hxxps://www[.]dropbox[.]com/scl/fi/875q2qua9akcel7zw25qs/photo_102074915[.]js?rlkey=xb31wvam3th84cnuilx11yyut&st=qbuv2fg6&dl=1

Analysis

user interaction
yes
max time kernel
149s
max time network
136s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
18/08/2026, 10:33

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://www.dropbox.com/scl/fi/875q2qua9akcel7zw25qs/photo_102074915.js?rlkey=xb31wvam3th84cnuilx11yyut&st=qbuv2fg6&dl=1
Sample260818-mlsl8a1akb

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4948	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134315228224959657"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-876885714-46325919-1482798410-1000\{924945FF-FCE2-493F-835F-83C5D14F3DB8}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5228	msedge.exe
5228	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
4332	msedge.exe
4332	msedge.exe
4332	msedge.exe
4332	msedge.exe
4332	msedge.exe
4332	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4332	msedge.exe
4332	msedge.exe
4332	msedge.exe
4332	msedge.exe
4332	msedge.exe
4332	msedge.exe
4332	msedge.exe
4332	msedge.exe
4332	msedge.exe
4332	msedge.exe
4332	msedge.exe
4332	msedge.exe
4332	msedge.exe
4332	msedge.exe
4332	msedge.exe
4332	msedge.exe
4332	msedge.exe
4332	msedge.exe
4332	msedge.exe
4332	msedge.exe
4332	msedge.exe
4332	msedge.exe
4332	msedge.exe
4332	msedge.exe
4332	msedge.exe
4332	msedge.exe
4332	msedge.exe
4332	msedge.exe
4332	msedge.exe
4332	msedge.exe
4332	msedge.exe
4332	msedge.exe
4332	msedge.exe
4332	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4332	msedge.exe
4332	msedge.exe
4332	msedge.exe
4332	msedge.exe
4332	msedge.exe
4332	msedge.exe
4332	msedge.exe
4332	msedge.exe
4332	msedge.exe
4332	msedge.exe
4332	msedge.exe
4332	msedge.exe
4332	msedge.exe
4332	msedge.exe
4332	msedge.exe
4332	msedge.exe
4332	msedge.exe
4332	msedge.exe
4332	msedge.exe
4332	msedge.exe
4332	msedge.exe
4332	msedge.exe
4332	msedge.exe
4332	msedge.exe
4332	msedge.exe
4332	msedge.exe
4332	msedge.exe
4332	msedge.exe
4332	msedge.exe
4332	msedge.exe
4332	msedge.exe
4332	msedge.exe

Suspicious use of WriteProcessMemory 37 IoCs

description	pid	Process	procid_target
PID 4332 wrote to memory of 4404	4332	msedge.exe	85
PID 4332 wrote to memory of 3000	4332	msedge.exe	87
PID 4332 wrote to memory of 4948	4332	msedge.exe	86
PID 4332 wrote to memory of 3000	4332	msedge.exe	87
PID 4332 wrote to memory of 3000	4332	msedge.exe	87
PID 4332 wrote to memory of 4528	4332	msedge.exe	88
PID 4332 wrote to memory of 4528	4332	msedge.exe	88
PID 4332 wrote to memory of 5108	4332	msedge.exe	89
PID 4332 wrote to memory of 5108	4332	msedge.exe	89
PID 4332 wrote to memory of 5108	4332	msedge.exe	89
PID 4332 wrote to memory of 2536	4332	msedge.exe	90
PID 4332 wrote to memory of 2536	4332	msedge.exe	90
PID 4332 wrote to memory of 2536	4332	msedge.exe	90
PID 4332 wrote to memory of 5040	4332	msedge.exe	92
PID 4332 wrote to memory of 5040	4332	msedge.exe	92
PID 4332 wrote to memory of 5040	4332	msedge.exe	92
PID 4332 wrote to memory of 1748	4332	msedge.exe	93
PID 4332 wrote to memory of 1748	4332	msedge.exe	93
PID 4332 wrote to memory of 1748	4332	msedge.exe	93
PID 4332 wrote to memory of 4700	4332	msedge.exe	96
PID 4332 wrote to memory of 4700	4332	msedge.exe	96
PID 4332 wrote to memory of 4700	4332	msedge.exe	96
PID 4332 wrote to memory of 4988	4332	msedge.exe	99
PID 4332 wrote to memory of 732	4332	msedge.exe	100
PID 4332 wrote to memory of 4988	4332	msedge.exe	99
PID 4332 wrote to memory of 732	4332	msedge.exe	100
PID 4332 wrote to memory of 552	4332	msedge.exe	105
PID 4332 wrote to memory of 5668	4332	msedge.exe	114
PID 4332 wrote to memory of 5676	4332	msedge.exe	115
PID 4332 wrote to memory of 5684	4332	msedge.exe	116
PID 4332 wrote to memory of 5352	4332	msedge.exe	120
PID 4332 wrote to memory of 5352	4332	msedge.exe	120
PID 4332 wrote to memory of 2632	4332	msedge.exe	121
PID 4332 wrote to memory of 2632	4332	msedge.exe	121
PID 4332 wrote to memory of 6072	4332	msedge.exe	126
PID 4332 wrote to memory of 6072	4332	msedge.exe	126
PID 4332 wrote to memory of 5228	4332	msedge.exe	128

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.dropbox.com/scl/fi/875q2qua9akcel7zw25qs/photo_102074915.js?rlkey=xb31wvam3th84cnuilx11yyut&st=qbuv2fg6&dl=1
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffbf4cec188,0x7ffbf4cec194,0x7ffbf4cec1a0
  2⤵
  PID:4404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1988,i,16382817109833576996,1065490633781454098,524288 --field-trial-handle=2348,i,380592178119710193,17796634633492140778,262144 --variations-seed-version --mojo-platform-channel-handle=2384 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1840,i,751663897594624228,6125856643633598981,262144 --field-trial-handle=2348,i,380592178119710193,17796634633492140778,262144 --variations-seed-version --mojo-platform-channel-handle=2344 /prefetch:2
  2⤵
  PID:3000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2536,i,2137010983094092222,8071672616203470768,524288 --field-trial-handle=2348,i,380592178119710193,17796634633492140778,262144 --variations-seed-version --mojo-platform-channel-handle=3212 /prefetch:8
  2⤵
  PID:4528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3472,i,12213051223188026750,3544236011113830976,2097152 --field-trial-handle=2348,i,380592178119710193,17796634633492140778,262144 --variations-seed-version --mojo-platform-channel-handle=3532 /prefetch:1
  2⤵
  PID:5108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3476,i,8451564885063836348,8421597067134988123,2097152 --field-trial-handle=2348,i,380592178119710193,17796634633492140778,262144 --variations-seed-version --mojo-platform-channel-handle=3536 /prefetch:1
  2⤵
  PID:2536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4176,i,8560818540865100568,14314912899465789516,2097152 --field-trial-handle=2348,i,380592178119710193,17796634633492140778,262144 --variations-seed-version --mojo-platform-channel-handle=4188 /prefetch:1
  2⤵
  PID:5040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4224,i,16160899659251126309,8691952425597202499,2097152 --field-trial-handle=2348,i,380592178119710193,17796634633492140778,262144 --variations-seed-version --mojo-platform-channel-handle=4328 /prefetch:2
  2⤵
  PID:1748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5040,i,10754467080249741788,2434695619276819640,2097152 --field-trial-handle=2348,i,380592178119710193,17796634633492140778,262144 --variations-seed-version --mojo-platform-channel-handle=5116 /prefetch:1
  2⤵
  PID:4700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5316,i,14228693371839738700,10328102607725030806,524288 --field-trial-handle=2348,i,380592178119710193,17796634633492140778,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:8
  2⤵
  PID:4988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5328,i,8136287051624818654,7601048027028549953,524288 --field-trial-handle=2348,i,380592178119710193,17796634633492140778,262144 --variations-seed-version --mojo-platform-channel-handle=5356 /prefetch:8
  2⤵
  PID:732
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5940,i,2440791940497608970,15557941920079615145,524288 --field-trial-handle=2348,i,380592178119710193,17796634633492140778,262144 --variations-seed-version --mojo-platform-channel-handle=5968 /prefetch:8
  2⤵
  PID:4472
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5940,i,2440791940497608970,15557941920079615145,524288 --field-trial-handle=2348,i,380592178119710193,17796634633492140778,262144 --variations-seed-version --mojo-platform-channel-handle=5968 /prefetch:8
  2⤵
  PID:552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4204,i,17037813814202125031,10005988216226305202,524288 --field-trial-handle=2348,i,380592178119710193,17796634633492140778,262144 --variations-seed-version --mojo-platform-channel-handle=4892 /prefetch:8
  2⤵
  PID:5668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4224,i,18103912865509673230,2383830919934904723,524288 --field-trial-handle=2348,i,380592178119710193,17796634633492140778,262144 --variations-seed-version --mojo-platform-channel-handle=4960 /prefetch:8
  2⤵
  PID:5676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5092,i,11583836649550431710,11186285384425579979,524288 --field-trial-handle=2348,i,380592178119710193,17796634633492140778,262144 --variations-seed-version --mojo-platform-channel-handle=6044 /prefetch:8
  2⤵
  PID:5684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5516,i,17373566720393119257,13686048316885828749,524288 --field-trial-handle=2348,i,380592178119710193,17796634633492140778,262144 --variations-seed-version --mojo-platform-channel-handle=4960 /prefetch:8
  2⤵
  PID:5352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6156,i,6930533375401241274,4624254277099631799,524288 --field-trial-handle=2348,i,380592178119710193,17796634633492140778,262144 --variations-seed-version --mojo-platform-channel-handle=6448 /prefetch:8
  2⤵
  PID:2632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=756,i,7677506930763460590,13166370418581101689,524288 --field-trial-handle=2348,i,380592178119710193,17796634633492140778,262144 --variations-seed-version --mojo-platform-channel-handle=5496 /prefetch:8
  2⤵
  PID:6072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6356,i,5639948584874037887,16052025269999156136,262144 --field-trial-handle=2348,i,380592178119710193,17796634633492140778,262144 --variations-seed-version --mojo-platform-channel-handle=6352 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5228

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4516

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 acf2ca2fd979c7d8ae7b74bb0af4308e4abd3e42e1f32fd1a04b0ca1a2b166c8
MD5 80eaf72bc0ff9c89a5c23f07f38ee8f5
SHA1 cbf109666417a1db022b3f49a91481b9755a1b8e
SHA512 b21d0ebff096128eae96a603cc0e96af95cbca34e613c40faa0cc8c5c17961106d997b66011c3051ead599494bd80939479f2526a2e65ff25600b04b19065afd
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7T:fwUQC5VwBIiElEd2K57P7T
TLSH
T15EB3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 6de34b260036ecaa4ce5839bc4a7ff7495e50b7b94349b12d9f840ca0e76da3b
MD5 56d82099872fb501c566d072ae897035
SHA1 2c96501551fc13c09496780960d8e7ccb4957b77
SHA512 c4b4017256caf25e88f146e6104134cddfd15089203e8e74c5196627fc92897f9fe7e3fc5c8305032be88e9409cdbc5dfe1e81017fcd5e38b3579b3d823b4a41
TLSH
T160D0C073378C7C00EA090170D013C3031FA7855824C39F03B100C01C54B43D9738B093
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f5dece638cd89af82b06bd2fcb3d1738eef64d2275be237184ea8bff7af3fdfa
MD5 f19ec2293392af872f10929c41627e26
SHA1 0576f5277c470f5bb8c3f4d3786ca8d967d0a33e
SHA512 4cc85dc71d34bb516f8fe45b565a6a9b4cda255a931f33289247ed84150baf0e2df40fc87109df41771553b92545ed858197cdd3d673694c83458cf9812aa9dd
TLSH
T16CD02272268C6C00EA090170D01383021EA6855824839B03A100C01C44A52D9728A093
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 352B
SHA256 b9d68192b0bf879b5000f0c385ce6d32e17f932b64d3b650d9688eb33d650054
MD5 8b9e55fbb7576e0a92d9dce08a9ae290
SHA1 e072f620d9038bf9f660e9d340343ac444b0d8c4
SHA512 2671ee8630e7c11c3a40ebeb81c25d58c3c5a8d1f791e6f3191e0b744a8199cf48f44cfcb644888b3a7d1fa4b12d8de5d46ae10bd65203cab6f2424fbe031c62
TLSH
T1DDE0D84A73C3ED641DC0974B908A6398C1937287954FE45F26D668CF2440504836E081
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
Size 158B
SHA256 3d4a599c612694b614ba7c8e8efa5c94b221ade6a1a44d0b68472c17fbfe4598
MD5 b7a429b099eba1a8e9cd144e4d00599a
SHA1 e087a559e4468b4c6b5596bf6fe6af3fc3affe59
SHA512 49ab5ffa12f6d0bdc5a8d4aacc121fa8c6c253560915cebe1d462fd6f5f859f005f30761c684b7bc0bd2642d039f068c353c37babcb54cc98e5a33b9c8ac49da
TLSH
T103C0809CBD4DD4DED381187E5716F00007606512941796130650BCD07580DF41E39120
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 e0bd9a9d6bcdb68b39146ae8ecdc4079e45dc9ea37be83175c0fa632c71fb6ef
MD5 fe43b8a0140f2902eb4d190ace9aeac2
SHA1 d53ef2051117042185d946e56c34e544b9afcb82
SHA512 d0b5dbca35e1fccd6e299511acab8408e0c5cc03ced85e3e2e6934de5e43435c71a321bca383269b6d1221008cce8fcc8cec931a40c1b2316408de5f6ab7d0e8
SSDEEP 48:0WoRSBuraW+qMwIU31a9Wl7VRvbI4y8972rGDlyu2dN6Y/+x:0XcCI41n5d9CrGDln276YGx
TLSH
T1EE91975FC882F583EF112872C4DA0A43377D5DA65903BEE221026C6DB41A7A7F4C5CAC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe58d1e1.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58d1e1.TMP
Size 3KB
SHA256 978b780dc60d2130d05056096d1bbabbf3f63d85f63feb5b52d954f1aad6dba0
MD5 38f1118be15e3d1fee1b679b79da8857
SHA1 374a2d079ff4f23ff1850724560f7dd83c1923b6
SHA512 5a023e984fc3b8ad151587d9dd22e7bbf718ead1749e08144da598bf4c55dfd207a5f7ec1475d202648b7239dd62e6dbdf9130200fabe54efcfb3d52fa42afa9
TLSH
T17771816F8D4201D3EF211131D5DA1A03373E8DA94903BED2115498BDB81EB67F0D9D78
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.dropbox.com_0.indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.dropbox.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 b26905ac4745de29346f14bed50e28e193176d3da4102aa08c33385a94a7f4d9
MD5 b224ab25a47144e92b0add7f2593a27b
SHA1 faa2ed34b331d401aaf73a388587f2fce0674af3
SHA512 1d22cf7c11820e23e3e8df19f8458ba61be3b431f6b300f909ac002aee2acc4da1308a029fc2155ac11f3d3f41787799b2e2d3d0ce2eca78767921322e727a32
TLSH
T190318CF6C7E4826ED91126F05A15AE2BCE6D1A1547283C2AC9D9FF1BD3E2036E10174F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 56b91cd78398ed55ccd8df6e9102a402c9b19cc8574995ae4bdd684a0ded9cae
MD5 fe762b2711c6db40ce7092eadb997a19
SHA1 eb19fb80478464eecdac3a5bdd7258c5aeabbc4b
SHA512 8a17c3abc6b7ed9622c3e04a4c86e584d83a0bf64d79517f4e68a9ad082fde2f5dd671c7c0cc97c830a819411b6eaa5a640e8edca96917ac40a26e6917aee487
SSDEEP 192:sxZnORZyM/jK1Ml8UQik8/fXsP+6dIdpYtHW6+WN8qSU/YwvOojIg5LJ:sxZnOfqh8/fXsP+6eUHbIU/tX
TLSH
T11A52F806AA349D77CCDBD309BA45BF53D2F5447292900E44AEFCCA0C01E6AED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 9bb14820f18bfcd8796570899ee81c8f9074d31347fed9a627996545232bc8dd
MD5 572eaf1628b5b86bfd42b3622f20ea35
SHA1 497a7d1ea5cef00fb61167945189b040735e18ba
SHA512 7ea813e6baefed1697f163f4dbcd0731877ca7fd8d54c5290be60eb3fbba44cabeb2f23777777d9f1fcd1958c62d56fd750362738ff853b27f52aad390f2c928
SSDEEP 192:sxZnORZyM/jK1Ml8Mk8/fXs8+udIdpWtHW6+WN8qSU/Ywel6jIgrJ:sxZnOfM8/fXs8+ueqHbIU/H9
TLSH
T1FD52F806AA34AD77CCDBD309BA45BF53D6F5447292940E44AEFCDA0C04E6AED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 db3a5302c91afc76e282a084e68806cde07e58f79b6ea6bb9c8492e2b7583711
MD5 bed57bf40b11a606ea6d8eb9c85eb727
SHA1 79a87b801bb5496590df1221cac21c37da6401b6
SHA512 4a5b39193ff8718e5b32795563f17a573faeb583cfe1e2112620c4cd6ef03f880ccc823501f64b173824fff2e857ce01bff8077727281f386f54e98f5b55649d
SSDEEP 768:iH4jeXmWvmKLE8F1+UoAYDCx9Tuqh0VfUC9xbog/OVhPLlrZ+dVrohvcma3m:iH4jeXmWvmKLEu1jacPLZQdu60
TLSH
T1FAD20A3B280CCF7E4F844E5CED2AAE976ED801CB6A584D5447FA494C03C76EB512B49B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 75048c7f7b6b85cdb6bad0eea66ac66b81ffde8a51d30243b10f3a9fbe3cf844
MD5 c8f8f4aeebb7d157cd75131ead484d0b
SHA1 0d81113f8176a2cc4dac9f4e1fa96565a354f47e
SHA512 ab4213a5f806dbcfe5380fdd801f210b89c4c8c85d0c4af0c9bd628d8bfc383e21aa4713e712fd024858b20dd74984f8b9cf49aa67d4e373b70414ce2a624dc7
SSDEEP 24:KdZRfZcZHZuaZLdZzZfZn4Z3Zb+Z+IjZ7ZnKiZwhaZFZn1EZRZ3SmZJMZ88ZPZsP:KMUIjKJSUjyxEIHK1+cB9IxKOcsjyj
TLSH
T1E8913F213DBA02017DBE295C85E9A7175E52B6A3354CE82B77BC40B64EA7E504CBCCCD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a9041fff-9f53-47bd-864d-ca5af37aaa3c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\a9041fff-9f53-47bd-864d-ca5af37aaa3c.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 4fe616f7661e6efddf1bbbab1a9629e1cbc527451a3e2d1a934bdf8253135a13
MD5 5f2b147b7433346e77ec94f0a181d075
SHA1 b2f6507bce6f2eae6f8cb7275fb92b4d2621bdef
SHA512 cc5e7c31609c3f10764a097fba12dad023c2309b73bcf7bb145ee05dd9c39d433d514f5bf5ac85492578063e0d073934a52710e4e37f50f251552da435b0f9d9
SSDEEP 384:tiFiZcImsNf8TUNTUlIlGjZQaiQuf+68R+XGxJrEVZF7ySllYJTfY81FTk6SBuG:kFQmiwg4ZPneZEhyz7ZuTHKBBuG
TLSH
T1FED22AF248D79877D99EA747A77E2D024EFCC067B6956680B3D85A0DCC864BFC306811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 96bcac14d4837637b5db663e8b508db3d8460d2a71827cd6e378ce3d5f72e083
MD5 e1d0bb3d0b1754e99ddbf2a159f8d9cb
SHA1 45d60020838fa180452bf332e7e55a20862d9332
SHA512 f8edbad14771c62748d2a55bb936a4ab65ace9794fe185b8290530983fdeea160fd8cf706e3b873e2836b3d3e8026f57a81b71e612f11e844b9b367ba0886bb1
SSDEEP 384:EZcIhsNFbjZQaiKuf+68R+XGxJrENdF7ySllYJTfY81FTk6SBuG:ihqZPxeZEhU37ZuTHKBBuG
TLSH
T1C7929E365C24AC7399E6F295F84B36034EF8816797D96BC0D5FC6B1E00D69AC032BC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 9ac48696d076337d5e373786288ad2884772723aadfa6aeb37f225d9e5049079
MD5 9e480b467474893cc7a362fccdf2a4e3
SHA1 e889f565c33a768a66939a3aac4da82d697c6e9e
SHA512 8329a191a530cb92f2dd0e978ba839a841d156758b8770efe2e7b35a723dfd2f6d373359e4b36e3e19d1b73e999e256dba9cafef00d5a76083904c4605f3d0a7
SSDEEP 192:EON86hZ0QmiUyMppc/+jVIjzorRV5wOZ23U6:EON86oJpu+68R02MU6
TLSH
T18D02E935ACA86C778EE2AE45F48727235FE4216BA9D56F84D6EC1B1D00C779C2307832
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 27969993215ac8db6f7bbb3c120895fcfe26aaa1d12d47c39b91254eb71e0648
MD5 2a17c4fced11d8349b40bacfbca86664
SHA1 800da5aec85a813dffc4aaae6cf664cb89d11443
SHA512 31065e71aec97ebbaa6ffe8cc08a4fb3414948f57d0e9e205d28dc00c32f0bd279256fd698b9f7db39b3fe27c144dd82900ed35506aa8894240e72e86bf8399c
SSDEEP 192:IONA6hZJQmiUy4pKc/+jVIjzorR+XKFuSJrEQ5cOqaqTU6:IONA67jKu+68R+XGxJrEr97U6
TLSH
T19B12FA36A868AC775DD2A691F04731139FE55167EE897F90E6EC2F1C00DBA6C131AC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 bb854dafd3d501a865d64a743ccf82148ba9fa12ecc59e07922db45829ecf72a
MD5 947b31d79d4cff0ec1fa8862f9e79e3d
SHA1 de9f8567425c10dbe9366113a6d6405fc0c3652d
SHA512 4d7f898b1e7f7934976bdd5015d98f524295d5c052f3d3e315b27af6f8ceef42e98f0a258c8906afdc675fa0c5a843e438a25dc9f4adca3c8c649d7043e47afc
SSDEEP 384:mZcIhsNFGjZQaiKuf+68R+XGxJrENdF7ySllYJTfY81FTk6SBuG:0hpZPxeZEhU37ZuTHKBBuG
TLSH
T1B4928E765C24AC7399E6F295F44B36134EF8816797D96B80D6FC6B1E00D69AC032BC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 c44f0d34b710d4625aecc98aaf2e845975a22e82aa16f70bcfd741df76f09154
MD5 4b64e24812a8ee645afe8de4318b0bd7
SHA1 9ae54137371d2261463083505b391741948b56b9
SHA512 7a50a46aa46787a001978973e1a030e0fc618092cc80cbee83ac3afe38a440396a221b24acdd853ee99072678082d3f64fa4dee98278aca36a28495afa7e38e9
TLSH
T17941F55CA6E9114CB3B36F5AABF6A86D48BAB9772F07D45D00110E4F4A22B40CDB1737
MD5 SHA1 SHA512 TLSH

Submit Download