hxxps://www[.]soriana[.]com/?utm_source=clevertap

Analysis

max time kernel
148s
max time network
142s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
11/08/2026, 03:04

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://www.soriana.com/?utm_source=clevertap
Sample260811-dkrh4avalb

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2688	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134308912202504349"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2937465464-4167303362-2236413517-1000\{19F6A986-D879-47CF-8AA5-BAA20F713335}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4376	msedge.exe
4376	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4108 wrote to memory of 872	4108	msedge.exe	85
PID 4108 wrote to memory of 2688	4108	msedge.exe	87
PID 4108 wrote to memory of 1336	4108	msedge.exe	88
PID 4108 wrote to memory of 1336	4108	msedge.exe	88
PID 4108 wrote to memory of 1388	4108	msedge.exe	89
PID 4108 wrote to memory of 1336	4108	msedge.exe	88
PID 4108 wrote to memory of 1388	4108	msedge.exe	89
PID 4108 wrote to memory of 1576	4108	msedge.exe	90
PID 4108 wrote to memory of 4936	4108	msedge.exe	91
PID 4108 wrote to memory of 1576	4108	msedge.exe	90
PID 4108 wrote to memory of 1576	4108	msedge.exe	90
PID 4108 wrote to memory of 4936	4108	msedge.exe	91
PID 4108 wrote to memory of 4936	4108	msedge.exe	91
PID 4108 wrote to memory of 3856	4108	msedge.exe	92
PID 4108 wrote to memory of 3856	4108	msedge.exe	92
PID 4108 wrote to memory of 3856	4108	msedge.exe	92
PID 4108 wrote to memory of 3348	4108	msedge.exe	93
PID 4108 wrote to memory of 3348	4108	msedge.exe	93
PID 4108 wrote to memory of 3348	4108	msedge.exe	93
PID 4108 wrote to memory of 1112	4108	msedge.exe	96
PID 4108 wrote to memory of 2704	4108	msedge.exe	97
PID 4108 wrote to memory of 1112	4108	msedge.exe	96
PID 4108 wrote to memory of 2704	4108	msedge.exe	97
PID 4108 wrote to memory of 3468	4108	msedge.exe	99
PID 4108 wrote to memory of 4508	4108	msedge.exe	104
PID 4108 wrote to memory of 576	4108	msedge.exe	105
PID 4108 wrote to memory of 2368	4108	msedge.exe	106
PID 4108 wrote to memory of 3336	4108	msedge.exe	113
PID 4108 wrote to memory of 3336	4108	msedge.exe	113
PID 4108 wrote to memory of 4376	4108	msedge.exe	116

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.soriana.com/?utm_source=clevertap
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffa6ec8c188,0x7ffa6ec8c194,0x7ffa6ec8c1a0
  2⤵
  PID:872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1784,i,3190583197671881780,1861480456507944904,524288 --field-trial-handle=3004,i,12731682388366684748,16457418300260936576,262144 --variations-seed-version --mojo-platform-channel-handle=3024 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1688,i,18285592282266910329,8927106723090895196,262144 --field-trial-handle=3004,i,12731682388366684748,16457418300260936576,262144 --variations-seed-version --mojo-platform-channel-handle=2728 /prefetch:2
  2⤵
  PID:1336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2388,i,7320899612322022827,13972341153824741777,524288 --field-trial-handle=3004,i,12731682388366684748,16457418300260936576,262144 --variations-seed-version --mojo-platform-channel-handle=3100 /prefetch:8
  2⤵
  PID:1388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3444,i,10528153650408263436,8555767489473489587,2097152 --field-trial-handle=3004,i,12731682388366684748,16457418300260936576,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:1
  2⤵
  PID:1576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3448,i,18190000173933336131,5731595422419364318,2097152 --field-trial-handle=3004,i,12731682388366684748,16457418300260936576,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:1
  2⤵
  PID:4936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4180,i,2881082228105066316,8571707587876082083,2097152 --field-trial-handle=3004,i,12731682388366684748,16457418300260936576,262144 --variations-seed-version --mojo-platform-channel-handle=4192 /prefetch:1
  2⤵
  PID:3856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4244,i,11824471519546060091,6532065166395527706,2097152 --field-trial-handle=3004,i,12731682388366684748,16457418300260936576,262144 --variations-seed-version --mojo-platform-channel-handle=4280 /prefetch:2
  2⤵
  PID:3348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5132,i,1044779593666760130,6610325302252472970,524288 --field-trial-handle=3004,i,12731682388366684748,16457418300260936576,262144 --variations-seed-version --mojo-platform-channel-handle=5192 /prefetch:8
  2⤵
  PID:1112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5140,i,13773968748748485194,17743362736492768666,524288 --field-trial-handle=3004,i,12731682388366684748,16457418300260936576,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
  2⤵
  PID:2704
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5968,i,17342067622732578534,1990068778387607278,524288 --field-trial-handle=3004,i,12731682388366684748,16457418300260936576,262144 --variations-seed-version --mojo-platform-channel-handle=5984 /prefetch:8
  2⤵
  PID:2480
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5968,i,17342067622732578534,1990068778387607278,524288 --field-trial-handle=3004,i,12731682388366684748,16457418300260936576,262144 --variations-seed-version --mojo-platform-channel-handle=5984 /prefetch:8
  2⤵
  PID:3468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2428,i,8989541228638398416,8971104137442711460,524288 --field-trial-handle=3004,i,12731682388366684748,16457418300260936576,262144 --variations-seed-version --mojo-platform-channel-handle=5012 /prefetch:8
  2⤵
  PID:4508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4468,i,5541110266102191790,8540953039568556090,524288 --field-trial-handle=3004,i,12731682388366684748,16457418300260936576,262144 --variations-seed-version --mojo-platform-channel-handle=6056 /prefetch:8
  2⤵
  PID:576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4472,i,11279620920969417391,18314373788561654793,524288 --field-trial-handle=3004,i,12731682388366684748,16457418300260936576,262144 --variations-seed-version --mojo-platform-channel-handle=4456 /prefetch:8
  2⤵
  PID:2368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4460,i,14979018397197605397,4536250679538413661,524288 --field-trial-handle=3004,i,12731682388366684748,16457418300260936576,262144 --variations-seed-version --mojo-platform-channel-handle=5512 /prefetch:8
  2⤵
  PID:3336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6016,i,405993325398347323,1172374927446018321,262144 --field-trial-handle=3004,i,12731682388366684748,16457418300260936576,262144 --variations-seed-version --mojo-platform-channel-handle=5144 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4376

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4804

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3eacdfce7dc5d437b4447cf27ab297d2d39d13a22d53487691f060212cddb6b2
MD5 77a76342e47369b91c295856d0d136ad
SHA1 bac334fe99bd25a56aeb5cf09b273fd394730180
SHA512 5594ac61907f341c5e00a7e62a64d33fde684c855aa9b27d0c2756986334fbea5ebaf894d13dfedefe84d1f7ad65aaa17fb6b204714ed08460f06e4ed17ce733
TLSH
T1AAD012223A48F441DB4942709103CF453B26146024579A06E259D86D58B41D453D66C2
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 29fbf1f51aab26c6e8465e37724fc020847c0952f59d7f5eb1fbf0e9761953ac
MD5 95b144d38fb8eb4adb3556d261faaa65
SHA1 9c074aa0e87d95a2dad338e4fce905939cce674d
SHA512 77dc8fcacf41863c00bc2324ebf87afb8467a63266eb926307f6fb46764f63ce134452a2cc1ba3f6df1a838fe3c5374f94a498642e8ce5fe9167c33c90d4e228
TLSH
T1CA612A28F5320C80E3B16371DA915A1C38F0CF88DA5B9E5143D864BCC5DA37F85B6C49
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 4fe5400808d8f675fa1835aa7b57a7afce73b7e3f6672ac24f4cb7eac4fee96c
MD5 c0c22ecb3b14416bd3c0dae97cfc33df
SHA1 f2aeb321189373175bef17f12358529ad62cf617
SHA512 98183de32ecb46d199960982559095929dac28376c1d57516d744cac9d96c7a285ee7b0c467cec902035254da3cce2331a19fa8d923fd9e727665f3d603c2c86
TLSH
T1E111AAF383E586AE8A0156F05A28AE2BCE2D0515832C3C6A85E4FF2793E3075E00195F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 2e0f9b87c148a472618e3722a7b8760add1a98c9911fe2848fa340652867ec01
MD5 33422e2bf1d91bf6339d439fa3c65155
SHA1 56da7a1a285fa8188a7744075fb22d0049b1d3e9
SHA512 aed5e67987a21c928a76a6b2d2ee46d9dddb314378a39951c0c9d8c2de912ba82c0d063ff9f3be9b5b56b82608deea9d9e0ef5b15c60ec7e50cd53d58556ed1c
SSDEEP 192:sxZ1RZyM/jK1Ml8Mkl/f+s7uPjVIdp37HW6+WNdmK/YLbjbCIgrJ:sxZ1vMl/f+s7u7mrHbt/19
TLSH
T1B652F9116A34A977CCCFE30DFA55BB53D6F90472A2900E54A9FCDA1C04E6AED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 0962d10b5c209275a65954de44dbb6ca9550141c7bc314c24ef0048caaa2e9b8
MD5 b4d6c9c6db1b82485b1ffa29e3facbdc
SHA1 d5e55293ba4a1c6160c3de9d8cc7fe4faa6fe31d
SHA512 cd8cd72ea90ca226165b08da7f703ebbda16ec44696f32856a2833dcaa24a7203a445d92404785955e94df61bd9abe935b55704004feb2ed670ac3e9a9f51bcd
SSDEEP 192:sxZ1RZyM/jK1Ml8UQBkl/f+slupjVIdpx7HW6+WNdmK/YL3O8CIg5HJ:sxZ1vqSl/f+sluZmdHbt/H3
TLSH
T17052E7116A349977CCDBE30DF945BB53E6F9047292901E48AAFCDA1C00E6AED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 94c427cb707727d4e5a386d8d06e655035ba5deff91db33b0635f275e9c54063
MD5 a47139490bf6f804926ea81c500eab49
SHA1 17f50231ce08e0b1ae63773635be8cd9751c2216
SHA512 50e631aad1784b6b6184d11d637ce5466f136f774fdd73110fc9db11a5b66309ad103ff3a680e8a3b88862aad83268c103021f083f0617dc296a5b8a1ad73d5a
SSDEEP 768:mEs6pD1WvxzWj8F1+UoAYDCx9Tuqh0VfUC9xbog/OVEILlWwJNNroOU:mEs6pD1WvxzWju1jahILIsNmOU
TLSH
T11BD20A3B680CCB7E4F841E5CEC2AAF967DD801CBAB98895447FA444C03C77EA512759B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 fbecf6ed1598ab79085332dd466dbb3ac34a5751f60ddb501ffb07a80b6a02c3
MD5 9c8329e4911701655cf4660c29a5e088
SHA1 38e027382031132a0c96e02f4b8facb751e86f62
SHA512 39d6e8cbe9766b82741c0085d302f3dc5aac632260948fadb43ae74fd2983bb1e82536fcef78553bd9291badbbde3352be90b522e698921c8622811678751a07
SSDEEP 96:KUAAKtePtYhM46SS+4iDlqY+KyLqO+2QYr+ofuVKKOAJ+IKHKS6eUKry7:iitYhM46SSPiDIYYLqOzQYr+ofdxXvs
TLSH
T121E1D45771B742023C7E2A5C8794C7768E42B5633028A42B7FAC01765E67E208EFD9DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 16KB
SHA256 db0f1e77f7bce1dacbe365bfb51c8d60b10307131fb57486b70814d80c11ff89
MD5 b7f0f34fe36b7669e730c72e6dcdb2a3
SHA1 e2000562bbd1a36062a023880bac911f6056a75d
SHA512 d5d4ca2ba20ef7282adbbc4e0e77b54fff36811173f401d44c76a819f0352aca79e99e2a2930132eab05babb2fc1aa3782366359ce2a7442f5127143e4fdea62
SSDEEP 384:ysNJR8wFi26Nyua9lOaaR3YAROOPrXLpe8C/Glk:yS3cqvOaaR3YAROi9Pplk
TLSH
T1D9726D7178785CA71CE6E688F58636039EBC0167E9862F94D6EDAF0C01DB69C2307C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 9d0ca2a1e6456a3fa73a9039e3b0e4efb1adfc6a6be75d8dbc15ff471cdb80be
MD5 462948152304bab275cf3e897e207cc3
SHA1 74a3e73bf382c5e66db55f47bbf41d8685bdc6e4
SHA512 aee0e445071dec351e1df5a3dc55866717717fde27d06cccaf17cc8c6204c9154d6952b72079e93ee2bea35160b73c577da2c0749d2bf99ad68e6f50a47a2533
SSDEEP 384:mZcIhsNJT8wFi26Nyua9lOaaR3YAROOPrXLpe8C/Gle:0hG3cqvOaaR3YAROi9Pple
TLSH
T188928D7168785CB72CFAE689F98626039EBC4037E6C62B80D5EDEF0D01DB598130BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 ba9980961c5d9bba07ef2f196e5e88c2f4a1f88e15cfe258e40588cb5a5640f0
MD5 69bdffad9384bf9d192e0961deeca0f2
SHA1 527cefed35dce32fcd63586974cb802bdfea7c53
SHA512 8b0fdda58ab43dd8e5a0872a2980c5be7363f531292dc5882bef55b8a830371851af6755b6c1070913fc784e3df1db8658a59a0215648478afeffd2f80b72793
SSDEEP 384:gqZcIozsNJT8wFi20Nyua9lOaaR3xAROOPrXLpe8C/Gle:DUG3eqvOaaR3xAROi9Pple
TLSH
T1EEC228F168E75876D8AEA747A7BD2E034EBCC023B5851A40B3E89A0CCDD657FD306815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 fefe49e6121d74f3696171895bc53018bf81c1c2effe4c61b640caad957da384
MD5 c7d32a8a987589f226f327c7574e3b81
SHA1 305a01ba83b6fe75ebaca656a7891fb2c74379cd
SHA512 9d35b328ce7212fc2218d5b365e542fc18cf7c968eaecea397a129efae7be163a9bc9028ae6e7ca3d96be786ecef78a679c0ac9b51f9c40c798582c90c2dd14e
SSDEEP 192:qONy6O7+3hQmiUyPxGttb0cO2coGgGF26U6:qONy61aGt9lOa4k6U6
TLSH
T15302E7357C686CB79EB2AE49F98737179FA9103BE9962F40D6E81E0C00D765C2343826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 0ba366f5b15f5e4ceb125bfef7e089cfe0370773782de31b61fc84f3abb942ab
MD5 dc9a96a3a450c8ccb76eed7e13be21b8
SHA1 4c3e1707ff5ae31241a71abc8e954be7e5184734
SHA512 628124f71f4f01106aa90b94fb1a2035f564161e8904aa8b6fdf6f66ea8a759e04856dc1810b692630f0d83b639e12bdbe2c24d34a1b52658bd631a39f4ccc01
SSDEEP 192:dEONs6O7+3BXQmiUyWBx28ttb0cO2coaR0ExcNDqI+RU6:uONs6tXblt9lOaaR32ARU6
TLSH
T151120B317C68AC771DE2A585F9C736178FA9012BDA4A7F81D5EC2E0C01EF69C234AC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 9453684d8d4767f05f71d0a404ab837050f8458ee0d8d6301316cfd2c399196f
MD5 06660790ffa16de364807a542b9cb32d
SHA1 07729a6e01339946ad30da37c87245ad41ef6f06
SHA512 ad24cc5ef885b0f6d47c7a0f4e0d5eda3aec2f99197268ce6a2377dc9660587f9d61633f9f1b15f64f67bf4b3417285b1b0a6edffddd905b31547cb0a6f2150a
TLSH
T10441185CB6EA1148B7B7AF5AABF7A85D487FBD772E0AC45D00110E4F0A62A40C871737
MD5 SHA1 SHA512 TLSH

Submit Download