4a2166671acd12577a6612b0363e1b9746a8c3e7f1e168c051cee01c880f7eaf

Analysis

max time kernel
148s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/08/2026, 12:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
artist-kit-sites/future/terms.html
Size 5KB
Sample260802-plhhcszsfs
SHA256 4a2166671acd12577a6612b0363e1b9746a8c3e7f1e168c051cee01c880f7eaf
MD5 167ed9f77a328fb385535e274ef52be7
SHA1 b6548c61e7629703f7e3563e0c6abf87c3128fc9
SHA512 4eb5beb37cb096cae2f992d2cc65ba5c7f65115b2249b40bc1be372c4d56a3c18eda0cedd430ff2c64b31d6c3008e5b2fb6f84ba3bfe941f44fcc65f70fd1a67
SSDEEP 96:lSqoeSFW0xH7XWH0aet4eesD3Sx5D5+toctyN2rSklGGj:qePGNaeKeesrSxmvKk3j
TLSH
T140C10B2AC3C60127A1DA116137C777E8B612E070771A49617A1E021C9FE7F31E27B59F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4344	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134301471180533659"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-204488895-2999877624-296153668-1000\{F503BB6E-8AFA-4BEB-8B37-598A27C07DA2}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4336	msedge.exe
4336	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3748	msedge.exe
3748	msedge.exe
3748	msedge.exe
3748	msedge.exe
3748	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3748	msedge.exe
3748	msedge.exe
3748	msedge.exe
3748	msedge.exe
3748	msedge.exe
3748	msedge.exe
3748	msedge.exe
3748	msedge.exe
3748	msedge.exe
3748	msedge.exe
3748	msedge.exe
3748	msedge.exe
3748	msedge.exe
3748	msedge.exe
3748	msedge.exe
3748	msedge.exe
3748	msedge.exe
3748	msedge.exe
3748	msedge.exe
3748	msedge.exe
3748	msedge.exe
3748	msedge.exe
3748	msedge.exe
3748	msedge.exe
3748	msedge.exe
3748	msedge.exe
3748	msedge.exe
3748	msedge.exe
3748	msedge.exe
3748	msedge.exe
3748	msedge.exe
3748	msedge.exe
3748	msedge.exe
3748	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3748	msedge.exe
3748	msedge.exe
3748	msedge.exe
3748	msedge.exe
3748	msedge.exe
3748	msedge.exe
3748	msedge.exe
3748	msedge.exe
3748	msedge.exe
3748	msedge.exe
3748	msedge.exe
3748	msedge.exe
3748	msedge.exe
3748	msedge.exe
3748	msedge.exe
3748	msedge.exe
3748	msedge.exe
3748	msedge.exe
3748	msedge.exe
3748	msedge.exe
3748	msedge.exe
3748	msedge.exe
3748	msedge.exe
3748	msedge.exe
3748	msedge.exe
3748	msedge.exe
3748	msedge.exe
3748	msedge.exe
3748	msedge.exe
3748	msedge.exe
3748	msedge.exe
3748	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 3748 wrote to memory of 3012	3748	msedge.exe	86
PID 3748 wrote to memory of 4344	3748	msedge.exe	87
PID 3748 wrote to memory of 536	3748	msedge.exe	88
PID 3748 wrote to memory of 536	3748	msedge.exe	88
PID 3748 wrote to memory of 536	3748	msedge.exe	88
PID 3748 wrote to memory of 4576	3748	msedge.exe	89
PID 3748 wrote to memory of 4576	3748	msedge.exe	89
PID 3748 wrote to memory of 3244	3748	msedge.exe	90
PID 3748 wrote to memory of 3244	3748	msedge.exe	90
PID 3748 wrote to memory of 3244	3748	msedge.exe	90
PID 3748 wrote to memory of 2800	3748	msedge.exe	91
PID 3748 wrote to memory of 2800	3748	msedge.exe	91
PID 3748 wrote to memory of 2800	3748	msedge.exe	91
PID 3748 wrote to memory of 3128	3748	msedge.exe	93
PID 3748 wrote to memory of 1196	3748	msedge.exe	94
PID 3748 wrote to memory of 3128	3748	msedge.exe	93
PID 3748 wrote to memory of 3128	3748	msedge.exe	93
PID 3748 wrote to memory of 1196	3748	msedge.exe	94
PID 3748 wrote to memory of 1196	3748	msedge.exe	94
PID 3748 wrote to memory of 1816	3748	msedge.exe	99
PID 3748 wrote to memory of 1816	3748	msedge.exe	99
PID 3748 wrote to memory of 4148	3748	msedge.exe	98
PID 3748 wrote to memory of 4148	3748	msedge.exe	98
PID 3748 wrote to memory of 464	3748	msedge.exe	101
PID 3748 wrote to memory of 3392	3748	msedge.exe	105
PID 3748 wrote to memory of 2520	3748	msedge.exe	106
PID 3748 wrote to memory of 3280	3748	msedge.exe	107
PID 3748 wrote to memory of 4116	3748	msedge.exe	108
PID 3748 wrote to memory of 4116	3748	msedge.exe	108
PID 3748 wrote to memory of 3908	3748	msedge.exe	116
PID 3748 wrote to memory of 3908	3748	msedge.exe	116
PID 3748 wrote to memory of 4336	3748	msedge.exe	118

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\artist-kit-sites\future\terms.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffd9b02c188,0x7ffd9b02c194,0x7ffd9b02c1a0
  2⤵
  PID:3012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1924,i,5827181433745058629,13263591303659457546,524288 --field-trial-handle=2288,i,8976219157310295432,2677891499844495907,262144 --variations-seed-version --mojo-platform-channel-handle=2332 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1824,i,13839580491709705512,16891753464940591068,262144 --field-trial-handle=2288,i,8976219157310295432,2677891499844495907,262144 --variations-seed-version --mojo-platform-channel-handle=2284 /prefetch:2
  2⤵
  PID:536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2476,i,214352322313682232,288118154680649302,524288 --field-trial-handle=2288,i,8976219157310295432,2677891499844495907,262144 --variations-seed-version --mojo-platform-channel-handle=2752 /prefetch:8
  2⤵
  PID:4576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3448,i,11085934268423711143,4591818738497360851,2097152 --field-trial-handle=2288,i,8976219157310295432,2677891499844495907,262144 --variations-seed-version --mojo-platform-channel-handle=3464 /prefetch:1
  2⤵
  PID:3244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3460,i,16573513835637605322,6947181196941821536,2097152 --field-trial-handle=2288,i,8976219157310295432,2677891499844495907,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:2800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4172,i,3928921103411233279,1049650554647928397,2097152 --field-trial-handle=2288,i,8976219157310295432,2677891499844495907,262144 --variations-seed-version --mojo-platform-channel-handle=4256 /prefetch:1
  2⤵
  PID:3128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4180,i,6285209764114322352,6457812314510450416,2097152 --field-trial-handle=2288,i,8976219157310295432,2677891499844495907,262144 --variations-seed-version --mojo-platform-channel-handle=4208 /prefetch:2
  2⤵
  PID:1196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,10314150801817477183,11284046975443503214,524288 --field-trial-handle=2288,i,8976219157310295432,2677891499844495907,262144 --variations-seed-version --mojo-platform-channel-handle=5212 /prefetch:8
  2⤵
  PID:4148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5140,i,17589352709400463607,7744326986247274347,524288 --field-trial-handle=2288,i,8976219157310295432,2677891499844495907,262144 --variations-seed-version --mojo-platform-channel-handle=5232 /prefetch:8
  2⤵
  PID:1816
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5900,i,3047026138804757948,994387372992732767,524288 --field-trial-handle=2288,i,8976219157310295432,2677891499844495907,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:8
  2⤵
  PID:4740
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5900,i,3047026138804757948,994387372992732767,524288 --field-trial-handle=2288,i,8976219157310295432,2677891499844495907,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:8
  2⤵
  PID:464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3648,i,3319813710197125452,18150471909698201966,524288 --field-trial-handle=2288,i,8976219157310295432,2677891499844495907,262144 --variations-seed-version --mojo-platform-channel-handle=4336 /prefetch:8
  2⤵
  PID:3392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6256,i,16480087226405445990,6426371961355582287,524288 --field-trial-handle=2288,i,8976219157310295432,2677891499844495907,262144 --variations-seed-version --mojo-platform-channel-handle=6212 /prefetch:8
  2⤵
  PID:2520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6248,i,10511219443106920543,14919786357062339609,524288 --field-trial-handle=2288,i,8976219157310295432,2677891499844495907,262144 --variations-seed-version --mojo-platform-channel-handle=4492 /prefetch:8
  2⤵
  PID:3280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4296,i,15835006718574881041,13530907745430293764,524288 --field-trial-handle=2288,i,8976219157310295432,2677891499844495907,262144 --variations-seed-version --mojo-platform-channel-handle=5996 /prefetch:8
  2⤵
  PID:4116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5704,i,11659894559422074304,1127274768849116130,524288 --field-trial-handle=2288,i,8976219157310295432,2677891499844495907,262144 --variations-seed-version --mojo-platform-channel-handle=5288 /prefetch:8
  2⤵
  PID:3908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6128,i,8556904129725589086,11169500292093522635,262144 --field-trial-handle=2288,i,8976219157310295432,2677891499844495907,262144 --variations-seed-version --mojo-platform-channel-handle=5212 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4336

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2360

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ab98da7535c8de464335204ae97fd672936e639269325c3a388b3039d8396b83
MD5 1656a3560c7aeae221756f3891b89fd3
SHA1 e48441fe2b843ba3bd0bb7799c07b22a27db8eb7
SHA512 c06d7152d11e33601716d4c5c33c7373ac4e0c16571e80ac4a8ffb9cabb52fae51d4fe8d808fc75be943287b55a320e90a186d71a5f06e9db006f6ab89266400
TLSH
T1CFD09B307B597042D3074031E8074790169E84B5249B86066554410D7D5A485E3DF547
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 80a7188792bdd0feb187d9a7e3bb209e3eead46b85e985a65ec6b2bdda787c09
MD5 ddbae34617aef208869a20e62d32df79
SHA1 b3d7fc6d96f3aac15a8fdbbdfd48f9f2080977f0
SHA512 c97afa4e27fe554706276aaed084a4f399dea939818b3c6bcd472169afa7546dc6d990a2d55e77d5e6a99cc2855779f1bd9d609ccfe19aab3091c40b3addf055
TLSH
T1AF61603E101109B1F39142B353C249C5BCB1F7FBFA63FE46E159ADB91B06B41C619188
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 faefcc73bd9105342e79aacac18266381d619047b51b0f1797619ff9a0c4cf73
MD5 f9b3984ef36c6f9a795df29b7aa6207f
SHA1 060ca294a0352ad3546371a8aa5ab4e57deef5d0
SHA512 bf5776a3822ec74c5c9523b69160b7f5e958990472f1840a77fa152fe99ae1418119d8fd329ccfe0ee74cc253a852c998cc728c7be7482dd7d5834a68e4c4567
TLSH
T18A117DF3C3D585AE895156F05A28AE2BCE1D0506421C7C29C9D4FF27D7E3075E00255F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 8eeb89aba775a302e45d9f6a9fd9f69d82793434a383196a16db9674488811e4
MD5 618d88a6d2794ee0a8b3521569d59331
SHA1 c53224c8a71c4b69e8367539e9757693bdc8069d
SHA512 c4346c4dd19de1cb568f6e1ec63d8b597b3da721ed3dc047b34f27de05389c22bc251daa0d538e0faee25b589f79c224d2352f42790e111b15878a68e5871cdb
SSDEEP 192:sxZsRQku/fwszyGYFrIdpd+YHW6+WNGYzQ+5uuIgrJ:sxZsJu/fwszyvOjHbGm9
TLSH
T12122C8126F38A97B8CC7D20DBA15BF13D6F9503291951E58E6FC961C05E7ADD220B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 c290965df753e15f226e31533977eaa8377a0c032bb854760c17707349d7906f
MD5 220bdee457ab992674b4dead5539b46e
SHA1 9dfafdf59a78471976ae567e5b3728621752fb86
SHA512 48bfc8833c85c305c844877af78f824a3f23dc01501a0476ae1b2017caa255c477c476406611e660e0d45d5e479bb4e0db6582667ae25e4eae7acd133362fcf2
SSDEEP 192:sxZsRQku/fwsoyGYFrIdpd+YHW6+WNGYzQ+5uuIg5dJ:sxZsJu/fwsoyvOjHbGm5
TLSH
T1E322C7126E38A97B8CCBD20DBA15BF13D6F9503291951E58A6FC961C05E7BDD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 b20c700ca4f2f174c7335131ba6a3c987439e3b7423338536e4bc0ccc0a2b7c4
MD5 ffe4c02bf9944c051daf92106c7a6c6c
SHA1 1f1c4348541e94594d3c95545c9ea2592883b352
SHA512 86a5b0c66bc31025efc1eaede9ba4f2e94bf737772a10efb8cec6f243b590344c2eb6bf23081a85765db4d6c0accae8493dc5a94d11eeda182234b13a1c780b5
SSDEEP 192:sxZsRQku/fwsoyeYFrIdpd+YHW6+WNGYz+q5uuIg53J:sxZsJu/fwsoyHOjHbG+P
TLSH
T11B22D8126E28A87B8CCBD20DBB15BF13E6F9503291911E58A6FCD61C05E7BDD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 ef72d2ba2ad3f05dbb253f78292da68721b8be6c4a1c319c02d3518fae7b3598
MD5 f237aa5970c21f92837c20446b97b533
SHA1 8336d68a37b635e2aa4cd7c177872a5761c8d14e
SHA512 7d0e379b98423f4d69339369eda5c7ab57388b1e621a5338556db20495e3284ed86ee8cfd7ad8b84fdd2216f5aed5def0150834388ceb0d7a20ab72195393f4a
SSDEEP 768:Ftk7u70WvqiEa8F1+UoAYDCx9Tuqh0VfUC9xbog/OV35LlWYSB9royPY/:Ftk7u70WvqiEau1jai5LA3B2L/
TLSH
T1EFC2E93B740CCB7E4F801E9DAC566F973E9802C7A6988D4087FA994C02C77EA51264DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 b0863948600d3433f258c5d1e2f5af57df57ef560f40fb0ebe734c5c25a6f118
MD5 3cb456034f7836daf1517b26e10e0268
SHA1 c31432289481ce3d39eae6f752ef9fae3950dcb9
SHA512 ac0d46f6ea6e320ea52d6b38beeb19011ecc6c76ea8b7b39ba94235bea34bb2c20defd72b5169d9c46818bd01359c3dc2b5c2cad59b348789780011ae0ab5652
SSDEEP 96:KIbCKc3/WKQouWF8BVr/7gfH6z99gKV19jgxN9qDXVqK+u:sSdWF8BVr/72H6B9J19juN9qDSu
TLSH
T191919A5A317B06413CBF6888A295C5364E4232A3385978AFBFB810624D66E174FFDCDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 ac6dacc44098d0d99c8ddd25ca923246eae5c6defb946f5c7f9e34885370699a
MD5 188662b5d6b1c9e768ac6419af87adda
SHA1 e2a77e82cec89083be8ce5ee3c93752c1ffa9aa4
SHA512 f1406b97ccd83fdf12f236a53c62d1906b9125c4ab6b9b99d257c85bcd0140aa1997a42baa2ba04d3d14be1d1b763ed7e5a1712b6d60d2601190ab4346f7c454
SSDEEP 192:uUyLsNwjQpkmQ2Bb7wQmiU15aI4aGBPKrs+FdGGm1pFE8gdNgq3U8:msNwjatbc23Eddm1Q8apU8
TLSH
T180322C326C74AC2B5EA2A545F4473613AFE8516FDBC42F94E6DD6B1C01EE3AC130A817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 d3083dcaae4ed0a1cc4231ef51f70b4759ae35ff35c538832678c942af319343
MD5 cd95aa271ad71912a70263c0efc18682
SHA1 be43bc04ca99abf266c747858a2c88d32777f1be
SHA512 f6158ca37ff5c68590f5b7f8930c2a18826a11e30b098d7e094533f97fb31e35a23242f8b63b2ec91f079dfa7d0fe05957c659c436c84672dc7b4a0f610c0ac0
SSDEEP 384:feZcIhsNwIatbc23Eddm1Q8apnTKwBODNZOCSWJ:fch/tBUmQ8apnewBKZOnWJ
TLSH
T1F8928E726C38AC6B5EE2B545F84636035EFC917BF6C42F54A6EDBB1C00E9668130BC12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 633c3d32c8e01c63750e22c6f159d8128a71743f903cb451f9a6970e2f27f3a8
MD5 0d5d0f5440f96fd1acc86964468c09de
SHA1 e142bb594eeb2a0b4d6e5b6fa23c520a506d79c5
SHA512 d54e36506756b6db1f0b18504001ff39ee337a8b64d7795a09430752f5cf8800b7ca9dbbe749b890a4f7bee22907934cdfe50cf4dafbd192a3938245a401c485
SSDEEP 384:XtZcIizsNwIatbc23Eddm1Q8npnTKwBODNZOCSWJ:X1q/tBUmQ8npnewBKZOnWJ
TLSH
T114928E716C38AC3B9EE2B545F54636035FFC916BE6C42F54A6EDBB1C00E9658130BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 f9c60edeb8ed72b6e5f738b695f801bfcec0387e86fd995ab22dc38aa6935852
MD5 72cb7723887a2920c37151946d741038
SHA1 e98b449a7eb8fe00a47c2c46742ea8317fc3c685
SHA512 3b89729146074eec118207d547a867530ba6ec979bb1e3ebaa6e706af820e0f6212ded22b18c598dfe5a0f7ef22c887b7da30085ff43cae510532bf62988161d
SSDEEP 192:MONE64BAQmiUyw1fW5GBPKrs+FdGGm1/aDgV9U6:MONE6eAjdWDddm18WU6
TLSH
T150020A34AC786C7B9EB2AE45F4873B175FD8113BA6915F44EAE82B1C00D775C234682B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 d1dfeddd5b8de6ba976bbd9eeaefe9c2c4ae51c996bbe38f50f84eaedb416647
MD5 a7720e25fcc9a383b0055282920bd5df
SHA1 55029bbcb124ebe2574af7e88c26a69689e177f6
SHA512 ab1c7530961d47ebd6e0ee3d89dd2cf835cf1b39930425347cfa37967532a77e73b0c64ac33630704bdaae6f2476101a10a2b3cc782301b50ac75f7ad51f0636
SSDEEP 192:ukYyLsNwyQpkmQ2Bb7wQmiU15aI4aGBPKrs+FdGGm1pFE8gdNgq3U8:fhsNwyatbc23Eddm1Q8apU8
TLSH
T1C4322C326C74AC2B5EA2A545F4473613AFE8516FDBC42F94E6DC6B1C01EE3AC1306817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 0edd785e4b57ee7a17f34e0ba695f9b17d239ee0c379f93a0671df5bf4385430
MD5 22170c5557d9cee949be3a5149112257
SHA1 4eedc47640dd8b828e9f4601ab94ac3d1ca254dd
SHA512 1470ab03c57b33cc8a524fd1388be4c7921ca6b2847199801688c8cb67e6c68a62ede666688c1caecfb8f696bd00ef0e605268e70af00d094a1a8a158bf350c1
SSDEEP 192:SONh64BpQmiUyqfF5GBPKrs+FdGGm1pFE8QWwgq3U6:SONh6eHFFDddm1Q82pU6
TLSH
T178121B316C74AC6F5EA2B541F48736136FE5422FEA856F54E6DC2B1C01EF76C2306816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3f2839bb-40d8-466f-a9f4-f0e1fbff060c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\3f2839bb-40d8-466f-a9f4-f0e1fbff060c.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 15790c763de13fc963a6c0085d8ad52bcc3d2982e57e74cb3f7149a30b1dc0fe
MD5 b64816e6cd571f88ed5054b17241202d
SHA1 cb6a3a84a9c50e87eab97f7614da4854912feaa3
SHA512 766348692352637d76603b2b426358e3b85fda64837e2866ac2ae2b027ad62511b7660cef2745568b2a924620ae3ea4813e26959d3fe67accef3e04408938c0d
TLSH
T1D4411C5CA6EA1148B3B76F5A9BF7A86D447ABC672E0AD45E00000E4F0A76B40C971737
MD5 SHA1 SHA512 TLSH

Submit Download