hxxps://kuwaitembassyevents[.]com/

Analysis

user interaction
yes
max time kernel
149s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/09/2026, 15:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://kuwaitembassyevents.com/
Sample260930-ssamwabd64

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4252	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-524788801-3318743092-4051225893-1000\{D8F068E2-E4F3-45FD-B99C-7DC090CD31A2}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2064	msedge.exe
2064	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe
1316	msedge.exe

Suspicious use of WriteProcessMemory 33 IoCs

description	pid	Process	procid_target
PID 1316 wrote to memory of 4796	1316	msedge.exe	87
PID 1316 wrote to memory of 4252	1316	msedge.exe	88
PID 1316 wrote to memory of 3344	1316	msedge.exe	90
PID 1316 wrote to memory of 3344	1316	msedge.exe	90
PID 1316 wrote to memory of 4668	1316	msedge.exe	89
PID 1316 wrote to memory of 4668	1316	msedge.exe	89
PID 1316 wrote to memory of 4668	1316	msedge.exe	89
PID 1316 wrote to memory of 4520	1316	msedge.exe	91
PID 1316 wrote to memory of 4520	1316	msedge.exe	91
PID 1316 wrote to memory of 4520	1316	msedge.exe	91
PID 1316 wrote to memory of 2072	1316	msedge.exe	92
PID 1316 wrote to memory of 2072	1316	msedge.exe	92
PID 1316 wrote to memory of 2072	1316	msedge.exe	92
PID 1316 wrote to memory of 4344	1316	msedge.exe	93
PID 1316 wrote to memory of 4648	1316	msedge.exe	94
PID 1316 wrote to memory of 4344	1316	msedge.exe	93
PID 1316 wrote to memory of 4344	1316	msedge.exe	93
PID 1316 wrote to memory of 4648	1316	msedge.exe	94
PID 1316 wrote to memory of 4648	1316	msedge.exe	94
PID 1316 wrote to memory of 4012	1316	msedge.exe	100
PID 1316 wrote to memory of 4012	1316	msedge.exe	100
PID 1316 wrote to memory of 4012	1316	msedge.exe	100
PID 1316 wrote to memory of 4480	1316	msedge.exe	102
PID 1316 wrote to memory of 5108	1316	msedge.exe	101
PID 1316 wrote to memory of 4480	1316	msedge.exe	102
PID 1316 wrote to memory of 5108	1316	msedge.exe	101
PID 1316 wrote to memory of 1080	1316	msedge.exe	106
PID 1316 wrote to memory of 2804	1316	msedge.exe	118
PID 1316 wrote to memory of 4820	1316	msedge.exe	119
PID 1316 wrote to memory of 4544	1316	msedge.exe	120
PID 1316 wrote to memory of 5048	1316	msedge.exe	130
PID 1316 wrote to memory of 5048	1316	msedge.exe	130
PID 1316 wrote to memory of 2064	1316	msedge.exe	134

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://kuwaitembassyevents.com/
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2b0,0x7fff9750c188,0x7fff9750c194,0x7fff9750c1a0
  2⤵
  PID:4796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1948,i,15596362245018098893,262110795277668998,524288 --field-trial-handle=2288,i,6647179758555937209,18037139084777803597,262144 --variations-seed-version --mojo-platform-channel-handle=2332 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1716,i,1154696494687035008,8559539627817062284,262144 --field-trial-handle=2288,i,6647179758555937209,18037139084777803597,262144 --variations-seed-version --mojo-platform-channel-handle=2284 /prefetch:2
  2⤵
  PID:4668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2428,i,16825910901447986299,2904044543225287298,524288 --field-trial-handle=2288,i,6647179758555937209,18037139084777803597,262144 --variations-seed-version --mojo-platform-channel-handle=3048 /prefetch:8
  2⤵
  PID:3344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3412,i,3230344848912314310,14819434860059451034,2097152 --field-trial-handle=2288,i,6647179758555937209,18037139084777803597,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
  2⤵
  PID:4520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3416,i,13712935975760153175,7333120857837718144,2097152 --field-trial-handle=2288,i,6647179758555937209,18037139084777803597,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:2072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4160,i,16850072830161695908,6160319273976856195,2097152 --field-trial-handle=2288,i,6647179758555937209,18037139084777803597,262144 --variations-seed-version --mojo-platform-channel-handle=4288 /prefetch:1
  2⤵
  PID:4344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4192,i,16530061712001427966,1018668693738767702,2097152 --field-trial-handle=2288,i,6647179758555937209,18037139084777803597,262144 --variations-seed-version --mojo-platform-channel-handle=4312 /prefetch:2
  2⤵
  PID:4648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5068,i,12519309316846952723,5094755218966282344,2097152 --field-trial-handle=2288,i,6647179758555937209,18037139084777803597,262144 --variations-seed-version --mojo-platform-channel-handle=5096 /prefetch:1
  2⤵
  PID:4012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3872,i,8842939828565780259,1601780410944211201,524288 --field-trial-handle=2288,i,6647179758555937209,18037139084777803597,262144 --variations-seed-version --mojo-platform-channel-handle=3536 /prefetch:8
  2⤵
  PID:5108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3948,i,11417500423694032558,8669144737688388376,524288 --field-trial-handle=2288,i,6647179758555937209,18037139084777803597,262144 --variations-seed-version --mojo-platform-channel-handle=5300 /prefetch:8
  2⤵
  PID:4480
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5908,i,12893311760945279588,16374789470031046559,524288 --field-trial-handle=2288,i,6647179758555937209,18037139084777803597,262144 --variations-seed-version --mojo-platform-channel-handle=5896 /prefetch:8
  2⤵
  PID:3260
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5908,i,12893311760945279588,16374789470031046559,524288 --field-trial-handle=2288,i,6647179758555937209,18037139084777803597,262144 --variations-seed-version --mojo-platform-channel-handle=5896 /prefetch:8
  2⤵
  PID:1080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4328,i,5250040898062872142,8008250749921607770,524288 --field-trial-handle=2288,i,6647179758555937209,18037139084777803597,262144 --variations-seed-version --mojo-platform-channel-handle=4192 /prefetch:8
  2⤵
  PID:2804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4364,i,16176058635016758920,12926823213350348616,524288 --field-trial-handle=2288,i,6647179758555937209,18037139084777803597,262144 --variations-seed-version --mojo-platform-channel-handle=5968 /prefetch:8
  2⤵
  PID:4820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4456,i,16648155085200698481,6838224291046182119,524288 --field-trial-handle=2288,i,6647179758555937209,18037139084777803597,262144 --variations-seed-version --mojo-platform-channel-handle=4484 /prefetch:8
  2⤵
  PID:4544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6388,i,2976742178821525617,18319550480114467898,524288 --field-trial-handle=2288,i,6647179758555937209,18037139084777803597,262144 --variations-seed-version --mojo-platform-channel-handle=5312 /prefetch:8
  2⤵
  PID:5048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6180,i,3382769855999037301,17530775156281765178,262144 --field-trial-handle=2288,i,6647179758555937209,18037139084777803597,262144 --variations-seed-version --mojo-platform-channel-handle=5840 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2064

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3984

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c904cde2439d0f658b6928376273908e18874923ffb5ab0253d91ef97d247274
MD5 71592819d06ab9dfd94505cef3db0b85
SHA1 fa4c610ce7419e5f934db322abc11ec563259b9b
SHA512 f0dccb656458e10495c6728811a1fad970a69f8abb5ce8e9bcba9e93f496cd66fb3ce8ce1065b946203d7912789774c609787e85dd5139479b2562b6f05cfae0
TLSH
T16BD002F8BB950515C5C970F7713BDB8143B6EB218246265D64F21E082D747B23606895
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ad9341a3ad2b263d2be4ffd8a97b10f49a2c167d02a5b66182496dee5e8cf827
MD5 8f79499bd1d234dc030ef99e2f850e0e
SHA1 4dd7c44b8570ce93f3db7df7fe1188f189fa82fa
SHA512 d06aa3eb27c999ba47fce9a170740591ef6bacf188a5d364ad9a567936919e24290b5c0c3a8ad16cae1e37c71c2364d9db3ba42e5914a96b0f1f732c29ff5945
TLSH
T199D022F83BC00800C8C830F3303ACB8003B2EB208202230E20F20E080C303F23202880
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 077299d44bab9041adcab667e8b52aee0e5a3a917a2dddb1312c744bea479de6
MD5 85a09e22f340327b65281cd8fb846cfc
SHA1 eae1cdfe98043f51da0c518344b743d3451826f9
SHA512 c200790ba2b31d7b4c7ff8e2edbefa20179a2fd6afab59b7afc7ed36452346aae7dbf21b93da5a7afce1d359b89ddc8e1881c3a5d6c8c8a2e828d55a79c006e1
TLSH
T1D361A2CAE5E34885F7A806B047C70DC73333DC8355672E5E9468DDF8788A3926109310
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5890d1.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5890d1.TMP
Size 3KB
SHA256 b5443df1c5296cf115f19923e5165752bd99472232b6183efe4d2b83d9c896ef
MD5 561a5a85bb088089d06038eed3759f23
SHA1 c6b5824cd13a5e7bb3e85ef6c34d7577d968e2d7
SHA512 054304a2b6ce93c762e282991808e7efc3d792b3f7058e2cf644d8e64048a8d4f489a8df7c3e63d27db3d76c35572925598177cfa9bb25eb4992263a3a87ad85
TLSH
T16061A2CAE6E34C95F7A806B047D70DCB3333CC8354672E5A9468DDF8B88A3966109310
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 ed0e9700988f3ac04b958f68ede1577a21eace13064eda03e1d18fd80aa5abdf
MD5 91b845a37482f8ea18c1e3e325c147c2
SHA1 11f356309e4387d350d0e23d575e64ff6c2cf46d
SHA512 dd9c3f8c298b2ca8b6d8707fa2a310685f309f4f2edc2b39b02aea5fd69bd3bc32e7969cf914e819b1958209d36d84ee29c078f5ed9efb66405b8a96d6846596
TLSH
T175219DF7C7E5866EC90126F0AA14AE2BCE2D055942187C1998E4EF6B97F2131E10158F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 fb764dad656e5b7a767d57a49c75ddde65232866c208d860177d2bb5611d99f5
MD5 aedf6a769c7b61845f191336f78bd2c0
SHA1 c2c2ccbe3eb8bc977be5738bf7a88a9ca824bf5d
SHA512 93c4b12741b8ed91cbd8a8a4fd7cfcfa05938da388f3343128e80a1a1cdabc979534600c7f5c5c6966f21cab5fc25794361b4ac19ba68d4451daa935b4c5f687
SSDEEP 192:sxZyR7WM/ffsQabIdpSbHW6+WNBsT/YRPTVsIgrJ:sxZyoM/ffs1EMHbq/my9
TLSH
T14B22B8526E38A57B8CCBD20DFA15BF53D6F9503291951E98AAFCC61C04E66CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 7926902cbf58965c144ccb9bc7595053f49794e51c99ba9305bb424faa2e003a
MD5 57d28f6ab2ce1f15dd0e77e53a45d137
SHA1 a6a19eb5d781af1859616cca3f52e20e33430bd4
SHA512 f7cd471625d94221f6cebd569cac97d5a3a358b693a4518c7cf44995852a4723e9f8bac8731c5a9c66354bf447eb8771169d8b67c9faa6acf0d2bbed1614c54e
SSDEEP 192:sxZyR7WM/ffsI0bIdpSbHW6+WNBsT/YRPWVsIg55J:sxZyoM/ffs7EMHbq/mHt
TLSH
T19022B9516E28A97B8CCBD21DFB15BF53E6F9503291951E88AAFCC61C05E67CD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 62ed0588099af2906e9df5934fa5b6c41973720e98d522c3cb03344ba55772bf
MD5 38617d8aacfc6d1c6d85e085a655849c
SHA1 33c260f89f90e19a802a493cfce0849d1cb0ee27
SHA512 c5e678b2c5b6289ff97ca5f5c2eb1a02761418a4567c52556b7033253a8e53b292a8be533a7fa08ba3d788748071a3d9c7b49694c865429b9612a19e2902077e
SSDEEP 192:sxZyR7WM/ffsI0bIdp0bHW6+WNBsT/YRPMVsIg55J:sxZyoM/ffs7EOHbq/mZt
TLSH
T1FB22BA526E38697B8CCBD21DFA15BF53E6F9503291951E48AAFCC61C05E67CD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 6a69f159f80f3ed6783c9e0a2872720ac6d78cabdbdf93cb6d26098edfaabcfc
MD5 e61a64e150e65f67798ff50d40688369
SHA1 45d2dd6052bd3d43661e20fef275008eb95b789a
SHA512 08ab95d157e4e18e03e38348ae136fc796bfcf2920b4add04d9d56ca11c88b1bca6041772d46f2644d696cadb32904d2eb2131d20d84d0c05d1d8b82160026a1
SSDEEP 192:sxZyR7WM/ffsIabIdpSbHW6+WNBsT/YRPTVsIg5bJ:sxZyoM/ffsdEMHbq/myr
TLSH
T1F522B752AE38A57B8CCBD21DFB15BF53D6F9503291951E88AAFCC61C04E66CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 0b7e62ed7568e3b1263bc30551b5ef766737132fa65c50924f34b6b72b9da37a
MD5 2cff184117c036f1926adaade103fa6b
SHA1 1b2c4168f7c8477b1851a768f86bf5c9d1b6cce9
SHA512 746ff50d6e956b2d07a55cbd8c153979e33cfe74123937508b49967ccbadfaaa5794d42e21aa33f596899488db209cbb105676a2e9a182bb1e0162b6d8789b87
SSDEEP 768:xVK9uzYWvcQWs8F1+UoAYDCx9Tuqh0VfUC9xbog/OVpHLlh7k3CroZ+qTD:xVK9uzYWvcQWsu1ja0HL7Q3ZZ+qTD
TLSH
T197C2F93F640CCB7E5FC01A9DDC5A6F972E9802D7A6588D4047FA984C02C77EA522A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 7583aa470158d244caca85cb6b0486dac8e0ee30ea555cab493134f8d4beb136
MD5 5e6ca5e61292b112478f808ac4f39664
SHA1 efcf476d899104e2651fd0da53b66698aa739637
SHA512 a7a7bec5a743febbf49bc8585d3a73c6b80a562ee019be20ec8d99027653959acfe4a4bf20e023c0eb25d26f062e6ff230adfc9c3c89a88245f7f7cd1d551e01
SSDEEP 96:K0mJGQKjiOgDUvjNVF2rVW9Fj2KdTFp257DuZDnaW0KjKl:NbH33W
TLSH
T138910295707B0246387D295486A9CB5E528231A3305CEA7B7FBD00B25F6BE094DFE8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe592c17.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe592c17.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 0133af99ca2c7d40db8bfda35eeb804712ba2ebe6fe81ac0d18abba4f22089ad
MD5 3556ff3be7951f158f945380d05bca45
SHA1 96d0a3c3c29ea011636f6d59e0693ff6cb73123e
SHA512 6c3d682d1a2b278848571905f971481f91c92db76549ff37a23f4c069bb6d29453e4f0c20bf13f9b7bfbe7a608835fcbf35833ba5524979766778498157cad50
SSDEEP 384:AZcIhsN1nwhvTGpQOjTVHglhBtaVZh6DKhHBob:+hdEjnOFtafYGHBI
TLSH
T120827F72AC781CBA5DF7A541F48636075FF48157D6896E80D0ECAF0D01DA6A82307D2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 5038d8d2c366283478052b5ec1a825c28703866d21e5b5e7f36083ea8c9c9a2b
MD5 a88a8516d647a18fad1885390e1a2cca
SHA1 d176eb553a5896437995cdbe25dafc7c36aeab3a
SHA512 48279c2b38d91092c74bd890e1cc9b28d3a71ee85d9fba97d5ed293558a25831252d55d7b52d5912a307aa99cf8ec03d5d9afa684b5b419e687eaf892cdbff4d
SSDEEP 192:SONk6ygpQmiUyJWtOCTVgcSMosSPzPkoU6:SONk6lHRtOCTVHglbpU6
TLSH
T13C02E935BC687CBBCEF3AE06F88622179FA4117BDA552B80D5E85A1C01D766C2307D36
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 568ec0d818499e899987262ddf79367023d856d098dc23b94025e767b1eabced
MD5 6f5fa87a5e7872f6312bc6d941406d51
SHA1 b266daa2bcf9063b7a3d31a8fc385dc2a8acac8d
SHA512 61276ac56e4b524210d57c011e15a7606d043291ce24beff44c71575b39db2b436626ee531fc29846f4138c6a509781a594beecf7717df4f771f43fb78daa51e
SSDEEP 384:ziFiZcINzsNP8TUNTUlIlOwhvTGpQOjTVHglhBvaVZh6DKhHBob:eFQ1+wgvUjnOFvafYGHBI
TLSH
T187C238F258DB487AD9AE9B43E77D2D028EBCC053B5456980B3D89A0CCC961BFD306D25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 76901d673d69df9d551a01927b81495d959acc9e53b4c6bfb4bdf84e5c770999
MD5 81e844fa054147ed9d29ccdc1233b159
SHA1 cfaea00cceea5964426ea04420a9c0a39af1be3e
SHA512 24ca89b48e608d154e376926d5ca54f2744e9ad2ceb4e662da8ce2b5b3e8c2f1ea8a612f2cce61b047119498cd978c1ed7d7e29a5dc35a883a2cc943dffb311d
SSDEEP 384:8ZcIhsN1OwhvTGpQOjTVHglhBtaVZh6DKhHBob:qh4EjnOFtafYGHBI
TLSH
T1FA827F72AC781CBA9DF7A541F48636079FF48157D6896E80D1ECAF0D01DA6A82307D2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 be78a3c5f2a3ce090b00f622073b5c39a9d79d8af8b64fbc125d810319224b9e
MD5 d0f6d8157e95b608061939f2ade838ed
SHA1 019d9c1b61e38bcb11b1904b814371ff4b151ad9
SHA512 45fa535f5b480aa2c2b046de18566c0b1be433452662dea5d7638265d91e4b1c80cce61119f80be32069a9d2619ad30cbc3421c2a323ac6fec904fee3ef61176
SSDEEP 192:SONA6yrQmiUyuWQOCTVgcSMosSh2BEwH3U4qAU6:SONA6aoQOCTVHglhB7aU6
TLSH
T10E120B35BC686CBB9DE3A541F4C632039FA45167DA497B81D5EC1E0C01EF66C630BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

afce604d-d2a1-4e1c-8290-c45f5608037a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\afce604d-d2a1-4e1c-8290-c45f5608037a.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 b7421e14ecfc171a72889b461a419bd65079059e27a14abb5f740da09993c01d
MD5 9b472bffc075182f01be9bf2d02a65e7
SHA1 c83aeffd029821522aecd40acaad9af509fa67ca
SHA512 4f4d1047ab26136fd3221c8b03811b7008a57ec208c2e4a8a838dcf33923107d49f101ba3de01b862faa5d2cd32e0308af4bd891ceca350c546255b9d96702d0
TLSH
T109412E58B6E91148B3B76E56EBF2A46D487BB9372E06859E00010E4E0663F41DD61B33
MD5 SHA1 SHA512 TLSH

Submit Download