hxxp://telmex[.]com[.]pl

Analysis

user interaction
yes
max time kernel
148s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/09/2026, 20:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://telmex.com.pl
Sample260930-y4bbfa1yd1

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1708	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-240542094-4193773837-3211495583-1000\{151946FD-951E-4B8A-B182-5BF1E5AA04D8}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4820	msedge.exe
4820	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
3792	msedge.exe
3792	msedge.exe
3792	msedge.exe
3792	msedge.exe
3792	msedge.exe
3792	msedge.exe
3792	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3792	msedge.exe
3792	msedge.exe
3792	msedge.exe
3792	msedge.exe
3792	msedge.exe
3792	msedge.exe
3792	msedge.exe
3792	msedge.exe
3792	msedge.exe
3792	msedge.exe
3792	msedge.exe
3792	msedge.exe
3792	msedge.exe
3792	msedge.exe
3792	msedge.exe
3792	msedge.exe
3792	msedge.exe
3792	msedge.exe
3792	msedge.exe
3792	msedge.exe
3792	msedge.exe
3792	msedge.exe
3792	msedge.exe
3792	msedge.exe
3792	msedge.exe
3792	msedge.exe
3792	msedge.exe
3792	msedge.exe
3792	msedge.exe
3792	msedge.exe
3792	msedge.exe
3792	msedge.exe
3792	msedge.exe
3792	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3792	msedge.exe
3792	msedge.exe
3792	msedge.exe
3792	msedge.exe
3792	msedge.exe
3792	msedge.exe
3792	msedge.exe
3792	msedge.exe
3792	msedge.exe
3792	msedge.exe
3792	msedge.exe
3792	msedge.exe
3792	msedge.exe
3792	msedge.exe
3792	msedge.exe
3792	msedge.exe
3792	msedge.exe
3792	msedge.exe
3792	msedge.exe
3792	msedge.exe
3792	msedge.exe
3792	msedge.exe
3792	msedge.exe
3792	msedge.exe
3792	msedge.exe
3792	msedge.exe
3792	msedge.exe
3792	msedge.exe
3792	msedge.exe
3792	msedge.exe
3792	msedge.exe
3792	msedge.exe

Suspicious use of WriteProcessMemory 36 IoCs

description	pid	Process	procid_target
PID 3792 wrote to memory of 380	3792	msedge.exe	86
PID 3792 wrote to memory of 1708	3792	msedge.exe	87
PID 3792 wrote to memory of 956	3792	msedge.exe	88
PID 3792 wrote to memory of 956	3792	msedge.exe	88
PID 3792 wrote to memory of 956	3792	msedge.exe	88
PID 3792 wrote to memory of 3364	3792	msedge.exe	90
PID 3792 wrote to memory of 3364	3792	msedge.exe	90
PID 3792 wrote to memory of 2636	3792	msedge.exe	91
PID 3792 wrote to memory of 2636	3792	msedge.exe	91
PID 3792 wrote to memory of 1052	3792	msedge.exe	92
PID 3792 wrote to memory of 2636	3792	msedge.exe	91
PID 3792 wrote to memory of 1052	3792	msedge.exe	92
PID 3792 wrote to memory of 1052	3792	msedge.exe	92
PID 3792 wrote to memory of 2376	3792	msedge.exe	93
PID 3792 wrote to memory of 2376	3792	msedge.exe	93
PID 3792 wrote to memory of 2376	3792	msedge.exe	93
PID 3792 wrote to memory of 1684	3792	msedge.exe	94
PID 3792 wrote to memory of 1684	3792	msedge.exe	94
PID 3792 wrote to memory of 1684	3792	msedge.exe	94
PID 3792 wrote to memory of 3384	3792	msedge.exe	98
PID 3792 wrote to memory of 3384	3792	msedge.exe	98
PID 3792 wrote to memory of 5084	3792	msedge.exe	99
PID 3792 wrote to memory of 5084	3792	msedge.exe	99
PID 3792 wrote to memory of 4524	3792	msedge.exe	100
PID 3792 wrote to memory of 4524	3792	msedge.exe	100
PID 3792 wrote to memory of 4524	3792	msedge.exe	100
PID 3792 wrote to memory of 556	3792	msedge.exe	102
PID 3792 wrote to memory of 260	3792	msedge.exe	103
PID 3792 wrote to memory of 260	3792	msedge.exe	103
PID 3792 wrote to memory of 260	3792	msedge.exe	103
PID 3792 wrote to memory of 4244	3792	msedge.exe	115
PID 3792 wrote to memory of 700	3792	msedge.exe	116
PID 3792 wrote to memory of 1160	3792	msedge.exe	117
PID 3792 wrote to memory of 4944	3792	msedge.exe	124
PID 3792 wrote to memory of 4944	3792	msedge.exe	124
PID 3792 wrote to memory of 4820	3792	msedge.exe	128

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://telmex.com.pl
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x25c,0x7ff8c3a0c188,0x7ff8c3a0c194,0x7ff8c3a0c1a0
  2⤵
  PID:380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1804,i,17221600828863509797,13914156390404334301,524288 --field-trial-handle=2304,i,14094906154827964589,2497890443838111947,262144 --variations-seed-version --mojo-platform-channel-handle=2332 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1640,i,9994794079981130110,5812191604119649815,262144 --field-trial-handle=2304,i,14094906154827964589,2497890443838111947,262144 --variations-seed-version --mojo-platform-channel-handle=2300 /prefetch:2
  2⤵
  PID:956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2356,i,5753244357690524894,7796435241566736593,524288 --field-trial-handle=2304,i,14094906154827964589,2497890443838111947,262144 --variations-seed-version --mojo-platform-channel-handle=2908 /prefetch:8
  2⤵
  PID:3364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3448,i,2737601014441794139,11713528259929863539,2097152 --field-trial-handle=2304,i,14094906154827964589,2497890443838111947,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:2636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3460,i,7470779144826883920,11437014129896021790,2097152 --field-trial-handle=2304,i,14094906154827964589,2497890443838111947,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:1052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4164,i,16627391878970113488,4574866839976591722,2097152 --field-trial-handle=2304,i,14094906154827964589,2497890443838111947,262144 --variations-seed-version --mojo-platform-channel-handle=4228 /prefetch:1
  2⤵
  PID:2376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4188,i,4840036047878840654,4520984408953653140,2097152 --field-trial-handle=2304,i,14094906154827964589,2497890443838111947,262144 --variations-seed-version --mojo-platform-channel-handle=4264 /prefetch:2
  2⤵
  PID:1684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5036,i,508991289136015811,17657801239197364239,524288 --field-trial-handle=2304,i,14094906154827964589,2497890443838111947,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:8
  2⤵
  PID:3384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4404,i,7699276380265739027,7813527212033628141,524288 --field-trial-handle=2304,i,14094906154827964589,2497890443838111947,262144 --variations-seed-version --mojo-platform-channel-handle=5132 /prefetch:8
  2⤵
  PID:5084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=5508,i,8160310991704183769,8071611662917587569,2097152 --field-trial-handle=2304,i,14094906154827964589,2497890443838111947,262144 --variations-seed-version --mojo-platform-channel-handle=5528 /prefetch:1
  2⤵
  PID:4524
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6000,i,285548998651223490,11466812430795576181,524288 --field-trial-handle=2304,i,14094906154827964589,2497890443838111947,262144 --variations-seed-version --mojo-platform-channel-handle=6076 /prefetch:8
  2⤵
  PID:452
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6000,i,285548998651223490,11466812430795576181,524288 --field-trial-handle=2304,i,14094906154827964589,2497890443838111947,262144 --variations-seed-version --mojo-platform-channel-handle=6076 /prefetch:8
  2⤵
  PID:556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=5700,i,3196520218618119267,6269263741733818294,2097152 --field-trial-handle=2304,i,14094906154827964589,2497890443838111947,262144 --variations-seed-version --mojo-platform-channel-handle=4764 /prefetch:1
  2⤵
  PID:260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4832,i,329134597676145080,10277676994816417106,524288 --field-trial-handle=2304,i,14094906154827964589,2497890443838111947,262144 --variations-seed-version --mojo-platform-channel-handle=4848 /prefetch:8
  2⤵
  PID:4244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4836,i,12404058038706783884,4783816995411883040,524288 --field-trial-handle=2304,i,14094906154827964589,2497890443838111947,262144 --variations-seed-version --mojo-platform-channel-handle=4824 /prefetch:8
  2⤵
  PID:700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4820,i,4688742713992570200,8431815911589058487,524288 --field-trial-handle=2304,i,14094906154827964589,2497890443838111947,262144 --variations-seed-version --mojo-platform-channel-handle=6588 /prefetch:8
  2⤵
  PID:1160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5848,i,5937575609951961031,3844255136647759199,524288 --field-trial-handle=2304,i,14094906154827964589,2497890443838111947,262144 --variations-seed-version --mojo-platform-channel-handle=3672 /prefetch:8
  2⤵
  PID:4944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5992,i,6703696885532217845,4709022892279515690,262144 --field-trial-handle=2304,i,14094906154827964589,2497890443838111947,262144 --variations-seed-version --mojo-platform-channel-handle=6380 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4820

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1188

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 58b461967016818ce2213ba739aa830e079c4747cc98baea5feaffc8b09c915d
MD5 8800a672498272bad98dd79644e30101
SHA1 14a42c33d6271869cc680cadc5ae061e7092e3ae
SHA512 a17f90c73859841f3e0a3211d7f8d1027a7f8ec3a4ef87ddc96b1a39e0b52bc65decb3dd694a7092e22f06f2124864535e2e8632387dd42184abe2d3e22d7e12
TLSH
T135D022F2F32200E8C8C02A3C20030B080208C8000C833220C832C0C23ECCBC0A88F08C
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 519c15771564e3b990f45724275f48396121cbb8786965b49201465b0e38df90
MD5 10b29d76535bc1d8bdf23281480fab78
SHA1 fad886d930365e7216036388a0cd21731122fea9
SHA512 9e41845a72958d56572f3a6693ea38ef4989eb3a8c6d7d082bec0d548bb9ba309db7b9c59852cc554589273940b1946fe2494eff509b422e81b569add798b21a
TLSH
T16A61A44892F0C573FBD90536F1F3298B36309F6954833E120956F3B9BA463A8CF05856
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 00ec800ef3233cbf453ad515635cc0cdcb76abc588a715567ec15b3070f3408e
MD5 173fe155c7e4721265ddee4143e08ab9
SHA1 2f67b6db9561d45ea4d60c886f756b4fd444f6a6
SHA512 3ebfbe9a9fe15b285eb6d140747100d31146e8983a44905958bb0d38b0f13df839ed5ba52d2c91d414a985553ef36337e2f8ad24d3ba44eed03224b1021a09d1
TLSH
T11451EDA7C3E8816DCD2106F47A24AA1BCD1E0D1A93283D3ACCD9AF5B63E2031E10195F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 487417b7e0c3790768d803ea1760a58d52f1010596ce2316dfd8e89e080a6819
MD5 1a68cc60159218480c7fb152e40f40af
SHA1 25d2c63d97f139caee60ba4629e6dd615fc39345
SHA512 443a43dcc622a9bb9c8d22b25454085947f803c6cc7a10783c48d63abe50640b458cf4383ca4c43f8c61210310224d3192588bee9d63eaf5994d1850cf9135d6
SSDEEP 192:sxZlRpWJ/fOsHFIdpkFHMdA6+WNrUz/Yr5MblIgrJ:sxZlmJ/fOsH2IHuE/R9
TLSH
T1DF22B7516E68B97B8CC7D20ABA15FB13E6F9503291941E48AAFC851C09E77CD6207C0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 8bdeebf524378328669016df8ee4bd438fd378202b4577cc819f320fc2250574
MD5 0741d0aac39100ab49f6d3049d3a26bc
SHA1 a341c4c0429a568b5ee675bb9d501a2d6faadafb
SHA512 55c4959ddc35f45896b4ada75ad09397eba4e9ad69f3d49b7202db0c32dd5dd330e6369dfe78cb84b9d005184751394481e85758039bb4fcb2479b618b8999d7
SSDEEP 192:sxZlRpWJ/fOsRFIdpkFHMdA6+WNrUz/Yr5MblIg5pJ:sxZlmJ/fOsR2IHuE/RV
TLSH
T19122B7516E68B97B8CC7D20EBB55FB13E6F9503291941E88AAFC851C09E77CD6207C0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 ecdd2dd5ead534e8d3ee758dd5af5c4409368d501f3842ea2f40f98ef660618c
MD5 bf0442ac0de199488ee9d280e0d9b349
SHA1 350d3a7d3359b7b716c034dd8b2cc9c7f3430f27
SHA512 93a56eb2083e1809d5f240f608e04475e849150d5939575b9bf159014fd9d6774ac348ca822765638df277117d3ebc31577da48bf42f9d7c65b0aaad577c1be6
SSDEEP 192:sxZlRpWJ/fOsBFIdpSFHMdA6+WNrUz/YrxMblIg5TJ:sxZlmJ/fOsB2uHuE/z7
TLSH
T1C832C7526E68A97B8CC7D20EBA15FF13E6F9503291941E48AAFC861C05E77CD620780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 1ccff683d5eb00f0408737753b60194a4bb57ef2e9de7206b8fe01dae3901c05
MD5 2fb1e196b34eb8b1aad2d49795f29caf
SHA1 e3e41df27c692ddc6a18e5dad0ef38895a950cf5
SHA512 80de780264c4dc979a2c880571942e8b9637dfb6a988fc071be4d1b11194f41b3042eb59e762ef69859f7933e2fdbca0aace35d2c1201d5444b0f13b5fbbe377
SSDEEP 192:sxZlRpWJ/fOsBFIdpkFHMdA6+WNrUz/YrcMblIg5TJ:sxZlmJ/fOsB2IHuE/C7
TLSH
T11032B6516E68A97B8CCBD20EBA55FF13E6F9503291941E48AAFC861C05E77CD620780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 9158f547f9f8fce9444c5a52f13307361fe0af7f4d737e1164950213f60cb536
MD5 0a58f0309054c95697d32d4fd0b8ee5b
SHA1 c27beb12c2b2ddf721a50df1bb19d00458de86e4
SHA512 408b7b6d8302201da25209b838e342c7008449a8c93bd24ff47ee31fde365589aa4864bee7efddbae471df1ea8cb69da3f4fb47538095caa3aff36d534a57c3a
SSDEEP 768:7sy4J/DWvbtBh8F1+UoAYDCx9Tuqh0VfUC9xbog/OVCiLlc2TbUroR8HU:7sy4J/DWvbtBhu1jajiLm0b/20
TLSH
T123C2FB3B644CCA7E4FC00A9DED5E6F973E9802C796A48D4047FA994C02C77EA91264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 eb12bd95c2370758c079301c136549e9cac0f8bd52fb1562fcc7257ff4fe03d1
MD5 019d5559030e1fdf1b6e1ff356f66c02
SHA1 900bef408b691ee80505c27655f44f2fba5ac918
SHA512 c9a46dde246e6b4dfa6fa6062e6baa8f616294678f7f31dc137e0d399a7bad1ebb56e39758ca663c422076ecdc4afcc7383a2d4e4c7b53a416677076f978d89e
SSDEEP 48:KIDI1Ks04jyLEzy+suCLbyB6ISWLK9y1ALxEbYJqC4yLpBpQp9pxpbpfpjp8bpPd:KIDCKs0+uzeKEIOSc4KR2GO
TLSH
T192910D4170BB131538BD298885B4976E128136B37168EF6B7FBC44A5CE6BE040DFE8D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59624a.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59624a.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 74e2989bef125947b15b6baec8b08e86ec51ca3636e9e1d5930fb81de43835e7
MD5 ca6ba2cad55e2970263fe6ba68638c09
SHA1 d48c8db6592963571d7f14e3bf7ea0058d604e6e
SHA512 7660c6f3722397c56cdaf4b5cf739b63c340b75c81aedce2817dc315ef3b95056856f584584dafc1e2e1c43dada574b487e172c2482a9cb52f2f7b98797a0a5a
SSDEEP 384:jiFiZcI1zsNf8TUNTUlIl5sYfZuJjHX58EvOeJB3JrVQVZh6DKhHLor:OFQNewgMYfmLa8OY3hVQfYGHLs
TLSH
T130C229F248D78836D8AD9747E77E2E038EBCC053B1856A84B3985A1DCD961BFD306D11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 2ff1beb8331475fe9de0795fe7dfa5881f8a43f6f5af90af97ecb9c6a4fbfcf2
MD5 49b4b2f4bfd238ed620375b4af256e67
SHA1 93fd2c4337cb34d58c114c47549bd3f768d31bdb
SHA512 1d29945f320b9803b60bb82fe346e9cd5663b8c3ba5d2c14b1195843c16d27ec7591e202dbc64be43977d48b0e20e42b8836c28e9eb4cc6c10b87a5a13009115
SSDEEP 192:1ONg6wlD4QmiUyHeS24X58gZvOKNJyqwSJrnve+qEU6:1ONg6kY5x4X58EvOeJB3Jr2QU6
TLSH
T100123936B5A8AC3B5DE2A545F08736139FB55127E6856F84C2EC2E2C01DF7AC630EC12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 f06fc6c9cffa6e718c0bc169a39cd9b206e2cd8965f0cbf55a8debd6b56cf3b9
MD5 3676d226a895630e96727bbb60fdd2c8
SHA1 232300cfd1acede983b899a40f42a4a9f716564b
SHA512 da7d5869fa766f4c8da9b38367531b9fa748983a53f720bfb30b57f4a2ee38f6de736ad07fdb7f7c5e838c6efb578d87bd5e2765a711b83f25eaf6c3359a4d1c
SSDEEP 384:1ZcIhsNFCsYfZuSjHX58EvOeJB3JrCQVZh6DKhHLor:NhOYfhLa8OY3hCQfYGHLs
TLSH
T1F4828E32A9B85C775CF6E249F48327039FB49153E2C96E84C1ECAF1E01DA6A8130BD17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 76210493704ec580099caa6017e31329ff1291b44434c0b4076c026231761be8
MD5 5c074c9dd2b8f3c7b42610a15dad807d
SHA1 5664d9b60362531820e99a0ee34cc22fe04fdf81
SHA512 36cc91179e9384415e7b81d482f2fa5a937707375626d4b4c95f14b5126a109e5dff112f93daa821f9d3abdbdd958bde14b4dd472cea842d3ce8d54a57db9e98
SSDEEP 384:/ZcIhsNF5sYfZuSjHX58EvOeJB3JrCQVZh6DKhHLor:XhRYfhLa8OY3hCQfYGHLs
TLSH
T11C828D32A9B85D775CF6E249F58326039FB49153E2C96E84C1ECAF1E01DA6A8130BD17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 1cffde6b67107a283341dd2fc21d94af1f07825493f5dca34a552bda8d234278
MD5 0dd479f2bc044065d5454f6f0d3f04ae
SHA1 0c53a56e917430ba3752b76c7b5d4fa41d680fac
SHA512 96b91e1c4310701b4f73a15fc7de052ef80d58fb567a05e3efbe4cc4c3a383afa15e6aa01eb253a8f92ad2806e98035c6cd05ef9461e55c19bae710eaafc3dae
SSDEEP 192:1ONgV6wlDgQmiUyOeW4X58gZvOKNJ7Dlk9U6:1ONu6kgoW4X58EvOeJdQU6
TLSH
T10902F838F9A87C7B8EF2AE09F58637139FE5106BE5552F84DAE81A1C00D769C1306D22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0e89ece8-563d-489a-b48b-a174d907294f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\0e89ece8-563d-489a-b48b-a174d907294f.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 8b0f8ae5b49528ed5fb33b2a55187d98a915827a8689a05f8f6113392fef551c
MD5 c9e5be73f4def5601bb524a53f14396c
SHA1 4234db630e69f1dde962401ab9e6478be7955e37
SHA512 d73248311a2803d5678f07df2103305ef0687cad38ec242de895a809e8ef182893dc5377a9e8177704bc79e1ee13d7505de5c30b56068840a5ecce038522362b
TLSH
T115412858A6FA1148B3B76E5A9FF6686D487FB9372E07D06E10110D4F0A63B40C862B37
MD5 SHA1 SHA512 TLSH

Submit Download