hxxps://conferenzia[.]hosted[.]phplist[.]com/lists/lt[.]php?tid=ex5dB1xdAAcEVktXVVMOTlZbUQBPAw1fCBUHUgELUFIDWg5XX1ZOB1QKX1QDWQ1OA1VTVk9WUgUAFQ4BDVxOAgFRDltaBwoFBwJSH1pSCAZQVwBRT1cMVFwVAw4NXk5QVgBZTw4AAFBVA1cHB1UMVw

Analysis

user interaction
yes
max time kernel
149s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
08/09/2026, 14:08

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://conferenzia.hosted.phplist.com/lists/lt.php?tid=ex5dB1xdAAcEVktXVVMOTlZbUQBPAw1fCBUHUgELUFIDWg5XX1ZOB1QKX1QDWQ1OA1VTVk9WUgUAFQ4BDVxOAgFRDltaBwoFBwJSH1pSCAZQVwBRT1cMVFwVAw4NXk5QVgBZTw4AAFBVA1cHB1UMVw
Sample260908-rfj54ssanc

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1152	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134333500955111382"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-668679576-120646659-2289335452-1000\{B426F14B-BEF7-4247-A7CB-DEBE26F153EA}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2628	msedge.exe
2628	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe

Suspicious use of WriteProcessMemory 34 IoCs

description	pid	Process	procid_target
PID 3308 wrote to memory of 2832	3308	msedge.exe	84
PID 3308 wrote to memory of 1152	3308	msedge.exe	85
PID 3308 wrote to memory of 3084	3308	msedge.exe	86
PID 3308 wrote to memory of 3084	3308	msedge.exe	86
PID 3308 wrote to memory of 3084	3308	msedge.exe	86
PID 3308 wrote to memory of 2852	3308	msedge.exe	87
PID 3308 wrote to memory of 2852	3308	msedge.exe	87
PID 3308 wrote to memory of 4448	3308	msedge.exe	89
PID 3308 wrote to memory of 1644	3308	msedge.exe	90
PID 3308 wrote to memory of 4448	3308	msedge.exe	89
PID 3308 wrote to memory of 4448	3308	msedge.exe	89
PID 3308 wrote to memory of 1644	3308	msedge.exe	90
PID 3308 wrote to memory of 1644	3308	msedge.exe	90
PID 3308 wrote to memory of 3512	3308	msedge.exe	91
PID 3308 wrote to memory of 3512	3308	msedge.exe	91
PID 3308 wrote to memory of 4176	3308	msedge.exe	92
PID 3308 wrote to memory of 3512	3308	msedge.exe	91
PID 3308 wrote to memory of 4176	3308	msedge.exe	92
PID 3308 wrote to memory of 4176	3308	msedge.exe	92
PID 3308 wrote to memory of 1588	3308	msedge.exe	96
PID 3308 wrote to memory of 4884	3308	msedge.exe	97
PID 3308 wrote to memory of 1588	3308	msedge.exe	96
PID 3308 wrote to memory of 4884	3308	msedge.exe	97
PID 3308 wrote to memory of 1524	3308	msedge.exe	100
PID 3308 wrote to memory of 2572	3308	msedge.exe	104
PID 3308 wrote to memory of 4704	3308	msedge.exe	105
PID 3308 wrote to memory of 3520	3308	msedge.exe	106
PID 3308 wrote to memory of 4680	3308	msedge.exe	107
PID 3308 wrote to memory of 4680	3308	msedge.exe	107
PID 3308 wrote to memory of 1112	3308	msedge.exe	114
PID 3308 wrote to memory of 1112	3308	msedge.exe	114
PID 3308 wrote to memory of 2144	3308	msedge.exe	116
PID 3308 wrote to memory of 2144	3308	msedge.exe	116
PID 3308 wrote to memory of 2628	3308	msedge.exe	117

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://conferenzia.hosted.phplist.com/lists/lt.php?tid=ex5dB1xdAAcEVktXVVMOTlZbUQBPAw1fCBUHUgELUFIDWg5XX1ZOB1QKX1QDWQ1OA1VTVk9WUgUAFQ4BDVxOAgFRDltaBwoFBwJSH1pSCAZQVwBRT1cMVFwVAw4NXk5QVgBZTw4AAFBVA1cHB1UMVw
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x25c,0x7ffa4b72c188,0x7ffa4b72c194,0x7ffa4b72c1a0
  2⤵
  PID:2832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1868,i,3482107718312985776,6475161803040427729,524288 --field-trial-handle=2356,i,9743283419327795273,6630912601020301651,262144 --variations-seed-version --mojo-platform-channel-handle=2380 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1752,i,9169271076671446212,15031355471107121316,262144 --field-trial-handle=2356,i,9743283419327795273,6630912601020301651,262144 --variations-seed-version --mojo-platform-channel-handle=2352 /prefetch:2
  2⤵
  PID:3084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2392,i,16703006227798144886,14935243190482577810,524288 --field-trial-handle=2356,i,9743283419327795273,6630912601020301651,262144 --variations-seed-version --mojo-platform-channel-handle=2396 /prefetch:8
  2⤵
  PID:2852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3432,i,7982120775102339428,18203418272513951611,2097152 --field-trial-handle=2356,i,9743283419327795273,6630912601020301651,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:4448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3428,i,15631096114539751553,10816840094104201251,2097152 --field-trial-handle=2356,i,9743283419327795273,6630912601020301651,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:1644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4192,i,2988865961832218802,13986054552212289168,2097152 --field-trial-handle=2356,i,9743283419327795273,6630912601020301651,262144 --variations-seed-version --mojo-platform-channel-handle=4236 /prefetch:1
  2⤵
  PID:3512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4224,i,11398121554164761289,17423240585073000900,2097152 --field-trial-handle=2356,i,9743283419327795273,6630912601020301651,262144 --variations-seed-version --mojo-platform-channel-handle=4268 /prefetch:2
  2⤵
  PID:4176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3724,i,16177388816498067166,15187841587728680579,524288 --field-trial-handle=2356,i,9743283419327795273,6630912601020301651,262144 --variations-seed-version --mojo-platform-channel-handle=5128 /prefetch:8
  2⤵
  PID:1588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5104,i,17833517435674141533,8955723219086833207,524288 --field-trial-handle=2356,i,9743283419327795273,6630912601020301651,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:8
  2⤵
  PID:4884
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5868,i,17998241166697720334,15889759248746356076,524288 --field-trial-handle=2356,i,9743283419327795273,6630912601020301651,262144 --variations-seed-version --mojo-platform-channel-handle=5852 /prefetch:8
  2⤵
  PID:4868
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5868,i,17998241166697720334,15889759248746356076,524288 --field-trial-handle=2356,i,9743283419327795273,6630912601020301651,262144 --variations-seed-version --mojo-platform-channel-handle=5852 /prefetch:8
  2⤵
  PID:1524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4120,i,1779353444082576716,886530391373788542,524288 --field-trial-handle=2356,i,9743283419327795273,6630912601020301651,262144 --variations-seed-version --mojo-platform-channel-handle=3712 /prefetch:8
  2⤵
  PID:2572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4928,i,2610661362699091932,3350841427917487021,524288 --field-trial-handle=2356,i,9743283419327795273,6630912601020301651,262144 --variations-seed-version --mojo-platform-channel-handle=5964 /prefetch:8
  2⤵
  PID:4704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5952,i,11959919498022273986,10701379152522064792,524288 --field-trial-handle=2356,i,9743283419327795273,6630912601020301651,262144 --variations-seed-version --mojo-platform-channel-handle=4468 /prefetch:8
  2⤵
  PID:3520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5068,i,14653885000885027740,5972571860824301936,524288 --field-trial-handle=2356,i,9743283419327795273,6630912601020301651,262144 --variations-seed-version --mojo-platform-channel-handle=2128 /prefetch:8
  2⤵
  PID:4680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4268,i,26556160729788606,10310035862817537416,524288 --field-trial-handle=2356,i,9743283419327795273,6630912601020301651,262144 --variations-seed-version --mojo-platform-channel-handle=4448 /prefetch:8
  2⤵
  PID:1112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5160,i,17778984778244494707,12939265315130748891,524288 --field-trial-handle=2356,i,9743283419327795273,6630912601020301651,262144 --variations-seed-version --mojo-platform-channel-handle=5800 /prefetch:8
  2⤵
  PID:2144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5384,i,16810335884278434784,6493575350825266305,262144 --field-trial-handle=2356,i,9743283419327795273,6630912601020301651,262144 --variations-seed-version --mojo-platform-channel-handle=6036 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2628

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1932

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CrashpadMetrics-active.pma
Size 16KB
SHA256 814d47aad78c212b52568b9c7b58d242899d490d3afebce66181cae50c880df5
MD5 8c7cdfea4284ba987d295d82a9c7ddd6
SHA1 7d1a3a66f2d64a383b230196ba89a263ce7ee957
SHA512 59c8229e834c944265aed4131c79f41f9f940a48651b9fb18800cef5bae36d17c7fd5880120c6fee8ce22a157b65bc63846b65765bc4dc86e15926dcce400d0d
SSDEEP 12:sf9iXhV0xoUZxCe+JKlkQuMRxCb8TXuYJ0IJpPK6BsyW1inPiz:U9iRqxoUZxWMk8xVTeYWI31BtXP
TLSH
T105724C85B34498FFC8835E7189BD27903774F6DF1F02866B6A6A760E2E271C84F44224
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 81240d13af4ca099e1358c75991e3fa5640dbb3aac72c2d98006f6159bf74aa0
MD5 96dd753cd2d8557b97ab2cd76f7fc6cf
SHA1 81697ccb13fb04a07bd47b552b3607597251f36d
SHA512 355c412a688a71b124e85c0527177b3f97efceb2a5553f8428e0913940daffd3bd176f5476b940c64eee52d543f0568112ac073984d9a64015adc15cbef552de
TLSH
T174D09224BA29A149E282007AA881EB565219DA95296B9622E620C44DBD2B925A3851C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4bf0783d55eb083b4adaa03ed8b76a2bd35b0819c8ad2530a78e1b8d6856010b
MD5 7a50c2e276f05b686e8cb6c95b86650f
SHA1 bc892af04a9d6b1bee8047f67518d676df864301
SHA512 f1d02fd9f067323214d78de08172e1a78028eba76f4754436f4d77b849e8422865dcea22be13f21c36ac2c5807b393c1dffdb0a3217c3353a517a0467461a474
TLSH
T19BD022203A28A008E282003AA880EB020208CA80282BC322E220C00CAC2B820A3800C2
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 a5f2486767e15bb6405bacf6953949f8124914a22e8b1e347222a36f41b7dda9
MD5 a1b83236292d4745e6f559d6a446b876
SHA1 201042f059b2c3f42c467223a5d6458257bc13bf
SHA512 6f3b0fe6e91b14c9442ba0daee8a6855513ba2717146dc257a95eb1c24daac2136c3d4b34a4a6c6e6b60b54af08dd26f0b3f58c7e18ad7121b256408b6ccb721
TLSH
T1DFE026C915C8C22EFA10A48B417C674EB2F03F0B93CC7B0B5F008988B281894E7E36A4
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 ef23bea1c3123ec9a054f7df8b0f562e0cfab88e1ec032e977772dfebe7a55b3
MD5 171032e38d01790bb9d459dade616e4b
SHA1 70d494f747399cd521a6c55f86bf4e45d77f6521
SHA512 9c92c24701dc220531ac74bff3ad0732da4b4f75db29ca520c27a586b65618958b1d3a36375b8c0e2b0b120d249d7ceb5fea86486ded1e5ddda00c0268ddd3fb
TLSH
T14171E5350921B891F3901F3A70E60553FC7AC9E8F7578E9790AEC9B86927B60413E6CC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe587172.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe587172.TMP
Size 3KB
SHA256 6186bfd0abb939b37ef4d976436ed8e835661c71687b7c9c7a96811672350454
MD5 1fd0b6a01bdb43d844eedbea2bab3d02
SHA1 e3225a977926d9c9cd62a3ecbbad5c1686c1a5c9
SHA512 c0dbb39346fd02958957fbe4ce7f7ec46e10230ac2de2f4d921cd3999683d39495823b18cd9fba102c94a7bf030cee10d4108d0a54dcd31bf3a531ce4af48309
TLSH
T12B71E7350921B891F3901F3A70E60557FC7AC9D8F7578E9790AEC9B86927B60413E2CC
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 14564c798a68d042bfc38a225e8dc9fbf5f950af20c6f1ae696f70f08629b41c
MD5 f753fb6362333d0479513399474b6cf7
SHA1 838f77d00be2b5171cd09a2d8b923d49f3a4f28d
SHA512 8d3097fdc55c6701d128b2a746b53068972f13cba930e59fb3163a60455a12933bcd6e9adf47f1047f66c9127dd0e572acf7302a42c18ce50526999642550c2d
TLSH
T13311C0F3C3E1866EC90157F05A14AE1BCE2D0602431C7C2585D4EF2793E3079E10259F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

bb2e9c6b-7850-41f6-be8a-33ac4d552477.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\bb2e9c6b-7850-41f6-be8a-33ac4d552477.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 f239aad437ed818fe7ee7ef741997b79fb58f3b9ec6ac78f92272e4e877bb277
MD5 b6ef1a3216251c0b6869758ca5fe9d43
SHA1 3c38d0882cc0bafbd10da35be1b102888b9992b7
SHA512 1a434a3dd3eb1f4db485a1155410de6f3d6e4ef9beecc7dfb389e78f259abd1dd073720ec41338d780f069b0e5d1b02c569cb799a600aee37c526de3e71e449c
SSDEEP 192:sxZJRvkS/f7sBkbIdpsbHW6+WNmSR/YCyHr3tIgrJ:sxZJOS/f7sBkEyHbR/uB9
TLSH
T15022D8126E38A97B4CC7D219BA15BF13D6F95032A1D55E88E6FCC62C04E7ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 c276a8ce73542f71536274c06069081554dc1b5bb4b68944766689f65aacf95f
MD5 370e0a8126e37e38deaa864f2c2513b3
SHA1 a7cceb09eb28e755032cb37a6b847fe65997553a
SHA512 d7e5f56382e82b42215101f063dd5a8b9ce31efc88a96253d38441d5b9f54ecc8079773261108611173d2f4c29e0bb47f2bfe9169fb6ea633f02dfa550e0ddc4
SSDEEP 192:sxZJRvkS/f7sckbIdpsbHW6+WNmSR/YCyHr3tIg5WJ:sxZJOS/f7sckEyHbR/uB4
TLSH
T14A22D9126E38A97B4CC7D219BB15BF53D6F95032A1D55E88E6FC862C04E7ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 93701ce11cc52fc59c9f1882c505cd36e0a7171ff4309a3c7f43d6a8daba373d
MD5 391f393e552ca100b757ec1137e225a7
SHA1 e2263dc356ef6ec9320b844b437fde0ab4920ff9
SHA512 1ac29b6d50c46bca77595349b27717d45bb9b71583d6a30f41bfa7d80b6e6427d298bfd495e1b91ca27922530a8b2e49e4874ddf4dcc2c4b4735c9253a03c9b9
SSDEEP 192:sxZJRvkS/f7sc5bIdpsbHW6+WNmSR/YCWrr3tIg58J:sxZJOS/f7sc5EyHbR/UBi
TLSH
T1E532E8526E28A97B8CC7D219BB15BF13E6F9503291D55E48E7FCC62C04E7ADD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 adc21a1d9d6f47f12fbbb6fdd839e3d9632f60d023c7c8513d398e60c8eb2dd8
MD5 9064de93a8c9cc58026ac753753b3c0a
SHA1 d2e9eb92a20507359c7b045d1abcff615e6e8830
SHA512 ff3f056ecb25297b5b48ac084a7cbfab023b5534edf262a77cbbba8a54d0881809ef6312322430b5c5cdef05efad1c9875475514a91b88824810f426a6a59b7d
SSDEEP 768:bRqbUj+WvSCs68F1+UoAYDCx9Tuqh0VfUC9xbog/OVHZLlRTKrmrox:bRqbUj+WvSCs6u1jaaZLbWrdx
TLSH
T164C2E93B340CCA7E4FC01E9DDD5A6F972EA802C7A7588D4447FA994C02C77EA512A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 65a38a979db0cc8bc00f0388081489a347869a788f5cb30706f2047be4daffb2
MD5 034a04e2bcd1ce5fd554c9da96bf81b8
SHA1 d8704173c80fd9aee5fb845b85534d554093aaae
SHA512 58aff5bfd603f8c1a01861a08cb50ec294a3c95cdbeb2ae45ac982ebfb79b11ddb4c30ce742d4cfad72369e737f63aafcd54ec92f3e3d4467481cf424b43701a
SSDEEP 384:nZcIhsNjVeEKnkcEa+lOy+HVYo537xuvzxV+MhdpTG3oZ:PhzEjHa8Oy+Vl74184pTka
TLSH
T162827D726C786CB66CBA6145F84737135FB89067D9C99F80C5DC9F1D00DB6E9130AC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 ebf3e6105bebb6ee58ecee7e5a9ad7280561a37f5bad8853d5beb3f0b062503c
MD5 9da4f754ce29ea63bbea45d5ac1dd568
SHA1 8644c49d6d2fc9003c66648360afb00f8cd9f353
SHA512 57378abd6725667645db9dfd2ae732323be408225c01ab17cf9c21d5d949d225adc89b8c97dd57b8215f8fa504d026db75eec97ae498aae7618d0327a4bd1ba9
SSDEEP 192:vONf6Db6QmiUy4YHBa+jpOmN+BRg3RrU6:vONf6uCHBa+lOy+IhrU6
TLSH
T16702D73968386CBB9EE26E49F48727279FD4203BD9566B94DAD81F1C00D765C230B837
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 bf38c561e4b96c66986f5e4cc469904f472cbe5877b9e0cd5be8e335dbcc69a5
MD5 ef6221653a53f2ac375cadbc992bb7de
SHA1 87cee4a7878fc761e1976e6325c911af003adf25
SHA512 1c49cee712cd3d5122c7ff8b9d50b764faea24c7c2e85dc36b384d315aad9c191eefd8d2f893661240087f2ead88971ff324146918e15ca0697824ebc6d481e5
SSDEEP 384:wZcIhsNjQeEKnkcEa+lOy+HVYo537xuvzxV+MhdpTG3oZ:OhwEjHa8Oy+Vl74184pTka
TLSH
T194827E726C786CB66CFA6145F84736135FB89067D9C99F80C5EC9F1D00DB6E9130AC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 23KB
SHA256 172735257cbb8692bd8cb8ca89895565406419a13720995f722e209129b87aee
MD5 1e21acdc57562e6e294a296e10d43ccc
SHA1 bc8a368eac2a4bdae66d40c28485c6c0fa93d585
SHA512 90a20401723a937566c6e52faa6f5e602ca4589df0b92d040e785fd41bb609fa03b56bee41521cb67cd29aebda0d0965655c28672238bbcb8ee58900f22514f3
SSDEEP 384:ZZcI4sNjQeEKnTcEa+lOy+HVYo5E7xuvzxV+MhdpTG3oZ:x4wEYHa8Oy+VK74184pTka
TLSH
T121B2F5F168E75C76D8AD5343A77E2E134EBCD027B5885A40B3985B1CCC962BFD30A816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 b737111da950112498169e46b6df379f71d330268be2c5300344e5e5e31ecdd4
MD5 76b28105a0a9f7c67ca4ae6d6844b06c
SHA1 e3364b7ae83a13034beda6c29e6d99882bf7c0b3
SHA512 8c45fdf18ee5dd9b12588109907797e33b133198c2ca83d37c4f151f9e71341149dfddfc9af8dd8ac0d780caae8649ff6381d54af1a385e870fcb3371771bcb4
SSDEEP 192:uONO6DblQmiUyyYZ2Ba+jpOmN+HVPPwo5fNztdqQU6:uONO67QMBa+lOy+HVYo5Z7U6
TLSH
T1C312283668786C7B5DE26985F48736139FE81127DA4A7B91D6DC1F1C00EF6AC130A827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 cf30b31489fd5ed8fa12189e396e9213cfee922d2f0d7349de87c88a2948406b
MD5 f2c70c775fd84966dd5e1693c5cb41fa
SHA1 6d4a54381fe2f7e841fd4eb560510bf0bd208e5f
SHA512 9dd626ce3c30784e28a9dce35c98c923d90d8fbaf4b494c79048956bce26a5c91082291efd87944c76769deab3cf3957da796e7dc4fd586117f489b058d2169f
TLSH
T123410658B6ED1118B3737F5AABF6A8AD887FB9672E06D45E00110D4E0A63F00D861737
MD5 SHA1 SHA512 TLSH

Submit Download