hxxps://go[.]spinnakersupport[.]com/e/427072/privacy-policy/82cnnz/1391385511/h/Diyc7siJJfuFEFAxJgDuCepxbsCv_bRYrGONnH2puvM

Analysis

user interaction
yes
max time kernel
149s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/09/2026, 05:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://go.spinnakersupport.com/e/427072/privacy-policy/82cnnz/1391385511/h/Diyc7siJJfuFEFAxJgDuCepxbsCv_bRYrGONnH2puvM
Sample260910-fz37jsff95

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4192	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134334911797292828"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2937465464-4167303362-2236413517-1000\{CBFB043A-DE8F-49FA-A0ED-951CD1426A30}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2836	msedge.exe
2836	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe
5000	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 5000 wrote to memory of 3656	5000	msedge.exe	84
PID 5000 wrote to memory of 4192	5000	msedge.exe	85
PID 5000 wrote to memory of 4452	5000	msedge.exe	86
PID 5000 wrote to memory of 4452	5000	msedge.exe	86
PID 5000 wrote to memory of 4452	5000	msedge.exe	86
PID 5000 wrote to memory of 2628	5000	msedge.exe	87
PID 5000 wrote to memory of 2628	5000	msedge.exe	87
PID 5000 wrote to memory of 1180	5000	msedge.exe	89
PID 5000 wrote to memory of 1180	5000	msedge.exe	89
PID 5000 wrote to memory of 3452	5000	msedge.exe	90
PID 5000 wrote to memory of 1180	5000	msedge.exe	89
PID 5000 wrote to memory of 3452	5000	msedge.exe	90
PID 5000 wrote to memory of 3452	5000	msedge.exe	90
PID 5000 wrote to memory of 4300	5000	msedge.exe	91
PID 5000 wrote to memory of 2060	5000	msedge.exe	92
PID 5000 wrote to memory of 2060	5000	msedge.exe	92
PID 5000 wrote to memory of 2060	5000	msedge.exe	92
PID 5000 wrote to memory of 4300	5000	msedge.exe	91
PID 5000 wrote to memory of 4300	5000	msedge.exe	91
PID 5000 wrote to memory of 2260	5000	msedge.exe	97
PID 5000 wrote to memory of 2260	5000	msedge.exe	97
PID 5000 wrote to memory of 3160	5000	msedge.exe	98
PID 5000 wrote to memory of 3160	5000	msedge.exe	98
PID 5000 wrote to memory of 3456	5000	msedge.exe	102
PID 5000 wrote to memory of 4120	5000	msedge.exe	115
PID 5000 wrote to memory of 2968	5000	msedge.exe	116
PID 5000 wrote to memory of 4568	5000	msedge.exe	117
PID 5000 wrote to memory of 4680	5000	msedge.exe	120
PID 5000 wrote to memory of 4680	5000	msedge.exe	120
PID 5000 wrote to memory of 1988	5000	msedge.exe	121
PID 5000 wrote to memory of 1988	5000	msedge.exe	121
PID 5000 wrote to memory of 2836	5000	msedge.exe	123

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://go.spinnakersupport.com/e/427072/privacy-policy/82cnnz/1391385511/h/Diyc7siJJfuFEFAxJgDuCepxbsCv_bRYrGONnH2puvM
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2b4,0x7ffdd527c188,0x7ffdd527c194,0x7ffdd527c1a0
  2⤵
  PID:3656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1964,i,1745372435793233688,14469544370356589251,524288 --field-trial-handle=2248,i,8879069626710882723,16383349899846222874,262144 --variations-seed-version --mojo-platform-channel-handle=2276 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1776,i,15857029275695280292,15869433837749380621,262144 --field-trial-handle=2248,i,8879069626710882723,16383349899846222874,262144 --variations-seed-version --mojo-platform-channel-handle=2244 /prefetch:2
  2⤵
  PID:4452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2528,i,7934738747592450875,4386896273723609821,524288 --field-trial-handle=2248,i,8879069626710882723,16383349899846222874,262144 --variations-seed-version --mojo-platform-channel-handle=2520 /prefetch:8
  2⤵
  PID:2628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3440,i,5391261831233406052,17038780511701721412,2097152 --field-trial-handle=2248,i,8879069626710882723,16383349899846222874,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:1
  2⤵
  PID:1180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3444,i,11495833264938995669,16270058438285675635,2097152 --field-trial-handle=2248,i,8879069626710882723,16383349899846222874,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:1
  2⤵
  PID:3452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4244,i,5694306117179028585,8740057319729724524,2097152 --field-trial-handle=2248,i,8879069626710882723,16383349899846222874,262144 --variations-seed-version --mojo-platform-channel-handle=4300 /prefetch:2
  2⤵
  PID:4300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4232,i,7141393794163981986,10376863637657978468,2097152 --field-trial-handle=2248,i,8879069626710882723,16383349899846222874,262144 --variations-seed-version --mojo-platform-channel-handle=4292 /prefetch:1
  2⤵
  PID:2060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5132,i,10579684983857591226,8584734012496688917,524288 --field-trial-handle=2248,i,8879069626710882723,16383349899846222874,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:8
  2⤵
  PID:2260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,1521263987361254105,6265573309290202676,524288 --field-trial-handle=2248,i,8879069626710882723,16383349899846222874,262144 --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:8
  2⤵
  PID:3160
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5800,i,3359049668437096387,1430975553025929991,524288 --field-trial-handle=2248,i,8879069626710882723,16383349899846222874,262144 --variations-seed-version --mojo-platform-channel-handle=5816 /prefetch:8
  2⤵
  PID:4832
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5800,i,3359049668437096387,1430975553025929991,524288 --field-trial-handle=2248,i,8879069626710882723,16383349899846222874,262144 --variations-seed-version --mojo-platform-channel-handle=5816 /prefetch:8
  2⤵
  PID:3456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5800,i,15407517434372422341,15508882531809082540,524288 --field-trial-handle=2248,i,8879069626710882723,16383349899846222874,262144 --variations-seed-version --mojo-platform-channel-handle=4344 /prefetch:8
  2⤵
  PID:4120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5900,i,9915333637335614713,1487803365131855121,524288 --field-trial-handle=2248,i,8879069626710882723,16383349899846222874,262144 --variations-seed-version --mojo-platform-channel-handle=120 /prefetch:8
  2⤵
  PID:2968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5904,i,12293399982919874923,3549501402265210428,524288 --field-trial-handle=2248,i,8879069626710882723,16383349899846222874,262144 --variations-seed-version --mojo-platform-channel-handle=4788 /prefetch:8
  2⤵
  PID:4568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6284,i,4102804402661302029,1204706072110633713,524288 --field-trial-handle=2248,i,8879069626710882723,16383349899846222874,262144 --variations-seed-version --mojo-platform-channel-handle=5696 /prefetch:8
  2⤵
  PID:4680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5956,i,16580681430007642972,422280402002074047,524288 --field-trial-handle=2248,i,8879069626710882723,16383349899846222874,262144 --variations-seed-version --mojo-platform-channel-handle=1056 /prefetch:8
  2⤵
  PID:1988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5700,i,744682066730430684,3799004459368606016,262144 --field-trial-handle=2248,i,8879069626710882723,16383349899846222874,262144 --variations-seed-version --mojo-platform-channel-handle=5484 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2836

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3568

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 33216cc8094343b1e673d6d0ce51864cf882b00961e3411c47b6a0cf1488a291
MD5 67f6e997d9180458e1a8c1eb8facdbb8
SHA1 ba71d9acfdbf5ad19e98c71c4ff3936488e5302e
SHA512 cc39dc134ebb79f6ba88453b88057a692c89209ccaada0ea03ca92512d41d4b9cea1179950cf85647315f4dd3a45c3553a403d01ea2891cbdb3b8df87cb294a1
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7z:fwUQC5VwBIiElEd2K57P7z
TLSH
T16AB3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3eacdfce7dc5d437b4447cf27ab297d2d39d13a22d53487691f060212cddb6b2
MD5 77a76342e47369b91c295856d0d136ad
SHA1 bac334fe99bd25a56aeb5cf09b273fd394730180
SHA512 5594ac61907f341c5e00a7e62a64d33fde684c855aa9b27d0c2756986334fbea5ebaf894d13dfedefe84d1f7ad65aaa17fb6b204714ed08460f06e4ed17ce733
TLSH
T1AAD012223A48F441DB4942709103CF453B26146024579A06E259D86D58B41D453D66C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7aa2bb81937fdcdafd5d33143cfe61093f5233469b36757de171e12cc0c6215f
MD5 6503f091cfa7258a2190ed65490b1bdd
SHA1 d722a7fd3cd82ec30e4846b9511ec1c22b9dacfd
SHA512 5f2a6a53348e4e1b7810b77abe2dd4c597357ba365cf029977f0efbbb203eab9dfb7771c9edb3561b6d22c8b7354c34611905cfbaab36c763b9d3334beb40b4c
TLSH
T1BAD012223A48F441DB4942709102CF453B26146024579A06E259D86D58B51D453D66C2
MD5 SHA1 SHA512 TLSH

Submit Download

3f619475-2d5f-49b3-a281-4359efb09b88.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3f619475-2d5f-49b3-a281-4359efb09b88.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 7a09a234c6393e89e4f74247814326e8b2d1aefecfd9d36cff845f202a4bb66a
MD5 0be31bd187861021e57b07f308750028
SHA1 91cae901c8d2c5fb3cc1e818d8cd9f58fabf9509
SHA512 8bea96fc273df2af818464c4c7ffac2477a8d529f14de92f1de6e89285bd2d447b4bbc4a9ed5533617feabb5e165a89d90be62b621eadf176b4eb6840ea66d9b
TLSH
T18281A1385D21E882E3B103B0E6D13FFD74FD84B50A570DCA0148D5BEAA4FF23692A904
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 1490eac57911c6a094e7256d5e213c7bd066ab44a7b6aab29584313a3fa7a7de
MD5 7366bc3806ac221d4432047c92a6ec48
SHA1 0ce7e61f6ff1f0132fb98a9a5cf16b24bc53d221
SHA512 12a94ed05a3b3667781d68b3f8a3275e1d72cf108cefbadba50bafb9d05425d42ddf9b3c5da623157c2ffe1073a7cc5d8e48f5ee5591166e5089caa915feeb07
TLSH
T1F68191385D21E882E3B117B0E2D13FFD74FD84B90A171DCA014895BEAA4FF236929904
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58d116.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58d116.TMP
Size 3KB
SHA256 9dfbf0d4878d1dd6f7062bd6b0c2f72605bd571cf25fe433bad7598afd00700b
MD5 99cf3fa1ba8009b0cd6247e564886d36
SHA1 e9d5012cffec7c5922aace393a592621f7ef19e6
SHA512 4b56bd39e0a17d9ad8b0bc488c60c98c2f0ab9a86790d30aa58756828b25ad2301f55081e43824b143df50418e955287647048aa145a4da7fc66f277d0947aaa
TLSH
T1D66109380D22C886E3B117B1D0E13FFC79F991B50E635DC9018499BE9A0FF63A139504
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 f5a78df20c606c5cb4237ed8992c86d1b8698cb51325123bfc249abed991ad65
MD5 1e5d7ebbf794f788f2513d50a1fcb72d
SHA1 6e1266da7417e844a07254eabed1a853f980807b
SHA512 fabe75e585aa194d7528364f26ed14b839f7aa0ee12737fddc97c2e7d1fb2257f67c6f74b703170052ce5ad604f77fac577bbe515be6cd90623399f2e744c74f
SSDEEP 96:DuOQvlSVyjeJqyzBMBQJI9r/hOpi0u0E0F0bqwAH5UA:DdQvlUyjeJL14gI9TMpi0u0EuQqdH5h
TLSH
T1FCC176F7C3D8935EC92652F2AA242E17CF6E0914935C384AE5D9EE2B73E1070D25128E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 69faa48149bff0cc49c0a17d56d58d9dddbb491a2817b1c1bc2df20225bd5f91
MD5 6749ce06dadb04bf3c628c9b7d98f3f7
SHA1 ee2e96dea1d73e2d1273a4a4dbc1a5fa3b501b59
SHA512 3864042008c3cc2c311b7637c4e0f3a8d78739bd2779a58426ea6dee751d500212417cfc0f4bd03c5ecd0842f0dda099b21b4f4a8d7a4e04facbe3645fae0d46
SSDEEP 96:DuOQvlSVyjepzBMBQFxI9r/hOpi0ut8E0F0bWUxwQ:DdQvlUyjep148xI9TMpi0ut8EuQW2T
TLSH
T188C178F7C3D8935EC92652F2AA242E17CF6E0914935C384AE5D9EE2B73F1070D25128E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 f6ae82c4ba866f51164ad5dc1493d24cb07fe63d3c7729edae4408052d42aa21
MD5 95f2bdf79b97a3f483f2acba91b1df42
SHA1 d9807dfe686b02d9a26ec9af826960cf93327d17
SHA512 7ea710962e6de5e53bf094e00e2a11f720a3d817827ce13badfce76230c016555253ae21cc93e3737d2e856ab4bf5121ca936c9c8051fd7ab9fb7d786a221f6c
SSDEEP 192:sxZYR5yM/jK1Ml8UQDWK/fFsOCrIdpfD1HW6+WNY+i/YLE4mf0gIg5iOJ:sxZYnqiK/fFsOC0ZHbc/RDF
TLSH
T13952E811AA345A77CCDBD20DB945BF53D6F5097296940D44AAFCCE1C00E6BED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 72b870a072b198fc993fd0de95919ec5df6fcd79dbd1f5e8339e50ee7cfbda34
MD5 c35218365685f500800efecd36eb2ded
SHA1 24dc3c5fc37e1d1b1566b368d53de0261f32e0b3
SHA512 7670532d9c312cb25fe9b10c44b35a3c150fc47f6712a5c240581220c160059bca50e7354fe7a42b88301c92c7fb412ed66a98443c6e861eae4f30cd4bd22faf
SSDEEP 192:sxZYR5yM/jK1Ml8MWK/fFsUCrIdphD1HW6+WNY+i/YLjJlf0gIgrJ:sxZYnuK/fFsUC0PHbc/2D9
TLSH
T18942F811AA346977CCDBD209FA45BF53D6F50972A6940D44A9FCCA1C00E6BED220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 bf33857e2c378431074bffda83b177a98677c9854fc6156bd45ac4d1fe56a8f2
MD5 4f5dbebe71d7c6468835033a6dfe5166
SHA1 695b0f2d077c33903cdaea358824847e85669d41
SHA512 babe165c125f1e8c291d8d82b3511f02ff73bba0dcc3bb02f8b5775b6d673207ad4633951390e1e364d7dc7c1ef5d4f92459e2994b19d949c5d08fb161b93228
SSDEEP 768:Yb9Ks6pD1WvxzWj8F1+UoAYDCx9Tuqh0VfUC9xbog/OVEILlWwJN9TroRoq:Yb9Ks6pD1WvxzWju1jahILIsN9gOq
TLSH
T1C8D2FA3B680CCB7E4F841E5CEC2AAE967DD801CBAB98895447FA444C03C77EA51275DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 35fa2cd54768e4b41c9b26f774f00af042545ce87a6d1f49493e067f5548c157
MD5 da0512db82a45d9eff9ec8071285150b
SHA1 cc4268b694694d409d0d7fd03fe1a02cfef830fe
SHA512 e886406114022a0b5754d76ada80659d96628c489169a504884c93013d97fcfb9e26d466832172d012780306a4b8a8d5ab6acf92ef38bef83f70934aa889485e
SSDEEP 96:KUAAKtePbJSKqoCe589p7nTkjn2PdhkKlBdzkRJpW7Xz:iieBe589p7nTqn2lhFBdz6JpW7D
TLSH
T190A1D31275B703123C7E2918E264872B8782BA537028E92F77AC50755EA7E384DFC5ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

559af9a0-1640-4011-ae38-91548a243283.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\559af9a0-1640-4011-ae38-91548a243283.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 43b8cb6c624cd5d08c22efb04389a83f9d88d7eea39634d386116548bdbe2429
MD5 338a0fdde253641307df75c6471bb2a2
SHA1 429450b435d22c4313d4e7010f92dd1616dd4baa
SHA512 b2949d169e1fbd6ea3b4de8eafcc090f84601e59fb4290991ca4e126419c5b491881501f2f8db70afcea34f19db2f479c8b73667f5d21aa0749f6451b9ca3a2e
SSDEEP 384:az6iFiZcIAIsNQi8TUNTUlIl+g2pz3ExDegWa9wvzJrqGr0sa+VYHfo6:azxFQPDiwg/mzUxDegX8hfr0hg4x
TLSH
T18AC229F208D7887AD9AE9783A77E2D134EBCC167B5896940B3985A0CCC971BFD306815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 2472a731217bd736e3c71a56c5c7e5b9bc183870387b893a7f67ae1a9254ec5a
MD5 9544c5d4cc519aa6073e3c92388ced54
SHA1 53626aff8bab701a1c2460d7a26dec3f08abb83b
SHA512 46ce43fbd5c2f8412844b1796ff28a8508e1b42a1984ab22078b89357123af14d0819f2b066d521a99ef68918d6c33c12b41bfbcdb54c5bbced79b82e07dc04f
SSDEEP 384:7zSZcIhsNQaFg2pz3E6DegWa9wvzJrqbr0sa+VYHfo6:7zghDNmzU6DegX8hwr0hg4x
TLSH
T1F5827E726D289CB799F3E281F98726135FB441A7A6CD2E40D1ED5F1D00EB6AC1347C1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 51425a1ee672a7d3d9c6581ebfc5428b9b24681e00c08cc349fb5a360063b706
MD5 441dd20f7a9e6e4ae65fae435a29dfcb
SHA1 5698275564b0091bfd73fc1c25bdb3d4582be7f8
SHA512 3748014146e87065e34427919138a10b9246d4c3747b5c61ade054e0fb650ae8928faea9f657ec8c3251f95743ef6b150d1471f1ea1c3375c38e59deaa830670
SSDEEP 384:izSZcIhsNQa+g2pz3E6DegWa9wvzJrqbr0sa+VYHfo6:izghD4mzU6DegX8hwr0hg4x
TLSH
T109827E726C289CB699F3E281F98736135FB44167A6CD2E40D1EC9F1D00EB69C1347C1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 ad442009179654a0c399a0c1ded7bb6ab23f26878a5109e2505462ce5cab5545
MD5 0bbebe5d5d483d5729f1af236842e3c2
SHA1 416c2e6bdb48540f70ae1ca6efe2eae776a5b7b8
SHA512 67cbc570438682beb0342d723a9df377195b109b05bacc11b1e901678f34473d27321ea3f51e24baad3d53f641c567a6a144c52049ea6c379c87c99b7567ca70
SSDEEP 192:qONL6O7+3hQmiUyC3CpGttb0j3bvgGry6U6:qONL61DSpGt9wXrJU6
TLSH
T14D02E8356C6C6CBB8EF2AD45F98727235FA5117BE9A62F80D6E81E0C00D765C2343826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 5cf32e63771ac5ebd8635cad1ddab9952ca838d5d459a09d6a6344a93d617427
MD5 170e70dcc63a1a5439541f7aa62e3185
SHA1 cfd18286ab22c5f34f6edb23ca85133f0dd1c1e8
SHA512 a6723ceb4a7652185366d413327ac096f59317952b519d9226148ae79acf21b26d06c4316ee69eb25abde4a601fbcf2de3b3ad424554e2fdb80d6689379ce633
SSDEEP 192:gzzONUH6O7+3FzsQmiUyC2CpgCttb0j3bsuF0SJrqOuXcNrIqWtU6:gzzONUH6Pz8DnpgCt9wvzJrqor0U6
TLSH
T1F1120A36686CAC7B9DE2E580F58736135FB54267EE8A6F40D1EC2E1C01EF66C2346C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e67b8a93-df66-49c3-a74d-ecf95078a07e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\e67b8a93-df66-49c3-a74d-ecf95078a07e.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 2e71ed745096ac226dc33a61b49ffcbb292148c84ee3c562a23631b8e8f4c748
MD5 b3536f19631232b4ae4e0a06225f3c04
SHA1 2f99e8949898d9c21aa22e892dc2066347a55911
SHA512 28826ecf4d234b92652d10e92eb6cc862917ba88b044672067bbfa7535ebf5c517f16171835f222d5cd8b257898242028b516b10e5a5d77045ec2e5a64818032
TLSH
T1514116ACB6E92148B3B76E56ABF6696D847F7C372E46D45D00010D4E0A23B40C9B2B37
MD5 SHA1 SHA512 TLSH

Submit Download