199802fb772f20b8f153bff9ce6d9147bc7647f2fccb72725b51fc025506851b

Analysis

max time kernel
148s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/08/2026, 12:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
artist-kit-sites/don-toliver/terms.html
Size 5KB
Sample260802-plhhcszsfs
SHA256 199802fb772f20b8f153bff9ce6d9147bc7647f2fccb72725b51fc025506851b
MD5 84c8040587410d87671bddaa99c8682f
SHA1 2bf756957af9206a8ae335e2c0ec83a20ee1e1c5
SHA512 c1c11f933763f0249c4f5887235df79d36101d89efe7c5723adc45a5ab75323ca7b28f148c5ac73da4e05e8e631076cf776b0666178ac7d332bcb66173fb8994
SSDEEP 96:WWoeSFW0xH7XWH0Bet4eesD3Sx5D5+toctyN2rSklPdX:KePGNBeKeesrSxmvKk3X
TLSH
T1D3C10A2AC3C60127A4DA0161378B77D87622E070771A49617A1E421C9FE7F31E17B59F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3568	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134301471143199183"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-889581200-2041691093-2048517887-1000\{904E4D74-52AA-4503-B39E-C62A4A8DC341}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4428	msedge.exe
4428	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe
3824	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3824 wrote to memory of 3132	3824	msedge.exe	85
PID 3824 wrote to memory of 3568	3824	msedge.exe	86
PID 3824 wrote to memory of 3232	3824	msedge.exe	87
PID 3824 wrote to memory of 3232	3824	msedge.exe	87
PID 3824 wrote to memory of 3232	3824	msedge.exe	87
PID 3824 wrote to memory of 764	3824	msedge.exe	88
PID 3824 wrote to memory of 764	3824	msedge.exe	88
PID 3824 wrote to memory of 4976	3824	msedge.exe	90
PID 3824 wrote to memory of 4976	3824	msedge.exe	90
PID 3824 wrote to memory of 4976	3824	msedge.exe	90
PID 3824 wrote to memory of 456	3824	msedge.exe	91
PID 3824 wrote to memory of 456	3824	msedge.exe	91
PID 3824 wrote to memory of 456	3824	msedge.exe	91
PID 3824 wrote to memory of 3992	3824	msedge.exe	92
PID 3824 wrote to memory of 1288	3824	msedge.exe	93
PID 3824 wrote to memory of 3992	3824	msedge.exe	92
PID 3824 wrote to memory of 3992	3824	msedge.exe	92
PID 3824 wrote to memory of 1288	3824	msedge.exe	93
PID 3824 wrote to memory of 1288	3824	msedge.exe	93
PID 3824 wrote to memory of 2692	3824	msedge.exe	96
PID 3824 wrote to memory of 4624	3824	msedge.exe	97
PID 3824 wrote to memory of 2692	3824	msedge.exe	96
PID 3824 wrote to memory of 4624	3824	msedge.exe	97
PID 3824 wrote to memory of 5036	3824	msedge.exe	99
PID 3824 wrote to memory of 4940	3824	msedge.exe	105
PID 3824 wrote to memory of 4288	3824	msedge.exe	106
PID 3824 wrote to memory of 3480	3824	msedge.exe	107
PID 3824 wrote to memory of 4284	3824	msedge.exe	108
PID 3824 wrote to memory of 4284	3824	msedge.exe	108
PID 3824 wrote to memory of 4428	3824	msedge.exe	116

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\artist-kit-sites\don-toliver\terms.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ffbd8d7c188,0x7ffbd8d7c194,0x7ffbd8d7c1a0
  2⤵
  PID:3132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1784,i,1058990725191377312,5815245352639278889,524288 --field-trial-handle=2276,i,15201685474355468529,6625022559137185980,262144 --variations-seed-version --mojo-platform-channel-handle=2296 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1656,i,16531309248369260070,9577787331830596333,262144 --field-trial-handle=2276,i,15201685474355468529,6625022559137185980,262144 --variations-seed-version --mojo-platform-channel-handle=2272 /prefetch:2
  2⤵
  PID:3232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2636,i,14804354716002335741,3920905264822348954,524288 --field-trial-handle=2276,i,15201685474355468529,6625022559137185980,262144 --variations-seed-version --mojo-platform-channel-handle=2400 /prefetch:8
  2⤵
  PID:764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3496,i,14090680738745919352,13035933247818880598,2097152 --field-trial-handle=2276,i,15201685474355468529,6625022559137185980,262144 --variations-seed-version --mojo-platform-channel-handle=3536 /prefetch:1
  2⤵
  PID:4976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3504,i,4259799591566302598,18364906615351980808,2097152 --field-trial-handle=2276,i,15201685474355468529,6625022559137185980,262144 --variations-seed-version --mojo-platform-channel-handle=3564 /prefetch:1
  2⤵
  PID:456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4252,i,2035442686550876628,15210966852182803604,2097152 --field-trial-handle=2276,i,15201685474355468529,6625022559137185980,262144 --variations-seed-version --mojo-platform-channel-handle=4324 /prefetch:1
  2⤵
  PID:3992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4280,i,14025838733282748420,4464072734257808264,2097152 --field-trial-handle=2276,i,15201685474355468529,6625022559137185980,262144 --variations-seed-version --mojo-platform-channel-handle=4328 /prefetch:2
  2⤵
  PID:1288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3676,i,6353565849832605377,10048524946479392914,524288 --field-trial-handle=2276,i,15201685474355468529,6625022559137185980,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:8
  2⤵
  PID:2692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5012,i,10613292574883797202,16715492051612532350,524288 --field-trial-handle=2276,i,15201685474355468529,6625022559137185980,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  PID:4624
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5760,i,15669135103660108824,1212780014021666424,524288 --field-trial-handle=2276,i,15201685474355468529,6625022559137185980,262144 --variations-seed-version --mojo-platform-channel-handle=5836 /prefetch:8
  2⤵
  PID:1628
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5760,i,15669135103660108824,1212780014021666424,524288 --field-trial-handle=2276,i,15201685474355468529,6625022559137185980,262144 --variations-seed-version --mojo-platform-channel-handle=5836 /prefetch:8
  2⤵
  PID:5036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5836,i,7184592972760535012,12219926418122274225,524288 --field-trial-handle=2276,i,15201685474355468529,6625022559137185980,262144 --variations-seed-version --mojo-platform-channel-handle=4584 /prefetch:8
  2⤵
  PID:4940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5832,i,533397006894543679,5101120747191471346,524288 --field-trial-handle=2276,i,15201685474355468529,6625022559137185980,262144 --variations-seed-version --mojo-platform-channel-handle=4556 /prefetch:8
  2⤵
  PID:4288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6324,i,9141974589026059338,11804477377731255881,524288 --field-trial-handle=2276,i,15201685474355468529,6625022559137185980,262144 --variations-seed-version --mojo-platform-channel-handle=4544 /prefetch:8
  2⤵
  PID:3480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2160,i,8941165043166580032,17661780543120107291,524288 --field-trial-handle=2276,i,15201685474355468529,6625022559137185980,262144 --variations-seed-version --mojo-platform-channel-handle=2164 /prefetch:8
  2⤵
  PID:4284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5784,i,12089102229324288858,4664222967487131903,262144 --field-trial-handle=2276,i,15201685474355468529,6625022559137185980,262144 --variations-seed-version --mojo-platform-channel-handle=6096 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4428

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3804

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 11d3c4c52f9fc9cd2b10a22b48769759f994fd6364f9a0fc145f4cd2c2a22e9d
MD5 4751cf705a737c4226029624bf43b9a8
SHA1 fd8cf726ee3f8f75b97147829de5553530caa82c
SHA512 46e3fedbf7fa14bdc2b3aad129f2879a9d24252f5d7bd9b55766bc32a6b82ea77aaf193bcdbdf4423e3b67ef84955e589b6077609344091ef72204c1d50b0dab
TLSH
T17ED09B307A58A58BD14360F1A4114B4115375557205397757521508E9E98055B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 adf4fcd5f098e4a1a84d74e01684433cb693cfba2f62fd68cac9966cd80dfb8a
MD5 6a10bcf0c3f1a1b71575e0e4ab5ac151
SHA1 028d8897700e5af4d3a00eebee6cafa961d6f50a
SHA512 0ec40bb6314affd7dd8af853862b50ebf36187c98ad18aef0234d57033f491af51ae0ed7b544f4c635d1e9f2232fa9a665362f336f94f8e81a4085349af0bfc3
TLSH
T17941E7F002A35B41DF3016B190F01B40367683DDF9737E18829299BE3A3AF63852647C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 def26737a9c7359ff24454af7d5219eaa83f11a1e329f4148f75d1d1d5fe3d7e
MD5 7f51ea9de52b361b9de7e87fcc91b87f
SHA1 8227087b77c5657921a57295fe9087192b3d0798
SHA512 2d64edc6ab56434316cf95991c9038a93f754d685cdb3d0eff6c775cf76583bfc82681710499437d02da0f7cbde4519c5c71cfe6443fabf79d9ec6cf3695e50c
TLSH
T11D115BB3C7D5856E894116F05A24AE1BCE1D0616421C7C2989D4FF2793E3475E00255B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 7f168a701ce6e894eae9d451d07f2c5b540a4aa63a1f88e749be30c551aabd58
MD5 0a10af799ee9fbdc926e2f934a1c1920
SHA1 4d9ef180824693a1e29cb402f656d15ec78e0f43
SHA512 6d803c211dff33bc968a70372476fd3939d47ec3072d92e29d8e48125b64b3b44ffc5760ece4255821e7d9f80273b5564a89dc1da542a748b9347e3b9d452cde
SSDEEP 192:sxZZRikQ/f6sF9wyaIdpddHW6+WNGY9IK1FZIgrJ:sxZZ7Q/f6sF9wcTHbGi9
TLSH
T1A722B7126E38A87B8CCBD60DBB15BF13E6F9503291A51E58E6FC951C05E7ADD220B40F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 61d343cff29c92b7af014349c0ff18aa5cb036371c65106caffc5c77933ff35a
MD5 973aa348d58922f0395b7c4990475ac0
SHA1 201f87f1727d80cd93ab8635ed591210534f56bc
SHA512 ff2e9e7add5b0383922915729aecb99e2b8c2c6920c4b7b9617e75774ef82da56de30e4fe290b28860f0250197d2453b608921b614ec7535e26d1836a0e0a3d2
SSDEEP 192:sxZZRikQ/f6sv9wyaIdpddHW6+WNGY9IK1FZIg5mJ:sxZZ7Q/f6sv9wcTHbGis
TLSH
T10522C7126E38A87B8CCBD20DBB15BF13E2F9503291A11E58E6FC961C05E7ADD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 b43242674a7fb5cbd7136ed5be6e6525ba8d04bf93ff7e11fda5f2c3a4a14490
MD5 0f1b99ef004d6880ec1ffdf9dc47d0b6
SHA1 09eacbb8e33c7e2efb346390921ee61c9e48cb8c
SHA512 c8a01df2efe1c14bfd5f84ec1f476658bf99c63c1312e30b660c7d371f7828b61c58d8a50f2c9ae24e74528addcba256bcf7801ddf8837cae91efb64aa32b119
SSDEEP 192:sxZZRikQ/f6sv9LyaIdpddHW6+WNGY9I9DFZIg5MJ:sxZZ7Q/f6sv9LcTHbGpm
TLSH
T12222C8126E28A8778CCBE60DBB15BF13E2F9503291A11E58E6FC961C05E7ADD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 da8a2491f50fcaae000a86a7fa9137acc4080303f3befdb12564ad218261178a
MD5 ecd0a18e89faae5599e032ed0314e4ac
SHA1 f6dcd455b06d749faceab1b8cb393372617056e4
SHA512 5ab0bef6d01dcac389cd9dfae39f9a3cdf2906cbd0cb002cff82980ad32361a8e51dae3a7a72217d56f8f27f05daca05d8d763af27ce26654d026581e4c39702
SSDEEP 768:4EyvIZwWvu+Q+8F1+UoAYDCx9Tuqh0VfUC9xbog/OVDFLlwmW7nrocbqm:4EyvIZwWvu+Q+u1jamFLeR70c3
TLSH
T143C2E92B240CCB7E5F801E9D9D5A6F9B3EA802CB67588D4047FD994C02C77EA512A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 6c5bce96263c961a503db776caaf274cbbbe8c0ae3fc8c80078fda8b5d43fc6c
MD5 c7345ebc7fc915fccc9b2c3f845b3778
SHA1 1ff389b27b9ac14a0173d123a89e5981ca14b3a6
SHA512 c22ce5a2f665f4bc9676cc6bf633b138d1ad0d1e8bd9e1c2945a5780bf33db8fabe02f0cb89f2aefbc294a5b436cb6ad39355330710eadfe05fd7f22241405b5
SSDEEP 96:KaRklRnHnqlPKZThqKLfTzqHxJSrBDaAYKhy+iVoZFf7Xkn76P59kKBB53ktlFaM:mTXjiVoZFf7Xe76B9hB53ulFafU
TLSH
T1E3910006B13A02D339BF695DA3A589378E4131637A18E96F7FB800618B27E111DFD4DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 f5a5602c1dde5668798f02e8a27f82d9a37eb67fff5e98a45f2a025ba0a08d74
MD5 3b7b7fc9eb5525bf03ff4f6fe618bac8
SHA1 81c1a4dd563a41188875e241e4d42fe08267b693
SHA512 b5b18c99237968a150e59481dde10099a2291aac9923d2d5ae9c37a293a4db87127ec298f40580a9c3264530bbe3ac8fc4596a691f1219b686662a12c10ce659
SSDEEP 192:u4LsN+/Qqpj+YLeAZQmiU1u724e+CGp+Fdes9omOQNfJiEyqjU8:psN+/5pzimCZe+CndHeReQiU8
TLSH
T1BD322B36AD342C679FE3A645F0473913AFA85167DA863F94D5EC9F0C02DF6AC1306816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 3f222408bee47414dcb033888232ace42aa8d84155202f11c08c9839581332ac
MD5 c49cbcc4bfb599d52f933fe65442b371
SHA1 5d059813d90b90b79a400a7deed4d4b32c4f9f32
SHA512 d15ee431152435cb3ca04f019488ca28ed7e6fc7c4265402c1705f9128269b67f8a1f6e4a8449b9a35dd5ccf038b56ae3e82fe460980d09c783130b7f0acc223
SSDEEP 384:uFiZcIKzsNO8TUNTUlIlN5pzimCZe+CndHeReZinTKwBODNZOCtWC3:uFQCfwgDKgfEIinewBKZOgWO
TLSH
T116A27D335D685D7AAFE6AF45F84631138EF891B3E9D23BA4A6DCEF0C01961A80307C11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 86b27e2c85c01afe5bce59897eb4c20d0f58329891f59026bf2e7ca1fc981f35
MD5 126570ed4877d3d903c12efbc09cc55a
SHA1 0e19a8f6e6407482369466f7b9dd56df20636ae3
SHA512 91f7fa1785d89be2fce829528e6fe746aa33843d912749db4f1b6bd0538891523addb54216ddcc2f484907ac8e1df5b6dcb1176baf2be95ad22867fa66f6ce1d
SSDEEP 192:JONii6v+YLNQmiUyvKZh+CGp+Fdes9odusERPU6:JONii6vz/LZh+CndHe94U6
TLSH
T15502E935BD382C6B9FB2AE45F48736235FA8117BE9922F84D9E81E1C01D765C2306826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 ca06e7f8111bca503c3ec35bedf0391c8f2d921525fd6c0a148ff7b9eb2f9943
MD5 bd9cf1fc71581f5214383a8d376ab4ac
SHA1 49d9e7dd9f52f614ab5ce2b12d9aca83cf5d1518
SHA512 b252510591a098262ae155d7d8422c42a0b873cfb96c7d23dd97c81ffa19ce9f8317586428ff320fb70903ff13b916f00144b95e6c0a654d2fac3c42d68ae398
SSDEEP 384:rZcIhsN+N5pzimCZe+CndHeReQinTKwBODNZOCtWC3:zhDKgfE7inewBKZOgWO
TLSH
T1E6928D356C382C669FE6A545F84735175EFC9173FAC63B9495ECEB0C01DA6A81307C22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 ae52def876f590bcc130f199166ec382d0f655bbcf934ec2b88fcf31c7f21f67
MD5 51348d2a3abda541aeab1546a962681d
SHA1 54e82e271b1632551d3dc1e8b13f4333e111d728
SHA512 7e52de61c0103bdbb612243f2f3636610681f62a57595d4d49989da704e80f7a98c9b72a70199fbc41a6b08fba3b793520096f37cffbd12dee72298cbf229288
SSDEEP 192:zONX6v+YLyQmiUyGKbh+CGp+Fdes9omOQNlCHEyqjU6:zONX6vzqgbh+CndHeReyiU6
TLSH
T14E121C35B8782C6B5FE26941F48735135EA89277EE863F90E5EC6F1C02DF6AC1306416
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fd0281b0-8f02-428d-a4fd-058b0fb558a8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\fd0281b0-8f02-428d-a4fd-058b0fb558a8.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 84bc537aa5be2d60221faffc43d8d40f33892eddb4db2fe91a8436c62a0c7d67
MD5 bdfa193515267a2f408b52588ac75cb3
SHA1 24209377d1eb05e98a8604dc26cca623b35a2d9e
SHA512 2a11ab9fe7396b8d4d8188db7ada0ea7fa54f786d53c12c68c1d46bcdc9ee4122c6fb2267c663a75c9bf1947a5688409083c806983663e6bffa7f1ea5643d71d
TLSH
T10C41074CBAEE1144B3B36F5AABF7A86D847B7C772E0A949D10110D4E0A62F00C861B77
MD5 SHA1 SHA512 TLSH

Submit Download