hxxp://maseratiofvictoria[.]com

Analysis

user interaction
yes
max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
07/08/2026, 09:15

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://maseratiofvictoria.com
Sample260807-k8b7ms1fle

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3512	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134305677621114517"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1074038928-2032447174-945360078-1000\{A5403EF4-10F9-4E1A-BBC7-A8FCF6C0E986}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2684	msedge.exe
2684	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 4964 wrote to memory of 2084	4964	msedge.exe	85
PID 4964 wrote to memory of 3512	4964	msedge.exe	86
PID 4964 wrote to memory of 2572	4964	msedge.exe	87
PID 4964 wrote to memory of 2572	4964	msedge.exe	87
PID 4964 wrote to memory of 2572	4964	msedge.exe	87
PID 4964 wrote to memory of 5108	4964	msedge.exe	88
PID 4964 wrote to memory of 5108	4964	msedge.exe	88
PID 4964 wrote to memory of 4752	4964	msedge.exe	89
PID 4964 wrote to memory of 4752	4964	msedge.exe	89
PID 4964 wrote to memory of 4616	4964	msedge.exe	90
PID 4964 wrote to memory of 4752	4964	msedge.exe	89
PID 4964 wrote to memory of 4616	4964	msedge.exe	90
PID 4964 wrote to memory of 4616	4964	msedge.exe	90
PID 4964 wrote to memory of 2492	4964	msedge.exe	91
PID 4964 wrote to memory of 2492	4964	msedge.exe	91
PID 4964 wrote to memory of 2492	4964	msedge.exe	91
PID 4964 wrote to memory of 4156	4964	msedge.exe	92
PID 4964 wrote to memory of 4156	4964	msedge.exe	92
PID 4964 wrote to memory of 4156	4964	msedge.exe	92
PID 4964 wrote to memory of 2168	4964	msedge.exe	97
PID 4964 wrote to memory of 5008	4964	msedge.exe	98
PID 4964 wrote to memory of 2168	4964	msedge.exe	97
PID 4964 wrote to memory of 5008	4964	msedge.exe	98
PID 4964 wrote to memory of 2576	4964	msedge.exe	100
PID 4964 wrote to memory of 3124	4964	msedge.exe	104
PID 4964 wrote to memory of 980	4964	msedge.exe	105
PID 4964 wrote to memory of 4936	4964	msedge.exe	106
PID 4964 wrote to memory of 832	4964	msedge.exe	113
PID 4964 wrote to memory of 832	4964	msedge.exe	113
PID 4964 wrote to memory of 3232	4964	msedge.exe	114
PID 4964 wrote to memory of 3232	4964	msedge.exe	114
PID 4964 wrote to memory of 2684	4964	msedge.exe	115

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://maseratiofvictoria.com
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffe590ac188,0x7ffe590ac194,0x7ffe590ac1a0
  2⤵
  PID:2084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1956,i,1342325100561721385,5844777961982741302,524288 --field-trial-handle=2216,i,12104464462185828758,654728166900916096,262144 --variations-seed-version --mojo-platform-channel-handle=2360 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1640,i,10604228842022917794,3909833356074898545,262144 --field-trial-handle=2216,i,12104464462185828758,654728166900916096,262144 --variations-seed-version --mojo-platform-channel-handle=2212 /prefetch:2
  2⤵
  PID:2572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2512,i,3851886705034659311,4831578040177845404,524288 --field-trial-handle=2216,i,12104464462185828758,654728166900916096,262144 --variations-seed-version --mojo-platform-channel-handle=2724 /prefetch:8
  2⤵
  PID:5108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3420,i,1620637100085498239,824321056597915768,2097152 --field-trial-handle=2216,i,12104464462185828758,654728166900916096,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:4752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3416,i,7171304671180587099,6106359922265820599,2097152 --field-trial-handle=2216,i,12104464462185828758,654728166900916096,262144 --variations-seed-version --mojo-platform-channel-handle=3444 /prefetch:1
  2⤵
  PID:4616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4204,i,264202935341956717,5938162413315885272,2097152 --field-trial-handle=2216,i,12104464462185828758,654728166900916096,262144 --variations-seed-version --mojo-platform-channel-handle=4116 /prefetch:1
  2⤵
  PID:2492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4216,i,5410944484835654097,1931246467623936201,2097152 --field-trial-handle=2216,i,12104464462185828758,654728166900916096,262144 --variations-seed-version --mojo-platform-channel-handle=4328 /prefetch:2
  2⤵
  PID:4156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5104,i,654176781909065575,14926159611889416132,524288 --field-trial-handle=2216,i,12104464462185828758,654728166900916096,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:8
  2⤵
  PID:2168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5112,i,17398049288891855676,7370542864484665238,524288 --field-trial-handle=2216,i,12104464462185828758,654728166900916096,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:8
  2⤵
  PID:5008
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5772,i,7549214086886510980,15471030354634788115,524288 --field-trial-handle=2216,i,12104464462185828758,654728166900916096,262144 --variations-seed-version --mojo-platform-channel-handle=5788 /prefetch:8
  2⤵
  PID:4968
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5772,i,7549214086886510980,15471030354634788115,524288 --field-trial-handle=2216,i,12104464462185828758,654728166900916096,262144 --variations-seed-version --mojo-platform-channel-handle=5788 /prefetch:8
  2⤵
  PID:2576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4360,i,183021352500683551,13036222792567881452,524288 --field-trial-handle=2216,i,12104464462185828758,654728166900916096,262144 --variations-seed-version --mojo-platform-channel-handle=4508 /prefetch:8
  2⤵
  PID:3124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4108,i,13953051052134264355,12062977447996357627,524288 --field-trial-handle=2216,i,12104464462185828758,654728166900916096,262144 --variations-seed-version --mojo-platform-channel-handle=4480 /prefetch:8
  2⤵
  PID:980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4328,i,13086242148521454873,16747268936935948024,524288 --field-trial-handle=2216,i,12104464462185828758,654728166900916096,262144 --variations-seed-version --mojo-platform-channel-handle=5044 /prefetch:8
  2⤵
  PID:4936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5340,i,16916845616481852455,6108925045393217495,524288 --field-trial-handle=2216,i,12104464462185828758,654728166900916096,262144 --variations-seed-version --mojo-platform-channel-handle=5324 /prefetch:8
  2⤵
  PID:832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5936,i,18034135058759606310,10786408482726884776,524288 --field-trial-handle=2216,i,12104464462185828758,654728166900916096,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:8
  2⤵
  PID:3232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6384,i,16963547822904433442,1638851810763601660,262144 --field-trial-handle=2216,i,12104464462185828758,654728166900916096,262144 --variations-seed-version --mojo-platform-channel-handle=6376 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2684

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4992

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8c5b1a407270ca9ae8bec8f20cc56244f3bde6f042890a4cabcdf4df3d21fdad
MD5 16f782e6f4d4592598936b2f29b6b339
SHA1 5c8c22b7f56af2b2e0d9978418f077cc8fd13c41
SHA512 28b2f7186b910539fa22408b47131fb16874b4c2192a721a69393efd7812da561ea9977b8af678cd3a9e37c23f186f876d7086a20afe28b16659db70955cf16f
TLSH
T15DD09232B7C9E241E14232BAA81447826E2A4A68259AC2176478844CEC6984AA79D28B
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 b28cb7be2bb68a6cda7ff7689f0ec4acdf8699e4818545d4dd692148ce1d64d2
MD5 a712889d00fb4f0945d13b925681156a
SHA1 1448cbfbc2c620e016aa5e6fccd0ac75e74ef2d1
SHA512 65f51cf451d5f77c9e695462e66abc873922db3c3999c172526727c2356a5a29052ce4b77ead44b02780ca80f6b290696b7633f537570254f36e7374ce0d04a5
TLSH
T12ED09B3277C5D541D5423276A41447816E164568159AC2175474444CDC69445579D147
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 c25ebfda736a2d5b19b193fb06740d2e453dec6b1b93f91f6f23cb9128274a1d
MD5 e457ce8742a3cac8e66c91092dd4b38b
SHA1 fe6c1f74743e72047d15469c16d0c71436ef8f1b
SHA512 afa7a72bab2420ed8e6644bc11686bb779f16d6fa552f62cbb7bc4cb4cef15d7c6130261b8063081d1707c3b265c66b2f23aeb1b5c3bcf0498a495b2bdb3b213
TLSH
T1C3714D283298158EE3E1F072E3D20F4937744C894E4B5F561360CC7D9A13B2FD52157A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58d925.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58d925.TMP
Size 3KB
SHA256 a9164582722dc1a9a5b0517f65656e63533c2af0ab6c6b7ed9325da13e05805d
MD5 287dc8870c0f5ff6c2afa612709e6f96
SHA1 58b93c74bf3c02508149be6764af3508bef07acb
SHA512 7f75ff70b82e65794a7f375453177746ce23a53043678eaf6ed36689fdefcd06efe5c1d0b89ecccd1929c6a6365f4fbb86777a785387135fef5ac627c41948e4
TLSH
T14A715C283299158EE3E1F0B2E7D20F4937B44C894E4B5F161364CC7DAA13B2FC52157A
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 cf57c77f3c9ae8223582fb5e5993ef3d0a8e606599766b1e71308adcd4d62f43
MD5 f3f4196e1291f35b5ba3badb79b9547d
SHA1 ab126ba41c3508ca717bd4b0e9d0ef7f139502f2
SHA512 597a47750cddfd22bc1fd06368ff0e499ea6e0692dd50d7d91fca6f2a2578e63e7e57e92c2dd4ae89a69bc95a45cfc6669c7bc37368c5d2e07277d0479d4d97d
TLSH
T1F311AAF3C7E485AE891116F0AB28AE2BCE2D0615821C7C59C5D4FF2BD3E3475E002A5B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 f9fcdcc3d87b1d5290def03fbdc8168df16b7b8b145fa5a5f394eebbc52797c0
MD5 b8984151c5e76508fabcb17875b46259
SHA1 ecd4dad3187a170e750f50bf152122122042b19b
SHA512 bfe8c3f796ba3f0f4d43533339d1295f40df65d4ed9b47c3192a2c981266c1dda17d664f93a7fac939be112d4f7d20ff222d339e3ac2d138f69c8c79c00efea8
SSDEEP 192:sxZaYR5yM/jK1Ml8Mkj/fKsHvP6EIdpJHjh6+WNGY4kWbwIgrJ:sxZaYRMj/fKsn6dJHWGG9
TLSH
T1BC42E611AB346977CCCBD209FA55BF53D6F84472A2900E54A9FCDA1C04E6AED2207C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 6950d73f544bf70c9848945c2d2512bb62733f9378e20ebfa0178763dc1be4f3
MD5 f64731c8c0676d646f4e6b5182d81023
SHA1 c67edc87414a9f91dec8c0bf56ae96adf54bc9a8
SHA512 6399452cf63e90b3f0ca79de06ace7becfb98f18824a76f23bc84d47229e6fe4dd0e7cfa896761003a3bbe020eca95f23924ea1475ceecc89531aa3744636918
SSDEEP 192:sxZaYR5yM/jK1Ml8UQIkj/fKsJvPXLIIdpLrHjh6+WNvL4/Y4c/bwIg5kJ:sxZaYjqrj/fKsNXL5/HWk/Ve
TLSH
T10052D655AA345E77CCDBD209F991BF53D6F84472D2900E58AAFCDA1C04E6AED220381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 e43f9fdb1f16bc0b00de5d501edcd001d9bc100527474985f7aa08a38123957c
MD5 c186241b0a24bb9f6dd324dfe297aaa7
SHA1 d03ccf68cc7c14b9ead0b396ca24a10086b44d40
SHA512 152d6b514f67349e65174f7e514c0b83289686fe4a460dacba8783393f61be6b47281d1230114203f6b7c10cef36097ccdefbd290e2a492eaefb1becdf68100a
SSDEEP 192:sxZaYR5yM/jK1Ml8Mkj/fKsJvP6IIdp9rHjh6+WNvL4/Y4TWbwIg5OJ:sxZaYjMj/fKsN65lHWk/D0
TLSH
T1A552D7556B345E77CCCBD209FA55BF53D6F84472D2900E54AAFC9A1C04E6AED220381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 caaf4eb776f18a5518a1831daa725f6ca03e4abee1f2221578be5b878bbd9ea4
MD5 22f4dba3c82c9e9771d6069cf6c8d04e
SHA1 b8ea15efc3f346ad1e5415efbff402bd1843f71c
SHA512 ee3b75b5ab2f32112c3b57203f11031186548e2007b04128b04f899e2ee9c306aa77d867474e4290d87b646e113435e5334f562af97e22dc61d092aedab5f271
SSDEEP 768:Yi8iJPNWvx76r8F1+UoAYDCx9Tuqh0VfUC9xbog/OVsALl6opdvrolkzUno:Yi8iJPNWvx76ru1jahALocd8KUo
TLSH
T160D20A3B680CCB7E4F844E9CEC266F966DD801CB6B984D5447FA884C03C76EA51279DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 8ba838b1be752fb9aceec25681a79d9b5de003cf81e84d998b10dabf3c5389d7
MD5 a22254ba4c93c51f23990b6a4779b7d0
SHA1 292849615f1b1d08da5b3f062d62deedc19acedb
SHA512 f235919d8ffadc92e050ea6cc3224d0fda90c12f47cfbf3c4a68df58c06c559ab3cf62b65fc02bc112952becd8c0f3af66790dd68633d60687c44d0b92f080cc
SSDEEP 48:Kvp8j3pzTxuXesIZvxKM4kJxYBhLWvTSyZII9KwzAI3KZ+UnyZWIfK5:KUacKL6SqIKKwzAAKZ++qWEK5
TLSH
T1A191240133BF43837C7E750C926596564B42B5633229B43F7BA902620EA6E256DFCCDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 bffbb70d789af55be0136cefea0754f24b42e6e6c0f09dca02152e6e4db7e4d7
MD5 bf8024794be2d94e1adb7757f2390a75
SHA1 51c2403ab6bc4e153d01c9869af696cf817ef9cb
SHA512 7acf82f18fe9b6d759d23d0678688ac438f27e5fa76bd265fb20bcbe429247d5e3298dc2e14b51a7aed54a91a53bbda3fe27d940f9d488ecc1df34fc65c112c5
SSDEEP 192:ujm+xasuheOwQxMGsN/XQmWv0mBrQmiU1rl84k03/irbN2LISqlf5CFh9L+3grj7:dZcIhsN/XJeL/TkWOpr1f5Urz/v
TLSH
T1A9927DB16C786C3ABDE3E685F84A32175EF88133E3C52B98D5DDA72C04AA5981703816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 9775b3c00b1787bf2b9cac25f2ab785e40dceb3afea0abf39f6ee9dea5a8a69a
MD5 0128b616c253fa701cd7540bd36e8207
SHA1 419e7116522a7435c29e9ac844df6eda2f2d1602
SHA512 9a1a703bc367232769d8fd29c43d4d816ac52a299e1c1a578e8f740d7ce2ba20e48d988760071cae3b9828bb503972836ac2610d121c4d5b58216d5f954b3974
SSDEEP 384:EiFiZcIKzsNh8TUNTUlIlJJeLYTkWOpK1f5Urz/v:fFQCowglJB1SH
TLSH
T1E2D23BF208E7583AE9AE9B43A77D2E134EBCC163F6816694B7C8551CCC960BFD302815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 6bb91da0407bfe2a408d06fc3f63eee87d313a53d0e109fad600d1986badb116
MD5 ff285249732e8626e97a5c7dfba83e2e
SHA1 afec01d92a570a3aa8971138dff6ae6d6c737007
SHA512 54e8352760c19b77f02695a31763ce9f4748b2e22ad68b138c87c989acdc7ace601471fe24d8492f255bf97b144dd4f0a9a7155b11b635a93b6427ec5458a5db
SSDEEP 96:ZqONk7QsjpfmUTmDK5ih/cIPURHl8h4otop5Qru5DbBhPwivh50xy0SFYKDAxvYO:gONz6kDfQmiUyVlZ903/i+Qin6aU6
TLSH
T14702FA39687C6CBB9EA3AE45F48777275FE8113BEAD12F84D9E81A1C00D764C1703826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 c661792109662940748dd495e4a386b2b9f6a004e2e9bbf0b27072150fbb381a
MD5 cf87e133b451ff20dd1bb95ad4d4325d
SHA1 332e116f683cf05801cad7e9e0fa1ce417949d02
SHA512 488bae7c159a6bf2d4504565fdb27007120de067f0df900a8968c87cbd49cdf0b96b838d668562062e2339cbc679372f4f416435627f8b9cc7600769412cfec0
SSDEEP 192:uDm+xasuheOwQxMGsN/JQmWv0mBrQmiU1rl84k03/irbNALISqlf5CFh9L+3grj7:xZcIhsN/JJeL/TkWOp91f5Urz/v
TLSH
T17E928DB12C786C3ABDE3E681F44A32175EF88137E3C52F98D5DDA72C04EA5991703816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 e17b635116ab9337f047d5ac2c4e438d31c21f7ed6d7612aab7acc794951cb0b
MD5 aa386f9f09ef8d53fec1703581e04bb2
SHA1 fd594b7f6d2c867b67ef549cdfa0373d0f21d0da
SHA512 584c6bc7650821c7859d8b63585fffe3f1628f78fac70c483c9b359749df8a9eaba7b025d7aef53356816001be8206daac0d335c601989928fd494a1c011afd1
SSDEEP 96:2qONkeQsjpfmUTMK5ih/cIPURHl8h4otop5QruuDbBJPwivh50xy0SFYKDAxvYeX:dONa6khQmiUyUlB903/irbNFcRSqlU6
TLSH
T1C4124A32A8B86C7B6DE3A551F48736239EA88137EBC96F90D5DC271C05DF29C1307822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 cab4cb8b2df1323164e54b6f657c06c7aa24b36719ec52baededb916c499ae1a
MD5 e874f43ff1eb7d1d022c7d9b1d741f1a
SHA1 a6d1088cb2686bf5ca01713813895d5d36608217
SHA512 18f934adbc10c403d9e07f6eb1181919973c4948813e817a601ba813781124ed4606aacaa1f59c32a24e7457cde285430917a3bd78b8045edc2f9eed5ac280da
TLSH
T1E641D859BAFA1058B3B36F5A9BF6A8AD547FB9673E07C45E00010D8F0663A40C9B1737
MD5 SHA1 SHA512 TLSH

Submit Download