2cb351305c1e5a51d26b7531fa4e47ea32ea513d6c3b74ceb1da2a17cdf53bc8

Analysis

max time kernel
149s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/08/2026, 12:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
artist-kit-sites/drake-kit/index.html
Size 29KB
Sample260802-plhhcszsfs
SHA256 2cb351305c1e5a51d26b7531fa4e47ea32ea513d6c3b74ceb1da2a17cdf53bc8
MD5 734fe30178f77ead1a72ac15058945aa
SHA1 de352416527d53c372ae87cc06b11c1a18906eb1
SHA512 a2847aef34dcfdb8f34ef78b369db59c98794550797bfb3d6ba99f82722bff439041e3d63917e947bc9a6458577902559481573a739402a525a084b17ae9b6ca
SSDEEP 384:qY9YLvbG7hO8rbqjr0bEbbAbYbwbayTHaRwCCC3L4oAsCQAe8G/5DVsnCiB:hK3zrLJd/ICA
TLSH
T194D29477A210153F094762ECB3255BAB748B4712ED03A013EBF6A39D27FAEC2D51952C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4016	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134301471191947776"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2370214745-1838013427-2987045292-1000\{99E32065-1E60-43A5-8C83-043621DBAA33}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2192	msedge.exe
2192	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2388 wrote to memory of 4524	2388	msedge.exe	87
PID 2388 wrote to memory of 4016	2388	msedge.exe	88
PID 2388 wrote to memory of 4104	2388	msedge.exe	89
PID 2388 wrote to memory of 4104	2388	msedge.exe	89
PID 2388 wrote to memory of 4104	2388	msedge.exe	89
PID 2388 wrote to memory of 1356	2388	msedge.exe	90
PID 2388 wrote to memory of 1356	2388	msedge.exe	90
PID 2388 wrote to memory of 2364	2388	msedge.exe	92
PID 2388 wrote to memory of 3328	2388	msedge.exe	93
PID 2388 wrote to memory of 2364	2388	msedge.exe	92
PID 2388 wrote to memory of 2364	2388	msedge.exe	92
PID 2388 wrote to memory of 3328	2388	msedge.exe	93
PID 2388 wrote to memory of 3328	2388	msedge.exe	93
PID 2388 wrote to memory of 3624	2388	msedge.exe	94
PID 2388 wrote to memory of 1844	2388	msedge.exe	95
PID 2388 wrote to memory of 3624	2388	msedge.exe	94
PID 2388 wrote to memory of 3624	2388	msedge.exe	94
PID 2388 wrote to memory of 1844	2388	msedge.exe	95
PID 2388 wrote to memory of 1844	2388	msedge.exe	95
PID 2388 wrote to memory of 3888	2388	msedge.exe	98
PID 2388 wrote to memory of 3900	2388	msedge.exe	99
PID 2388 wrote to memory of 3888	2388	msedge.exe	98
PID 2388 wrote to memory of 3900	2388	msedge.exe	99
PID 2388 wrote to memory of 3212	2388	msedge.exe	101
PID 2388 wrote to memory of 4744	2388	msedge.exe	105
PID 2388 wrote to memory of 2112	2388	msedge.exe	106
PID 2388 wrote to memory of 1404	2388	msedge.exe	107
PID 2388 wrote to memory of 1596	2388	msedge.exe	114
PID 2388 wrote to memory of 1596	2388	msedge.exe	114
PID 2388 wrote to memory of 2192	2388	msedge.exe	115

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\artist-kit-sites\drake-kit\index.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ff807ddc188,0x7ff807ddc194,0x7ff807ddc1a0
  2⤵
  PID:4524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1952,i,3883696333974043423,5240822264114764007,524288 --field-trial-handle=2228,i,674179752112759619,8316589688903839214,262144 --variations-seed-version --mojo-platform-channel-handle=2256 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1632,i,10970986746238737893,3600024201358761689,262144 --field-trial-handle=2228,i,674179752112759619,8316589688903839214,262144 --variations-seed-version --mojo-platform-channel-handle=2224 /prefetch:2
  2⤵
  PID:4104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2472,i,12314105199052530143,14087544712789972749,524288 --field-trial-handle=2228,i,674179752112759619,8316589688903839214,262144 --variations-seed-version --mojo-platform-channel-handle=2624 /prefetch:8
  2⤵
  PID:1356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3448,i,13038773317681737536,12179320766903894912,2097152 --field-trial-handle=2228,i,674179752112759619,8316589688903839214,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:2364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3464,i,4403692908335220351,2010425224175337884,2097152 --field-trial-handle=2228,i,674179752112759619,8316589688903839214,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:3328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4160,i,7748209886063487856,11970267929991449763,2097152 --field-trial-handle=2228,i,674179752112759619,8316589688903839214,262144 --variations-seed-version --mojo-platform-channel-handle=4212 /prefetch:1
  2⤵
  PID:3624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4220,i,2375502148759416033,6600965703986551367,2097152 --field-trial-handle=2228,i,674179752112759619,8316589688903839214,262144 --variations-seed-version --mojo-platform-channel-handle=4256 /prefetch:2
  2⤵
  PID:1844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5000,i,13517525427633197676,17461234409067233360,524288 --field-trial-handle=2228,i,674179752112759619,8316589688903839214,262144 --variations-seed-version --mojo-platform-channel-handle=5212 /prefetch:8
  2⤵
  PID:3888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5040,i,7377461841090446692,7151378200080006767,524288 --field-trial-handle=2228,i,674179752112759619,8316589688903839214,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
  2⤵
  PID:3900
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5844,i,2986282799916615041,9975210650702270442,524288 --field-trial-handle=2228,i,674179752112759619,8316589688903839214,262144 --variations-seed-version --mojo-platform-channel-handle=5860 /prefetch:8
  2⤵
  PID:3768
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5844,i,2986282799916615041,9975210650702270442,524288 --field-trial-handle=2228,i,674179752112759619,8316589688903839214,262144 --variations-seed-version --mojo-platform-channel-handle=5860 /prefetch:8
  2⤵
  PID:3212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3436,i,1643849166341094785,15388491303940269676,524288 --field-trial-handle=2228,i,674179752112759619,8316589688903839214,262144 --variations-seed-version --mojo-platform-channel-handle=3596 /prefetch:8
  2⤵
  PID:4744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=120,i,9681857244956623558,1144013364326963995,524288 --field-trial-handle=2228,i,674179752112759619,8316589688903839214,262144 --variations-seed-version --mojo-platform-channel-handle=6268 /prefetch:8
  2⤵
  PID:2112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4300,i,17520011777126670469,7665304461323615058,524288 --field-trial-handle=2228,i,674179752112759619,8316589688903839214,262144 --variations-seed-version --mojo-platform-channel-handle=4464 /prefetch:8
  2⤵
  PID:1404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5396,i,7952028197904618661,1108713773973967400,524288 --field-trial-handle=2228,i,674179752112759619,8316589688903839214,262144 --variations-seed-version --mojo-platform-channel-handle=5380 /prefetch:8
  2⤵
  PID:1596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6152,i,418146912046877986,11887600977682695225,262144 --field-trial-handle=2228,i,674179752112759619,8316589688903839214,262144 --variations-seed-version --mojo-platform-channel-handle=5136 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2192

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3984

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

7e2bc3de-9a0b-420c-9f26-888a6c15abed.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\7e2bc3de-9a0b-420c-9f26-888a6c15abed.tmp
Size 20KB
SHA256 7679e7ccb1d4b99410793ef2632f5622f1059a4078d63c81c4225e55c67631ae
MD5 6956f2cc924a22c42c38bf5041708017
SHA1 73b8e0732535480d22fb7ea9083bba5b9bc258ad
SHA512 a5300a693fc61fd7ede8e7a93cc4f6ca440f315d8983f2f241a76768c25b0cdbcfec551c9dfdfe4fdf4070e8440dbb61dd0cb3a9c47745d55f9da280c08661cc
SSDEEP 384:QZcIhsNTULQZle+iuzX5od+d8yiXXFzVnTKwBODNZOCkWY:uhgZl7O1FzVnewBKZOZWY
TLSH
T198927E72683C6C675EE6F955F84B32138FF89067E7D42FA4D6ECAB1C0099598030BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 88b16d3840dc1dc65205285943eab8668887984c4333d1f2b353b948b778ff2c
MD5 42c96a13171d9e6ad6fe7993cbd5bb44
SHA1 cb6a4734a53456b81ac15fea372389c35b8569ad
SHA512 c611a3b3cf2043d2c5ff63619a7e27ff0ef29a0d5d7430320aa5964efbdcdffe8246ee821e2b68aabfd3578561207a1f6e8e32a92f2317dbd2c0c4863d10aed3
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7D:fwUQC5VwBIiElEd2K57P7D
TLSH
T1A7B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 39b8627875fea5ac5c5bfb887da12c15116e3fe81f200852c71d5699102c9044
MD5 e3962be2eb3bd350a67bf6309159a1cc
SHA1 c10632202b95ed6f7f4475b6483bf5196e4c5578
SHA512 d12d4acc23b51c071fbc9bf4db2f0575a6b43ec7894b272035e4c01dfce30099cd3ef90a1009dd1e6284cfbcf7a37fd3b79490739946700a2c61ec578374cbe6
TLSH
T173D08C677A0E7815E72F8231A413E360A76B4072A5629702F324C81DA9BC8D85BE63D7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a59087fbda784cffb013f4e2a0bf13a7fca483c48e8a7fc15fa022402eb25d72
MD5 dd54db185d82309b854bfa7657ba4600
SHA1 d01c14e8b4dec85ed2e1671545a868fd7ad4fa95
SHA512 f014ab84dd934b90e006883b74ad349d05f60071e57d2cf0bdf8a9bce118654c92139263e082094b602f6900a71e9a7848754994a2ea88642b2376121b581d07
TLSH
T165D08067354D7815E71F42319413D350576B4072A562D702F314C41D957C4D857D53D7
MD5 SHA1 SHA512 TLSH

Submit Download

3f809ee1-89de-4da4-826c-cb13d91d970f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3f809ee1-89de-4da4-826c-cb13d91d970f.tmp
Size 12KB
SHA256 fd96b9948fc2648ba8aab3a181fd573f6f1a5ef49d7a642332c84b00b78fafd4
MD5 a75e2bdb8d76cc90d961da70aa971095
SHA1 f04c5775f51d11a7265e12354102dd5565f84e87
SHA512 9bba81b0bfd44cb7e6ecaa1beb41e29b3675597374615a3970078e237b10548ff107ff8123a423a0bfbb063a015ada8c2fb4f1fef94c9eea20cbadc503eadd53
SSDEEP 192:sxZA/yM/jK1Ml8Mk2/fqspYxfIdpdgHW6+WNGYHjPX+3IgrJ:sxZA7M2/fqspYxQeHbG8Q9
TLSH
T10542E9126A34A977CCCBD20DFA557F53D6F94472A2900E44A9FCDA1C04E6BED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 e399a34f543e148e0f3f2c8e1fff77f809fff7e0ffc1ceccd5a65742d781072c
MD5 9db0a611e3af3d9ee31865226b0019a4
SHA1 753ab1d87a4b494d87989ea8306d3d5aa261d6a5
SHA512 aa5b586936830f3dada6966b0246951104d17e59cc4141b7d18d5e9b2915a8f09d444b89ef359b67fe1eb822f721b9c19f06e3b3e9ca20e5728ec6f15829c645
TLSH
T103714109829308B2F3959A3DDDF2551B7878C74609571F76CD50BF3DFD05B11A61AC05
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5897d6.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5897d6.TMP
Size 3KB
SHA256 effdbb3130f99abe81b35de5945424b804556d428fee5f508af306a55e3e4254
MD5 b3c04edc5b8c937df71ff472ccaaf1eb
SHA1 fa70e52d26d59b52ade6e52d1783dd9e092e501c
SHA512 bd72a7ac9a573491a70ab3f609513cd7d32420172ce4a897478877e1685f6f24bea278dc8b1c7e2abaec0886b4e5399889b071a74c8ca14abc8ef61b13144981
TLSH
T1F9715E09829308B2F3829A3DCDF2151B7878C74A0A5B1F72CC10BB3DFD05B11EA2AC05
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 478B
SHA256 a6caba33830c783eb3efec3b721f8a8767a36e2864d3920380ed6b5b6b478fd1
MD5 5c7f7d6fc7deb50cee09a467890aa3ef
SHA1 ecc395fe68ae9ad83eb30b6b2e0032986c372a66
SHA512 a21b3aee5f45d14744b15675ccc4454ff5d0a372089ed583e812ac2db6546f948479c886106e8ce2460b93f3fb906c5273c2541332b57bae75bd80bbbdb4915c
TLSH
T11FF09EB383E059BE8A0142F05918AE1BCE2D0402431C7C65C6D4BE2B83E2065D40199B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 4ffdd322f5a6043cb4464be3ecea712bcdf94b9800adb6b52d430a91a71b0a66
MD5 cd85c74cff3b6582c2852393b85e4b5c
SHA1 2debfc786646bb647e81834b81fd575f7314ade5
SHA512 6feee0e3a78126f530e8698ee1eaa7a122dd74f8c8bdeff7a129791076faf74cfc181acdbb815a407874186337f62be6a60512519dcda522390e419e18257ba9
SSDEEP 192:sxZA/yM/jK1Ml8UQyk2/fqsoYyfIdpHgHW6+WNGYHKe6+3Ig5BJ:sxZA7qx2/fqsoYyQAHbGnQB
TLSH
T14C52E816AA34A977CCDBD209B9417F53D6F94472A2A00E44A9FCDA1C04E7BED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 4d032707769bd3deed260a1bda513989ce5a5aecf2e6d37c44d58f1209b940dd
MD5 d4febe45ce16e7450bb59bd409f347b3
SHA1 822bf7dfd4cb8380cbcd2c5f03bde0ababaff07a
SHA512 3989cf8ddc3ee3afd77dfd90afc31f109c0c594a3c492eddbff2c5d36e7a05dd3f56584c8f0ee125da2cb9e128899e2b85f8dc2890944fe92010b86963cd84d8
SSDEEP 768:cLUZYTMWvg0Po8F1+UoAYDCx9Tuqh0VfUC9xbog/OVOeLlPZ4RYroVh0L:cLUZYTMWvg0Pou1ja7eLZmRjYL
TLSH
T1D8D20A2F280CCB7E4F844E5DEC2A6F863ED801CB5A584D5447EA894C02CB7EF512759B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 40497eb30ab2c183532a67774bbd3cb9291150f12660c35148c543cdb9a8ed01
MD5 1721272c5123869f2c91f5a3e0b8eead
SHA1 c395d460ff9e27e5ae728c240c5a499ea84aea84
SHA512 4c2e9220172482fbcd5c88bb4ceb9335bf9793d0b89f0a59ea2aad49119a5a20778fa10fed2016ad657ab242516e8ff5d0e812ac7fdb534463b2fe88cfdacff4
SSDEEP 96:KA1eK2AgHWKIAWSi0KDi0+0KjKWG36K0ID:E0lPUzNW
TLSH
T1DDD1095272BA02127C7F3A0893D4976FCE52B1633018E52B7BAC01B58D26D269CFD9DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 745e23797a63cd7abc8e3c5c00355b27a9ebe70a748b3fcb3754405f62f10720
MD5 5fc3b2b5a5c55debfb7f1bedd8bc7779
SHA1 cf578751a89538d1a50230db37e35edfafb67ca6
SHA512 6f19c6b54b622f13b28325ae972232f5b37bdf1e140537965491f62b1e75ca70e10386bd9c51a574866e3bb168b29099e316461d5f27db4154ec8d6c0eda11a4
SSDEEP 384:4ZcIhsNTUsQZle+iuzX5od+d8yiXXFzVnTKwBODNZOCkWY:Gh/Zl7O1FzVnewBKZOZWY
TLSH
T12A927E32683CAC675EE6F955F84B32138FF89067E7D52FA4D5ECAB1C0099598030BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 ade0add4279d6dfff907f83a4c758ba925ce913cbd67b28598307f5bece6884a
MD5 7d83e282d8ba25e95467e28647abc4d6
SHA1 984f1de1faf2bfd0570d85f39a95102c9ff40d4e
SHA512 10685ee7e6f92d8cc3c27b8376e6450555fc721aa0e660ea19cc6253f096599e28725892291b7f94dfa2ca937fc29dd7364b8d95543d524f1698c09f03cb0b4c
SSDEEP 384:XZcIvzsNTULQZle+iuzX5od+d8yiXXpzVnTKwBODNZOCkWY:fLgZl7O1pzVnewBKZOZWY
TLSH
T140928E32683CAC675ED2F955F84A32138FF8906BE7D52F94D5ECAB1C00D9598030BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 1586cabfda0039887aede1ada7231706ff2364366919b4ccca4c1431806cba3d
MD5 2cc2429b9815ec38c9b1610574b1cae0
SHA1 460b5a437d2b2e50fa26d073bb3f4fdce2743dab
SHA512 64c83f2a4145e5a628ec70c17eef4c9b8f5270c2ad8208126e856e51585abdfbfc29c82c8735671b8e2a8ed0e5161ced13e44f94cdb02875f2f0e958a9cc62c9
SSDEEP 192:yON761VWQmiUy2vgGX5Obd+j1jzoryiyR//az53EQU6:yON76WfgGX5od+d8yipzeQU6
TLSH
T12A02C836A8686CBB8EE2BE49B44B37135FD4106BEA956F80D6EC1F1C00D765C2306877
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 d4dc9731abb2ab11d59706874fdab7d465d5207d78a9b1697fe2de2a9a7f9b81
MD5 66fb23153edde4621be4918d627163b9
SHA1 032e85d767993062ed7975c557d50e7550fd46c5
SHA512 88af58a7045f725bf68433639ec10362f532de266c0bb7181b60f4b3a87c6bbe2d1d1c5309abb9a9c82a7cbef6173b240e1a2c87405fb4f4ec31034835c96940
SSDEEP 192:SONp61IWQmiUy0v1GX5Obd+j1jzoryiyR+XjTNjJzhqEU6:SONp6ZX1GX5od+d8yiXX3zVU6
TLSH
T1CE12F933A468AC6B5DE2B955B44B32139EE5516BEB897F80D6EC2F1C00DB59C130AC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4016f0dc-b005-49dc-a2b5-208834cf2f01.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\4016f0dc-b005-49dc-a2b5-208834cf2f01.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 934a86954d6384db67919b29039abe2875ba8fe0f5bd4c8781c7437019c2d39f
MD5 c965b8dd9cf8d2e843ef4b2870c61301
SHA1 55f7ef44fd58ef39372e849ea8befefd9709baf8
SHA512 192d1abdeb2ad07affeaaf5a4b9848fa9146df50690ccce532e85f2f6d4f34869616c55f8ea03b9af7ade03e4d52df621f5d5538fe3108dda71d9f2be15c536c
TLSH
T156413958AAFE1148F3B76E5AABF7A86E447F7D732E06D46D10010D4F0662A40C871737
MD5 SHA1 SHA512 TLSH

Submit Download