hxxps://augloop[.]office[.]com

Analysis

user interaction
yes
max time kernel
149s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/08/2026, 16:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://augloop.office.com
Sample260802-ts28kace97

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1760	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134301612224504335"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-204488895-2999877624-296153668-1000\{E88ACDFC-916E-46F2-A1B2-A756DF8F3597}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4132	msedge.exe
4132	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 900 wrote to memory of 2272	900	msedge.exe	87
PID 900 wrote to memory of 1760	900	msedge.exe	88
PID 900 wrote to memory of 1348	900	msedge.exe	89
PID 900 wrote to memory of 1348	900	msedge.exe	89
PID 900 wrote to memory of 1348	900	msedge.exe	89
PID 900 wrote to memory of 940	900	msedge.exe	90
PID 900 wrote to memory of 940	900	msedge.exe	90
PID 900 wrote to memory of 2952	900	msedge.exe	91
PID 900 wrote to memory of 3680	900	msedge.exe	92
PID 900 wrote to memory of 2952	900	msedge.exe	91
PID 900 wrote to memory of 2952	900	msedge.exe	91
PID 900 wrote to memory of 3680	900	msedge.exe	92
PID 900 wrote to memory of 3680	900	msedge.exe	92
PID 900 wrote to memory of 3104	900	msedge.exe	94
PID 900 wrote to memory of 3104	900	msedge.exe	94
PID 900 wrote to memory of 3104	900	msedge.exe	94
PID 900 wrote to memory of 4360	900	msedge.exe	95
PID 900 wrote to memory of 4360	900	msedge.exe	95
PID 900 wrote to memory of 4360	900	msedge.exe	95
PID 900 wrote to memory of 3544	900	msedge.exe	99
PID 900 wrote to memory of 3544	900	msedge.exe	99
PID 900 wrote to memory of 5080	900	msedge.exe	100
PID 900 wrote to memory of 5080	900	msedge.exe	100
PID 900 wrote to memory of 4992	900	msedge.exe	102
PID 900 wrote to memory of 2928	900	msedge.exe	107
PID 900 wrote to memory of 4392	900	msedge.exe	108
PID 900 wrote to memory of 2564	900	msedge.exe	109
PID 900 wrote to memory of 2668	900	msedge.exe	119
PID 900 wrote to memory of 2668	900	msedge.exe	119
PID 900 wrote to memory of 4192	900	msedge.exe	120
PID 900 wrote to memory of 4192	900	msedge.exe	120
PID 900 wrote to memory of 4132	900	msedge.exe	121

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://augloop.office.com
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x27c,0x7ffd51ddc188,0x7ffd51ddc194,0x7ffd51ddc1a0
  2⤵
  PID:2272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1852,i,5260835075637620950,9640805272876491254,524288 --field-trial-handle=2208,i,14726556926087965029,11419625669908681277,262144 --variations-seed-version --mojo-platform-channel-handle=2236 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1660,i,8344399688131954456,673929841020622708,262144 --field-trial-handle=2208,i,14726556926087965029,11419625669908681277,262144 --variations-seed-version --mojo-platform-channel-handle=2204 /prefetch:2
  2⤵
  PID:1348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2548,i,9864129492365276697,2768738446679457314,524288 --field-trial-handle=2208,i,14726556926087965029,11419625669908681277,262144 --variations-seed-version --mojo-platform-channel-handle=2544 /prefetch:8
  2⤵
  PID:940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3420,i,4039541996395652566,14460946385455973910,2097152 --field-trial-handle=2208,i,14726556926087965029,11419625669908681277,262144 --variations-seed-version --mojo-platform-channel-handle=3460 /prefetch:1
  2⤵
  PID:2952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3428,i,5510966902438286203,8433189077986292798,2097152 --field-trial-handle=2208,i,14726556926087965029,11419625669908681277,262144 --variations-seed-version --mojo-platform-channel-handle=3464 /prefetch:1
  2⤵
  PID:3680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4100,i,2658678996931202916,8467367786802959365,2097152 --field-trial-handle=2208,i,14726556926087965029,11419625669908681277,262144 --variations-seed-version --mojo-platform-channel-handle=4244 /prefetch:1
  2⤵
  PID:3104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4112,i,16260950175109023290,10299330757079358048,2097152 --field-trial-handle=2208,i,14726556926087965029,11419625669908681277,262144 --variations-seed-version --mojo-platform-channel-handle=4248 /prefetch:2
  2⤵
  PID:4360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5032,i,8285238914777675834,5931103215874607760,524288 --field-trial-handle=2208,i,14726556926087965029,11419625669908681277,262144 --variations-seed-version --mojo-platform-channel-handle=5072 /prefetch:8
  2⤵
  PID:3544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5036,i,6759768131294617925,12527095233449527733,524288 --field-trial-handle=2208,i,14726556926087965029,11419625669908681277,262144 --variations-seed-version --mojo-platform-channel-handle=4976 /prefetch:8
  2⤵
  PID:5080
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5844,i,3239937991602848843,8025551707005397922,524288 --field-trial-handle=2208,i,14726556926087965029,11419625669908681277,262144 --variations-seed-version --mojo-platform-channel-handle=5860 /prefetch:8
  2⤵
  PID:2948
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5844,i,3239937991602848843,8025551707005397922,524288 --field-trial-handle=2208,i,14726556926087965029,11419625669908681277,262144 --variations-seed-version --mojo-platform-channel-handle=5860 /prefetch:8
  2⤵
  PID:4992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5860,i,4123962810256828808,13646110607944008571,524288 --field-trial-handle=2208,i,14726556926087965029,11419625669908681277,262144 --variations-seed-version --mojo-platform-channel-handle=4792 /prefetch:8
  2⤵
  PID:2928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5856,i,18076795200608842999,5982538558633135850,524288 --field-trial-handle=2208,i,14726556926087965029,11419625669908681277,262144 --variations-seed-version --mojo-platform-channel-handle=6468 /prefetch:8
  2⤵
  PID:4392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6464,i,3965259513842733647,3243630610577668032,524288 --field-trial-handle=2208,i,14726556926087965029,11419625669908681277,262144 --variations-seed-version --mojo-platform-channel-handle=4824 /prefetch:8
  2⤵
  PID:2564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4824,i,4748839516104067777,7312650836745833419,524288 --field-trial-handle=2208,i,14726556926087965029,11419625669908681277,262144 --variations-seed-version --mojo-platform-channel-handle=5064 /prefetch:8
  2⤵
  PID:2668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5132,i,582129911558070487,11421667098360460392,524288 --field-trial-handle=2208,i,14726556926087965029,11419625669908681277,262144 --variations-seed-version --mojo-platform-channel-handle=5068 /prefetch:8
  2⤵
  PID:4192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5144,i,9374672037666488285,15750904632390286371,262144 --field-trial-handle=2208,i,14726556926087965029,11419625669908681277,262144 --variations-seed-version --mojo-platform-channel-handle=6216 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4132

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2960

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 0f9d30355ce9f49b34999ef140e608ea59ef151d4885526ca99fce7a53754b3d
MD5 43a005773cb86bb921ad7a4362fa9b98
SHA1 2f8cc6343d083a00533eb0182b1ad4b2f8e0fece
SHA512 3ace3525701414d548026fb7b8f4a2a30156e74f7ba8f77f090bdafe65f111d9017e1061e3692901165c7ef44c2823b48d8df1dfe72596c7910711a59eec36e1
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P70:fwUQC5VwBIiElEd2K57P70
TLSH
T11EB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 cd640af4b18734f838b65cd3f2b65e25dc669e7cc487a16f826240b353446af4
MD5 337b94f0014654439210355bd20e82dd
SHA1 26e4c8276331781253e2a807dd554b2ee3ad7e8e
SHA512 087107a51c83ccffad34c7d3f5423a0f231d30a9f78e9ed5db98eb770bada291f65c7b34d1e72284571b846a7acdf88b217ef4da25b7acff47964af1551b2e9b
TLSH
T1B6D012323B197041E71A8130E403C74017AE54B524864606A254C50D6DA90C592CB682
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 85f865adbe5e58c0596a4db9b9daa509b8e2bd087dbcc9a01a5a095a266757bc
MD5 29ddc94c4e214fd03f664130dd36edfe
SHA1 10dfd57508ad6ef16445956dc1ee4d8c2bffc4e3
SHA512 fa7477f3f8068f41dae4965a930de8ad11b234c1ccfcd17a84fb2bfe4c289beebc19be8d058f75ed01b6dbe7304af8270da91d31316fc94360f4fa750ab203bd
TLSH
T13AD012323B597441E71A8130E403C74017AE54B524868706A254C50D6DAA0C592CB682
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 357B
SHA256 9cc499d55094130b9180a5fe84ecff9aa29caceb13a9c217eb9642d6ecd6f1ba
MD5 6081dff4bf5b909cfbcaa7ddc3d4c766
SHA1 444f06a4ec766563d421413845b84f87bd93d455
SHA512 5f680793a85fb2b55738f11b970268fdb0a4bdd3b45c5c9c822764d7eb1464df92283cee2aa52c79356d41decf73d3f9e735c7e25356339340117c459691a3c7
TLSH
T196E0D8CA929AC5F98A0B9447926D731C41B1B149AFCCDCFA7214A094A4466405569EB4
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 c00eb7dcec1607aa957d1d8bb62a7c88d0c3d6b46d5781b44a837f5005ec86f8
MD5 c3bed165da562034002992decee54b59
SHA1 63e3c91d29f2061f27417beaefe4ab617775adb2
SHA512 582789435a63ee9e3422a80519c1336dd1d2a04fa3ecfe2cf3db97889ffa6e734f11749f6d2fbad63afb884e5b5a9bb8caaf8fc8d1ba6d289a4a7a32ad104e7a
TLSH
T177812F35028E0091C75DA2B9FFC10300F772A2EBFF97AD76C492A97C980375C950AC45
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe585416.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe585416.TMP
Size 3KB
SHA256 78a798a6f2f51579fbd819f0abb50ee3274e9d1248d4e111228001070ee97c72
MD5 291d94e7de04d212e0ea83622c6e7611
SHA1 a01947f6fd61db3a8c9b221ca166fff5e5bc5599
SHA512 a816e91c1c6852d3b2432abaec59c6ec32f927207656ad61f47279c70262d60fa782cd00ba641f896ff0bae0aba9949e8916d965f16770a778e5f4f60a5f12b6
TLSH
T15E811E35028E0091C75DA1B9FFD10300F772A2EBFF97AD76C492997C980375C890AC45
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 f9175b5efcb3c7f116320472b54b729534cf26cb5bd5ed9e02381c828f9578fc
MD5 39bf06870756afb4993578660745b41a
SHA1 0bcfa7b09bbf819ce5d0fea29882ed6fdd173675
SHA512 867cd4c88d7ec924cbc2ac3fd095fe4f47cbc666bcfc585c5de470e7e7692f863f77aa5307233d89f4fb63216bbb9b3991cb0a70bee3c293225321c64fb89da6
TLSH
T1AB318BF3C7D5869EC80116F06A18BE2BCE2D0A5543183D2989D5FF1B97E3471D102A5F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 93847e9b14fa8be45e92dbe1a497989d8ff9cafe1e1dc7648283630fc6468eaa
MD5 d5a28f6604b0cab1ac51ed21618b9e9b
SHA1 7dbb9ed2740978ad2a2dd46a68c781ff65846d2b
SHA512 45061e7c0390ab7abffe697ab7e5b95695980dcffd42573108bda34a81bc786e278cfc044d69a19ad049ed00c6b826ab5b6c9292505364116047ff62c1b5113c
SSDEEP 192:sxZ6RJyM/jK1Ml8Mkq/f8sFIRNjIdp0/HW6+WN2Ok/Yz+FC/xIgrJ:sxZ6nMq/f8s6Re2Hbo/E99
TLSH
T18442F912AA34A977CCCBD20DFA55BF53D6F9047392954E44A9FCDA1C04E6AEC220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 fddc41c0db109edad3413507bb2fa38dd39381776a382203623dbf6048458298
MD5 a03b6c646c650e800f84f34b3ce20721
SHA1 5a48fb3a1c63f738dec10ec77c7c8229c47823e6
SHA512 0a3c56f508eb465d00dda3e736ba1af647d4d02fde47ac195a57de5298e47774121539fcfccae28966f8b08907635ce42ba497c02c97817eaaf4be937b7d5471
SSDEEP 192:sxZ6RJyM/jK1Ml8UQXkq/f8sUIONjIdp6/HW6+WN2MDXYz8AAC/xIg5YJ:sxZ6nqUq/f8shOeEHb9X5+9y
TLSH
T11752E852AA34A977CCDBD20DFA51BF53D6F9147392910E44A9FCDA1C00E6AED220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 cd614fb2cf154cb2a8af26057bbcf75b42dc0ef2cdb3e140ba3bfebcf137b0fa
MD5 a499f5e518ddd1c3b4e8311d617f9e62
SHA1 f2374e0bf6e9f368eb7e615abd2b603d24bca21b
SHA512 d689ca97b51710519a3871057d338c65ea2c6497d128d89f4597f1fba048a2f282f39a304532c7ad3c2eedc7e0bfa9efa4ccaf1adf8a169ef4c43a756155453c
SSDEEP 768:l8W7kf0Wvqida8F1+UoAYDCx9Tuqh0VfUC9xbog/OVX5LlWYSjvroIqiVYA:l8W7kf0Wvqidau1jaa5LA3j8/A
TLSH
T1E8D20A3B680CCB7E4F841E5CEC266F966ED801CB67988D5487FA884C03CB6EA51175DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 465d95aa48e644ce674fadbbe7b76ac0b1ff30cda297bfba3d52af4179db507d
MD5 8ca2fd5fd8b59db0e69f2867f61ed697
SHA1 96db9f64eb97137cea83a26bd012d26a6d7696bc
SHA512 811b64670c63d551e667b9b7c2a9045811b3f0a6e9e6c4d10b9fbff6d41f7a623c701292ef954d46dedbcc0d86beed650a296aad494bdabfad810bda6f085b33
SSDEEP 48:KfSVOyIQA2aQL9IZy2KYTbaIfK/qA7yy0TwkaeykCehPIhckK4BQSkME0jBazzIy:KIbCKcba0K/qmOVGKmcdzeKQo
TLSH
T1DC912F07747F4612387E2848A666857A8E8271933469A8FF7BB800A11F77E110DFECDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8a96c1b4-f13b-4e31-a262-7ac27364723e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\8a96c1b4-f13b-4e31-a262-7ac27364723e.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 57560a9738f7d455381e9113788de98d9ac854c71eab6732a3fdf1e9ccad7693
MD5 8f1b960f61e3b25b6827e8ece8a4f175
SHA1 793369be88e8af1352dd8b29496be47b0c776575
SHA512 f00cd75df559e33be1ecafff6723678bd181b3a4b6af48ee751ff0a00dead8d8f5542aeef4fef4156e6e8f6c4f3f92fc800161b440093eb43b0a1b77ba03f53e
SSDEEP 384:riFiZcIJzsNo8TUNTUlIlB8tabgno3dMjCEJrcAnTKwBODNZOCmWF:GFQp9wgAwKW6hcAnewBKZObWF
TLSH
T17BD207F258E7583ADDAD6747AB7D2D034EBCC163B5806A50B3D8AA0CCC961BFD306815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 421965f047395a509243aec50a75772d82b61cf0b2cf474d5c48b03116fdccd3
MD5 e9b30f9ab060812950a3f79c732fcdf1
SHA1 87591f790393f398487d9dca7c820d7eef76b5df
SHA512 3e03471b544f6073dcb9f3081828c9f400ec30017d29cdf772735278fd46d3bcdd025afdd69522571ed7a854efe6387588d08f807eccfba7f6c11ad61d064ae5
SSDEEP 384:zZcIhsN4+8tabgCo3dMjCEJr9AnTKwBODNZOCmWF:rhBw/W6h9AnewBKZObWF
TLSH
T1B6928D716C786C7B9DE2B145F88A36075EF88173F6C46B94E6EDFB1C00A56A81307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 abc23210a021afa95d4b8d786613f2be03d90a61a33b6cb894967f8a09d40ffc
MD5 ce7adb21a63c7e8c95a21af876de0964
SHA1 b7b4e933752f9a76743a36da8e198250ac08c7ff
SHA512 2c850f6f3c412afe67db8c66fbaf09eecf8049809cbd849ab25a151e6f34a12eff377c2130e0d8229a359cdd184f3c8ce95dea51735afcc66cf5d60718d98c78
SSDEEP 192:MONt64BAQmiUyn1oW5GBPKnn+FdGN9Q1aDKT8U6:MONt6eAgKWMdMRW8U6
TLSH
T1F802F935AC796C7B9EB2AE45F48637176FD8103BE6955B54E6E82B0C00D765C230382B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 af43659f1c4e4d5016c1c5d425ff716d2829cf820d77c5954eaf6b45068f4467
MD5 3256eacbe69fb4b6d634ac2afa523735
SHA1 59afd0fc5c108e40e93135ae47621955efaab3df
SHA512 8e27e205b328ba26732d899b21e6adef660a86ead202a8f27335bd392440c709eab09cc8991888721447d9ef47927389b15dcdb5f8744a123d401b58ed567d63
SSDEEP 384:MZcIhsN4B8tabgCo3dMjCEJr9AnTKwBODNZOCmWF:ahew/W6h9AnewBKZObWF
TLSH
T184928D716C386C7B9DE2B145F88A36075EF88177F6C46B94E6EDFB1C00A56A81307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 cef668680673b0d09af3f587b15f05b399868c7856e18ac412db47f82cb92c68
MD5 7b11ab33de6f8e297d74bf1a99fa270b
SHA1 7c935be31a4f4485735d0c3e0630661e8509cec3
SHA512 fe7b995816b11f42749616a7d85ebfc749b96dbd3979a011587876e953a195256b9629748f4fafb75ace9200753a885bf861073806978220652e71c39d903e22
SSDEEP 192:yON564BPQmiUyNoY5GBPKnn+FdGN9Q8XFC1SJrVWw1q1U6:yON56eRbYMdMjCEJrZAU6
TLSH
T1A2121A35AC786C3B5DA2B155F48736035EE44137FA856B90F6EC7A1C01EB6AC2307856
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9bbe833b-f3d6-4c19-b6ed-8c2a82e1e86d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\9bbe833b-f3d6-4c19-b6ed-8c2a82e1e86d.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 f9e23feef54681f599d12efb64a3273a41c04ac421f3e12519341b7a0b155e96
MD5 62bba07bb9731466d88bafdd87553fc6
SHA1 f47ecec97eedce25d9d3f7ef4c65aa751ef78cae
SHA512 5076c91ebd0fe9924516f26ec0aa1d9652fadf10997ac442696d72b223f0729e317583d5c865c1066b46b55d6515487180d67025ae6ebedf612568ce9b51ec1a
TLSH
T1BD41E768B7F91148B3B77E5A9BF7A86D487FB9732E07D05D10110E4F0662A40C9A1737
MD5 SHA1 SHA512 TLSH

Submit Download