hxxp://_amazonses[.]voguehommesinternational[.]mobi

Analysis

user interaction
yes
max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
17/08/2026, 15:57

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://_amazonses.voguehommesinternational.mobi
Sample260817-tec2hsdr6x

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4484	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134314558819933511"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-889581200-2041691093-2048517887-1000\{17A67B7F-D1AB-49AC-A961-B2B07764A4BE}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1452	msedge.exe
1452	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
2980	msedge.exe
2980	msedge.exe
2980	msedge.exe
2980	msedge.exe
2980	msedge.exe
2980	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2980	msedge.exe
2980	msedge.exe
2980	msedge.exe
2980	msedge.exe
2980	msedge.exe
2980	msedge.exe
2980	msedge.exe
2980	msedge.exe
2980	msedge.exe
2980	msedge.exe
2980	msedge.exe
2980	msedge.exe
2980	msedge.exe
2980	msedge.exe
2980	msedge.exe
2980	msedge.exe
2980	msedge.exe
2980	msedge.exe
2980	msedge.exe
2980	msedge.exe
2980	msedge.exe
2980	msedge.exe
2980	msedge.exe
2980	msedge.exe
2980	msedge.exe
2980	msedge.exe
2980	msedge.exe
2980	msedge.exe
2980	msedge.exe
2980	msedge.exe
2980	msedge.exe
2980	msedge.exe
2980	msedge.exe
2980	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2980	msedge.exe
2980	msedge.exe
2980	msedge.exe
2980	msedge.exe
2980	msedge.exe
2980	msedge.exe
2980	msedge.exe
2980	msedge.exe
2980	msedge.exe
2980	msedge.exe
2980	msedge.exe
2980	msedge.exe
2980	msedge.exe
2980	msedge.exe
2980	msedge.exe
2980	msedge.exe
2980	msedge.exe
2980	msedge.exe
2980	msedge.exe
2980	msedge.exe
2980	msedge.exe
2980	msedge.exe
2980	msedge.exe
2980	msedge.exe
2980	msedge.exe
2980	msedge.exe
2980	msedge.exe
2980	msedge.exe
2980	msedge.exe
2980	msedge.exe
2980	msedge.exe
2980	msedge.exe

Suspicious use of WriteProcessMemory 37 IoCs

description	pid	Process	procid_target
PID 2980 wrote to memory of 2508	2980	msedge.exe	86
PID 2980 wrote to memory of 332	2980	msedge.exe	87
PID 2980 wrote to memory of 4484	2980	msedge.exe	88
PID 2980 wrote to memory of 332	2980	msedge.exe	87
PID 2980 wrote to memory of 332	2980	msedge.exe	87
PID 2980 wrote to memory of 4164	2980	msedge.exe	89
PID 2980 wrote to memory of 4164	2980	msedge.exe	89
PID 2980 wrote to memory of 392	2980	msedge.exe	91
PID 2980 wrote to memory of 392	2980	msedge.exe	91
PID 2980 wrote to memory of 392	2980	msedge.exe	91
PID 2980 wrote to memory of 4476	2980	msedge.exe	92
PID 2980 wrote to memory of 4476	2980	msedge.exe	92
PID 2980 wrote to memory of 4476	2980	msedge.exe	92
PID 2980 wrote to memory of 2348	2980	msedge.exe	93
PID 2980 wrote to memory of 5004	2980	msedge.exe	94
PID 2980 wrote to memory of 2348	2980	msedge.exe	93
PID 2980 wrote to memory of 2348	2980	msedge.exe	93
PID 2980 wrote to memory of 5004	2980	msedge.exe	94
PID 2980 wrote to memory of 5004	2980	msedge.exe	94
PID 2980 wrote to memory of 4748	2980	msedge.exe	99
PID 2980 wrote to memory of 1724	2980	msedge.exe	98
PID 2980 wrote to memory of 4748	2980	msedge.exe	99
PID 2980 wrote to memory of 1724	2980	msedge.exe	98
PID 2980 wrote to memory of 1984	2980	msedge.exe	101
PID 2980 wrote to memory of 3928	2980	msedge.exe	102
PID 2980 wrote to memory of 3928	2980	msedge.exe	102
PID 2980 wrote to memory of 3928	2980	msedge.exe	102
PID 2980 wrote to memory of 4904	2980	msedge.exe	108
PID 2980 wrote to memory of 2744	2980	msedge.exe	109
PID 2980 wrote to memory of 3576	2980	msedge.exe	110
PID 2980 wrote to memory of 2876	2980	msedge.exe	119
PID 2980 wrote to memory of 2876	2980	msedge.exe	119
PID 2980 wrote to memory of 1224	2980	msedge.exe	120
PID 2980 wrote to memory of 1224	2980	msedge.exe	120
PID 2980 wrote to memory of 1792	2980	msedge.exe	121
PID 2980 wrote to memory of 1792	2980	msedge.exe	121
PID 2980 wrote to memory of 1452	2980	msedge.exe	122

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://_amazonses.voguehommesinternational.mobi
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x264,0x7ffcb753c188,0x7ffcb753c194,0x7ffcb753c1a0
  2⤵
  PID:2508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1656,i,12996412678088608186,18433898164936419742,262144 --field-trial-handle=2356,i,11863072227454066336,13998087539328120743,262144 --variations-seed-version --mojo-platform-channel-handle=2352 /prefetch:2
  2⤵
  PID:332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1820,i,1387707261433434450,1054086635679547175,524288 --field-trial-handle=2356,i,11863072227454066336,13998087539328120743,262144 --variations-seed-version --mojo-platform-channel-handle=2408 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2600,i,17138703124892655185,1500947495228591790,524288 --field-trial-handle=2356,i,11863072227454066336,13998087539328120743,262144 --variations-seed-version --mojo-platform-channel-handle=2660 /prefetch:8
  2⤵
  PID:4164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3392,i,13245522852144935184,17185982718784289675,2097152 --field-trial-handle=2356,i,11863072227454066336,13998087539328120743,262144 --variations-seed-version --mojo-platform-channel-handle=3464 /prefetch:1
  2⤵
  PID:392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3400,i,9349115715575559039,420078335056574648,2097152 --field-trial-handle=2356,i,11863072227454066336,13998087539328120743,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
  2⤵
  PID:4476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4228,i,17294398034511124967,7107486311919804375,2097152 --field-trial-handle=2356,i,11863072227454066336,13998087539328120743,262144 --variations-seed-version --mojo-platform-channel-handle=4268 /prefetch:1
  2⤵
  PID:2348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4244,i,13978458133971617889,11659196390090000202,2097152 --field-trial-handle=2356,i,11863072227454066336,13998087539328120743,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:2
  2⤵
  PID:5004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5148,i,2263055430743524043,3906686529221075628,524288 --field-trial-handle=2356,i,11863072227454066336,13998087539328120743,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:8
  2⤵
  PID:1724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,5390591920886098254,307890085059864089,524288 --field-trial-handle=2356,i,11863072227454066336,13998087539328120743,262144 --variations-seed-version --mojo-platform-channel-handle=5168 /prefetch:8
  2⤵
  PID:4748
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5832,i,17756729998109484920,16528140350613730675,524288 --field-trial-handle=2356,i,11863072227454066336,13998087539328120743,262144 --variations-seed-version --mojo-platform-channel-handle=5872 /prefetch:8
  2⤵
  PID:2480
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5832,i,17756729998109484920,16528140350613730675,524288 --field-trial-handle=2356,i,11863072227454066336,13998087539328120743,262144 --variations-seed-version --mojo-platform-channel-handle=5872 /prefetch:8
  2⤵
  PID:1984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=6208,i,12355223092665313857,9750148914997127139,2097152 --field-trial-handle=2356,i,11863072227454066336,13998087539328120743,262144 --variations-seed-version --mojo-platform-channel-handle=6188 /prefetch:1
  2⤵
  PID:3928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4520,i,17863615319221923802,13958955907775128723,524288 --field-trial-handle=2356,i,11863072227454066336,13998087539328120743,262144 --variations-seed-version --mojo-platform-channel-handle=4488 /prefetch:8
  2⤵
  PID:4904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4236,i,11909571456258571902,16784929788574502154,524288 --field-trial-handle=2356,i,11863072227454066336,13998087539328120743,262144 --variations-seed-version --mojo-platform-channel-handle=4500 /prefetch:8
  2⤵
  PID:2744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4240,i,8281298468587927493,5378626400898422875,524288 --field-trial-handle=2356,i,11863072227454066336,13998087539328120743,262144 --variations-seed-version --mojo-platform-channel-handle=6316 /prefetch:8
  2⤵
  PID:3576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6332,i,6753225197336949303,3081550588487266808,524288 --field-trial-handle=2356,i,11863072227454066336,13998087539328120743,262144 --variations-seed-version --mojo-platform-channel-handle=6336 /prefetch:8
  2⤵
  PID:2876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5844,i,10522824623245494977,12342690011276036624,524288 --field-trial-handle=2356,i,11863072227454066336,13998087539328120743,262144 --variations-seed-version --mojo-platform-channel-handle=5948 /prefetch:8
  2⤵
  PID:1224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=768,i,18141053768901883778,17832324060734519208,524288 --field-trial-handle=2356,i,11863072227454066336,13998087539328120743,262144 --variations-seed-version --mojo-platform-channel-handle=5660 /prefetch:8
  2⤵
  PID:1792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=3664,i,3418420999131633075,16165831339597336180,262144 --field-trial-handle=2356,i,11863072227454066336,13998087539328120743,262144 --variations-seed-version --mojo-platform-channel-handle=4452 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1452

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4352

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 11d3c4c52f9fc9cd2b10a22b48769759f994fd6364f9a0fc145f4cd2c2a22e9d
MD5 4751cf705a737c4226029624bf43b9a8
SHA1 fd8cf726ee3f8f75b97147829de5553530caa82c
SHA512 46e3fedbf7fa14bdc2b3aad129f2879a9d24252f5d7bd9b55766bc32a6b82ea77aaf193bcdbdf4423e3b67ef84955e589b6077609344091ef72204c1d50b0dab
TLSH
T17ED09B307A58A58BD14360F1A4114B4115375557205397757521508E9E98055B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 701082e4ac35f878dc5ff6eb27989aae9d20d9b5662643e20b3acd1720b367fc
MD5 2b3686986ce1fd99f079eb226e8b0a8b
SHA1 0d2cdee36351378b91ed7f6ecdb43457fe4d7b5d
SHA512 937da61c495fd21a02bb76a63556dec83ce132f1d1830ff8d9af6212d15f1844766dd4abadd15ea61b48f8ae03b52baca44c99117714c705da840dbff8f116dd
TLSH
T182D09B303A58A98BD54360F1A4104B41153755572053D7757521508E9E99095B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 537B
SHA256 cc71f74a7cba03ac720ee43e93409b15f6f6c6872a6e08bbe070b2557acf40aa
MD5 148582a5b5d8579d82658b909dc80a1e
SHA1 a01775807b933ed008dd02e7518918f389c7810b
SHA512 a6a471290bd756e1a16162a2875eb0c3158620de8059de899251234d66aea861c1f951c18906b276923eaeeb9dd23211b3e94d9933788aa7ff30b4ab323abb94
TLSH
T1A3F0C08401C5E7EEAF4031C75268670C41C0370BDBC8FA4D138488847A07A50B5C73C5
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 59410db26db2cdd263bd5fc88f2f6ddcf1e5c7f51f70d7da176ca532f8c93c28
MD5 7113081f2e1998fde779f26e0a107ac7
SHA1 25d2271b2166a1a128ebfc29f51fac00fbc4a33d
SHA512 0c67107ff3173118bebc3d124bc95395565f4be9c01b9d24e49c3654627f15e5e8e0844c5b1163fe3ead6e0042bf8a137cd0f85adc7c4b418866e2288feab4d1
TLSH
T19071D6BD0292EDF6E3D2397180C13A9B38F180E8F923FD1D02D348B5640AB514A694CC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 927f765b442b805faa7c5aa1093a9a8663a4748a3e35cd83cd67128a0b494199
MD5 7373317252dfe1ed7d1dfdae88007a6f
SHA1 df7739bb38b72814db404284e8aad3d747170f1d
SHA512 bd53d83464444a15a4f22c784f6576c7d1e7f22fdde7e83d047b2e640fdebd7e4549f7563a089c1c4825d9118a630ed588d508d4d9fd1de79c3e412cc35a7ffd
SSDEEP 48:LHYy6BwMuxzWD8XJetK6g5l/OR8SHjc8ulXuDpFLBCCzgnaNH:LKCMuy8XJetKn58m8ulXuDtPgqH
TLSH
T1D89198B90691DDF5D3EA357140E1BBABB8F180FAF95BBD1D23924C78240A7590B198CC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe58a081.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58a081.TMP
Size 3KB
SHA256 7137c16257b917051d953b14358de70831ebe801d95ba8e064a341b25781c8db
MD5 392ee868d3e8a28b9873694bfeda8cf2
SHA1 8f07a4c99954db087b27e6a51822ad2cc0f3b320
SHA512 f3858299d73aaa32fad457adac616c9921191d8cbce166b862d4a773b5349bb4ce88bc54fb7b9b91596d995eeae2a466464400745be368c78dddd9e820366a71
TLSH
T10761C3BE0582EDF6E3D13A3190C03A8738F190E8FC23FD5D01E348B5640AB114A6A4CD
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 3c05ba27bf2ab2ac7551e6287b9d169fd44c414ca055c8ccef6a7ca35f12d23c
MD5 be8aa4c15773433c4adf438c3b88ef45
SHA1 6b8bc28ac8351e9d2e0ca3e94de17756153b40c3
SHA512 4539d84fb63479d440bd11d1297e45a2e49f8d25cbb214ee3ef27081115e19877fd116e614fd4521432cf04f741c84337736ccd045a96bc7fc0665c789c2c2a8
TLSH
T1CD6196F7C7F5956ECD0192F1AA242E17DF590816826C3D0AC4E4AF1FA3E6470E241E8B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 eb97bbc5543e8d9f4c5b7577255a7b9f3abb1f64ede02f137c806d8a5036bae4
MD5 151506c8d66c21a815977ddf7bcbd9a2
SHA1 cc57fe71f6ffc824fdbb7b2785cd24162fd67bea
SHA512 3edc92415075ac34c532767b981eea46f99f242acbc19ffc9ce36060030d9ba60f0ebcd75832aef0847c7b9dc3bd6e3d408ff0e625ee096ec2b504d59c5cc964
SSDEEP 192:sxZVRqyM/jK1Ml8MkR/fUsTzhHIdpL0H6x6+WND2u/Y9IWl1xdIgrJ:sxZVAMR/fUsTzKgHnX/CB9
TLSH
T1FB52E712AB346977CCDBD209FA55BB53D6F90562A2900E44ADFC9A1C04E6AED2307C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 34def78940121de0679ac364dca0269d52aeef92a82c667eedb85989ae3013eb
MD5 acd5c05b149bfeea900725eda655294a
SHA1 a793e1c50a31e0381d92241ea49e87554208148e
SHA512 6c0fc9fd8d1094c08c96be0ff054775757db128abc8ee74f84c42e743b460a867ea9647def17eab6cbd7e644d5645efbe17ec0103b2d1b38b71a511a3956cf42
SSDEEP 192:sxZpRqyM/jK1Ml8UQLkR/fUsTDvHIdp90H6x6+WND2u/Y9IZI1xdIg57J:sxZpwqgR/fUsTDgCHnX/yBj
TLSH
T1B052D712AA345977CCDBD209F955BF53E6F5157292900E44AEFC9A1C00E6BED2207C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 0303e2ced0182bd836bfeea4708fac129d8c71f65211132007924e555a1b9ba1
MD5 2408d37deba5a62aad79de30b9597661
SHA1 6527b8ba13da9707a7ef68fa2b49be4218f52812
SHA512 01eebe6db3d3ab2d4ccaebecb77b126cd3634a0fa0b7cf541486996b6e8eafaefb1cfc3d90d0e3e6a0e9ac87a46dfbe71e4dc5b7ec150fde9c2c01b8b33a2f7c
SSDEEP 192:sxZpRqyM/jK1Ml8MkR/fUsTDvHIdpL0H6x6+WND2u/Y9I3z1xdIg57J:sxZpwMR/fUsTDggHnX/fBj
TLSH
T1DE52E811AA346977CCDBD209BA55BF53D6F5156292900E44AEFC9A1C00E7BED2307C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 191a74d70cd1ba9d5bfa7ee1008278c934773b48ef45707b9e70301cbcd57cd9
MD5 2d8fafa0e20d8ed0fa2f10e90ef0d0ed
SHA1 56d9cb08f9e2cd00f0abdc5a0d7864d44eb49d2b
SHA512 2b9c9c7626513713feb59a9dde059d5429c0be345e1808fe654a5d30a0edb7cccf7c829666b5d57e6f154360dca691eb8ed2afe3a0d9eae63c9c5d19f9804d32
SSDEEP 768:lScv21wWvu+Z+8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjFLlwmWNuroyg6M:lScv21wWvu+Z+u1jaeFLeRNlyc
TLSH
T1ACD20A2B280CCB7E4F841E9CED2AAF966DD801CB57988D5447FA884C03C77EB511B59B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 98376807ab23f91511bb3fe10d799a2389c150f0df93dfc20e18ce3b87032b02
MD5 1d219f35d6e99f908d55f944ece96a50
SHA1 6bb06c82f7edb7756c704fcd7f8a2f1bf15cbb35
SHA512 5286c2ec518f0ced68e98ca3f86d9efb312b42f5caf8ab9d1e8161dbcc7733732a1399a4f001d11fd269cce593c48a5dd97f4005a6ab171f2283a1ee2d1ff799
TLSH
T1BEA002A08B411409C0246EB151D913C93360DD755612074741D614998C911C54D56010
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 0a8a7697c37258100218b5c1d316c3e9c38701449bdffc65c6b5d10d3d8204a9
MD5 5c095910be459f0d246d64e47e9a3c59
SHA1 5be711daac6594657dff37351c500bd91e96c8cf
SHA512 a423c7fb63f6c4816c1b5959383936d15214d112f500306feece148ea9c47dc4ad32b0f286df66169d887ad64f65123fced714569c8a12bfbb7ee283ae4e4fa9
SSDEEP 96:KaRklRnHnqlPKZThqKLfTzqHxJSrBDCygKTyaetuKWsK1:mTfH591
TLSH
T13C918601357E06863CFE394C92A6862A5E423677B50AE57F7FB900920E67E115CFC8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 5c7d79d55e2ef7dc1ac5ce2f302a7426a8fad49ae2ed5b5c8ea0ae1c0d1ab4de
MD5 e1ad3ca677e7b1df37adc0a233f792c2
SHA1 d4032676d003825ffde769faf86f62e4689d4550
SHA512 1cb37d92043121fb9d0775b922c7ef0570399462a0eac0da8f5c3e0566437eed2d853bb103eb4f9ecc9c1bedcd6db60f4ea36aa5ac06cbad151b700f310128e3
SSDEEP 384:sZcIhsNlTY3EziBAQD4e+CXOmep3JrGt3OOPrXLpe8C/GB3:6hjQ1QDLvO9p3hGt3Oi9Pl3
TLSH
T146928D71A9386C676DF6A681F98726139FF85167F2C42B90D5DCAF0C01DB698030AC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 a06da99a5dffd4642c405fd24cddc42b7db34cb49c00704bf38c6472befe805f
MD5 8157fdd3f622be53fc2c676d0815d32d
SHA1 0d0eed9e54ec4bd6be75b14b30512514bd51bdf3
SHA512 c60e2f54dce483fa25d62cfd25c4134a952d0c5ad97cc9f8fa1c815935451bdd4fa08d9306dadb049fff06835137c9c29008107e207a60d7c91c1873aa18258c
SSDEEP 384:CqZcIDsNlTY3EziBRQD4e+CXOmep3Jr5t3OOPrXLpe8C/GB3:1DjQwQDLvO9p3h5t3Oi9Pl3
TLSH
T1C7C229F155E71876D9AEA743A77E2E034EBCD123B1842A40B7D8AA0CCDD657FC306816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 a426caaa396ffdc3f8e57e93a4a6629a64f3cc2ef5f02675a90846fc6775c802
MD5 9c1de0b28b851ea7afb09ca00dc85156
SHA1 8b73e1847b3df8019e3bbfe7b326e07f7c688d9a
SHA512 a59874b78eb8ab888c65e3390ad160af1d471007fb63f96637a9840d65b3b5ec699b11df9cbf95a77ae76644e71cb07385648a32bdeed17bb341e1621466cd78
SSDEEP 192:JONO6v+YLNQmiUySKNZh+CG6Om9oEusmlU6:JONO6vz/ONZh+CXOme6OU6
TLSH
T19602FA35BD281C6B9FF26E49F58737175F98117BE9952F80D9E41E0C01D765C2306826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 8fefd71b9b09ab6b07602e7ffb7f0aac6acda1840c9d69265eb6d3f5c77717a6
MD5 ddb71c5f06de98cd1ef8009791abdcd1
SHA1 fb86bcba9bb7efadea0b65c5b89ea539a57322df
SHA512 047df46095ccd5154da09f28cf2509f80659e14fb428abf31b49405eea646413fd186c1f88ff9507940df6a9d969e336594d86cfe97063ea55cd77fe7dae5fba
SSDEEP 384:5ZcIhsNlaY3EziBAQD4e+CXOmep3JrGt3OOPrXLpe8C/GB3:RhYQ1QDLvO9p3hGt3Oi9Pl3
TLSH
T102928D71A9385C676DF6A681F88726138EFC5167F2C52B90D5DCEF0C02DB6AC030AC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 674dbd66cdea4b55b55d342c78a01d9c4b8b7ebd7ab9e374685e312e5619ffc7
MD5 0c51e03dca0fcb3eb801a2c82460ce4b
SHA1 5f0290172125652d5b38b97daad1ef3eeefa9e00
SHA512 29d2c88ed6ac044122acb18f8215d570877eee5700d8634fc3cb4cc22602ca9ee1fabae9191b05a8dff89a6265037503e78ed3661f0d36aa1f9d1b77781691d2
SSDEEP 192:0ONo6v+YL5QmiUyBKNMh+CG6Om9opwSJrH3CHtbq0U6:0ONo6vzDzNMh+CXOmep3Jrst3U6
TLSH
T102124C31B9785C7B5EE2A591F48736139FA85177EA4A3F80D5DC3E1C02EF69C230A816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a33d205a-6fe8-410b-b85c-272b934dc021.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\a33d205a-6fe8-410b-b85c-272b934dc021.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 fb9b70578f24ad4de4906c62e0103e2da65809a579c574ea662844f066f897ed
MD5 03e3449f00c33316475f76a1656192a2
SHA1 394b17a91b58e5bea0324630e95df6a8f849eafa
SHA512 9bdbec6ce51c12089290773c94528d2dc2d2415532121e1e2c549229064acb2e57ecfe5a47f6032c3d4240f1086fd163cd5d616ef3b2dd290ad5d6c5b59a194d
TLSH
T1A6410658A6EE1148B3B77F5AABF7A86E487FB9772E06D45E10110D4E0672F80C861733
MD5 SHA1 SHA512 TLSH

Submit Download