZcIhsNomf7Yqn9M55+YdUUrO/t
TLSH
T1B7625CB2AC649C3BEDE7F146F48A36135EF4916BE7C45A40A1ED7F1D00DA258130BD1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 9KB
SHA256 9239ffc461dd2974cb6680a3402217dcd1dce7ee44b0248dd7da7608a28d83f0
MD5 3445124d4f2817ba7c47b411dd535790
SHA1 21fd760a968cce737a7830371f8c2352adc77762
SHA512 cd11b3721b302c16dc7f6d81738b4ab9199a8c245a63339e06a96e630470b9fa14e8ce0d2e0118e3c5fe48805afd416a5ee1a8dcb04bead4b0076cef81ad7a41
SSDEEP 192:VONB6vMsPQmiUyULchToqC5TagHFd3E480IrdqzU/u:VONB6UsRBc+5+YdUdrOU/u
TLSH
T14E120A76ACA49C3BAE93A546F4CE26131EB4926BEA846F40E6DC3F1D01DB25C1307D16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 8d59d2d394039d73d707e9d1e0fd18784aa45ec8d8ab7ef72bae1418515f0787
MD5 1ff4fc467e8d341bc37dfe60a5042818
SHA1 08c63f57bed001470c5611412fa5697f939ceb66
SHA512 0c0f4f94076d9080466bd4a771b1461dbaa649cd5aae68e2bdfa543172b29326edb7a524fd19dd4209652b8e35d917dea0f01434e81c1d830a328aa16641f5f6
TLSH
T181414D58AAE91158B3737E56AFF7686E487EB9732E17D45E10010D4F0A22B00CD62733
MD5 SHA1 SHA512 TLSH

Submit Download