hxxps://www[.]mm[.]myeddiscount[.]com/330t344q132b/28f8/4bcs4706/172e4[.]html

Resubmissions

24/08/2026, 14:14

260824-rj7qksvth13

24/08/2026, 14:01

260824-rb2vcsvtas3

Analysis

user interaction
yes
max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
24/08/2026, 14:01

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://www.mm.myeddiscount.com/330t344q132b/28f8/4bcs4706/172e4.html
Sample260824-rb2vcsvtas

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3368	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134320537264137997"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2370214745-1838013427-2987045292-1000\{9D1C07AE-7F6E-4AB8-97AF-A537861D45D0}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3408	msedge.exe
3408	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe

Suspicious use of WriteProcessMemory 37 IoCs

description	pid	Process	procid_target
PID 2000 wrote to memory of 3724	2000	msedge.exe	85
PID 2000 wrote to memory of 3368	2000	msedge.exe	86
PID 2000 wrote to memory of 1288	2000	msedge.exe	87
PID 2000 wrote to memory of 1288	2000	msedge.exe	87
PID 2000 wrote to memory of 1288	2000	msedge.exe	87
PID 2000 wrote to memory of 2632	2000	msedge.exe	88
PID 2000 wrote to memory of 2632	2000	msedge.exe	88
PID 2000 wrote to memory of 4004	2000	msedge.exe	90
PID 2000 wrote to memory of 4004	2000	msedge.exe	90
PID 2000 wrote to memory of 2968	2000	msedge.exe	91
PID 2000 wrote to memory of 4004	2000	msedge.exe	90
PID 2000 wrote to memory of 2968	2000	msedge.exe	91
PID 2000 wrote to memory of 2968	2000	msedge.exe	91
PID 2000 wrote to memory of 1176	2000	msedge.exe	92
PID 2000 wrote to memory of 1176	2000	msedge.exe	92
PID 2000 wrote to memory of 1176	2000	msedge.exe	92
PID 2000 wrote to memory of 3988	2000	msedge.exe	93
PID 2000 wrote to memory of 3988	2000	msedge.exe	93
PID 2000 wrote to memory of 3988	2000	msedge.exe	93
PID 2000 wrote to memory of 3876	2000	msedge.exe	96
PID 2000 wrote to memory of 3876	2000	msedge.exe	96
PID 2000 wrote to memory of 3876	2000	msedge.exe	96
PID 2000 wrote to memory of 3032	2000	msedge.exe	98
PID 2000 wrote to memory of 1924	2000	msedge.exe	99
PID 2000 wrote to memory of 3032	2000	msedge.exe	98
PID 2000 wrote to memory of 1924	2000	msedge.exe	99
PID 2000 wrote to memory of 1468	2000	msedge.exe	101
PID 2000 wrote to memory of 5024	2000	msedge.exe	109
PID 2000 wrote to memory of 1056	2000	msedge.exe	110
PID 2000 wrote to memory of 1472	2000	msedge.exe	111
PID 2000 wrote to memory of 1440	2000	msedge.exe	114
PID 2000 wrote to memory of 1440	2000	msedge.exe	114
PID 2000 wrote to memory of 3544	2000	msedge.exe	115
PID 2000 wrote to memory of 3544	2000	msedge.exe	115
PID 2000 wrote to memory of 3992	2000	msedge.exe	116
PID 2000 wrote to memory of 3992	2000	msedge.exe	116
PID 2000 wrote to memory of 3408	2000	msedge.exe	118

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.mm.myeddiscount.com/330t344q132b/28f8/4bcs4706/172e4.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x264,0x7fff0ed9c188,0x7fff0ed9c194,0x7fff0ed9c1a0
  2⤵
  PID:3724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1816,i,2655390598831372914,4661664387387270251,524288 --field-trial-handle=2168,i,9482870819333022979,16201166384621346322,262144 --variations-seed-version --mojo-platform-channel-handle=2200 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1644,i,14735922841413806441,9594417745422533206,262144 --field-trial-handle=2168,i,9482870819333022979,16201166384621346322,262144 --variations-seed-version --mojo-platform-channel-handle=2164 /prefetch:2
  2⤵
  PID:1288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1964,i,12569511011784369853,18051630747604464173,524288 --field-trial-handle=2168,i,9482870819333022979,16201166384621346322,262144 --variations-seed-version --mojo-platform-channel-handle=2600 /prefetch:8
  2⤵
  PID:2632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3428,i,11712230301182301962,7953682954001802861,2097152 --field-trial-handle=2168,i,9482870819333022979,16201166384621346322,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:4004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3432,i,3449744631683448373,1224488553499732497,2097152 --field-trial-handle=2168,i,9482870819333022979,16201166384621346322,262144 --variations-seed-version --mojo-platform-channel-handle=3544 /prefetch:1
  2⤵
  PID:2968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4192,i,180178169058258387,17966306518738354909,2097152 --field-trial-handle=2168,i,9482870819333022979,16201166384621346322,262144 --variations-seed-version --mojo-platform-channel-handle=4196 /prefetch:1
  2⤵
  PID:1176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4220,i,14066940983652706172,13429058455915200474,2097152 --field-trial-handle=2168,i,9482870819333022979,16201166384621346322,262144 --variations-seed-version --mojo-platform-channel-handle=4312 /prefetch:2
  2⤵
  PID:3988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5020,i,12485028186392165480,6977005799413017591,2097152 --field-trial-handle=2168,i,9482870819333022979,16201166384621346322,262144 --variations-seed-version --mojo-platform-channel-handle=4996 /prefetch:1
  2⤵
  PID:3876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3528,i,9791586647787282409,8798595962180831965,524288 --field-trial-handle=2168,i,9482870819333022979,16201166384621346322,262144 --variations-seed-version --mojo-platform-channel-handle=3716 /prefetch:8
  2⤵
  PID:3032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3728,i,3246690568406407688,7019897767305421088,524288 --field-trial-handle=2168,i,9482870819333022979,16201166384621346322,262144 --variations-seed-version --mojo-platform-channel-handle=3680 /prefetch:8
  2⤵
  PID:1924
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5884,i,17909049290318835452,13636067531503326100,524288 --field-trial-handle=2168,i,9482870819333022979,16201166384621346322,262144 --variations-seed-version --mojo-platform-channel-handle=5904 /prefetch:8
  2⤵
  PID:4784
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5884,i,17909049290318835452,13636067531503326100,524288 --field-trial-handle=2168,i,9482870819333022979,16201166384621346322,262144 --variations-seed-version --mojo-platform-channel-handle=5904 /prefetch:8
  2⤵
  PID:1468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4504,i,11914265846727718096,13585747284792786599,524288 --field-trial-handle=2168,i,9482870819333022979,16201166384621346322,262144 --variations-seed-version --mojo-platform-channel-handle=120 /prefetch:8
  2⤵
  PID:5024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4508,i,16099218999836931710,9484805167822520843,524288 --field-trial-handle=2168,i,9482870819333022979,16201166384621346322,262144 --variations-seed-version --mojo-platform-channel-handle=6008 /prefetch:8
  2⤵
  PID:1056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4492,i,2914325378035038017,7226083066633633395,524288 --field-trial-handle=2168,i,9482870819333022979,16201166384621346322,262144 --variations-seed-version --mojo-platform-channel-handle=4436 /prefetch:8
  2⤵
  PID:1472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2928,i,2448781895712497174,17561786879028232544,524288 --field-trial-handle=2168,i,9482870819333022979,16201166384621346322,262144 --variations-seed-version --mojo-platform-channel-handle=5436 /prefetch:8
  2⤵
  PID:1440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5472,i,4706965098462733220,7749747194221365252,524288 --field-trial-handle=2168,i,9482870819333022979,16201166384621346322,262144 --variations-seed-version --mojo-platform-channel-handle=5444 /prefetch:8
  2⤵
  PID:3544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5932,i,7379878862240376461,10305637824560405195,524288 --field-trial-handle=2168,i,9482870819333022979,16201166384621346322,262144 --variations-seed-version --mojo-platform-channel-handle=6348 /prefetch:8
  2⤵
  PID:3992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5476,i,9902338414141265238,13942355575618538929,262144 --field-trial-handle=2168,i,9482870819333022979,16201166384621346322,262144 --variations-seed-version --mojo-platform-channel-handle=2928 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3408

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4384

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 bd5dff6b6a2953b678276fe774acb1020dcf956eee918258c4fbcebd9799de50
MD5 ad9e9cc59d40b3c4a865c23e526c194b
SHA1 ec6e5c23153f46461256dc2ee3316df628e2eda9
SHA512 781d6d2d74c84caa1d22367f03cb2eef3a2125624c47277182248dc2b092992ad8756b1ea9759b2d56ee2b90c008cd691688382416e421209d33f546892f8550
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P74:fwUQC5VwBIiElEd2K57P74
TLSH
T14FB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 39b8627875fea5ac5c5bfb887da12c15116e3fe81f200852c71d5699102c9044
MD5 e3962be2eb3bd350a67bf6309159a1cc
SHA1 c10632202b95ed6f7f4475b6483bf5196e4c5578
SHA512 d12d4acc23b51c071fbc9bf4db2f0575a6b43ec7894b272035e4c01dfce30099cd3ef90a1009dd1e6284cfbcf7a37fd3b79490739946700a2c61ec578374cbe6
TLSH
T173D08C677A0E7815E72F8231A413E360A76B4072A5629702F324C81DA9BC8D85BE63D7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a59087fbda784cffb013f4e2a0bf13a7fca483c48e8a7fc15fa022402eb25d72
MD5 dd54db185d82309b854bfa7657ba4600
SHA1 d01c14e8b4dec85ed2e1671545a868fd7ad4fa95
SHA512 f014ab84dd934b90e006883b74ad349d05f60071e57d2cf0bdf8a9bce118654c92139263e082094b602f6900a71e9a7848754994a2ea88642b2376121b581d07
TLSH
T165D08067354D7815E71F42319413D350576B4072A562D702F314C41D957C4D857D53D7
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 6KB
SHA256 19f1ae9d8f3205bac8dc41f56b83a180ac7665c3c496e5e30f071a44163a1e93
MD5 624d5017fa412c2fd742d0c9cb9395eb
SHA1 aeff03ad02dd6e979eb7f3674889e5d3fbdad674
SHA512 c25d88b44d4296ba1fdcdef928bea3e289031bc2e43c5a16d7e143c1798e1804290f615fdf55ef0e48a7479dc0a620dc960c804bd0da150eb2830a192b174642
SSDEEP 192:2joqS3333333333gggggggggggggggggggMULO:2joqS3333333333ggggggggggggggggp
TLSH
T184E1295782D4C7AADF0530CA8AE4635C41B0370FEBDCD988178DCDDD304E89AE9E6699
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 b65c20d4ca8443cf9ec3856d74cc8da0f8827d49b3ce10ad51737ef67ef6c6df
MD5 e2dad0124502009dcd92a6ee9aaef93c
SHA1 80e661a31911dad3c07e2bbb723f6a6b1438edb2
SHA512 8a4acff1aa219b7582295a9fa67b4561a4ee325ecf9a48329fe60e2041b032042554d8f5dcbcc9d2d84e7a1fd16d2e2b5560617d271cd1079abc5ebb8fe37e66
TLSH
T1C6613AB9066359C4F3214238B3F1721075B245A809DFEE1A38177FF8A5C2BBA6115A1F
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe586915.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe586915.TMP
Size 3KB
SHA256 795f1406d0c2bcf4e60be7d17419341c053ed75e48f6006ad4ad53b32276af9d
MD5 c308ebda9c26047e4e34eba895866a52
SHA1 38de9e88d17a9da0e98927819fd2962941ca94e6
SHA512 7a808e7f0174a2580f8b8e1dabe85d1bb27b3c63910eb39e95ac8aae881ad848ee38866bab1f2b088ad18c2eb7c08976e32bf68b31e273432650b764b2b005c5
TLSH
T195614D79066359C4F3210238F3F1721475B14598099FEE1A38177FF465C1BBE6115A5F
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 8e9ab9c08a7d9f1733da855eae1976b2cac3e18faa263725ee5d8d1b5d2ecc9e
MD5 49de87b415e57b89c5b406017eff170a
SHA1 155d77ec8720acef527895beb7fdfb1790361704
SHA512 719a7ce55c5882d83ef9eda59b5c82a7d1f9bb6808dac33e626a34abda80c20054567ec99636676e8761b01bd75ff9e8522a98a3ab1444a659c22480616a29bd
TLSH
T18A115BF3C7D5856E89055AF09A24AE2BCE2D0906421C7C1685D4EF6B93E3469E00255B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 8aab2e07e0ceb6ddbc830ea637f65efe280ba28d8ed95a3409cd95c6f1c60854
MD5 02e59d6b5050b2c2f6ba37095dd24c25
SHA1 4344fd2a5f45723c9ff40363ddd6f1c4a494a58f
SHA512 230aa923b042bac44076848a8f1d1f8d8707f00d610f93f9d88dcd733ec5de4896ddb129453d6f03770bac8b6e028af0d85235ba12dc681e0cc31d71c8c6058f
SSDEEP 192:sxZLRNyM/jK1Ml8MkE/fHslQVIdpKUh2HW6+WNzB9q/YHcli+jIgrJ:sxZLzME/fHslQmr2HbW/u69
TLSH
T12A52C616AA346A77CCDBD319F955BF53D6F50472A2900E44AAFC8A1C04E7AED2207C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 f57b3639fe77190bf7a24669914b441838f076969d49746620b1203567755cfc
MD5 f8281aeb6bbf94e949a32b115ce345e5
SHA1 a6fd4bcbb10ff5ba2be5e8059ac89f0aa41e4f17
SHA512 f88b23e9a987ef7b764892ccdd1180cc18ca624b1022588276b0b1638ef56c7817731acf5210b50d17a4dcb88724eca4d3fbb7b176e37927a1b1e37998e773cb
SSDEEP 192:sxZLRNyM/jK1Ml8UQvkE/fHsCQVIdpkUh2HW6+WNzB9q/YHzYZ+jIg5PJ:sxZLzqcE/fHsCQmJ2HbW/F6X
TLSH
T1C052B516AA385A77CCEBD219F941BF53D6F5047291910E44AAFCCA1C04E7AED2217C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 34421fd35ebc4c634217aa6040a6bf4a0831a84a74257812bbc491bb5ae3982d
MD5 cbdc545c4441630e0a8191152d32a9c7
SHA1 d6acce61c7d59a3125a599707156366cd50395c5
SHA512 36f7d8d4c37b7cd547852c73854042fc62ed386ec291ee920e7204235ebf410fb5207179753a2915602d55b0b45a17d5bc9812d8a7efc805a9bc45e288eaccac
SSDEEP 768:3OUZYTMWvg0Po8F1+UoAYDCx9Tuqh0VfUC9xbog/OVOeLlPZ4RwroVU0a:3OUZYTMWvg0Pou1ja7eLZmRbNa
TLSH
T19FD21A2F284CCB7E4F844E5DEC2A6F963DD801CB5A984D5447EA894C03CB2EF512B59B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 38d69439abdba6d3811cc89df13b25570178aeb5bbdf2c2d584c98deac01cb35
MD5 ed182d5c798434179bc289f402a753d3
SHA1 17fcc6f6a6a765ff6d657cbcbfecd587de27796c
SHA512 fa9f0c9f0bc9fbc1f57552996b4dc3f392cac389999cfc11c34d7f706b1392a8e8ae0e08b6213e388102fcb633594b69238170d9b78183bef54ab8c51da28a17
SSDEEP 96:KA1eK2AEsIKZSi6cgKNiOvaKAsWje9+cK/qv:E2PncJjeyk
TLSH
T14FD1295270FA26023C3D2A088354975B8E52F1A3301CE96F7BAC55B58D66E249DFF8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

050ba735-70ca-4736-924d-6e758490b857.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\050ba735-70ca-4736-924d-6e758490b857.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 974d86e0abda24eddaf2c092c993ddae0110507af884d41c705d6fede19df3ff
MD5 3c15d7f24155f8f1da9f365a29c7a562
SHA1 d486104fef82b9c2120b54a5c2c854f18f117456
SHA512 2f4c226e59765ecf725f9b56bdbf9d11ea7ba1fc387741f4f3c3feb378306b373a360a586c96ba51ff93d72117aa1a1719ccf47f51c2fb1004aa065099ef8846
SSDEEP 384:riFiZcIAsNc8TUNTUlIlTBFEg7pKzX5od+08y91X6viviumoa:GFQAtwgdrkOr6viqumx
TLSH
T1B5C229F248D79836D9AE9743E73D2D034EBCC067B5856A80B3985A1CCC9A1BFC30AC15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 35a03bb549cea2d52c377eb7e63152c0343c1ad6053c5a7a335526f75f8509f7
MD5 c3b07cbdaf4b1ac6925a745df78ef155
SHA1 a7efd91f6aa4620e094216514e61530aeb41cba1
SHA512 19bf29ab2f0775060b7a8e9f6071ec10b11aaf7bf35ec8dd42b7843023167a19ed5199e91f38416ca5226ef8d8bfbb83191efbf274348b993b8a55545fbd9c8f
SSDEEP 192:yONJ61VWQmiUyu3gGX5Obd+jIjzorynm2k/aG3oDLU6:yONJ6WrgGX5od+08y9zNDLU6
TLSH
T1F902C735A8687CAB8AF2BE49B44737135FE42167EA552F84D6E81B1C00D769C2306C27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 feefc66748d6b177e7e5262309c0be90b43b509c06a34696ff74c809c307cab8
MD5 e3cbeb678664b003447167348e270269
SHA1 038106dcba336e864e9c1621c9b7890204da8d73
SHA512 cd89dabd50542ca309eb0b919a7550dedf5801a869676d8eb183435e1c9806c039cf5fc619bc69dc94cb832c06c4b6187e9b8630fe7b1a444ab7e05d92e63d9c
SSDEEP 384:4ZcIhsNnUTBFEgkpKzX5od+08y91Xoviviumoa:GhXUkOroviqumx
TLSH
T1CD828D3198B8AC775DF2E244F44635175FB84067D7C96F8085FDAB2C00EEAA8131BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 3c92ccce07a45b37dc56142eefa5631b51ee818f78d1cc167f561b02cd02fd52
MD5 cb0f5c5f32b5ae6a958453dff1981a4d
SHA1 f004d9d2313fb254806a0d4e4a3f2dd80cef8f68
SHA512 7ff67dff94fe819f51b6475a80e79f945fb0fe619f2997d6e1cbf0991ab1c37e6481eaad9a2ae778831abd2b2bc51354a9c8ebbe302ceb9182b8a5dbed65fe0f
SSDEEP 384:RZcIhsNnUGBFEgkpKzX5od+08y91Xoviviumoa:5hyUkOroviqumx
TLSH
T103828D3298B8AC775DF2E244F44635175FB84067D7C96F8085FDAB2C01EE6A8131BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 26cab23a41e0ee4c585241ab99a6d43a0cc914fa35e8397bb920dfbcbaa60e43
MD5 90ac0384e006a12d65217dad688c8b7f
SHA1 e73b0ac6b0da6b139dc03d4ae29a97de75c82754
SHA512 fb364fcff1526704583628d1bea31ba55e2009f977092668c506439c08849efdf08cac4047e56b9a7ba0ccbbd6d8a497daf42b179a567f29cd33c467c4cf12de
SSDEEP 192:LONl61BWQmiUyf3pWGX5Obd+jIjzorynm21XaDXjJsqhU6:LONl6OcpWGX5od+08y91XGvU6
TLSH
T156120936A468BC279DE2B555B08732135FE5516BEB856F80D6EC2B1C00DF69C131BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 302c2e399d88cf789c003e027eef73f1ec30bd36333225750c423b3384acdc78
MD5 ca30827a643502c6e480af803de7ebc6
SHA1 c0e62a40e8e3c819a62904fa172540f1badef800
SHA512 e239ebba182260b135a7c805ef93629eb477134b43a287cd2034225c80ae988b63b0386f6db51842d63d1356a6648354151f83a420626f77fb1fb47fd7075e64
TLSH
T13D41F848BAF91148B3B76E56AFF6A86E447BBD732E06D45D00110E4F0A62B40C971737
MD5 SHA1 SHA512 TLSH

Submit Download