hxxps://acesso[.]fazercomdigital[.]com[.]br/

Analysis

user interaction
yes
max time kernel
145s
max time network
143s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/09/2026, 12:47

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://acesso.fazercomdigital.com.br/
Sample260910-p1nb6atekc

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4268	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134335180876269509"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1788976790-1541110888-1636651838-1000\{7A21CDD1-3E44-443B-96EA-2BFF22A35EC3}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1084	msedge.exe
1084	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe
2608	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 2608 wrote to memory of 812	2608	msedge.exe	85
PID 2608 wrote to memory of 1840	2608	msedge.exe	87
PID 2608 wrote to memory of 4268	2608	msedge.exe	88
PID 2608 wrote to memory of 1840	2608	msedge.exe	87
PID 2608 wrote to memory of 1840	2608	msedge.exe	87
PID 2608 wrote to memory of 2456	2608	msedge.exe	89
PID 2608 wrote to memory of 2456	2608	msedge.exe	89
PID 2608 wrote to memory of 968	2608	msedge.exe	90
PID 2608 wrote to memory of 968	2608	msedge.exe	90
PID 2608 wrote to memory of 968	2608	msedge.exe	90
PID 2608 wrote to memory of 980	2608	msedge.exe	91
PID 2608 wrote to memory of 980	2608	msedge.exe	91
PID 2608 wrote to memory of 980	2608	msedge.exe	91
PID 2608 wrote to memory of 4844	2608	msedge.exe	92
PID 2608 wrote to memory of 4844	2608	msedge.exe	92
PID 2608 wrote to memory of 4844	2608	msedge.exe	92
PID 2608 wrote to memory of 804	2608	msedge.exe	93
PID 2608 wrote to memory of 804	2608	msedge.exe	93
PID 2608 wrote to memory of 804	2608	msedge.exe	93
PID 2608 wrote to memory of 1928	2608	msedge.exe	96
PID 2608 wrote to memory of 528	2608	msedge.exe	97
PID 2608 wrote to memory of 1928	2608	msedge.exe	96
PID 2608 wrote to memory of 528	2608	msedge.exe	97
PID 2608 wrote to memory of 1704	2608	msedge.exe	100
PID 2608 wrote to memory of 3444	2608	msedge.exe	109
PID 2608 wrote to memory of 2160	2608	msedge.exe	110
PID 2608 wrote to memory of 4296	2608	msedge.exe	111
PID 2608 wrote to memory of 3148	2608	msedge.exe	118
PID 2608 wrote to memory of 3148	2608	msedge.exe	118
PID 2608 wrote to memory of 1780	2608	msedge.exe	120
PID 2608 wrote to memory of 1780	2608	msedge.exe	120
PID 2608 wrote to memory of 1084	2608	msedge.exe	122

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://acesso.fazercomdigital.com.br/
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x210,0x2f0,0x7ffb8b18c188,0x7ffb8b18c194,0x7ffb8b18c1a0
  2⤵
  PID:812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1756,i,4245165859392974300,11077868326253891898,262144 --field-trial-handle=2764,i,190370906620349931,3894999215786474238,262144 --variations-seed-version --mojo-platform-channel-handle=2760 /prefetch:2
  2⤵
  PID:1840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1872,i,13477530256406142897,6660653462338730788,524288 --field-trial-handle=2764,i,190370906620349931,3894999215786474238,262144 --variations-seed-version --mojo-platform-channel-handle=2792 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2340,i,13328125294227238181,58938833131625730,524288 --field-trial-handle=2764,i,190370906620349931,3894999215786474238,262144 --variations-seed-version --mojo-platform-channel-handle=2892 /prefetch:8
  2⤵
  PID:2456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3444,i,4670086896089950370,6445003931814756008,2097152 --field-trial-handle=2764,i,190370906620349931,3894999215786474238,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3448,i,1303840809696494247,438707044122718867,2097152 --field-trial-handle=2764,i,190370906620349931,3894999215786474238,262144 --variations-seed-version --mojo-platform-channel-handle=3572 /prefetch:1
  2⤵
  PID:980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4148,i,3555201838510066789,8053965297863820609,2097152 --field-trial-handle=2764,i,190370906620349931,3894999215786474238,262144 --variations-seed-version --mojo-platform-channel-handle=4204 /prefetch:1
  2⤵
  PID:4844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4228,i,2219628559765910897,8459057462357715539,2097152 --field-trial-handle=2764,i,190370906620349931,3894999215786474238,262144 --variations-seed-version --mojo-platform-channel-handle=4264 /prefetch:2
  2⤵
  PID:804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,6314691051789199982,17608787176242640237,524288 --field-trial-handle=2764,i,190370906620349931,3894999215786474238,262144 --variations-seed-version --mojo-platform-channel-handle=5168 /prefetch:8
  2⤵
  PID:1928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,10856070794173340440,8989057936082284773,524288 --field-trial-handle=2764,i,190370906620349931,3894999215786474238,262144 --variations-seed-version --mojo-platform-channel-handle=5360 /prefetch:8
  2⤵
  PID:528
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5940,i,8786103908067685721,16224297359581455972,524288 --field-trial-handle=2764,i,190370906620349931,3894999215786474238,262144 --variations-seed-version --mojo-platform-channel-handle=5952 /prefetch:8
  2⤵
  PID:1088
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5940,i,8786103908067685721,16224297359581455972,524288 --field-trial-handle=2764,i,190370906620349931,3894999215786474238,262144 --variations-seed-version --mojo-platform-channel-handle=5952 /prefetch:8
  2⤵
  PID:1704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6360,i,9095014753855307486,2449836682154018161,524288 --field-trial-handle=2764,i,190370906620349931,3894999215786474238,262144 --variations-seed-version --mojo-platform-channel-handle=6344 /prefetch:8
  2⤵
  PID:3444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6364,i,18391467086202964579,17015002528472785267,524288 --field-trial-handle=2764,i,190370906620349931,3894999215786474238,262144 --variations-seed-version --mojo-platform-channel-handle=6316 /prefetch:8
  2⤵
  PID:2160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6368,i,13300779584415066519,6200142875399603516,524288 --field-trial-handle=2764,i,190370906620349931,3894999215786474238,262144 --variations-seed-version --mojo-platform-channel-handle=6400 /prefetch:8
  2⤵
  PID:4296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6336,i,12639865018979002938,14258020204908582996,524288 --field-trial-handle=2764,i,190370906620349931,3894999215786474238,262144 --variations-seed-version --mojo-platform-channel-handle=6432 /prefetch:8
  2⤵
  PID:3148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6508,i,753660529773070111,10133269263663305975,524288 --field-trial-handle=2764,i,190370906620349931,3894999215786474238,262144 --variations-seed-version --mojo-platform-channel-handle=5864 /prefetch:8
  2⤵
  PID:1780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5204,i,17449216941391909357,7162185273719780217,262144 --field-trial-handle=2764,i,190370906620349931,3894999215786474238,262144 --variations-seed-version --mojo-platform-channel-handle=6172 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1084

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4712

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 92b83a0e542b7bb3ed324c35b5f2a40c47a6351981065b804e4d9d80ddd6d7ee
MD5 9ea20a12d0c030ae7f84014f382662b7
SHA1 7912569189cf07c1ce092a268e67e9f391b7c8c7
SHA512 39ca414f13163c8479fe7650ae0dd1607b267fe3f319c09aec7bd5f68448e9ac604351069bf6b166b3f897d3afb5d7f35e609b9fc72b9debbcb05bad8fad7d81
TLSH
T132D02B20FF04E002D1072172540047100E0848902093C140E030441CDCEC804D395307
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7d64d2777f444a09968d6c155732e22d743fcf7c319c222bc06f6bb97808e489
MD5 89bc5edb6bd922f1cf8ec5536b066fa6
SHA1 c50aaf0fe1444780bb68ee7ab6e1c7468c2f303e
SHA512 77a1265c1484940562f1514202a0072e343efb323e1dcdb979fc9b7a2c69d85b814c076828b260c0b86a19e482ebb0a2df850f9b7c130a327861a7c56e26cde8
TLSH
T15CD02B20BF04E402D1072172540047100E0848902093C241E030441CCCED844D395307
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 5KB
SHA256 f9bc8c2fe781841e5f7d45e6321f3ad14a979bc48b4404b207c32550dcf1d764
MD5 6b05eea20d388eb84f9badc912a4f4c9
SHA1 be80ee80c0cf4bc5a62fb8d633d4e35b61bb0f9d
SHA512 65f2687fd5efadefb5baa080229c4d528c3147e882b88f49ca39867c10123fff118fb3a898c50a4a61ced3ea55765955c21d40dce09d2e2404ab105244f60d2e
SSDEEP 96:lUslFGYYpwPuDD1TBzAimlDD6T8mzoBY9rVLsAF:JGYYegZTBsDx6HzoBYFVV
TLSH
T198C18AB966DA4016FF112B719E951FEA393244D6F8963F8310B1E8245123FFA03B5F48
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe58fb05.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58fb05.TMP
Size 3KB
SHA256 ec1ad1be519126fcd90ba718c0dfe8a3f987905c4b6645b24d30cbe30864077e
MD5 8065cd497a4ecf1f125c02dd4adb883e
SHA1 d005e84c5d8cedef9c6324d9f7ed390ff58c6551
SHA512 c5a1a20de29716b0f6a0a33a44003b40fff4f0f9d5a2f9acfe31e730f83925817d8717b028aed8186d2fa705817c3c7ede9d56d65617473ca9abd184f7c9fc9f
TLSH
T19371553533108058E3220872DFD916EB763685E7FCAB3E8111F2BC749521F724666B4C
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 90f4c5e1080277aaf31bdde48c3518efb5254badb34769e9a8e1b96122220710
MD5 32daaaab613051e1812e5585589a241c
SHA1 7c3e2f54ca6a4cd2487daeea91ae4d0c19854c0e
SHA512 c604be0871dfd05376a126465678b6f0f2880bf4e02e339d262e79d7330f73d798696abf364774ebbae96a4a48d0ff2692b93ed5b0203b8822de9a4ee17d7a01
SSDEEP 96:DyORbxcuZ5TSa+PzT05u8tnJzVIEeGq7eUR9w0C0V43n:DxRbxdZ5TSaUH0Y8tnJzVIEeGqKC9BCZ
TLSH
T1DEC1C2F3C6E5C61E89115EF0EB25BA9BCE2D061443583D26C9E47EA797F2470D210B8E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 2ad383ca42bc3af2356a849772bc219ecd98e5ad45c3c25bb8f63ba504884dc8
MD5 0f61de258e09b31fb8b8de6b93596187
SHA1 d29f858156bbb62ace4dae06a697ce36fcc738d9
SHA512 32f4810509c3e304a9f0511a6027df35cd78d9e1a1ca20755f5773611ce7b9c683239b590fdb191fca5a96ebf8932cdb568fb58ce4ca25437f70515b7c86ae9c
SSDEEP 192:sxZWRrW1/ftsKDW+VXIdpgUvHW6+WNwDw3/YvR8j6hIgrJ:sxZWg1/ftsoW1gGHbww/li9
TLSH
T16D22B952AE68693B8CC7D21DBA15BF53E6F9503256D51E48EAFC861C04E7ACD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 ad4eb9d7c9e15e91f3e220f48fca0964db73f2d578e830b812800ae21bff44c1
MD5 e88efe6532b49b2f8e4ba8a2ef0ec4ad
SHA1 cb53a01366a958ddfa4da251f3364962121afa00
SHA512 a738dd91755fb05d0ed46c344cc10cb1d5ccf825f9db06b5438419b6ea35e4e191bff745a0e8a118fea9738a52c0de5974e49c036c6913292974d60833d853d4
SSDEEP 192:sxZWRrW1/ftsaDW+VXIdpgUvHW6+WNwDjTXYvi8j6hIg5pE8J:sxZWg1/ftsYW1gGHbwDXaiYg
TLSH
T1C922B752AE38693B8CC7D209BA15BF53E6F9503256D51E48EAFD861C05E7ACD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 b55f4dca7ad4b7b135b1aa4e1aceca4e943711a86aa08f838cab7060b4da95e0
MD5 13c7a99f41a9588cf376c254ad15bed5
SHA1 0c1bab3b962e8438accaf9200c674c04ddbda3ce
SHA512 7b78a61e6d3b5ddc90b4ba98bd57d32fb9c4f13886eb4a40cfeb288006f665eb77a2016cee215e1fbd2ea5a5491f047f31698686bac7b15d309cb160e3646328
SSDEEP 192:sxZWRrW1/ftsvDW+VXIdpuUvHW6+WNwDUFdYv+7j6hIg57E8J:sxZWg1/ftsbW1uGHbwEdbi6g
TLSH
T19332D852AD38A93B8CD7E21DBA15BF53E6F9503256D11E48EAFCC61C05E7ACD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 f2e6933169674ed00c3f4a8f7bb2b666870609388ec2262014abab88238508ee
MD5 9c6aad3214b987dc624d9bb158b738b8
SHA1 12f58a6f9c80b7f8d2522a97a1a242dee5152830
SHA512 74bd6143923ddd9d57190b0045f4fbfe073c4dde9dc1911bb79c727b50d22531cc82dee7ebd4794d552f4e7036176d680f0646bc2735a0f4276a44085c8ada5f
SSDEEP 192:sxZWRrW1/ftsvDW+VXIdpgUvHW6+WNwDUFdYvHsj6hIg57E8J:sxZWg1/ftsbW1gGHbwEdBi6g
TLSH
T13122D852AD38A93B8CC7E20DBA15BF53E6F9503256D51E44EAFCC61C05E7ACD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 1d233f1cb7777437dda95ae129dd6012b1c39ae6234d8fcf4bf16f8135a8248c
MD5 fb714fedb9d25f04c11670d536c3050a
SHA1 ebeccf2be0ab2c0ff306f7fe53f04093a5ab08f4
SHA512 507fe01e70111f93d50dbe3218ea63eb56f13d9d7b32068502a1b7c88bbff8727e1b04d22eb5cc432fd63116102e364dedbea1fc7cfe351d5f1703df75eab7b3
SSDEEP 768:vqee3rxWvhffn8F1+UoAYDCx9Tuqh0VfUC9xbog/OV4cLly0pb8roZ:vqee3rxWvhffnu1jatcL88bnZ
TLSH
T169C2FA2B640CCB7E5FC00A9DDC5A6F977FA802C767548D4087FA994C02C77EA51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe592e1b.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe592e1b.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 6e83a8ef7b0b85542ff04645139bee44765e3746ceb1650b2094863e7a03e661
MD5 49060cdc35b9455891a8dad217b9ade1
SHA1 540c2531d1081df4602e55170431bf980a65c559
SHA512 3bebddbe820e5fea79ed067f4224fafff1eed377149d9de7781cffc92b186093e5f73fa1c8ee336a7bf3ba00af6097738bc5217cc4231d42a209db1b3efdcd09
SSDEEP 192:ub5sNSJQjm3UM7ULhKgQmiU1tir4MTbt+FdLjv3mh88z1eqbIUMZ:osNSJHd7OzG0Dd/wnIUMZ
TLSH
T160422931EC78AC2B9EA3B181F44B36035EB4817B9BC42F94E6DD6B1C01DA2AC1317916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 23KB
SHA256 98e27594578d7bbcbeb80336f2308f8833ee50b4380fcf90d13a9393cbe0c6a3
MD5 58f78c6d972ab28ebc039ce0fb716477
SHA1 35bff3b6c55ca755fa60f21b634f71a0906eab64
SHA512 26273245482b22259a2b21f66a9c2ebf184358f125dc4f86051f4f7cacbc49efd783ca14ceaee86ac9aa2a0744a276ada820e4f6624fbcb7520a7af501f89e32
SSDEEP 384:siFiZcIWsNq8TUNTUlIlJHd7Ozg0Dd/gnIh/:XFQWTwgpbAlgnIh/
TLSH
T19EB208F288D7983AD9AEA743E77D2D034EBCC067BA845650B3D95A0DCC961BFC306811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 2d6e68aff4bbb601bd43c71a7e503cc78918b5f74ed60add0235d8b07ab41052
MD5 9f171e3c506d60a4e0f3e018c1ec185b
SHA1 d60865d5415a8ecc3fc470f1b1cde9bcda6ad699
SHA512 40e231d90732e490886e15a34a414c59f073522fbff5dd210321cfbbdb4d219c088bdef9da35b73e84b02080b2207b46430923f1a3df0adc836cbc60d7e32745
SSDEEP 192:lONe6vMtPQmiUyQRThTbt+FdLjv3mR847oajU/u:lONe6UtR9TMd/+PU/u
TLSH
T19302F935AC786C77AAB3AD45F48A27171FA4517FA9D02B54EAE82F1C00D764C1303826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 dfa0c363f837a733996a457656640d1e461737f4d270c3c1793dfabe97e1cca8
MD5 1ef62f1847e58bf827a807994bcec479
SHA1 ee7335a0c7c915bc49303f0065bc81c232c0538f
SHA512 b848e96713e33734c34fee99d06b896fa790a1ab76adc9992c9f66d04879d20a0ef6030cb0d12e7f495d27cbecff2464ea5c8e4a1aca95f32092c24e5c0c8c22
SSDEEP 192:uJm+xasuheOwQxMQsNSJQjm3UM7ULhKgQmiU1tir4MTbt+FdLjv3mh88z1eqbIh/:5ZcIfsNSJHd7OzG0Dd/wnIh/
TLSH
T123725B71AC78AC7BA9F3F145F48636035EF8D02BDBC85B50E5ED6B1D00DA6A81317816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 9KB
SHA256 67352489dd15380cd807e0b68152640f41026c6d129c0d0fe8baefe43551615c
MD5 db92efd9bf427ace291a745b02d8927f
SHA1 d443375e9101c847af2c945daa2024a618def65c
SHA512 4992c616e2412f1582e43f29d750063039efca4f449d74057376247f02aaebb1d38960830815378a92644aeda0f7f3f0699372af56b70d27988d07d70aaaf7bd
SSDEEP 192:jON76vMFPQmiUyoRUhTbt+FdLjv3mhw80IeqbIU/u:jON76UFR1UMd/InIU/u
TLSH
T120121A31EC65AC6BAEA3B481F08B36135EA4813BDEC46F50EADD2F1C01DB66C1307816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 f190958f8438d102ee0d76cd9fb91056e763471f1110ad8b2cbb54fe6059e51a
MD5 0784042b8676148d6f74514a44550104
SHA1 3ee4ad3f2a35ee0af7bef768074e5b2dae7e6963
SHA512 ca1445f5e3a2cb1b8a93d0b59a18ed2528ebccae37d5494193cb81db0287463d130d48b2cca33f90b3fdc61c2134bafca98b36dbcff41e67d6c2d3b135db8f7f
TLSH
T170E0020213000071C04D023001935F024B65D02115D2035A5730075A1C357003D21900
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe58d481.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe58d481.TMP
Size 392B
SHA256 92018de273e9059f4ec27237a0b4360a78a3201103c4295a0f852416db7654fc
MD5 e2224d59aac96eb7d59064152dd6b416
SHA1 358ae4f8ab14003463fd915c1bcd857058779817
SHA512 cb9f92f7c2e6b0bc6f90c64a82e12a8dd06d42f043e46c0f7d8176f179f2ac2ef778c0019487ab9fcdb57bd82df5a02459f12f85c1ccb30f347c22222c97f997
MD5 SHA1 SHA512

Submit Download

VariationsRuntimeSeedV1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\VariationsRuntimeSeedV1
Size 522B
SHA256 532e27b1c35cecf3833a063deb0a05850d18f45002890d4dd9c69509841b7738
MD5 b809bb2b4dca57c6dcf6e141ab343c71
SHA1 3d858fed3e81f1ca3d3c105aaa579c0359654edf
SHA512 089d37cbd8d0d641052a8ffbbf4ee41489551f876cafb2dec05897f131d309580b9872e3493f6cec359efde76d766ef4a7f8ee86fa084740fbcbd049e7f749e6
TLSH
T177F0051380DA34D2EA6B00A0F1446DD4120FA1FA2919B7746975855681986716144736
MD5 SHA1 SHA512 TLSH

Submit Download

VariationsSeedV1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\VariationsSeedV1
Size 1KB
SHA256 48d48a90488504ea32237de72b727f2a90ad0e2f8a6829d17cee19983b274dae
MD5 52075698d5add38064fca81a5f60a1ef
SHA1 ce9e2aecfaa111f022beac138311fa8184ded336
SHA512 9661d844cf2d910dd6906fadfb8912ddc2dfd318ecd5b9cb188a4f8a905160a3428aed50b4193c43075c5bf47f6a3955f93f00bd34bae5f1c68d857dcdae1e64
TLSH
T158312B6764D0238D67CF3079FAB857413CC65DF3EAD6B8BAC8C0C3812E54519C004E50
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 b3faa174a9cacd64c1f5302bff644e6d6567862cadf959139cb96860060278d4
MD5 a45bf7e1a3d38cc700b29f6efec86dd8
SHA1 a6f32fe82611a28ebe749577138bb302a5ff1565
SHA512 45e062b12fb88058e3a4d282de8e974b5eb5710bdbb29b95c80f474b176f6ea749a2b459b39e29a4da82fb89d0989f3bd11f5696519142a01c71794118374d04
TLSH
T1D2415D5CBAFA1118B3776E4A9BF6A86D447EB9773E4BD05E00110D4F0A22B00CC61737
MD5 SHA1 SHA512 TLSH

Submit Download