hxxps://www[.]ismworld[.]org/prize-official-rules/

Analysis

user interaction
yes
max time kernel
148s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
16/09/2026, 14:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://www.ismworld.org/prize-official-rules/
Sample260916-rm1fnszvb1

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2200	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134340419690517123"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-895009113-1202185046-1686627690-1000\{258A7D45-0959-4588-8EC4-89022E7A65C7}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1952	msedge.exe
1952	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe

Suspicious use of WriteProcessMemory 36 IoCs

description	pid	Process	procid_target
PID 3112 wrote to memory of 1044	3112	msedge.exe	83
PID 3112 wrote to memory of 2200	3112	msedge.exe	84
PID 3112 wrote to memory of 5016	3112	msedge.exe	85
PID 3112 wrote to memory of 5016	3112	msedge.exe	85
PID 3112 wrote to memory of 5016	3112	msedge.exe	85
PID 3112 wrote to memory of 2908	3112	msedge.exe	86
PID 3112 wrote to memory of 2908	3112	msedge.exe	86
PID 3112 wrote to memory of 5084	3112	msedge.exe	87
PID 3112 wrote to memory of 3492	3112	msedge.exe	88
PID 3112 wrote to memory of 5084	3112	msedge.exe	87
PID 3112 wrote to memory of 5084	3112	msedge.exe	87
PID 3112 wrote to memory of 3492	3112	msedge.exe	88
PID 3112 wrote to memory of 3492	3112	msedge.exe	88
PID 3112 wrote to memory of 4748	3112	msedge.exe	90
PID 3112 wrote to memory of 916	3112	msedge.exe	91
PID 3112 wrote to memory of 4748	3112	msedge.exe	90
PID 3112 wrote to memory of 4748	3112	msedge.exe	90
PID 3112 wrote to memory of 916	3112	msedge.exe	91
PID 3112 wrote to memory of 916	3112	msedge.exe	91
PID 3112 wrote to memory of 4092	3112	msedge.exe	95
PID 3112 wrote to memory of 4092	3112	msedge.exe	95
PID 3112 wrote to memory of 900	3112	msedge.exe	96
PID 3112 wrote to memory of 900	3112	msedge.exe	96
PID 3112 wrote to memory of 3660	3112	msedge.exe	99
PID 3112 wrote to memory of 2940	3112	msedge.exe	101
PID 3112 wrote to memory of 2940	3112	msedge.exe	101
PID 3112 wrote to memory of 2940	3112	msedge.exe	101
PID 3112 wrote to memory of 2208	3112	msedge.exe	105
PID 3112 wrote to memory of 2208	3112	msedge.exe	105
PID 3112 wrote to memory of 2208	3112	msedge.exe	105
PID 3112 wrote to memory of 2792	3112	msedge.exe	111
PID 3112 wrote to memory of 4656	3112	msedge.exe	112
PID 3112 wrote to memory of 4792	3112	msedge.exe	113
PID 3112 wrote to memory of 3816	3112	msedge.exe	115
PID 3112 wrote to memory of 3816	3112	msedge.exe	115
PID 3112 wrote to memory of 1952	3112	msedge.exe	116

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.ismworld.org/prize-official-rules/
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x218,0x254,0x7ff83016c188,0x7ff83016c194,0x7ff83016c1a0
  2⤵
  PID:1044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1956,i,5234900968182568083,8843993089592867775,524288 --field-trial-handle=2284,i,7688658705539429670,16248148398666457289,262144 --variations-seed-version --mojo-platform-channel-handle=2392 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1824,i,7956980828225410732,12878819724381022838,262144 --field-trial-handle=2284,i,7688658705539429670,16248148398666457289,262144 --variations-seed-version --mojo-platform-channel-handle=2280 /prefetch:2
  2⤵
  PID:5016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2612,i,1188590819120231253,5537643746269487466,524288 --field-trial-handle=2284,i,7688658705539429670,16248148398666457289,262144 --variations-seed-version --mojo-platform-channel-handle=2764 /prefetch:8
  2⤵
  PID:2908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3484,i,9932073869420308454,15723275176827190111,2097152 --field-trial-handle=2284,i,7688658705539429670,16248148398666457289,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:5084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3504,i,11256678337891063634,17723175226404857557,2097152 --field-trial-handle=2284,i,7688658705539429670,16248148398666457289,262144 --variations-seed-version --mojo-platform-channel-handle=3556 /prefetch:1
  2⤵
  PID:3492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4236,i,12268220403761909615,17815226283142837732,2097152 --field-trial-handle=2284,i,7688658705539429670,16248148398666457289,262144 --variations-seed-version --mojo-platform-channel-handle=4272 /prefetch:1
  2⤵
  PID:4748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4248,i,6374869298053346599,5337851466176680594,2097152 --field-trial-handle=2284,i,7688658705539429670,16248148398666457289,262144 --variations-seed-version --mojo-platform-channel-handle=4300 /prefetch:2
  2⤵
  PID:916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5148,i,10208551199231259704,2153290658826461337,524288 --field-trial-handle=2284,i,7688658705539429670,16248148398666457289,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:8
  2⤵
  PID:4092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5152,i,14334086520532548364,13048709920093028280,524288 --field-trial-handle=2284,i,7688658705539429670,16248148398666457289,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  PID:900
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5864,i,7513606097965707232,572737498592728102,524288 --field-trial-handle=2284,i,7688658705539429670,16248148398666457289,262144 --variations-seed-version --mojo-platform-channel-handle=5876 /prefetch:8
  2⤵
  PID:2552
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5864,i,7513606097965707232,572737498592728102,524288 --field-trial-handle=2284,i,7688658705539429670,16248148398666457289,262144 --variations-seed-version --mojo-platform-channel-handle=5876 /prefetch:8
  2⤵
  PID:3660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=6228,i,770271390157934036,2379932632037432533,2097152 --field-trial-handle=2284,i,7688658705539429670,16248148398666457289,262144 --variations-seed-version --mojo-platform-channel-handle=6212 /prefetch:1
  2⤵
  PID:2940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=6956,i,14578885386129493032,10762564230952109826,2097152 --field-trial-handle=2284,i,7688658705539429670,16248148398666457289,262144 --variations-seed-version --mojo-platform-channel-handle=6704 /prefetch:1
  2⤵
  PID:2208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6584,i,15288553431628749972,14897009401306160480,524288 --field-trial-handle=2284,i,7688658705539429670,16248148398666457289,262144 --variations-seed-version --mojo-platform-channel-handle=3632 /prefetch:8
  2⤵
  PID:2792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6540,i,6153072411425276005,16607699077258935331,524288 --field-trial-handle=2284,i,7688658705539429670,16248148398666457289,262144 --variations-seed-version --mojo-platform-channel-handle=6552 /prefetch:8
  2⤵
  PID:4656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6580,i,10485870360774431400,13252547806248166179,524288 --field-trial-handle=2284,i,7688658705539429670,16248148398666457289,262144 --variations-seed-version --mojo-platform-channel-handle=6576 /prefetch:8
  2⤵
  PID:4792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6864,i,4195062816136699977,14850073945190259825,524288 --field-trial-handle=2284,i,7688658705539429670,16248148398666457289,262144 --variations-seed-version --mojo-platform-channel-handle=6860 /prefetch:8
  2⤵
  PID:3816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6132,i,13809270835976552909,10698794847047658590,262144 --field-trial-handle=2284,i,7688658705539429670,16248148398666457289,262144 --variations-seed-version --mojo-platform-channel-handle=5556 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1952

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4284

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4088

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 928eda824fe964cd23927cf06086d7d24e20a3a5092daf1acee5b632c76c962a
MD5 4ac43ee6512ba8635b7ba6bd015c291b
SHA1 5f9e2474b00ec0e2a9472c049fbea550e26309aa
SHA512 e5ebf9e92458f66e31e080121135313e828b8ebade0bc0e085221ae0d4f5afe0d2035c566590cbfb5902d96f17befe7b24310b4fb9e647b999113175af800ebc
TLSH
T17BD022B2B3A038CFE300083302A083BA2C0A80F300FAE2208C30E08C0BCC02AC283880
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 93c2ca3ce74eca17f27aa90cc3323bb8d6aea5c365862a01a512ce14b9f825b4
MD5 e8a3239e6b22580d77fb537c7bea1fab
SHA1 a99ffe9234c27e560f1c607d3b6c6507928368a3
SHA512 17b0e6f99943a02540148a685b91c62eafca3ef65d9a628bfb59d3b69a93b27c7d3ac42bdc808c52b5b1eac9bf4466a1099df17cd3f5df0bbd5b5282ca8b904e
TLSH
T170D0247133D03CCFD7000433015043751C0540F300F5D3104C30D04C07CD055C143440
MD5 SHA1 SHA512 TLSH

Submit Download

f_000064

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000064
Size 346KB
SHA256 06fb30c34e3d7cb64ec821dd7d1eee69613b4a84c3841c081dee7143c151555e
MD5 e4bc0d7ecc0b43b6b8bd71ed0d8e894a
SHA1 27776f4cfd2ff01e98221769cb4aa554a2670e6a
SHA512 4c0956fb89b264ceb8dcc20a8cf905a4ae784195e78c306d2c0577d2e4c0548b6058ecda0516a089dc97570864728ab60503bffd804af5d0934e5f9c8b1fa475
SSDEEP 6144:ZPNyy2q1x/xjj1YO1RKSXVSFAsamiA6r/dsaRDDQ9fSoA9pT1c/i:qy2qhGORKNARmiRRDkJIpv
TLSH
T1EB7423DE4C0A0C9960EAE1034BDF477B3A4A44E7E0C5EC52987C1DD26D9F2627CED688
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 59b2a92a3cf8a10aa53dbf5551e07120a322d829eca03a6bdcf0f1df16758633
MD5 3dffb720bb7fd8d1fe4a85bca3e269c6
SHA1 8c7c67cbb1192a43d1b3b800d0c6da0cf0d108b5
SHA512 1532c094af8b26d1730251c03a85cd2bbfa596306cdeb071165769f88c9f28a1081f7a512bd63fe98baee7016b56f6ffc42790cf31cf20ff14ea9fbdf0534442
TLSH
T1F581A9895E931294FFA5A8B9CFD82BE7323A498998436E31D159E778DD8A39040E1448
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59debe.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59debe.TMP
Size 2KB
SHA256 027c02743d4ff7646b9bfd5df553b1fb41ce459f7174fe7c76d67d3383f73cee
MD5 57f5d60e81340dacc12d0d8a3f3a5e71
SHA1 75e580eeb0c2a714cdb91129c79cb96937adcc9c
SHA512 7f1a25337355fe4103d10a6410576a0f57886085f2401b560babaa4c86bb803aae9aacccec2301f296ce3b1a9b41718a6c5883d5d654d3306946554ed41243dd
TLSH
T1225183829FE303A5FFDA88F68FE429EB373E85C091836E72C598C6B8C9467548095048
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 13KB
SHA256 3c884e9390242c3b5274d18c62c860c63c04fc4959e0fb217ba61ffc5f1d2ca6
MD5 59cce4294c9eca0ecce2e89b49587a2c
SHA1 43e7aa38cb416d862601186e73bcb8a92228ae98
SHA512 e114e1130117926a96bac9dff603ae4c3bf6adac75bd8d30c31154e306535aed9581658ba2670212196211d8fa11f1b09da47d884003a53e3a9656ccef3f9446
SSDEEP 384:DPDWDNDeDEDKDfaD6DwQDIDDeDYDkDIQDcDfDuDnQD9eDIDED3DfYDgGDXhDtIDK:ooOZCwL
TLSH
T1A0526AF7C3E4CA6D8D2221F196157E5FCF2E0E2886183D6589D7BE06E7E7060E24158E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 19c651d23ed86e215c979f0b7c8187276619dc92a6db684dc2ec695b6e80e7a6
MD5 b3d360523852fd99c94fb059f2b21e0c
SHA1 c41d738fed34406cca2fb471a7ed61a73edd72a4
SHA512 81e0e0ad79753ef62ad142f41bf1f574fda6e9fa28db75d45a119931bb8565cf205129c8ecef91bd14782d55534334b1baa3c0b647cbf89b39c11908a81be003
SSDEEP 192:sxZggRQWx/fasNiIdpq5HW6+WNkB3Ub/Y360AwIgrJ:sxZggBx/fasNLuHbic/X09
TLSH
T1F722B8167E38A97B8CC7D21EFA19BF53E2F9103191D11E54AAFC861C05E66DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 18a558dd9b811b1afde574b45c0f926cd6e8d5f318c7fcfafc924d1d7bdb4f73
MD5 696d119d0d8276b7ead207d2d17ed9bc
SHA1 62569cd960d1857e31fb671d72c5955392f9244e
SHA512 e00ceb1a0a68d453f828f8da2b9e31981a925650b7095a8a6581d3bcf1f5ac57915117b9b47e642f9276cdc9cf1af233b5e753dc46f33508cd7c66b621514156
SSDEEP 192:sxZggRQWx/faseiIdpq5HW6+WNkB3Ub/Y360AwIg5aJ:sxZggBx/faseLuHbic/X00
TLSH
T1C422C8167E38697B8CCBD21AFA19BF53E2F9503191D11E44AAFC861C09E66DD620780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 2d3168dabd14f4b8502bcebbce9a30045283aebc11cd8b28df246ffda0355998
MD5 ba04264f9467bf04d34c4b2144fe36fc
SHA1 26ea87c401c7475d9499133926a067934d323da4
SHA512 eea2daa08c8c25c684e9067c6cb86961c95de854c2f1515cb596c81501fb9da8d5760924944e8d01a0d2824239b198e91f672ef7f78e6a1173b1ad0f7cf5803d
SSDEEP 192:sxZggRQWx/fasUiIdpq5HW6+WNkB3Ub73E/Y36WAwIg5wJ:sxZggBx/fasULuHbicQ/XSe
TLSH
T1AA32B8567E38697B8CC7D20AFA19BF13E3F9503291D11E54AAFC8A1C05E66DD620780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 7f32954dd3f05f6c1fb9c7db6d7f03e27373af6491dc3e4bd34f2c5936cae6c6
MD5 b0a96de9829181cd577ce4743e403781
SHA1 083442042ab055d4da7bb2e8b96d949ad3054011
SHA512 b9d57c86e277361cba72f0b2726ab2555630d4c8136bc9d1d02b6431101f521381956ccb8fb2bd886228178d30bab5f0048813e69fe09c01496304af6e9d7106
SSDEEP 192:sxZggRQWx/fasUiIdpc5HW6+WNkB3Ub7KB/Y36dAwIg5wJ:sxZggBx/fasULgHbicA/XDe
TLSH
T1C332C7567E38697B8CC7D20AFA19BF53E2F9103291D11E44AAFC8A1C05E67DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 31600368520557993a3b164df690eca6abbd3be9a7caef93c514598d3d6593da
MD5 2468d0abe2f3a360b3b825e138f3fcc1
SHA1 f25ee83e5f72c11cad6597c5715b0d5d2b17b8f5
SHA512 63df2de77885169bc0c1d921e77482b203653468f8393d136309d708d397ffa94f0c943937b48415973f3a7003ae8726823ad2cfea2afd3633169e55c176ea2c
SSDEEP 768:LXKlm7QWvUYm08F1+UoAYDCx9Tuqh0VfUC9xbog/OVh/LlpPs/crobq:LXKlm7QWvUYm0u1ja8/L/E/Hbq
TLSH
T195C2E92B740CCB7E4FC05A9DDC5A6F972EA802C7A6588D404BFA994C02C77EA51274DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1e5212f5-d385-43d6-9284-2ac478d7421b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\1e5212f5-d385-43d6-9284-2ac478d7421b.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 a4b4b4213e628027ba5a100e7aa4da4dbf4694f521dd4087abd0edd7f0ad987c
MD5 24fc37339183afe7f5cd7a36293c9f6b
SHA1 e4d0005a6945fc893d3148bc92e30ba4911a2e44
SHA512 968a8a8e5c2739ce63b1f58aa95bc3bf5025fc78cced42e2e904a85fa880c7bccb5244b3f0ba866f30da90f62fc22efd6511148aefa28214d79e72d51744e521
SSDEEP 384:KZcIBsNjOha7+IbExGuh//at67zB7O6R2FeoEro3:oBc+rt/3B7TRNg
TLSH
T152828D717C34AC7B19F79096F4473A139FB480A397C95F80D9EDAB2E06EA5981307C22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 85e0ddf6cf5977c3d20d871f328f647b5065e64aeead85b96f8eff7303318e64
MD5 2ec0c02316a1102fd162b8b3422fd9ca
SHA1 66194cbb1c2ca3a2fa9531aa047506774e63cd79
SHA512 6f55c503f0bfc6796cd2f6f8dcd4c73869388245635053d207d33126caaed4ee659ccba0e498170a1630d3fd45c2e3adb223ceb2103974604bc3c9f2fcb084f7
SSDEEP 192:BONO6JUm0QmiUyODso//OywtvCxBC72U6:BONO6+mElso//at6W6U6
TLSH
T12A02D739BC28BC7B8EE2AE45B4477B239FA4107B9A911F84DAD92F1D01D715C1303C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 fb95978a3b4b40982c70b2be908df23cea832102120b024b6e1a1381cc5eebcd
MD5 56dec536a40832b0c4fe4b30eb23bce1
SHA1 3103d36f105e0c4d06b3196ea685afebb424b34c
SHA512 e8445dc9ba46aac3986182d9356c2de4c02342c15dcda614b896cf0a00d95bfe8e3a115be7e3fc6ee34ef797f75b44048ff3c3208b816653b7a362bab1408f90
SSDEEP 384:6ZcIBsNjlha7+IbExGuh//at67zB7O6R2FeoEro3:4Bv+/t/3B7TRNg
TLSH
T1D1828D717C34AC7B19E7D096F4473A139FB480A397C95F80D9EDAB2E06EA5985307C22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 9f9b847a4ae0234c541601294847695fe1f3654f558ec5c4f0b4263d7a38e132
MD5 8e10ca9d9e4de91f72adba9c146651a4
SHA1 bc5eb3481723f4da01990328b17eb479bfe949bf
SHA512 6a86e64f4d90420b7543807e45c369bb6038cfb80900cbfc4aca134e58dc20d060d65b5a069aae44e9d8c8c0f5f977bfdda7a139ae13a80359849bf4bdbaeda9
SSDEEP 384:fiFiZcITPsN98TUNTUlIllha7+IbEHGuh//at67AB7O6R2FeoEro3:qFQTgwg8+Ft/cB7TRNg
TLSH
T10FC229F258D7987AD9AE8743A77E3E028EBCC0A3B5855A40B7D8561DCD960BFC306C11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 22c87c4babb102cf37ec831856177bd9a962dceb1724c2e39cd6ed91ad1f9b60
MD5 b884852651e2045ebeb6c5b39bd910df
SHA1 e033547ac101a5b1fecb3b023498b86d8822c14d
SHA512 f2ec6895b46f67c19028646619ce9c4189209dfc46e59adddaf00f6dcdb2ba719e589af072b081f8fe3477dc747a968dbfb68dacee661e39b4153b42dad84cf3
SSDEEP 192:BON26JUNQmiUyWDZo//OywtvC7OezfySNxH/JU6:BON26+L1Zo//at67lBU6
TLSH
T1E2120A35B864BC7B5DE3A595F08736139E644167DB896F80DADD2B2C02EF09C530BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9e1f2383-3174-46c7-8759-edc0e2bd459a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\9e1f2383-3174-46c7-8759-edc0e2bd459a.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 571f6389ae8cf63d218e8f76da829e04b02188efcf559449916801ab2661f9e6
MD5 02fc02f3a1f381649a994efacfb84bc9
SHA1 fc30434af5af28ed4875f8c65ad6da4cd610aa83
SHA512 6ee0e4a6f45f8ff35aa6530ca00046a13643e7a94635e8297027be0059dd7c465bc67192ef93bea2ae062b6a5f37a7e82d9d064a28cfa59fed3f9bd8c66cc509
TLSH
T1E341F65CB6ED1148B3B7BE1AABF7A96D487E79372E06849E10010E4E0A22B41CD71773
MD5 SHA1 SHA512 TLSH

Submit Download