hxxps://webapps[.]nku[.]edu/secureapps/evaluations/reports/logout[.]aspx?url=http%253A%252F%252Fun[.]jupiterbuy[.]com/

Analysis

user interaction
yes
max time kernel
149s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/09/2026, 01:38

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://webapps.nku.edu/secureapps/evaluations/reports/logout.aspx?url=http%253A%252F%252Fun.jupiterbuy.com/
Sample260910-b2m6wstbrf

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2004	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134334779197315450"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-204488895-2999877624-296153668-1000\{3EF335EF-117A-40E4-9B1E-5E7EAFF44566}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1800	msedge.exe
1800	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 5084 wrote to memory of 3404	5084	msedge.exe	86
PID 5084 wrote to memory of 2004	5084	msedge.exe	87
PID 5084 wrote to memory of 3632	5084	msedge.exe	89
PID 5084 wrote to memory of 3632	5084	msedge.exe	89
PID 5084 wrote to memory of 1764	5084	msedge.exe	88
PID 5084 wrote to memory of 1764	5084	msedge.exe	88
PID 5084 wrote to memory of 1764	5084	msedge.exe	88
PID 5084 wrote to memory of 3824	5084	msedge.exe	91
PID 5084 wrote to memory of 3824	5084	msedge.exe	91
PID 5084 wrote to memory of 3824	5084	msedge.exe	91
PID 5084 wrote to memory of 3524	5084	msedge.exe	92
PID 5084 wrote to memory of 3524	5084	msedge.exe	92
PID 5084 wrote to memory of 3524	5084	msedge.exe	92
PID 5084 wrote to memory of 3008	5084	msedge.exe	93
PID 5084 wrote to memory of 3008	5084	msedge.exe	93
PID 5084 wrote to memory of 3008	5084	msedge.exe	93
PID 5084 wrote to memory of 4720	5084	msedge.exe	94
PID 5084 wrote to memory of 4720	5084	msedge.exe	94
PID 5084 wrote to memory of 4720	5084	msedge.exe	94
PID 5084 wrote to memory of 1980	5084	msedge.exe	98
PID 5084 wrote to memory of 3424	5084	msedge.exe	99
PID 5084 wrote to memory of 1980	5084	msedge.exe	98
PID 5084 wrote to memory of 3424	5084	msedge.exe	99
PID 5084 wrote to memory of 4660	5084	msedge.exe	101
PID 5084 wrote to memory of 4972	5084	msedge.exe	107
PID 5084 wrote to memory of 2944	5084	msedge.exe	108
PID 5084 wrote to memory of 2476	5084	msedge.exe	109
PID 5084 wrote to memory of 3320	5084	msedge.exe	118
PID 5084 wrote to memory of 3320	5084	msedge.exe	118
PID 5084 wrote to memory of 3932	5084	msedge.exe	119
PID 5084 wrote to memory of 3932	5084	msedge.exe	119
PID 5084 wrote to memory of 1800	5084	msedge.exe	120

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://webapps.nku.edu/secureapps/evaluations/reports/logout.aspx?url=http%253A%252F%252Fun.jupiterbuy.com/
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x240,0x244,0x248,0x23c,0x254,0x7ff9c026c188,0x7ff9c026c194,0x7ff9c026c1a0
  2⤵
  PID:3404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1812,i,482380598650389777,1938161323688718197,524288 --field-trial-handle=2276,i,13401147111306245787,11158212943532051687,262144 --variations-seed-version --mojo-platform-channel-handle=2312 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1704,i,3654582626770052659,1683643190144839309,262144 --field-trial-handle=2276,i,13401147111306245787,11158212943532051687,262144 --variations-seed-version --mojo-platform-channel-handle=2272 /prefetch:2
  2⤵
  PID:1764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2472,i,10072553663974329859,14220242513120580048,524288 --field-trial-handle=2276,i,13401147111306245787,11158212943532051687,262144 --variations-seed-version --mojo-platform-channel-handle=2484 /prefetch:8
  2⤵
  PID:3632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3432,i,4473681435821705248,2122092458934463478,2097152 --field-trial-handle=2276,i,13401147111306245787,11158212943532051687,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  PID:3824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3452,i,14893918024571375603,5342059308372760874,2097152 --field-trial-handle=2276,i,13401147111306245787,11158212943532051687,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
  2⤵
  PID:3524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4168,i,4761333440070276880,5827916302145655120,2097152 --field-trial-handle=2276,i,13401147111306245787,11158212943532051687,262144 --variations-seed-version --mojo-platform-channel-handle=4228 /prefetch:1
  2⤵
  PID:3008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4196,i,7739980641721967196,16354362063551785454,2097152 --field-trial-handle=2276,i,13401147111306245787,11158212943532051687,262144 --variations-seed-version --mojo-platform-channel-handle=4232 /prefetch:2
  2⤵
  PID:4720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,12772969734324235329,9937311912987677220,524288 --field-trial-handle=2276,i,13401147111306245787,11158212943532051687,262144 --variations-seed-version --mojo-platform-channel-handle=5208 /prefetch:8
  2⤵
  PID:1980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5132,i,3159386182352111452,16000519535995873030,524288 --field-trial-handle=2276,i,13401147111306245787,11158212943532051687,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  PID:3424
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5792,i,8926005493596737902,9305424267930384701,524288 --field-trial-handle=2276,i,13401147111306245787,11158212943532051687,262144 --variations-seed-version --mojo-platform-channel-handle=5808 /prefetch:8
  2⤵
  PID:3848
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5792,i,8926005493596737902,9305424267930384701,524288 --field-trial-handle=2276,i,13401147111306245787,11158212943532051687,262144 --variations-seed-version --mojo-platform-channel-handle=5808 /prefetch:8
  2⤵
  PID:4660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3616,i,16054843248059022106,155563419488973304,524288 --field-trial-handle=2276,i,13401147111306245787,11158212943532051687,262144 --variations-seed-version --mojo-platform-channel-handle=4804 /prefetch:8
  2⤵
  PID:4972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,5044178810511823002,14824785863192267960,524288 --field-trial-handle=2276,i,13401147111306245787,11158212943532051687,262144 --variations-seed-version --mojo-platform-channel-handle=5812 /prefetch:8
  2⤵
  PID:2944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5888,i,11398596302414963545,3372154104897725692,524288 --field-trial-handle=2276,i,13401147111306245787,11158212943532051687,262144 --variations-seed-version --mojo-platform-channel-handle=4732 /prefetch:8
  2⤵
  PID:2476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5248,i,15343647315910750379,1814251663910016669,524288 --field-trial-handle=2276,i,13401147111306245787,11158212943532051687,262144 --variations-seed-version --mojo-platform-channel-handle=4784 /prefetch:8
  2⤵
  PID:3320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5420,i,15576604621095677588,34198286462885572,524288 --field-trial-handle=2276,i,13401147111306245787,11158212943532051687,262144 --variations-seed-version --mojo-platform-channel-handle=6008 /prefetch:8
  2⤵
  PID:3932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=2100,i,17036910731657898028,7578054599935761349,262144 --field-trial-handle=2276,i,13401147111306245787,11158212943532051687,262144 --variations-seed-version --mojo-platform-channel-handle=5344 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1800

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3812

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ab98da7535c8de464335204ae97fd672936e639269325c3a388b3039d8396b83
MD5 1656a3560c7aeae221756f3891b89fd3
SHA1 e48441fe2b843ba3bd0bb7799c07b22a27db8eb7
SHA512 c06d7152d11e33601716d4c5c33c7373ac4e0c16571e80ac4a8ffb9cabb52fae51d4fe8d808fc75be943287b55a320e90a186d71a5f06e9db006f6ab89266400
TLSH
T1CFD09B307B597042D3074031E8074790169E84B5249B86066554410D7D5A485E3DF547
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 206e13e84946358e3657361db10bf59bbda296b98f7dd30b3385e0ccfbff406d
MD5 ebf86519a5b3fdc968c0391071d3ddf0
SHA1 acdef52a404ec9156a7530261a3750816b64209a
SHA512 2ca62aed5d80b11a378781521d2e3e117298530d88690e5d9db25a2fe0048ef1a33981592cbd2946af16dd9229c9769bb7a0321f329353d99737747179609ec4
TLSH
T1E471E83C026643B7D36E01F193CD720D353282FAFBE32E8990976A7B5922761C259BC4
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 852B
SHA256 83b9c9081b81e9dd688816dbe776946760031c15d7ecd895ac7309ab838e6b06
MD5 1e411a776ed94baea978a66cb46772a6
SHA1 082b379000b415581a40c94eb780f76360ca3460
SHA512 b9d6dc9cb074580a94bf538eb9d0c6c844b207ab80e2f11a6448183398275c19e1403905d38e58dabc53f0c23a7b6855f58d10d4acd85b3c1d0fc9661eac8964
TLSH
T1CB018CF783A0957E8A1156F09A18AF1BCE2D0902831C7C1685D4AE2BD3B3475E00194F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 359f7929cff9ca3380a15041ae726320a9a18e301c3d6e7c7c14dc896335f097
MD5 083741db47276ae6f0c6f13fefd5fa38
SHA1 1236995599b7b3c81c29cfb03efd528f0947a821
SHA512 839fb5a3f6fb5b2eec914242567b3c220378c24b4876ee79ecd99a1e311a53209145cc79491ebfae524314584853ea09e38e18053ec4ef8be428c6c131100175
SSDEEP 192:sxZvRYWo/fSsFWNIdpLjHW6+WNk8C/YzsXr+9IgrJ:sxZvho/fSsFL/HbS/Vs9
TLSH
T1E422A7526E38A97B8CCBD219BB25BF53D6F9503295941E48B6FC861C04E7ADD230780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 ee4383f6bc47461d4e6b05720a2f6dd451f5c29cb7fd3fc9c50581dfafa90a15
MD5 c81c13bbed96b28230768c9228661acc
SHA1 b1568701b4f7f92812b9d5c35c5828d391aaf28a
SHA512 f5006125e239f552fe2c90f4851c8a6824cec1ca5173bda1dc1ee165429e08b6a918d6574c08362ef2e1ba5733647aa3186ebe583d181ebee37b9810115613a8
SSDEEP 192:sxZvRYWo/fSscWNIdpLjHW6+WNk8C/YzsXr+9Ig5OJ:sxZvho/fSscL/HbS/Vs0
TLSH
T17F22B7526E38A97B8CCBD209BB15BF53D6F9503295941E48B6FC861C04E77DE230780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 8e901697a4c2c66c68afc1dcc8df1ece7f671e2c2eb3d8259ffbb8d9fb6b53b6
MD5 93288f9657c943c8b2e0d24f4a933da6
SHA1 89aed9382de9c6928e45b6726dd25bc100c9503d
SHA512 e27e8a758b749f57a34eef3c6cbbfcad56f81e8bf40969242ee1c55d53d5c99a937709facaaa9855bfe6d4579ae959ac9411d3ffb31e29d83457b1459e7b1ffe
SSDEEP 192:sxZvRYWo/fSsAWNIdpFjHW6+WNk8C/YzKe5+9Ig5kJ:sxZvho/fSsALNHbS/4se
TLSH
T1AB32B8526E38A97B8CC7D20DBB15BF53E6F9503295941E48A6FC861C05E77DE230780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 2888e1e2fab1eea43522fddc33b4b09debfebc5ac5d0b5ae5a4d81b3aa995dba
MD5 1e144492fe7a9c0d240b82acd1fc7ebd
SHA1 8e195dbc9d333f4c0f26df4adb7200043ae25a2c
SHA512 3c5f88f8f74c5f9230b635d644fd45d2b11e805a4dfcf4c5b5a2962f2304afae3125d541fb4d40e04d74592e811dae53b0059f0c124f7d13943c5e65ecad6464
SSDEEP 192:sxZvRYWo/fSsAWNIdpLjHW6+WNk8C/Yz/dr+9Ig5kJ:sxZvho/fSsAL/HbS/Ise
TLSH
T16C22A8516E38A97B8CCBD209BB15BF53E6F9503295951E48B6FC861C05E77CD230780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 670d4fd44737805c799ceefbb2d9ef01c7dc3e8bf9f151b1e9f6febd3ecbfc0e
MD5 fc125cd4f85c10b4bf6de803abbed2d9
SHA1 f7cc16a6cc8a51e8c89c3a1898612ad10b2875c3
SHA512 c9a2d075cdb6c39b688aa2a30ac293c6eb72f733eac6f62787658457ad383ba79ecc77836df0899de8340392b6d744258cd02cf42289bbf93aee1a3a12db33de
SSDEEP 768:20k7u70WvqiEa8F1+UoAYDCx9Tuqh0VfUC9xbog/OV35LlWYSBJroy8YV:20k7u70WvqiEau1jai5LA3BiWV
TLSH
T1C2C2F93B740CCB7E4F801E9DAD566F973E9802C7A6988D4087FA994C02C77EA51264DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 562dfe1378c225f882d68f641e6aa1fb6653fae76430eed08d168419f0e11990
MD5 9cb02595834e15fa2d6c2dabb48cf63e
SHA1 76a4690973b7ac9e08176d5c50b66d3bbebc1448
SHA512 027f87a5ecf65dec82924411724264d42b8b66c296ad411581b63180e269c5057bab784483baff474174a952b0ba1872ba8bcf5535323b465c35a3c71330a266
SSDEEP 48:KfSVOyIQA2aQL9IZy2KYT//I9KA8QCy9dIBKeEMiiI/KnR:KIbCKc//iKA83GdaKeE9iYKnR
TLSH
T131913256307B475238BF2D14A255862A8F4236A33418F57F7BB810670E6BE114EFD8ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

993e3efc-a8a9-4bcf-8177-97189f3471d2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\993e3efc-a8a9-4bcf-8177-97189f3471d2.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 2da0e3913febbb57201d947cd07ec53b548d996e6f33026321461879754389a4
MD5 e89bc349f247dfb47854c2d80fc75f9a
SHA1 0ca25009be080fbf242cde157f8d4a4831cf5f03
SHA512 c8692e7dbc353e85a28c1265d5cbbb85d5e1d47183a2d7b2531c30d0e96c47ab353b7fcd141b99e8d749d606911537d680d2963581aecb52f02e14621193ded6
SSDEEP 384:2ZcIhsNuUfTbcQKrdPsqlQsa+VYnBZFoE:khwtQLQhgsnFD
TLSH
T10D828D325C74AD7759B6A281F64727078EF88177EAC86F44A6EDEB1D00DE39C130781A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 85e2c633e11fa5920784f37eb116f40ae371999c11b03c1be0db012bca1b2e47
MD5 539cf2866ca8c630f7eeba5012c73f69
SHA1 d1caaf41a6c2c9ea6b54291834d263395ed53001
SHA512 776235e60f2a388a8b798e42e632db9e5117b7129ff7319536187114ab675927db7a80a33cf0e2c13fa08c0ad099b3515ab1808d56e7f288ffe2a66d25bd3d0e
SSDEEP 384:QiFiZcIlsNz8TUNTUlIlWTbcQKrdPsqkQsa+VYnBZFoE:rFQlCwgetQOQhgsnFD
TLSH
T15BA26C735CA4D97BADB69781FA4A2303CEF44177DAC8AA54E3DDEA1D009A2DC1307C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 cf6b70a2415b3c12712c3dc2d9dfefbc73a4784a46e96247e250b9667f67b017
MD5 9168666cd398c83d9c8ff9fb3faa9082
SHA1 6f61b892166cbf2181cad61966523ebab5a1ca12
SHA512 40ecf0847b52121397febad90b84b64ce5c631b12177c81013bcfa77c95f04846d9ab94b6771d88e789d4f719c54386b92645b6bb4cd3df0807a3b0fe11fea15
SSDEEP 384:bZcIhsNuUWTbcQKrdPsqlQsa+VYnBZFoE:Dh9tQLQhgsnFD
TLSH
T1ED828D715C74AD7758B2A281F64727038EF88177AACC6F44A6EDEB1D00DE79C130781A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 97f2681f6481d0aa3d46170f399ce293f5c7b5e3bbe34b9c72e1edb352c7c674
MD5 1ad5389e00884aa779106e3d81c54cff
SHA1 a292efbc7e28062654fad54b7a8b48eec9e978ae
SHA512 bd0c2ce49b520fabe2597045fb9dc40269764b445eb8924b98ef0e8c84b5b4b204242a8e42a0d74b61758796220b37e5be1053fb9f9ff6017e1b1bc60cd15930
SSDEEP 192:ZONE64BFQmiUyIGW5GBPK1B+FdGw5LGPNqMWwprqBU6:ZONE6ejYWUdPsqiQU6
TLSH
T165120B359C756C6B5EA2A541F08736079EA4423BEE846F44F6ED6B1C01EF79C2307816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 89d249adcd988c00fa4aa828d11b8eb67ddc8537b7cff7e08afcbd0763c43a4d
MD5 ec31caba0712406a5bbabedb2ee4e3ce
SHA1 f2c8e267ce5dc705e93a38473e381cb0e5983ceb
SHA512 0aecc53c21a03a0e5f9d67ff9f93abf6aa4b299166b885b4e231d2fdfbb059d6696d3fbc188bd8c3b19cf52c38b9fa9fadb97e4ce98ac2e1da695c35798f7045
SSDEEP 192:MONg64BAQmiUyL1GW5GBPK1B+FdGw5caDzmCU6:MONg6eAsAWUdPThU6
TLSH
T177020A386C786C6B9EB2AE45F58737175FE8113BEA942B44EBE85B1C00D765C2303827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 511c4083b2185ccb3852b6d89254251471692815704efa6b64adebb54793e93a
MD5 df7d51561e3a0ccd46bb533c5e42322f
SHA1 b17f9e548fca26cf2120b1794c06517ea0145516
SHA512 aff824febbf09f4f414f8534482f6a57f00da316947d3e0a7d6284bb2931d2b2b6244e7a42df381f5f472e490c3d7604c94c2010b994a42a1186dfda9092cae9
TLSH
T15F412C5866EA1148B3B7AF5AABF3A86E487F79372E0AD45D00110E4F4532B41C962737
MD5 SHA1 SHA512 TLSH

Submit Download