hxxps://s3[.]amazonaws[.]com/ucwebapp[.]wisestamp[.]com/618a30c2-8aef-4ce9-a9a7-088a844c7932/mremonlylogo[.]format_png[.]resize_200x[.]png

Analysis

user interaction
yes
max time kernel
149s
max time network
144s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
29/09/2026, 18:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://s3.amazonaws.com/ucwebapp.wisestamp.com/618a30c2-8aef-4ce9-a9a7-088a844c7932/mremonlylogo.format_png.resize_200x.png
Sample260929-w5lsfssfnc

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
628	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1696934516-3600988056-1840298893-1000\{324D3AF8-314B-4EF7-A23D-35ADF2272A22}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4696	msedge.exe
4696	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 1644 wrote to memory of 5036	1644	msedge.exe	86
PID 1644 wrote to memory of 628	1644	msedge.exe	87
PID 1644 wrote to memory of 1084	1644	msedge.exe	88
PID 1644 wrote to memory of 1084	1644	msedge.exe	88
PID 1644 wrote to memory of 1084	1644	msedge.exe	88
PID 1644 wrote to memory of 3436	1644	msedge.exe	89
PID 1644 wrote to memory of 3436	1644	msedge.exe	89
PID 1644 wrote to memory of 2704	1644	msedge.exe	90
PID 1644 wrote to memory of 2704	1644	msedge.exe	90
PID 1644 wrote to memory of 2704	1644	msedge.exe	90
PID 1644 wrote to memory of 2068	1644	msedge.exe	91
PID 1644 wrote to memory of 2068	1644	msedge.exe	91
PID 1644 wrote to memory of 2068	1644	msedge.exe	91
PID 1644 wrote to memory of 748	1644	msedge.exe	93
PID 1644 wrote to memory of 748	1644	msedge.exe	93
PID 1644 wrote to memory of 748	1644	msedge.exe	93
PID 1644 wrote to memory of 5012	1644	msedge.exe	94
PID 1644 wrote to memory of 5012	1644	msedge.exe	94
PID 1644 wrote to memory of 5012	1644	msedge.exe	94
PID 1644 wrote to memory of 2952	1644	msedge.exe	98
PID 1644 wrote to memory of 2892	1644	msedge.exe	99
PID 1644 wrote to memory of 2952	1644	msedge.exe	98
PID 1644 wrote to memory of 2892	1644	msedge.exe	99
PID 1644 wrote to memory of 2616	1644	msedge.exe	102
PID 1644 wrote to memory of 5696	1644	msedge.exe	119
PID 1644 wrote to memory of 5704	1644	msedge.exe	120
PID 1644 wrote to memory of 5712	1644	msedge.exe	121
PID 1644 wrote to memory of 1816	1644	msedge.exe	124
PID 1644 wrote to memory of 1816	1644	msedge.exe	124
PID 1644 wrote to memory of 4696	1644	msedge.exe	128

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://s3.amazonaws.com/ucwebapp.wisestamp.com/618a30c2-8aef-4ce9-a9a7-088a844c7932/mremonlylogo.format_png.resize_200x.png
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x218,0x264,0x7ffaacdec188,0x7ffaacdec194,0x7ffaacdec1a0
  2⤵
  PID:5036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1972,i,13499527623206684539,15692907668212843994,524288 --field-trial-handle=2336,i,3102576934301866374,10270815962113223038,262144 --variations-seed-version --mojo-platform-channel-handle=2364 /prefetch:3
  2⤵
  - System Time Discovery
  PID:628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1764,i,8239989738635818729,3047365134923942172,262144 --field-trial-handle=2336,i,3102576934301866374,10270815962113223038,262144 --variations-seed-version --mojo-platform-channel-handle=2332 /prefetch:2
  2⤵
  PID:1084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2612,i,6744155519267843866,3259051452227301817,524288 --field-trial-handle=2336,i,3102576934301866374,10270815962113223038,262144 --variations-seed-version --mojo-platform-channel-handle=1896 /prefetch:8
  2⤵
  PID:3436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3432,i,9411756825533990081,269531315672405317,2097152 --field-trial-handle=2336,i,3102576934301866374,10270815962113223038,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
  2⤵
  PID:2704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3456,i,14488141267854190828,16306267173030862728,2097152 --field-trial-handle=2336,i,3102576934301866374,10270815962113223038,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:2068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4220,i,2823359335388863523,9872511405703443976,2097152 --field-trial-handle=2336,i,3102576934301866374,10270815962113223038,262144 --variations-seed-version --mojo-platform-channel-handle=4232 /prefetch:1
  2⤵
  PID:748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4236,i,15770956901872959889,11552753779291386409,2097152 --field-trial-handle=2336,i,3102576934301866374,10270815962113223038,262144 --variations-seed-version --mojo-platform-channel-handle=4268 /prefetch:2
  2⤵
  PID:5012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5152,i,16917976700757816919,7605083219513990368,524288 --field-trial-handle=2336,i,3102576934301866374,10270815962113223038,262144 --variations-seed-version --mojo-platform-channel-handle=5192 /prefetch:8
  2⤵
  PID:2952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5156,i,18146299119709356872,5777228293641845430,524288 --field-trial-handle=2336,i,3102576934301866374,10270815962113223038,262144 --variations-seed-version --mojo-platform-channel-handle=5216 /prefetch:8
  2⤵
  PID:2892
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,11656042600433978288,13261440880027481855,524288 --field-trial-handle=2336,i,3102576934301866374,10270815962113223038,262144 --variations-seed-version --mojo-platform-channel-handle=5904 /prefetch:8
  2⤵
  PID:2480
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,11656042600433978288,13261440880027481855,524288 --field-trial-handle=2336,i,3102576934301866374,10270815962113223038,262144 --variations-seed-version --mojo-platform-channel-handle=5904 /prefetch:8
  2⤵
  PID:2616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4312,i,942786056803315971,7374530107160833563,524288 --field-trial-handle=2336,i,3102576934301866374,10270815962113223038,262144 --variations-seed-version --mojo-platform-channel-handle=4504 /prefetch:8
  2⤵
  PID:5696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5020,i,1759655020454473919,15197112987183530074,524288 --field-trial-handle=2336,i,3102576934301866374,10270815962113223038,262144 --variations-seed-version --mojo-platform-channel-handle=4252 /prefetch:8
  2⤵
  PID:5704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3468,i,347503325429330957,17600809474403681993,524288 --field-trial-handle=2336,i,3102576934301866374,10270815962113223038,262144 --variations-seed-version --mojo-platform-channel-handle=4472 /prefetch:8
  2⤵
  PID:5712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5476,i,16486339615081295667,13811972220761556229,524288 --field-trial-handle=2336,i,3102576934301866374,10270815962113223038,262144 --variations-seed-version --mojo-platform-channel-handle=2128 /prefetch:8
  2⤵
  PID:1816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5020,i,8693165368757607758,15031134154736584404,262144 --field-trial-handle=2336,i,3102576934301866374,10270815962113223038,262144 --variations-seed-version --mojo-platform-channel-handle=5844 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4696

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5100

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 5421c8b0bf6e5f37422a05b412b233cde63f1db63aa71d65c91c5b31275595c0
MD5 07f616e3db8597d59ea940f94c1abb0b
SHA1 eedf28342bbff8c4cae798c2980ea6953992f1b2
SHA512 30782b7b7d8c6db47a40bc15f968f35fca7939aaa4b83a8a19c8f5a415c745b54c161abc0037d24bad8ebf15d5deb4134f24e357c1b5869f1598fa22619302be
TLSH
T163D0243C7F114D50D40041710530D50435D3CC1740D015050C354C074C101C11305CD0
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 daf8c1243ee20a2e95a6bd65ee87f94e97a213f1bc26473da181514314bf0e5e
MD5 22b29b46992ba3d1fd586e35207b402b
SHA1 03a007676fa49e6e9fbeffbbc2e943124c1b3d3d
SHA512 3634d483353d2e9fb49d846c71c6867053c6a8f1ead10608addea75574d5ce0e36c8de933f71d10bae9682752372e6f7925bbc3c9d982dfe840a9d664f859687
TLSH
T1BDD0243C3F514D50DC0041710530D50435D3CC1740D017070C354C074C101C11305CD0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 a873300d1577b1c706f2f8606853b4425ab9633eff9fb976ff2e52d7f7193524
MD5 7932916da4500130171e932f79b26a87
SHA1 143792526d7dfe7cec87dbef810760b5dc6ef902
SHA512 171b4eb8967a440f8630546704b1f7ce356ee658513ecd40ce221f5efb52c19c48fe04bf0d3ad7af88e96b59b30d26680cde499e077a682c5756c9533f42953b
TLSH
T13A61418F46D9C867FBF895B296F5938336F866815B431DC131E4D879D82EB53F149200
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5950b6.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5950b6.TMP
Size 3KB
SHA256 10581b56b959d579823da3cf8f7c33cdb4894d65d62479ea10f05a48bf1126ec
MD5 d9c31deb40ebd7aec52c7b6b7466da56
SHA1 716c7ef005b0f608848cedd66b7ad4b3e5c6a604
SHA512 32b2270b9228baa9b4bd4e94f25f6876206831d8ccdc65149f0b76a568204d7f87c25652a6951836a19fc179bd975061b9657c611b7092bff31a8d9287d1bc44
TLSH
T1B0614F8F56D8C867FBF895B296F5938336F8A6825B431DC130E8D879D82EB53F149200
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 d82c3cc214c4b57478a48a050d4d04e7bccce94d748a2eb4a57309ad741132a0
MD5 74c8eb2b448e14aefc074fd3240a5d47
SHA1 9b29d559adadfff7a026428936d4d6b450330d35
SHA512 bff10f1ad7a7d46e88f1bb7d51656ca4b012a7c2428625730bb758a8fc6342a2c9131a39ef2f6451a162f6adc4786754573c8baefbcc2b41ef0f2638f4db1ce4
TLSH
T1E2115BF3C3D595AE891116F09A24EE1BDE1D060542187C1995D4EF2BD3E3465E00199B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 b0d5bb9e361b6792c72b6ed334bcc9a51a1ea781f510f7023bd594abc20ee7b3
MD5 6d6ac225053083275bb950ae27b475dc
SHA1 eaaaf2e10921125e945870df82172f58096b4d75
SHA512 d1c6dc2fdec48d8275fc1474a05007956d1a08f5b78831d641719f374e335a9cf9c50977b52e209890620f5a7bb2ce00a537404f750b5f310971a2e7e7bfd3b7
SSDEEP 192:sxZxR5WT/fFsXYIdpljHW6+WNKTh/Y3wPuIgrJ:sxZxeT/fFsXpdHb0/+9
TLSH
T18222C9526E38A97B8CC7D20DBA25BF53E6F9503291D41E58AAFCC51C05E7ACE220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 c0a5d7a6a00fc3e386a50dbefc5e3cba9bef1f25fc4caeb925845b9fbd1731e4
MD5 3a6c08074ded77587929c478920baf82
SHA1 a133e8aff797b2e07d9d7a1ec9f13cab32dfe2e7
SHA512 9ee5a4055dd8ed5d8ce95dc500125e4f707399d7c7e77f2dce3b4bdafd59c8ab0a8453968884594d8d1ebc4e22b5ce78357ebfa20026bca998ab7a9a19cf67df
SSDEEP 192:sxZxR5WT/fFs9YIdp3jHW6+WNKTh/Y3mPuIg5iJ:sxZxeT/fFs9pTHb0/2Q
TLSH
T16322D952AE38697B8CD7D20DBA15BF53E6F9503251D41E58AAFCC61C05E7ACE220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 2c74c198ee3b3b83999160508778c9d2697a982be4a1e68295590ce3fd68a759
MD5 a75ad22a156b579f213a050ab64c9c62
SHA1 5362575af4e8ed9e1b773d0a4f0b9666d9f69aff
SHA512 0d74679f8027da3f733040195617e6e997f91f0e5ae86504598583b9cd9b5e545fe4e6033c874f2a8654cd7db77e6ce9cb71cdb6916999dff7ced4adcb42b34e
SSDEEP 192:sxZxR5WT/fFs9YIdpljHW6+WNKTh/Y3DPuIg5iJ:sxZxeT/fFs9pdHb0/VQ
TLSH
T15922C952AE38697B8CD7E20DBA15BF53E6F9503251D41E58AAFCC61C05E7ACE220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 801029a90e5641045ca2eab996d0be0fa84bff66b6333809c45c7a103653f05d
MD5 f48a6d187d7b842d9a1d518cae6b28a2
SHA1 617dd06e0ceaeb74c96e4bb01339e15d1108f4a4
SHA512 f1b25f4325ed392be289abb46b0d8f72cd0fae5f7c0e86b9446cd61dcf8cfb1405f52c770265408ad5719391c69dc21d3c64d39393f1cb03d1793ea59dd49178
SSDEEP 192:sxZxR5WT/fFsrYIdpljHW6+WNKTh/Y3wPuIg5wJ:sxZxeT/fFsrpdHb0/+S
TLSH
T18622D952AE38A97B8CD7D20DBA15BF53E6F9503291D41E58AAFCC51C05E7ACE220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 4542a9724253376f8f614c15afd6e0e7134878c34d47a3f4b6fc68e2963f95ba
MD5 4f90d0750fa66f7a2db8a607fbf71a18
SHA1 d01719e302fcb77a9803fca39e4add29748731d4
SHA512 24bbed8ff3e3d300e2e7b1ff11c6e7db3cbe8d6ba56f497bfb21a13c42fd5d0540d4db684d989d21487b383f5daa96c28550c8ab940827c9b054dc28b3a07774
SSDEEP 768:3x30AbSWvS2l98F1+UoAYDCx9Tuqh0VfUC9xbog/OVGmLlLJ72orolZMw:3x30AbSWvS2l9u1jaLmLZ12TH
TLSH
T136C2EA3B640CCB7E4FC01A9DDC6AAF9B6E9C02C796548D4047FA984C02C77EA511B4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59ec98.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59ec98.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 75978ad30acf11b2665064fcb7acdaa51f5fbc445c685c036445b1684423e0ad
MD5 b8183fd64c4355b7c08ca7e9247401ab
SHA1 6e44095da3bfeab04f5408822a8733f1fe66141e
SHA512 6c029e08de7d8a853eb70477978c58d278acadaa14ea427a0628256a32ff8f21490cee710fe9a7893e5909776381498df5968bcfafae7418858e367f5cc55f27
SSDEEP 384:CiFiZcIhzsNI8TUNTUlIlwxdpuoy49iX5F71sFq7TatgOIwZOycHoC:JFQRdwgAdq8a88aXsN5
TLSH
T189C23BF248E7887ADDAE9743A77E3D035EBCC067B5849A50B798561CCC960BFC306811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 3c4122f34cd2c36bf92090ec5b2e5fe9610dded6cfe904013e6e2f5b19593e54
MD5 7ac55174f7fa43a597c0691d3f3a0acb
SHA1 7358067975efd9934038ced85d4595daff74ecff
SHA512 85c8b3f892010fd3f988c0bcec5e603f8c602f6ca5493b21471742e04d8841ea35ea5bcff725a41d599ac8db3f19b31f2b167cb6715467444a823ea301fb1167
SSDEEP 192:LON/6AmwprQmiUy5T6siX5F7wksF+JiHpU6:LON/6ipd+6siX5F71sFrJU6
TLSH
T1E302FA35BD786C7B8DF2AE45B08B3713AFA5117BEA902F84C9E81B2C01D765C1306836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 9c5ae2e18cdad21120b21ea40ef4c4b62f84ecb8a50006edcb58fec349e669a1
MD5 92260f7d914e1a234cecd1609c3af7cd
SHA1 9985bb6e5812bffaaa983dc5ba9dcdd12ca72783
SHA512 a806eda0c462cb499a97b965eccf5873a7c5232181979b7a514738e2c1c8df658083627b6473aea4b5871acc26b830deafa04fa7400d9088c4f3f576020ec99f
SSDEEP 384:FZcIhsNYwxdpuoK49iX5F71sFq7yatgOIwZOycHoC:9hadi8a8baXsN5
TLSH
T1A2826B3298785CBB5CF7A144F54B3203AEB8806BA7D86F9499ED6B2C0196599030B927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 61340747d3f8aea388ec3b6442ba1b84ccd0d962fa5207fbd1a0b1aec852cc7e
MD5 1cb9bf5e6b085c7a348d32aaf9f3d689
SHA1 95be1f15da9b670e26465b9b4e2b05953a985927
SHA512 66f0b91e98ca9b5e30014f05d56855bdaf50388488fe2aa88dde965ac3207ede812ba3c2dc7148cb3fcc4dcb8dbf97e6cedfdb455117b61577a34758861546e4
SSDEEP 192:LON56Amwp5QmiUyjTIsiX5F7wksFqwKPeylR8qoU6:LON56ipXGIsiX5F71sFq7BaU6
TLSH
T182122C36B8786C7F4DE3A554F0473513AEB54167EB886F84D9EC2B2C02DB59C530B822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bf031061-c25b-416b-8746-8549f001b897.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\bf031061-c25b-416b-8746-8549f001b897.tmp
Size 18KB
SHA256 20faefc22038260dbb6f17d7ac373beb4a848a7cb5a43ed11f53e819cfb2386a
MD5 930478f91dd01fbff1f8b8be7079f038
SHA1 b487d77abab6fba622845f9021843320062215a3
SHA512 f1549cb991076ecc7fc77d066d8770f5473ca4b161e5d3d8f9477a02c95584c1c1f469e91f20aa905976ed20cea049eba1ccef1b738c197d77be69c80ef71574
SSDEEP 384:PZcIhsNYRxdpuoK49iX5F71sFq7yatgOIwZOycHoC:Hh3di8a8baXsN5
TLSH
T1EB826C3298785CBB5DF7A144F44B3203AFB88067E7D86B94D9ED6B2C02D6595030B927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

408f3d9b-4dda-4fee-8a92-ee17987cce57.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\408f3d9b-4dda-4fee-8a92-ee17987cce57.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 3c2c536be0169e1968a26a7e4b86a497c9ee57e57b65589fa8a2e6fc5590493f
MD5 296f665504492f8208da5404d5a0d41e
SHA1 8c008ce28ce0b936fabf0089b6f30748c8edff6a
SHA512 19e52406ed4709dc727e4a113404d837b143c586bc72306266292908541a1423b74ff61922bbc40c3dc6ce2f71f84f886e7ad421c39344ff87b2d75f45bf8424
TLSH
T172414B5CB6FE1148F3B36E5A6BF6A86D447EB9772E06D05D10110E4F0662A40C8A1B37
MD5 SHA1 SHA512 TLSH

Submit Download