hxxp://theverisure[.]com

Analysis

user interaction
yes
max time kernel
148s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/09/2026, 09:50

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://theverisure.com
Sample260930-lt9d9sca73

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1668	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-524788801-3318743092-4051225893-1000\{C50240C3-FB33-4944-BA5A-713040913C99}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4176	msedge.exe
4176	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe

Suspicious use of WriteProcessMemory 33 IoCs

description	pid	Process	procid_target
PID 1996 wrote to memory of 3836	1996	msedge.exe	85
PID 1996 wrote to memory of 1668	1996	msedge.exe	86
PID 1996 wrote to memory of 4400	1996	msedge.exe	87
PID 1996 wrote to memory of 4400	1996	msedge.exe	87
PID 1996 wrote to memory of 4400	1996	msedge.exe	87
PID 1996 wrote to memory of 832	1996	msedge.exe	88
PID 1996 wrote to memory of 832	1996	msedge.exe	88
PID 1996 wrote to memory of 5024	1996	msedge.exe	91
PID 1996 wrote to memory of 5024	1996	msedge.exe	91
PID 1996 wrote to memory of 5024	1996	msedge.exe	91
PID 1996 wrote to memory of 1624	1996	msedge.exe	90
PID 1996 wrote to memory of 1624	1996	msedge.exe	90
PID 1996 wrote to memory of 1624	1996	msedge.exe	90
PID 1996 wrote to memory of 4928	1996	msedge.exe	92
PID 1996 wrote to memory of 4940	1996	msedge.exe	93
PID 1996 wrote to memory of 4928	1996	msedge.exe	92
PID 1996 wrote to memory of 4928	1996	msedge.exe	92
PID 1996 wrote to memory of 4940	1996	msedge.exe	93
PID 1996 wrote to memory of 4940	1996	msedge.exe	93
PID 1996 wrote to memory of 4908	1996	msedge.exe	97
PID 1996 wrote to memory of 4908	1996	msedge.exe	97
PID 1996 wrote to memory of 4908	1996	msedge.exe	97
PID 1996 wrote to memory of 4356	1996	msedge.exe	102
PID 1996 wrote to memory of 536	1996	msedge.exe	101
PID 1996 wrote to memory of 4356	1996	msedge.exe	102
PID 1996 wrote to memory of 536	1996	msedge.exe	101
PID 1996 wrote to memory of 3924	1996	msedge.exe	104
PID 1996 wrote to memory of 1780	1996	msedge.exe	117
PID 1996 wrote to memory of 1248	1996	msedge.exe	118
PID 1996 wrote to memory of 2328	1996	msedge.exe	119
PID 1996 wrote to memory of 1080	1996	msedge.exe	128
PID 1996 wrote to memory of 1080	1996	msedge.exe	128
PID 1996 wrote to memory of 4176	1996	msedge.exe	132

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://theverisure.com
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffd2d22c188,0x7ffd2d22c194,0x7ffd2d22c1a0
  2⤵
  PID:3836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1944,i,4341787554063240237,11800932775093296518,524288 --field-trial-handle=2088,i,10287080507773509294,7970072307651231846,262144 --variations-seed-version --mojo-platform-channel-handle=2132 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1644,i,12308007682249632965,9426238093073426156,262144 --field-trial-handle=2088,i,10287080507773509294,7970072307651231846,262144 --variations-seed-version --mojo-platform-channel-handle=2084 /prefetch:2
  2⤵
  PID:4400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2392,i,4601268249036129328,15739828480679040548,524288 --field-trial-handle=2088,i,10287080507773509294,7970072307651231846,262144 --variations-seed-version --mojo-platform-channel-handle=2500 /prefetch:8
  2⤵
  PID:832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3404,i,1383630043360646777,9558613390925909502,2097152 --field-trial-handle=2088,i,10287080507773509294,7970072307651231846,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:1624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3408,i,8606590752443879660,4251272187527716332,2097152 --field-trial-handle=2088,i,10287080507773509294,7970072307651231846,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:5024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4144,i,13957602713883584498,6901715355722261168,2097152 --field-trial-handle=2088,i,10287080507773509294,7970072307651231846,262144 --variations-seed-version --mojo-platform-channel-handle=4164 /prefetch:1
  2⤵
  PID:4928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4156,i,15966008345661849027,8156106832864184432,2097152 --field-trial-handle=2088,i,10287080507773509294,7970072307651231846,262144 --variations-seed-version --mojo-platform-channel-handle=4200 /prefetch:2
  2⤵
  PID:4940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=4988,i,8164860840548713161,17323512845268291800,2097152 --field-trial-handle=2088,i,10287080507773509294,7970072307651231846,262144 --variations-seed-version --mojo-platform-channel-handle=5084 /prefetch:1
  2⤵
  PID:4908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3480,i,14969326748716140322,8650949697040321893,524288 --field-trial-handle=2088,i,10287080507773509294,7970072307651231846,262144 --variations-seed-version --mojo-platform-channel-handle=3612 /prefetch:8
  2⤵
  PID:536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3520,i,1187917427883907305,12353745509789851182,524288 --field-trial-handle=2088,i,10287080507773509294,7970072307651231846,262144 --variations-seed-version --mojo-platform-channel-handle=3532 /prefetch:8
  2⤵
  PID:4356
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5880,i,2901818262423659854,14482321589594878681,524288 --field-trial-handle=2088,i,10287080507773509294,7970072307651231846,262144 --variations-seed-version --mojo-platform-channel-handle=5896 /prefetch:8
  2⤵
  PID:3740
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5880,i,2901818262423659854,14482321589594878681,524288 --field-trial-handle=2088,i,10287080507773509294,7970072307651231846,262144 --variations-seed-version --mojo-platform-channel-handle=5896 /prefetch:8
  2⤵
  PID:3924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6240,i,11559769398030292837,6369207371471755475,524288 --field-trial-handle=2088,i,10287080507773509294,7970072307651231846,262144 --variations-seed-version --mojo-platform-channel-handle=4188 /prefetch:8
  2⤵
  PID:1780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3848,i,6606285045068093460,3280693245021908003,524288 --field-trial-handle=2088,i,10287080507773509294,7970072307651231846,262144 --variations-seed-version --mojo-platform-channel-handle=6268 /prefetch:8
  2⤵
  PID:1248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=120,i,11824936992917668672,14637306258038320382,524288 --field-trial-handle=2088,i,10287080507773509294,7970072307651231846,262144 --variations-seed-version --mojo-platform-channel-handle=6216 /prefetch:8
  2⤵
  PID:2328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4384,i,9655644276812692209,7962412924323828886,524288 --field-trial-handle=2088,i,10287080507773509294,7970072307651231846,262144 --variations-seed-version --mojo-platform-channel-handle=1204 /prefetch:8
  2⤵
  PID:1080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6132,i,4088556562533530582,14803086003747362710,262144 --field-trial-handle=2088,i,10287080507773509294,7970072307651231846,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4176

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4692

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c904cde2439d0f658b6928376273908e18874923ffb5ab0253d91ef97d247274
MD5 71592819d06ab9dfd94505cef3db0b85
SHA1 fa4c610ce7419e5f934db322abc11ec563259b9b
SHA512 f0dccb656458e10495c6728811a1fad970a69f8abb5ce8e9bcba9e93f496cd66fb3ce8ce1065b946203d7912789774c609787e85dd5139479b2562b6f05cfae0
TLSH
T16BD002F8BB950515C5C970F7713BDB8143B6EB218246265D64F21E082D747B23606895
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 e1ee6853f37f0f3d3266865772bf90c3097eee593e800948c719b9e73dc9deb7
MD5 4416c5e8ea1d1bee4853dfafff6acb87
SHA1 e33dd252f1993bda0bdcf35563c796741e6ca5b6
SHA512 c4f64b820a5f4ac95a16d5e63589d968bc120e154040f2e2a3340bf1f1b8ec6bb51ded33a86946e8a6e192506eb24b07c3ecd500b038ce4da79a8109b3d52e8c
SSDEEP 48:VBurF5mMswaLit2+0lxYWpnUGlC/x3Td2dvx2Wl6h3L6+yIdfDhYZ42V:furLuwEiP0lJxC/tdhJP642V
TLSH
T1D79158B04BDF4E65EF971ABE459108F22A2773F36C529AB20456F1787FCA65D2303102
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 d0196e39e6a913e0fdd5f8c0dc65480380742b248adcdcb79d01d531104ac0b8
MD5 a5921b4ed3633a6c4a9f9b331a9fc8b1
SHA1 d6bac153baff0dd0b434c5de030275302cd2a568
SHA512 71bb18e79c642e75234419e6df8412bad17b6c1c8e701f0d55e4dcf20d1fb887729d8f414ee4bd1ef5f9a5af4e77fcd7c2ffc24cad853e3d2994b1cff14782a2
TLSH
T1BD31AEF3C3E4C56E890156F1AA24AE1BCF1D0516421C3D1AC9E5EF9B93E3471E10199F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 c90676feb4d41ce6839edbfc095b3c290f0c9d94aa5f052bf93f4203eaababab
MD5 20137ab4264d61545f949bb3210853f1
SHA1 ec86e35e8ffc6cf395a4a01356aefbcb27d6ceb7
SHA512 447862036a7bcf7da19e59aa82c6d231532b6c72cd1237cbb0adfd95a07612cb1cd52af70f1815decf6936775693108f27e11cb37464fa78f62ba334d07f1ac8
SSDEEP 192:sxZgR3Wt5/fcsJoQZIdp2tHW6+WNVSc2g/YRPhM0+hIgrJ:sxZgcv/fcszyGHbATg/mJ9g9
TLSH
T12B22B7527E68A57B8CCBD619FA25BF53E6F9503291911E48AAFCC61C04E66CE130780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 328492ab5c2f2bd2ba0a61e691241dfee5fce76bbe05deafaf0ec13b396eb1f7
MD5 983543ea544e2b96862b28b07fec7e53
SHA1 cc4e2a395d7e8338f8f737f6b8a4c61b7c277135
SHA512 47fa5ac6e28abaa3eb22b47cd7182093b9194bd634e3809d413d1c134139f1479e5dea73dce1a1fe49ece0ba7d8292a9d56c75bfee81e3fde727b1dd3bf5e7a0
SSDEEP 192:sxZgR3Wt5/fcsiQQVIdp4eHW6+WNVbxZYRPw0+hIg5pJ:sxZgcv/fcs6mDHbLZm5gN
TLSH
T1C822C8527E78A97B8CCBD60DFA15BF53E6F9503291911E48AAFCC61C05E66CE130780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 8ea06175be799cf55c3b193749ff283bffff3ad362d65c6397afc68403a40dd9
MD5 dd090965ff885c962bef507b71dd4bf3
SHA1 5cbb9f5b6f96647e147f43b3f1f2df883e1b735b
SHA512 1ff27c389a4d06cf63f4bd91f9266461bd367c6406354694fc2668bdc1dc2b62de09ebe552d5d2caa60fbbf2036fd6ace3c9397a421d78d8b69ca15849ffa1c1
SSDEEP 192:sxZgR3Wt5/fcsiQQVIdp2eHW6+WNVbxZYRPH0+hIg5pJ:sxZgcv/fcs6mdHbLZm8gN
TLSH
T1F322C8527E38A97B8CCBD60DFA15BF53E6F9503291911E48A6FCC61C05E66CE230780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 f9841bf8b3da47b9922fa2615eed9d946e625c422dff32cd4d7c4ef4a57184eb
MD5 8901c6289b2c8530d267bf6c3be00b0c
SHA1 28e77a5ce2eeb2831f26f1f42bf64ca87b947850
SHA512 0ff2eb4bcd3ff3858aea04a04c09ff62ffdd170d994e0ef7f08f9fdcf7b80efcd0720623cc9676ef43d823f35ce9e815d3ad82c8f1b8c8fb0a72e112bd2bc9df
SSDEEP 192:sxZgR3Wt5/fcsioQkIdp2tHW6+WNVTxXYRPfm0+hIg5LJ:sxZgcv/fcs29GHbjXmn7gL
TLSH
T11D22B7527E38A57B8CCBD609FA15BF53E6F9103291951E88AAFCC61C04E66CE130780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 ac2dd3083385a037cd60ac41e787f815f9d1cbe276e9eb2f9e41b232ff6bc467
MD5 d3ceda6c75f925fd3d4160813710231e
SHA1 926753a946e84dd2d132d525479f89e68e11d15d
SHA512 ab14edcffd4c3cb8fcaa014b9495eb85900077dcdf5bfc512183c1060cf368a4e252345d090155a5dccc61304f2b4ad947a68df526fd1631c04517663a6bcea8
SSDEEP 768:qUK9uzYWvcQWs8F1+UoAYDCx9Tuqh0VfUC9xbog/OVpHLlh7k3Vrof+r0G:qUK9uzYWvcQWsu1ja0HL7Q3uf+r0G
TLSH
T156C20A3F640CCB7E5FC01A9DDC5A6F973E9802D7A6588D4047FA984C02C77EA522A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 ab23bba47cb6d58babfe35555e6377ca8c8a982e5ebce4670142435a83ad056c
MD5 771ca1a370c7f1794ba234285d8385f3
SHA1 6c6c813801fb7edf0b9ccfa5390ea7a28060b8be
SHA512 789ff6f874ff42b3ea7f4d8bab9ad715dd5b99089d33f4e16230e4169c8a09db491f9d2312963566f2854c301f705cd0e98e08736807a7f4b1e0a870ac5a1662
SSDEEP 48:K0mImvmvBGh8g+kkdbofQIS4dK9c1edx2NY3IkmyLDmHjNl12blo9ISj2K9T1B2q:K0mrKTFqK24K6cAKNWqDeKk8
TLSH
T1BC912415307B128139BD395C90B4975E165132B3306AEA2B7FBC14A18E6BE098EFDCCD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

26a0052e-4677-422c-91ac-8a46a0423ddf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\26a0052e-4677-422c-91ac-8a46a0423ddf.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 44d38eab10f2ef67133c0def62872002001e80d65f2ee46a1174506a93892621
MD5 6fdbc7159c566c74f9a413ff59f9f9d7
SHA1 3977db31ecc8f1f97f1f87eba31fc028422ff26a
SHA512 2f242c6cea02169e108a52fadeca6f9596b5ec6c3e58d8992baf0289f704ab623730200d0013f334703ba875c5f4e0eebbb5ca950fc3bc63f619a6eb76e5a115
SSDEEP 384:CZcIhsN5U7wOaRA3bOjTVakOrlajb+2STLVmAJNN+oG:wh4mKntOsjblSTLYENod
TLSH
T1CB827DB66C385CB75DF6E140F48A36479FB89067E6946BC0D4ECAF1C01DA6A9230BC17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 13c8c993ab323f8b0cf45fdbb9d4789ae19901e736db8cb5dadd048bbf8bf406
MD5 48d3a77e3b8e3ce5def2ac2b3cba40c5
SHA1 fe15e1d26f992d6dcd4dec45ae1b209a4addc8b8
SHA512 3053f9a7587de8835e7d30511303ac09cb584eac23cce08ccea15a1729e2c5bb76803be6244e042f060e80e1e485376a913013eefab49f3bf6bcba5f99b56ff6
SSDEEP 384:ZiFiZcIGzzsNa8TUNTUlIlMwOaRA7bOjTVakOrlajb+2SPLVmAJNN+oG:wFQGXDwgxqKntOsjblSPLYENod
TLSH
T164C23BF658E7497AD9AE9743E77D2D038EBCD063B540A680B398991CCC961BFD306C12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 30deb96ca569ca03e352f54ba58840bcbff1decf7fc66c7dd9a6469898ee57b7
MD5 02126729365f8a623525e7957291e5d2
SHA1 78315c3367e149e2b62d8b02ef3454294bd00ba9
SHA512 fe8359f56b7851eb1b16af6c3809c500df0ba05c4735600993f9cc55a15e4479dd930fceb253441a1fec6947a1e07f84ed6c972fe7d52dad91d780bfc7c5937d
SSDEEP 192:SONI6ygpQmiUyLetOCTVgMEkOrf7zPP4U6:SONI6lHDtOCTVakOrXQU6
TLSH
T1B202D738BC786CBB8EA26E45F58B37179FA4207BD9552B80D9E85E1C01D769C2307D32
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 e2ab3cc37d1a91ad21b69438a77bd4aa9f910e600f683f066bd7d44fb2086221
MD5 7bb2b8552a007f978ec4374156c261fc
SHA1 11a4730183ac99920ef69d2e62f2781e66b3738a
SHA512 247d91a5e033972504e08ba9a9f92716c2734bd1d84bda6b9e4a9b96d12a0157fc3e0771713db8a934a30df985c0a1420cafc55572f3c580f1d9febde65620e4
SSDEEP 384:8ZcIhsN5UMwOaRA3bOjTVakOrlajb+2STLVmAJNN+oG:qh9mKntOsjblSTLYENod
TLSH
T172827DB66C385CB75DF6A140F48A36479EB89027E6946BC0D4ECAF1C01DA6A9230BC17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 f7a6f1f6a6c4b7431212165ec976e498363373202262706678e0ae82929add47
MD5 09af09e5cfc072cd053a2a9ed2b1921f
SHA1 22a30e6dceb80405b3c02c4940c83de363068de0
SHA512 c76a68d9a54027584acf0bbaf7bbcd10ce6bb6baad2682b2568dfd83a1fc0a8793e2bdb3e773cc36e0c1931f3c82d61fd9ff45ed97c224cf656d7a4d19fc93a3
SSDEEP 192:SONj6yaQmiUy4e5OCTVgMEkOrftajb+2Sn3UaqDU6:SONj6Zq5OCTVakOrlajb+2SkLU6
TLSH
T179122A36BC786C774DE26540F48B32579EA85167DA467B80D4EC6F1C01DFAAC230BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fe4bafbc-c693-42f4-bb4a-f11da13c39e6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\fe4bafbc-c693-42f4-bb4a-f11da13c39e6.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 ad2acc01e458df42f271345d43d4f308e831367f83ce83dd64032923287bfdce
MD5 ffb0c61e65b590018bae6336f01be235
SHA1 3776ef4b640aa8f51dec009d90184867dcd782c9
SHA512 98b4e04489daaf133e9e23eb7362367f0898dd534502c21f616b0b8a03728e5a54bcfff21b3178790c347471abdffd33979427ade8f4eb1d145a6639a995ed82
TLSH
T144413F58BAF91148B3B76E5A5BF2685D487FB8332E4AC09E00110E4F0662B40CD71B37
MD5 SHA1 SHA512 TLSH

Submit Download