hxxp://humani[.]fr

Analysis

user interaction
yes
max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
15/08/2026, 00:53

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://humani.fr
Sample260815-a84lsacm7v

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2176	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134312288414113130"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2937465464-4167303362-2236413517-1000\{819FC9B0-1A8A-4C0F-9308-B5F01C858E8F}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4040	msedge.exe
4040	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe

Suspicious use of WriteProcessMemory 35 IoCs

description	pid	Process	procid_target
PID 4608 wrote to memory of 2396	4608	msedge.exe	84
PID 4608 wrote to memory of 2176	4608	msedge.exe	86
PID 4608 wrote to memory of 3672	4608	msedge.exe	87
PID 4608 wrote to memory of 3672	4608	msedge.exe	87
PID 4608 wrote to memory of 3672	4608	msedge.exe	87
PID 4608 wrote to memory of 4624	4608	msedge.exe	88
PID 4608 wrote to memory of 4624	4608	msedge.exe	88
PID 4608 wrote to memory of 536	4608	msedge.exe	89
PID 4608 wrote to memory of 4252	4608	msedge.exe	90
PID 4608 wrote to memory of 536	4608	msedge.exe	89
PID 4608 wrote to memory of 536	4608	msedge.exe	89
PID 4608 wrote to memory of 4252	4608	msedge.exe	90
PID 4608 wrote to memory of 4252	4608	msedge.exe	90
PID 4608 wrote to memory of 636	4608	msedge.exe	91
PID 4608 wrote to memory of 636	4608	msedge.exe	91
PID 4608 wrote to memory of 4264	4608	msedge.exe	92
PID 4608 wrote to memory of 636	4608	msedge.exe	91
PID 4608 wrote to memory of 4264	4608	msedge.exe	92
PID 4608 wrote to memory of 4264	4608	msedge.exe	92
PID 4608 wrote to memory of 3804	4608	msedge.exe	95
PID 4608 wrote to memory of 3804	4608	msedge.exe	95
PID 4608 wrote to memory of 3804	4608	msedge.exe	95
PID 4608 wrote to memory of 2460	4608	msedge.exe	97
PID 4608 wrote to memory of 4004	4608	msedge.exe	98
PID 4608 wrote to memory of 2460	4608	msedge.exe	97
PID 4608 wrote to memory of 4004	4608	msedge.exe	98
PID 4608 wrote to memory of 4668	4608	msedge.exe	100
PID 4608 wrote to memory of 3716	4608	msedge.exe	104
PID 4608 wrote to memory of 2092	4608	msedge.exe	105
PID 4608 wrote to memory of 4224	4608	msedge.exe	106
PID 4608 wrote to memory of 1312	4608	msedge.exe	111
PID 4608 wrote to memory of 1312	4608	msedge.exe	111
PID 4608 wrote to memory of 2732	4608	msedge.exe	114
PID 4608 wrote to memory of 2732	4608	msedge.exe	114
PID 4608 wrote to memory of 4040	4608	msedge.exe	115

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://humani.fr
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2b8,0x7ffa248bc188,0x7ffa248bc194,0x7ffa248bc1a0
  2⤵
  PID:2396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1952,i,13570689234058367296,1868809847621073754,524288 --field-trial-handle=2380,i,1225494799371530919,7811646940254723194,262144 --variations-seed-version --mojo-platform-channel-handle=2424 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1832,i,7475783037052482642,14325614046482267706,262144 --field-trial-handle=2380,i,1225494799371530919,7811646940254723194,262144 --variations-seed-version --mojo-platform-channel-handle=2376 /prefetch:2
  2⤵
  PID:3672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2548,i,5883160634930088940,511947478411053989,524288 --field-trial-handle=2380,i,1225494799371530919,7811646940254723194,262144 --variations-seed-version --mojo-platform-channel-handle=2852 /prefetch:8
  2⤵
  PID:4624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3448,i,14022448855324754980,17513390088565705736,2097152 --field-trial-handle=2380,i,1225494799371530919,7811646940254723194,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3468,i,9074508422750660010,11845791674296534462,2097152 --field-trial-handle=2380,i,1225494799371530919,7811646940254723194,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:4252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4244,i,3348701320709591761,1860714339181817829,2097152 --field-trial-handle=2380,i,1225494799371530919,7811646940254723194,262144 --variations-seed-version --mojo-platform-channel-handle=4288 /prefetch:1
  2⤵
  PID:636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=1888,i,3451528350522881398,17595524154857484937,2097152 --field-trial-handle=2380,i,1225494799371530919,7811646940254723194,262144 --variations-seed-version --mojo-platform-channel-handle=4292 /prefetch:2
  2⤵
  PID:4264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5052,i,1096316160590964706,11246492790918232620,2097152 --field-trial-handle=2380,i,1225494799371530919,7811646940254723194,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
  2⤵
  PID:3804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3596,i,7566837964800768596,4909588268299070132,524288 --field-trial-handle=2380,i,1225494799371530919,7811646940254723194,262144 --variations-seed-version --mojo-platform-channel-handle=5296 /prefetch:8
  2⤵
  PID:2460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3468,i,2274831008925603998,1388821608834716063,524288 --field-trial-handle=2380,i,1225494799371530919,7811646940254723194,262144 --variations-seed-version --mojo-platform-channel-handle=5320 /prefetch:8
  2⤵
  PID:4004
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5660,i,16641006674851218864,187859010434473876,524288 --field-trial-handle=2380,i,1225494799371530919,7811646940254723194,262144 --variations-seed-version --mojo-platform-channel-handle=5992 /prefetch:8
  2⤵
  PID:3608
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5660,i,16641006674851218864,187859010434473876,524288 --field-trial-handle=2380,i,1225494799371530919,7811646940254723194,262144 --variations-seed-version --mojo-platform-channel-handle=5992 /prefetch:8
  2⤵
  PID:4668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5036,i,4947048022492785194,18351702862032425295,524288 --field-trial-handle=2380,i,1225494799371530919,7811646940254723194,262144 --variations-seed-version --mojo-platform-channel-handle=4276 /prefetch:8
  2⤵
  PID:3716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4364,i,7273002650440393448,17022474168466102966,524288 --field-trial-handle=2380,i,1225494799371530919,7811646940254723194,262144 --variations-seed-version --mojo-platform-channel-handle=4384 /prefetch:8
  2⤵
  PID:2092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4292,i,15928763827097628541,9931797253736969953,524288 --field-trial-handle=2380,i,1225494799371530919,7811646940254723194,262144 --variations-seed-version --mojo-platform-channel-handle=4348 /prefetch:8
  2⤵
  PID:4224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6368,i,2041172313978958811,16435932702119017106,524288 --field-trial-handle=2380,i,1225494799371530919,7811646940254723194,262144 --variations-seed-version --mojo-platform-channel-handle=6376 /prefetch:8
  2⤵
  PID:1312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=768,i,11445643268438452629,12530713282080730685,524288 --field-trial-handle=2380,i,1225494799371530919,7811646940254723194,262144 --variations-seed-version --mojo-platform-channel-handle=5508 /prefetch:8
  2⤵
  PID:2732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=3736,i,7259136841300478252,16321742224460064126,262144 --field-trial-handle=2380,i,1225494799371530919,7811646940254723194,262144 --variations-seed-version --mojo-platform-channel-handle=1044 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4040

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3324

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 05210635590ecfe61f0ff004344f0d07b5a87e284e29db76f0bd61e97f43da5d
MD5 f3021567e2b276da7e7b2413e95d0918
SHA1 2925767ee01df1ce973aad0d342ba0f82a41cd81
SHA512 5b21fac88299defcd3a29d897631cfc4c2389199b22dd9059a42d23770fa290b889a287add6c819d88e1fd4c377eaeb1334a84e81ea1e94cb895145f971870b3
TLSH
T1D1D09B207A48F441C745017195059F553B2654542057D90AE165585D6CA519493D9682
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 b922253f929fbccbde1175585479bcacf692005796db45b772bcc9908da9815c
MD5 027168023b507f421b9238ce85bd75d1
SHA1 89380ff2032e1c691c83c780c4ba8a7d8b9965c3
SHA512 14768baae4269f257677673f9bc7637b5156fe64e5a65cc5647218e9db9ff89bc9aefa7a4b26db672c3af1b0b8eac5d2458be0017d5af25614e110523a6975d8
TLSH
T17471293C3253418BEB6F85F1F8F95E4C327841AB9B5F9E3C0618087D7A19B698013418
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 416a245b08f101958daf5ec40e264731410c45690d5c4c1736a280d913458e35
MD5 23f00929dd1171b7cec9db49ce92e8bb
SHA1 c6beb56e49392ed6c988bd4290ba144259e9736e
SHA512 d798d27b051d3bd1802e5fb815d362a7830ac2c6d697dcf4cecb5349548c85cb42f02322d50044ed70776a70072a070cc3eb7b3539aac5391d286ab7932b5374
TLSH
T1A751A3F3C3D9865DCC1162F09A24AE1BCE5E051583183D29CDD4AF5BA3E34B1E24164F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 fd3558d2641b347d9ff9611bbaed16cde1b2ba9c60f651564e4d6695b27d6270
MD5 9bfd33742cf3eb2e3ae99331e375e184
SHA1 aecae73b149dbd61e27f6b5609546fc4ec02ab09
SHA512 f0fc040489ab9e2afc8e0afed80dac51be69114c2fe8f01e345d88ea130637a0edb6dcb632b83c8906e2b8c4c5c877b6f43728a5410a9c93a961141af1e71ad2
SSDEEP 192:sxZTxRukh/f5sn01UIdpRWHW6+WN2nU/YLKNkkIg/3J:sxZ17h/f5s01NoHbp/Vh
TLSH
T13E22C9116E78A97B4CC7E309BA15BF53E6F95032A1911E88EAFC961C04E7ADD221740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 2d4a1611bb1619acab4c75d36fab92c6f1813bf18d61fc6e12016c266373edb8
MD5 34b766fde29f46e97109bd3af2113047
SHA1 cef3ed1f2f0c6e13b6a7fc32b0756ce93d5dd8d7
SHA512 82d36b2a3dd908515c4bc0757682f734692438e63cc42004e39aabab1a94509d1105f8b0dc5db6dbaed7b5047be6283de45516f5dee6b9a14f45fef24798b989
SSDEEP 192:sxZTxRukh/f5s001UIdpRWHW6+WN2nU/YLKNkkIg5H3J:sxZ17h/f5s91NoHbp/Vz
TLSH
T1D022C9116E78A97B8CC7E309BA15BF53E6F9503291911E88EAFC961C04E7ADD221740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 f12c195a2f3bc81f0b99f2f7456f05511e1d668b6534b010cbcfa9350879c65c
MD5 f0850769297364e508c760bf9af85ae5
SHA1 dda7b9bb8928cc15c313c9ab157230fb863ab8bf
SHA512 19b126e96dd2c14b93f671e59c3ede30910fe2a74a462226e329ea11b33c4bb3ef654c47a5152768c283e637775577313a0d8020cf449c720b050bac19ce7824
SSDEEP 192:sxZTxRukh/f5s00mUIdpRWHW6+WN2nU/YLibkkIg593J:sxZ17h/f5s9mNoHbp/7F
TLSH
T11C32B9516E78A97B8CC7E209BA55BF53E7F9503291911E88AAFC871C04E7ACD221740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 1fc249e806cde6a6fc0e2ccec4e01bfc00b64a2f0c8498617a086f884c041697
MD5 84f32d685ce4763ef92cc3f4129c6709
SHA1 83ea7b4d145827237229af0daa6cfcb82b1d938b
SHA512 422c758514ce9dea8deb2d0853a64d09473305f2f97ae0309194111995f3b963664a29c44d56b70771bbd0bc1482f6fdbca1e3359ef0b992cc560c3ccad4eff4
SSDEEP 768:4DO6fP1Wvxz3j8F1+UoAYDCx9Tuqh0VfUC9xbog/OVkILlWwJvfrofQ:4DO6fP1Wvxz3ju1jaZILIsvMfQ
TLSH
T11BC2E83B640DCB7E4F801A9DAC5A6F973E9802C7AB588D8447FE854C02C77EE51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 a0c05e1499c28dbdac15527b8f010a7a009692b96cdfe53f9f872aae108f69d3
MD5 094084748ddcec20f37910b2f3f019a1
SHA1 c15885148d2f7d0da9fa7560d46a377232d6ff8c
SHA512 2b6cd3d3082881b0e03f2fc7555c4b79fc8ed15d39ded96f490ede688af9ec7fad5cd783a90ff992cd511ac6a21cac79d0c7aa46dab53568f2b3dc07d6682dd6
SSDEEP 48:K0PY7/VpdktpmPImHkKzBb9k3f0oGVIyFOuI3KvasrylxIhKq00+Ydeiws:KUAAKteP2OuwKvaCOxuKq0ZYdeiws
TLSH
T1E8A1321332BB03437C3E294C97959B66474672A33018B42B3BE910B65EAAE344DFD5ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 b2fa40af881ef3fee92f2e2b2998d1be07942739575dbc1082dc9e5b68d036fe
MD5 31e4f8adbe47763a46372a42bf02b6ce
SHA1 e708ef04551d4a677fe5151a2067b1601128ff5d
SHA512 f79119f61ca37414c2c19f567ff37906d17a8032b7b94db3af3cd79243ef2a30e6fc85c24c771ad5639c780b07ff0e0bd16c32077ea02279774f12bba7b8b243
SSDEEP 192:uMJsNH4Ququ7+3vXmQmiU1gdA4atb02O2bbh2e/FF0SJrPLMrqEawU8:fsNH4wSSva9DOMMe/7zJrwbU8
TLSH
T1E3320871A878AC7759F3B145B54B36139FB4003BDA892F84D6EC5F1C00EB6AC235A91B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 52b518f25504aecf59a29e115732f37f1d079665f32e9ca54781031e232fa0e4
MD5 198415219c898893a32d9d1aa5b8ff0f
SHA1 dab7264fbcdc0f56e46eba62f2548d0683091b4c
SHA512 8782957459091ae218a3c1f712216a54a19a4f98a72a38243f2bd0cc9a77788310dc56eeb899a55c1371d82ea6ec607748e8b0b6ae046b47004f00afbb7e193b
SSDEEP 384:aZcIrsNHWwSSva9DOMMe/7zJrwbOOPrXLpe8C/Yt8:Yr2iJO+/fhwbOi9Ptt8
TLSH
T17B928D70A8786C636CF7F585F98636178EF84037E6892B84D5EC9F0C01DB96C131AD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 4bed61d7d5a5c0f00151ea35fc870cf1a9981d397d5b7763568b6572794cf66c
MD5 20d4785c07a8fc05fafc952702150841
SHA1 4e2a4d28774bb6a1df81b1d56ed2074de7394691
SHA512 ffd9e3c6d00f103b1b1f7bc770369063aa0f7ed926155209f8f76e2d8b11972e300a4afd5d5d7a15f5e1bb71880401df1f5ef4c3937b9b1f4edaa5065b1403a7
SSDEEP 384:BZcIrsNHWwSjva9DOMMe/7zJrhbOOPrXLpe8C/Yt8:JrviJO+/fhhbOi9Ptt8
TLSH
T16EC2F6F054EB5C72D8AEA747A77E2E034EBCC027B5851A84B7D89A0CCC9657FD306816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 1e09c541132a7e4fa88d8a276445532174997401a368510de40054b728d8b431
MD5 e3163ebd35813b6b9460a9549e74103b
SHA1 6317ec79e4758787f34650bba77aa4fceb7622ee
SHA512 b366373865c9d27020483df214d0bf7e1bbb78e779bb151683e671445800fdf4879d29332d7941ddfa26a8470fa34221b81f9afe66984720682287ed34668e2c
SSDEEP 192:ukJsNH1Ququ7+3vXmQmiU1gdA4atb02O2bbh2e/FF0SJrPLMrqEawU8:PsNH1wSSva9DOMMe/7zJrwbU8
TLSH
T15E4208716868AC7759F3B145B54B36139FB4003BDA892F84D6EC5F1C00DBAAC235A91B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 1486f8c795e29fe50b6c2492f10b4a80aaaba83bbf43767e4c9098c5233369c5
MD5 944200158c5f5caab043cac8885bc872
SHA1 922123c3e6dca960d0ff819fb4a3e85f346b4693
SHA512 4731b6076de9e03e38b5578d8f5d2e3e65f0af25885feb981f0d09d416efa79266a36f451cdf7d4abd11aacab922e40b2853045a5b1fdd9b81a7b2cefbd8004b
SSDEEP 192:xONi6O7+35QmiUyzEtttb02O2bbh2e/FF0SJr7cNrqEawU6:xONi6dJtt9DOMMe/7zJrgbU6
TLSH
T1B0120931A868AC775DF2B541F98736139FA5413BEE4A6F80D5DC2E1C01EFA6C234AC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 3d6e4acb3ba97292960b61d168521afa08a1a7dd24747a2758b1ca0cbb8f810c
MD5 ddaa96d7aca254b6dbf95b67869bf044
SHA1 16408a9550cc29d4874195efa21de857cae70cf0
SHA512 b1dc1b1b85f76ae06477eee6a15215943abd40ef2a3ffea4b02ad51913c53187215bd8f892c6113cdda19959195b80e92657802333a6ad355c89d16222863e9b
SSDEEP 192:qON8S6O7+3hQmiUyYEGttb02O2bbh2eQgGdoiU6:qON1618Gt9DOMMe21U6
TLSH
T13E02E8346D686CB74AF2AE45FA873B275FA5103BE9952F84DAE81F0C00D765C2347826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 fe8c7a9f706d77e7ff667a95f0fc3750ee3a2deaffb1b2e0a8ce2cd15fde930c
MD5 da22dc67f748b3cb3ebba3b434f30455
SHA1 614869d0e9b199c48abec4d9118862feb1fc8433
SHA512 4d69833a829f058e85694cee790fa8eec9b21002d93d1ba330aab66097d4b29ec7180d22195e9676a269bf1dd19f64f7c175ea2a8cd90ebbc0918f684d88eed9
TLSH
T1B141D858AAFA1148B3B37E5A9FF6A86D487F7C772F07949D10110D4E0B22A40CCA1737
MD5 SHA1 SHA512 TLSH

Submit Download