hxxps://www[.]tmx[.]com/en/newsroom/press-releases?id=1366

Analysis

user interaction
yes
max time kernel
148s
max time network
135s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
05/08/2026, 00:52

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://www.tmx.com/en/newsroom/press-releases?id=1366
Sample260805-a8chasbc35

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2012	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134303647661723621"	msedge.exe

Modifies registry class 5 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2370214745-1838013427-2987045292-1000\{A3AC9A0E-330B-4478-A72B-6EA6CD7E6947}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings	OpenWith.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1504	msedge.exe
1504	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe

Suspicious use of SetWindowsHookEx 5 IoCs

pid	Process
2600	OpenWith.exe
2600	OpenWith.exe
2600	OpenWith.exe
2600	OpenWith.exe
2600	OpenWith.exe

Suspicious use of WriteProcessMemory 36 IoCs

description	pid	Process	procid_target
PID 2188 wrote to memory of 3552	2188	msedge.exe	85
PID 2188 wrote to memory of 3228	2188	msedge.exe	87
PID 2188 wrote to memory of 2012	2188	msedge.exe	86
PID 2188 wrote to memory of 3228	2188	msedge.exe	87
PID 2188 wrote to memory of 3228	2188	msedge.exe	87
PID 2188 wrote to memory of 4760	2188	msedge.exe	88
PID 2188 wrote to memory of 4760	2188	msedge.exe	88
PID 2188 wrote to memory of 4264	2188	msedge.exe	89
PID 2188 wrote to memory of 4264	2188	msedge.exe	89
PID 2188 wrote to memory of 4264	2188	msedge.exe	89
PID 2188 wrote to memory of 1916	2188	msedge.exe	90
PID 2188 wrote to memory of 1916	2188	msedge.exe	90
PID 2188 wrote to memory of 1916	2188	msedge.exe	90
PID 2188 wrote to memory of 888	2188	msedge.exe	92
PID 2188 wrote to memory of 888	2188	msedge.exe	92
PID 2188 wrote to memory of 888	2188	msedge.exe	92
PID 2188 wrote to memory of 652	2188	msedge.exe	93
PID 2188 wrote to memory of 652	2188	msedge.exe	93
PID 2188 wrote to memory of 652	2188	msedge.exe	93
PID 2188 wrote to memory of 1180	2188	msedge.exe	97
PID 2188 wrote to memory of 1180	2188	msedge.exe	97
PID 2188 wrote to memory of 2176	2188	msedge.exe	98
PID 2188 wrote to memory of 2176	2188	msedge.exe	98
PID 2188 wrote to memory of 2420	2188	msedge.exe	100
PID 2188 wrote to memory of 4636	2188	msedge.exe	107
PID 2188 wrote to memory of 4636	2188	msedge.exe	107
PID 2188 wrote to memory of 4636	2188	msedge.exe	107
PID 2188 wrote to memory of 4976	2188	msedge.exe	113
PID 2188 wrote to memory of 4976	2188	msedge.exe	113
PID 2188 wrote to memory of 4976	2188	msedge.exe	113
PID 2188 wrote to memory of 4320	2188	msedge.exe	115
PID 2188 wrote to memory of 4768	2188	msedge.exe	116
PID 2188 wrote to memory of 3888	2188	msedge.exe	117
PID 2188 wrote to memory of 1312	2188	msedge.exe	118
PID 2188 wrote to memory of 1312	2188	msedge.exe	118
PID 2188 wrote to memory of 1504	2188	msedge.exe	120

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.tmx.com/en/newsroom/press-releases?id=1366
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x20c,0x23c,0x240,0x214,0x24c,0x7ffa448ec188,0x7ffa448ec194,0x7ffa448ec1a0
  2⤵
  PID:3552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1912,i,7420748918745977627,3387044616036910913,524288 --field-trial-handle=2496,i,17340693129953725723,11882320890994084391,262144 --variations-seed-version --mojo-platform-channel-handle=2508 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1652,i,6544472989997270975,458253712054091783,262144 --field-trial-handle=2496,i,17340693129953725723,11882320890994084391,262144 --variations-seed-version --mojo-platform-channel-handle=2492 /prefetch:2
  2⤵
  PID:3228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2212,i,530675883798671141,12349860376888224221,524288 --field-trial-handle=2496,i,17340693129953725723,11882320890994084391,262144 --variations-seed-version --mojo-platform-channel-handle=3036 /prefetch:8
  2⤵
  PID:4760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3428,i,2599289962494695209,15966686340650115958,2097152 --field-trial-handle=2496,i,17340693129953725723,11882320890994084391,262144 --variations-seed-version --mojo-platform-channel-handle=3460 /prefetch:1
  2⤵
  PID:4264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3436,i,12965485848222498864,7934036559576944555,2097152 --field-trial-handle=2496,i,17340693129953725723,11882320890994084391,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:1916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4168,i,8926356586783281850,14008387781928148885,2097152 --field-trial-handle=2496,i,17340693129953725723,11882320890994084391,262144 --variations-seed-version --mojo-platform-channel-handle=4192 /prefetch:1
  2⤵
  PID:888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4196,i,67956058026622475,8929883532014825803,2097152 --field-trial-handle=2496,i,17340693129953725723,11882320890994084391,262144 --variations-seed-version --mojo-platform-channel-handle=4324 /prefetch:2
  2⤵
  PID:652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5040,i,9435145625543759429,10697935854650717638,524288 --field-trial-handle=2496,i,17340693129953725723,11882320890994084391,262144 --variations-seed-version --mojo-platform-channel-handle=5104 /prefetch:8
  2⤵
  PID:1180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5052,i,8575427518497715114,9437805880728381331,524288 --field-trial-handle=2496,i,17340693129953725723,11882320890994084391,262144 --variations-seed-version --mojo-platform-channel-handle=5136 /prefetch:8
  2⤵
  PID:2176
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5876,i,15203045649247268910,851995174386079165,524288 --field-trial-handle=2496,i,17340693129953725723,11882320890994084391,262144 --variations-seed-version --mojo-platform-channel-handle=5888 /prefetch:8
  2⤵
  PID:1188
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5876,i,15203045649247268910,851995174386079165,524288 --field-trial-handle=2496,i,17340693129953725723,11882320890994084391,262144 --variations-seed-version --mojo-platform-channel-handle=5888 /prefetch:8
  2⤵
  PID:2420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=6296,i,16585738369426444798,5051618088554460505,2097152 --field-trial-handle=2496,i,17340693129953725723,11882320890994084391,262144 --variations-seed-version --mojo-platform-channel-handle=6308 /prefetch:1
  2⤵
  PID:4636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=6404,i,1349360710467850317,13780200437137068540,2097152 --field-trial-handle=2496,i,17340693129953725723,11882320890994084391,262144 --variations-seed-version --mojo-platform-channel-handle=6420 /prefetch:1
  2⤵
  PID:4976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4908,i,15331459646433902596,12036689193413914921,524288 --field-trial-handle=2496,i,17340693129953725723,11882320890994084391,262144 --variations-seed-version --mojo-platform-channel-handle=6496 /prefetch:8
  2⤵
  PID:4320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4360,i,2854205714097755122,9395171468272300863,524288 --field-trial-handle=2496,i,17340693129953725723,11882320890994084391,262144 --variations-seed-version --mojo-platform-channel-handle=5968 /prefetch:8
  2⤵
  PID:4768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4968,i,5331646126984559818,15803026756112445390,524288 --field-trial-handle=2496,i,17340693129953725723,11882320890994084391,262144 --variations-seed-version --mojo-platform-channel-handle=5980 /prefetch:8
  2⤵
  PID:3888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3476,i,7184677988210801904,7825632881904076703,524288 --field-trial-handle=2496,i,17340693129953725723,11882320890994084391,262144 --variations-seed-version --mojo-platform-channel-handle=2000 /prefetch:8
  2⤵
  PID:1312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6116,i,1068181021850961417,10021589244222254662,262144 --field-trial-handle=2496,i,17340693129953725723,11882320890994084391,262144 --variations-seed-version --mojo-platform-channel-handle=2640 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1504

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4752

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:2600

C:\Windows\System32\ThumbnailExtractionHost.exe
C:\Windows\System32\ThumbnailExtractionHost.exe -Embedding
1⤵
PID:3860

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 92a908538089a45b7267542a2b86d1a63b5a35a14b876e2973f8c13aad1654fe
MD5 3be5a24efaf87f3baed7f1fe7380e63b
SHA1 bbf3f915abb0c0973886257d8d70206849d13325
SHA512 46f6a5196f27bc42271724c4ec93c2d258ff71f175073a3d6d7f098db60666d7acceae87b6c053d4ce205a6d1ca3e790261390f9a01bf8af4376a0e26832e3fd
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7l:fwUQC5VwBIiElEd2K57P7l
TLSH
T11AB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 39b8627875fea5ac5c5bfb887da12c15116e3fe81f200852c71d5699102c9044
MD5 e3962be2eb3bd350a67bf6309159a1cc
SHA1 c10632202b95ed6f7f4475b6483bf5196e4c5578
SHA512 d12d4acc23b51c071fbc9bf4db2f0575a6b43ec7894b272035e4c01dfce30099cd3ef90a1009dd1e6284cfbcf7a37fd3b79490739946700a2c61ec578374cbe6
TLSH
T173D08C677A0E7815E72F8231A413E360A76B4072A5629702F324C81DA9BC8D85BE63D7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a59087fbda784cffb013f4e2a0bf13a7fca483c48e8a7fc15fa022402eb25d72
MD5 dd54db185d82309b854bfa7657ba4600
SHA1 d01c14e8b4dec85ed2e1671545a868fd7ad4fa95
SHA512 f014ab84dd934b90e006883b74ad349d05f60071e57d2cf0bdf8a9bce118654c92139263e082094b602f6900a71e9a7848754994a2ea88642b2376121b581d07
TLSH
T165D08067354D7815E71F42319413D350576B4072A562D702F314C41D957C4D857D53D7
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 2647e013df88302ef6d8c2ab45a65b028ae89a5dbf26da30ed844d68fa4baa8f
MD5 56ab49eb151b24690193d01c78720d8a
SHA1 ddd35dc5f1a6b9818624ddd6777cf2462ac53e09
SHA512 51be88aaa42475021e93cfdeee97cee05d80c2b105131359239805ff1853c76cbed386646e4a772302894eb4073c7e2bfee708a90434fe1a9fc99f4191ad92d6
SSDEEP 48:iMJ9HsPx47bvBYqgj8njlWz5dn7h1Kjhkf6xNOyx4S6DxeM1UpXWWNIIOmE:N/H3veqgARWzX7ijZBOOw
TLSH
T1C88108180E48948CEFC30639D9D213B53A70B38B8A8F7F46821ED87D6536F3145C6A1C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe58a89f.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58a89f.TMP
Size 3KB
SHA256 d7163f4b5d54ece241c521bb21133438b916c92ded8ec86b7f014d61d14b28e3
MD5 6a3dfb48233d47d2818317b2b0a6909b
SHA1 f602d16912b5a5336cf3b7ea21647f7ff37e80dc
SHA512 1a08af7185e57ba2d892a5b5bb03f7dd7e3dfcab0d99333f32b98f8499767cf9a48c351bc1670c0111ce4a60b5e3eeb7b89ae8474164dbb688925df843fbd0c8
TLSH
T15461F9190E05549DEFD31631E5D123B83AB4B3978A8FBE56421CC8BD6A35F3246C604C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 9KB
SHA256 4c605ef503e3eaf9947cd2aa562948b20803b88587196fea2aed8c35cfc6dfc8
MD5 6431216b3cf8f002a69b28569186e7eb
SHA1 26f66462d8c7d05306884880e9379e7809057716
SHA512 f9851e25dda5f263a2965b5fa7cc6a2b6fabc12bad03f6db3025974d4fd9d59a28cd6637b5f101b413e12a2f5b80498cd355595d7b4bc036d678c1652e0334d7
SSDEEP 192:DZ8aQoy4389/w5bM/454gk6cVfDk+cv88G7p0W/yEn6XWOVdhMuvOg6KOchupf4h:DZ8aQoy4389/w5bU454gk6cVfDk+cv8m
TLSH
T1DC22CDF283E9422DC90256F0AA146E27DE6C0546637D3D9A88E4BE0B57F10F1E251F4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 790ff4162a0305e48323ebb18fb3e1b63651ac2265086e20ead8b770a5d73574
MD5 1679cd12466fabefcbd9388553ec196f
SHA1 647a2f80f98cdf9acf9daf9337aaeae9429f6690
SHA512 5b0fcd969efd2408c33cae21ea9d7d4a8e56c9fc502048e2d02c4e280bc9489c7752cf9551c0ab013a4be4687bfd22a86ee46260cd0d18fd3bec002d58ddcc9b
SSDEEP 192:sxZMRlyM/jK1Ml8Mkc/fvsSTRXlIdp9mHW6+WN3BH/YH0TMxIPIgrJ:sxZMBMc/fvsSTRXWYHbB/99
TLSH
T12652E812AA346977CCDFD209F955BF53D6F91472A2A00E44A9FCDA1C04E6AED220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 82c66773854dc822aeb8acefea3da446ef04183b24655050ffcb217c8deb9734
MD5 f8593b9c07d2c868e6b2031bae4ef389
SHA1 b742dc7d816ce7aa20faeb840cab5b3c93d852a6
SHA512 0c18e93d392184740f04acaabbd82aecaa82261158acff69e6e28657fae25ba85d89dbc7f302bc4e257e68075534be533805a4363ac83ba24e2048ac2859d6df
SSDEEP 192:sxZMRlyM/jK1Ml8UQhkc/fvscTR4GIdpXOVHW6+WN3BH/YH0Tmx5PIg5wJ:sxZMzqyc/fvscTR4niHbB/Aa
TLSH
T1E452E712AA346D77CCDBD209B945BF53D6F51472A1A00E44A9FCDA1C01E7BED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 145a556217ca07146e7708debb5b62939d463799b20300f4541beb8692ed8eaa
MD5 cf396b49ba3aa1fa6402b09b72ae4710
SHA1 9c1800e0b364c71dd44612bf8f7a948083a03873
SHA512 d31529dc1453669f93387dfe6d48c2c2f6fc44d0085313b99a6c1ee18d980aa1e85bfccbfbfa80c5e20237ee77334fbf03cb5a89ffb6bbfc7a4bc599c81db03e
SSDEEP 192:sxZMRlyM/jK1Ml8Mkc/fvscTR4GIdp9OVHW6+WN3BH/YHaT9xIPIg5wJ:sxZMzMc/fvscTR4n8HbB/ya
TLSH
T13252E712AA346D77CCDBD209BA45BF53D6F5147292A00E44A9FCDA1C01E7BED220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 67fad982a45af92e893d1ccc91b234f909648e811f0d776ecbf36e3b530b7f0a
MD5 94c6c056e5a9b83f14f4a3b15d4acf6c
SHA1 8e1d9d604696c9dcd0366eafd81225b7938fc5da
SHA512 b8b1f5ecd8c66f18dbe7d033b0c36ee23433b82c040aa63565d0783cbd6d8e3cd4df6daf248c6fc6ef9da3418374c6541da383d9bbd4afe00625130288066470
SSDEEP 768:5DazUZYTMWvg0Po8F1+UoAYDCx9Tuqh0VfUC9xbog/OVOeLlPZ4Ra7roVX0/:5DazUZYTMWvg0Pou1ja7eLZmRaI+/
TLSH
T142D20A3B280CCB7E4F844E5DEC2A6F967DD801CB5A984D544BEA884C03CB6EB512759B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 49c9380c07dcdcfc678cd39c08dfa67a6b1d87761ed3c30029cc6b4f8b1d9c90
MD5 e1870c5698fe4337f28e96c84cf8f477
SHA1 c54476f3cf09603b56f488f1190b140d698f361a
SHA512 28b6b99ba08d3b016d6ad22908645e09fb2bc3786eebed261ba50a91f207ec002731629f3664690177021250f7519dfcbbedb5149cb4ad2a378b929249976bed
SSDEEP 96:KA1eK2AUqIKLSqKAIKheqWkKzC2W7KKU0E:ES3D2rZh
TLSH
T136D1130232BB02033C3D2918A2AA97764F45F1E33458E42B7BA854B64E66E741CFD9DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

91b7e118-3f5a-4bc6-90ee-6f93abfc41d3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\91b7e118-3f5a-4bc6-90ee-6f93abfc41d3.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 a6387cf25e4539205bb6a26d5b0adb94d909f0688af00c833c16b1e2fcb2f71d
MD5 63c59f9affaeef593ed18c51fafaefaf
SHA1 45af6fda25eb99101c194e4f1e651e986b026223
SHA512 a7c2308faac5791ca6b495cdd7b5e83f5d797e91d5a072fc9b3b948a7932ca8fe7919d975dd6e83de6f5dfe94a358dd644ad307231f8bb9d72866d89c92e746d
SSDEEP 384:jsNcAeyWOzX5od+2OU96kBeRs9JKgqijUkhOGx:j/COTOU0kTjKgqmUkhOGx
TLSH
T127725B31A429AC739DE3B585F48736039FB850A7DA807FD0D2EC6B1C028B5DC631B916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 16KB
SHA256 4315040786af4db1d4cb98fd6d685a8015dda181ee56b20f2ff19f6728f22806
MD5 3c7d4da15b084e1401a39a067e4ffeef
SHA1 c112cd27649046c21eb2a286edd5ac16bc9ce9ac
SHA512 2e5514d7d0c7d07eac6d435c5167a18769216bf881f1153dd8849bbe3e942a98e9ae89ffd193ed2e6812ecd11b9101bf39c9dc2203fb2a0fe656067ec2784ee2
SSDEEP 384:BsNcAe2Vv2zX5od+2OU96kBeRs9JKgqijUkhOGx:BcvqOTOU0kTjKgqmUkhOGx
TLSH
T163724B35A429AC779DE3B585F48736039FB850A7DA807FD0D2EC6B1C028B5EC631B916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 7f7f63856b2c286ee70fea5a34e9694414faabbd02b41f41a98164957a81ae1a
MD5 25677bb946b08edbe26028babd93eca5
SHA1 edf5ea2a71e73660ae968553efacd6b75cd6cd8d
SHA512 9e377a5d60d4210a9a91759b6a29032f8c416de5b0e956659a515322531b63e8e3403a9ad19f429156a7a08733a99dfa3ec4cdc9c040ef970c6573ef5f111b5a
SSDEEP 384:UZcIzsNcfe2Vv2zX5od+2OU96kBeRs9JKgqijUkhOGI:SzRvqOTOU0kTjKgqmUkhOGI
TLSH
T14B928D319829AC3699F7F585F48636034FF8A077E7D07FD092EC6B1D029A5AC231B916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 f30e349a358677a3f1a7fa72a4d8d3eed2614ba8e5c370c937d4dbeec279b554
MD5 6ea9846abd792af380f0e121a5df84f3
SHA1 ded3dc82f64a22de281c6edcf7fe9bb999dbd598
SHA512 071732a7621c32d102c5660084d76f5dd0595d0ba7e6abb503ccb782779f0acdc697223b01e7f5011cf08688bf4253af1ecedd25597f2a5e13a1d230d668fa55
SSDEEP 384:FiFiZcI5xsNU8TUNTUlIlfe2rv2zX5od+2OU9okBeRs9JKgqijUkhOGI:MFQLtwgNvqOTOUWkTjKgqmUkhOGI
TLSH
T137D219F244D79836D9AEAB47A77D2E024EBCD063F590AA90B3D8691CCD460BFD306815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 f3b7b49548ae8b67a3e4f281673745c1246c54c0907237c27ddc558d2d149fc4
MD5 fc616a5b34b026037d8ca6fd3d8d0e4e
SHA1 2a28f19cbb6cf154ec7699a67b64489823f2d04e
SHA512 11daf0b1d163429e8bf07c5975a1b1d8be39cfd3724e61f6d8ba8e542e8c09383f344b9fa52b0ae3b0b9bbf3bc6681de4ed7d9a5cf37a462b1422a48baea8cd8
SSDEEP 192:mONd61XWQmiUyWuqGX5Obd+jKOImy9WjJqqcU6:mONd6UYqGX5od+2OU9ykU6
TLSH
T19C12E932A968AC775EE2B545F48736139FA95167EA847FC0C1DC2B2C01DF6AC230B857
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 adae40c7f43b5ab814442097e5eb4d89ef282a276469e477259a637873d65f48
MD5 6188eb7bbd5671f721d6ddadce915b1c
SHA1 55f0675e5b6d9fedfda0ff1e9925c79e38033c23
SHA512 328166810d811f6c79ba0f674545fb28592ebef0274a2fc24a11cebdf563e767168fea8ba548aba8b2306b31a1917d17be5544dac0cb13577e243d8c346b77b2
SSDEEP 192:yON061VWQmiUyrugGX5Obd+jKOImm/a23GFU6:yON06WjgGX5od+2OTPFU6
TLSH
T18E02D83569287C679EB2BE49F58737135FA8207BEA546F84D6E81B1C00D769C2307827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 f1c570ea7cc41f8f6bdb25a8bab74b8c1aed33d99fa8b4b4b161816c89ed398e
MD5 031d2c95e8f0f49bc09a885a487a1c5e
SHA1 2515e54dfb0b7c70723d35e727b26708c40e82ac
SHA512 45dd2d5450cc2e6b4d8dfa5bd4d027d5c6b250b0f32e1a55dca84d50c401902923d2a2154dd8699f6b125b606da13ccc90d496b9bfcbaf160e543afd011e7180
TLSH
T170414C59A6F91118B3B76F5A9BF6A4AE483BBD772F06C45E00110E4F0623A40C8B2737
MD5 SHA1 SHA512 TLSH

Submit Download