ac4f780358ba4326a07c3a9bb83dff5a70cbb95a22be0f4c9385efe182cd722f

Analysis

max time kernel
149s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
22/07/2026, 12:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
brochure-bvgt.pdf.html
Size 73KB
Sample260722-ph2f3a1vgx
SHA256 ac4f780358ba4326a07c3a9bb83dff5a70cbb95a22be0f4c9385efe182cd722f
MD5 dcc4e47f2e8acc6928ab7e5d2fa69d61
SHA1 72eb5f41758d30e1ff7fcf98de955011f3f5b5d9
SHA512 18e3ea8066f94830758c479087dcc045331942235967b4f490d81caa680a140da9c82ee852f67e4f0cf3d4498c0313b2734bdd6e5a7956f014ffb19cfd23a0a7
SSDEEP 768:kW7UIJz+Fi9/Ltk5YzRubj4he6e9ROg2Geir42nEiERo6+q:kcPztk5Yzzgu
TLSH
T19E7315ED27601CD8CC9581F277A821453897E4EDE6904958F29D0BA47F835DFCEA068F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4372	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134291965405594289"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-668679576-120646659-2289335452-1000\{A86CE40D-8F66-4ED6-9593-8C2144E21D83}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4812	msedge.exe
4812	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 4304 wrote to memory of 2764	4304	msedge.exe	83
PID 4304 wrote to memory of 3160	4304	msedge.exe	84
PID 4304 wrote to memory of 4372	4304	msedge.exe	85
PID 4304 wrote to memory of 3160	4304	msedge.exe	84
PID 4304 wrote to memory of 3160	4304	msedge.exe	84
PID 4304 wrote to memory of 4760	4304	msedge.exe	87
PID 4304 wrote to memory of 4760	4304	msedge.exe	87
PID 4304 wrote to memory of 3384	4304	msedge.exe	88
PID 4304 wrote to memory of 3404	4304	msedge.exe	89
PID 4304 wrote to memory of 3384	4304	msedge.exe	88
PID 4304 wrote to memory of 3384	4304	msedge.exe	88
PID 4304 wrote to memory of 3404	4304	msedge.exe	89
PID 4304 wrote to memory of 3404	4304	msedge.exe	89
PID 4304 wrote to memory of 848	4304	msedge.exe	90
PID 4304 wrote to memory of 3484	4304	msedge.exe	91
PID 4304 wrote to memory of 848	4304	msedge.exe	90
PID 4304 wrote to memory of 848	4304	msedge.exe	90
PID 4304 wrote to memory of 3484	4304	msedge.exe	91
PID 4304 wrote to memory of 3484	4304	msedge.exe	91
PID 4304 wrote to memory of 4944	4304	msedge.exe	95
PID 4304 wrote to memory of 2140	4304	msedge.exe	96
PID 4304 wrote to memory of 4944	4304	msedge.exe	95
PID 4304 wrote to memory of 2140	4304	msedge.exe	96
PID 4304 wrote to memory of 1876	4304	msedge.exe	99
PID 4304 wrote to memory of 1688	4304	msedge.exe	105
PID 4304 wrote to memory of 4160	4304	msedge.exe	106
PID 4304 wrote to memory of 4228	4304	msedge.exe	107
PID 4304 wrote to memory of 4592	4304	msedge.exe	112
PID 4304 wrote to memory of 4592	4304	msedge.exe	112
PID 4304 wrote to memory of 3392	4304	msedge.exe	114
PID 4304 wrote to memory of 3392	4304	msedge.exe	114
PID 4304 wrote to memory of 4812	4304	msedge.exe	115

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\brochure-bvgt.pdf.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffa4b72c188,0x7ffa4b72c194,0x7ffa4b72c1a0
  2⤵
  PID:2764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1724,i,11350160970906732569,380024988423087498,262144 --field-trial-handle=2276,i,6360822139301767964,15134877471795019798,262144 --variations-seed-version --mojo-platform-channel-handle=2356 /prefetch:2
  2⤵
  PID:3160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1932,i,10907670905656482162,4318224445630763204,524288 --field-trial-handle=2276,i,6360822139301767964,15134877471795019798,262144 --variations-seed-version --mojo-platform-channel-handle=2476 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2192,i,16351881540008585669,2554916265556766232,524288 --field-trial-handle=2276,i,6360822139301767964,15134877471795019798,262144 --variations-seed-version --mojo-platform-channel-handle=2768 /prefetch:8
  2⤵
  PID:4760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3456,i,10980223832282992554,15634761235599709094,2097152 --field-trial-handle=2276,i,6360822139301767964,15134877471795019798,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
  2⤵
  PID:3384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3460,i,3516503750447908881,17955217531442096850,2097152 --field-trial-handle=2276,i,6360822139301767964,15134877471795019798,262144 --variations-seed-version --mojo-platform-channel-handle=3556 /prefetch:1
  2⤵
  PID:3404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4196,i,1449065864790380192,12839457912392466119,2097152 --field-trial-handle=2276,i,6360822139301767964,15134877471795019798,262144 --variations-seed-version --mojo-platform-channel-handle=4112 /prefetch:1
  2⤵
  PID:848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4108,i,5945459716989929574,16956148063705007601,2097152 --field-trial-handle=2276,i,6360822139301767964,15134877471795019798,262144 --variations-seed-version --mojo-platform-channel-handle=4116 /prefetch:2
  2⤵
  PID:3484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5176,i,11025770466549814272,8184067369916817512,524288 --field-trial-handle=2276,i,6360822139301767964,15134877471795019798,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:8
  2⤵
  PID:4944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5180,i,3822413338014762888,18344335298778573100,524288 --field-trial-handle=2276,i,6360822139301767964,15134877471795019798,262144 --variations-seed-version --mojo-platform-channel-handle=5220 /prefetch:8
  2⤵
  PID:2140
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5916,i,3694573661825272810,3288722664470319668,524288 --field-trial-handle=2276,i,6360822139301767964,15134877471795019798,262144 --variations-seed-version --mojo-platform-channel-handle=5940 /prefetch:8
  2⤵
  PID:4488
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5916,i,3694573661825272810,3288722664470319668,524288 --field-trial-handle=2276,i,6360822139301767964,15134877471795019798,262144 --variations-seed-version --mojo-platform-channel-handle=5940 /prefetch:8
  2⤵
  PID:1876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4384,i,3780265426018152852,12296117551984319132,524288 --field-trial-handle=2276,i,6360822139301767964,15134877471795019798,262144 --variations-seed-version --mojo-platform-channel-handle=4408 /prefetch:8
  2⤵
  PID:1688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4424,i,5542583829982781173,2187476188349122884,524288 --field-trial-handle=2276,i,6360822139301767964,15134877471795019798,262144 --variations-seed-version --mojo-platform-channel-handle=4412 /prefetch:8
  2⤵
  PID:4160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4432,i,3241738895810575202,17857290613173668911,524288 --field-trial-handle=2276,i,6360822139301767964,15134877471795019798,262144 --variations-seed-version --mojo-platform-channel-handle=4368 /prefetch:8
  2⤵
  PID:4228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5848,i,8915403184367642871,18277777406686535191,524288 --field-trial-handle=2276,i,6360822139301767964,15134877471795019798,262144 --variations-seed-version --mojo-platform-channel-handle=5272 /prefetch:8
  2⤵
  PID:4592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5068,i,2505940157972435606,17396009177780736423,524288 --field-trial-handle=2276,i,6360822139301767964,15134877471795019798,262144 --variations-seed-version --mojo-platform-channel-handle=5828 /prefetch:8
  2⤵
  PID:3392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6384,i,4529364453784533088,1215000019776974043,262144 --field-trial-handle=2276,i,6360822139301767964,15134877471795019798,262144 --variations-seed-version --mojo-platform-channel-handle=6376 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4812

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2452

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 81240d13af4ca099e1358c75991e3fa5640dbb3aac72c2d98006f6159bf74aa0
MD5 96dd753cd2d8557b97ab2cd76f7fc6cf
SHA1 81697ccb13fb04a07bd47b552b3607597251f36d
SHA512 355c412a688a71b124e85c0527177b3f97efceb2a5553f8428e0913940daffd3bd176f5476b940c64eee52d543f0568112ac073984d9a64015adc15cbef552de
TLSH
T174D09224BA29A149E282007AA881EB565219DA95296B9622E620C44DBD2B925A3851C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4bf0783d55eb083b4adaa03ed8b76a2bd35b0819c8ad2530a78e1b8d6856010b
MD5 7a50c2e276f05b686e8cb6c95b86650f
SHA1 bc892af04a9d6b1bee8047f67518d676df864301
SHA512 f1d02fd9f067323214d78de08172e1a78028eba76f4754436f4d77b849e8422865dcea22be13f21c36ac2c5807b393c1dffdb0a3217c3353a517a0467461a474
TLSH
T19BD022203A28A008E282003AA880EB020208CA80282BC322E220C00CAC2B820A3800C2
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 b7692377ebd510af8acfe22137e16f8a1c8b6d30a02592646447866086e793bf
MD5 b8bd1b084000fb94581e288c96b15db7
SHA1 c6d913e9c4fd9288bf8f68c74e23b63fdffcad0c
SHA512 bc53427fcbfdbe47a806a9ef8fbf10e7f51f71ea66d0d5f9cc6b638ea1624197fe04acc7b25927cdf02a3fd536669b504ee20e19e2001f4b60a556849865cf34
TLSH
T12571E7350921B891F3901F3A70E60553FC7AC9E8F7578E9791AEC9B46927B60413E2CC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe587598.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe587598.TMP
Size 3KB
SHA256 1046e662572bdc8f4073771f2c67417004182e5a673ee503083dda12cff2183f
MD5 48c38b68a8dc97045e519944684c2de7
SHA1 513421d260be591e7e80378d9438efaaf3501605
SHA512 111b8b2eda592349b88515878e54831fd61450764775408e7613ff46319764b768f44fa88d35afbd7dccbaec56364f32f713a4f2c97c6dc93966dea27df170e1
TLSH
T17771E7350921B891F3901F3A70E60557FC7AC9D8F7578E9790AEC9B86927B60413E2CC
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 5178ed588e22d72b98a88ca5d8d9823f30eaba835a0bc6e30fa0da6b5a6972c8
MD5 76a09bb3d1fe218075060017d9f3c249
SHA1 f0d6263e5c70a6a59b68ff5e9586d5652b741b5b
SHA512 ec698eaae203ae3e61dcceea8de623eb8f7bd85d9bc77734eac49df456007a499f07d0a60c19d6f3f6a0c902fb5aa00f99ca7e7edfbca4dca29ecf9af546f812
TLSH
T1D2318BB7C3D4866E9D1116F0AA24AE27CE1D0516822C3C26C9E4FF5B93F24B1E20169F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 6ba01a1441f43a80649945c3bf68edfb717287991ae3aac3fdb3fde7b3c14440
MD5 b8087ec680f2cc2ead3a5c80aa483f5a
SHA1 d62a917e1e7e5fd2f9708e30c2887595aacccc70
SHA512 1683524df514e59b3bf5c2ff5908af8eda7744d852bf96c9ecc261558da5a036ea7972fda1dbefb343f01bee674078fb76bce6ac99bf3ca2c7f78749f4430f19
SSDEEP 192:sxZWQUnURXkt/fkstCfCodpdBHW6+WNGYCkDr8uIgrJ:sxZonUqt/fkstCbnHbGMX9
TLSH
T13832C7126E28997B9CCBD21AFB1ABB13D6F95032E1D51E58E6FC860C04E6ADD130741F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 7a4303bc9416f6d6e527a98f4f7948bba5ef3da2026e4fe9a0691897b2d3d1c5
MD5 2e58a500c69295a3f71f85cb76371406
SHA1 0a70550a68a50ee715e77e807dc7e106d54176fe
SHA512 729f9581fee87f411d44a8601517ec4b8faabda350ff476780f69564e2230c2b5c30595821610fa3ff0e2ea78ca5776ff436ea1147fec221cdb154999cf95f3f
SSDEEP 192:sxZWQUnURXkt/fksoQfCodpdBHW6+WNGYC2vr8uIg5lJ:sxZonUqt/fksoQbnHbGsXl
TLSH
T12B32B8166A28997BACCBE219FB1ABB13D6F95032D1D51E58E6FC870C04E6ACD130741F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 f526577e4679268d901cbea6c18f683dc61d76349542cf8d5cafd39e26d69c8a
MD5 51012fbf8dba7217d9a465f95d767ac0
SHA1 c6d96efd68e64edbde7311501bf58f43420abe9f
SHA512 46fe823501af18e8e09893752bf5ae9e624dde37a2c9749703eb1e6a0451090c6f2117a907ab9f30018a9c488967768dea63d9225e9dfb1914c5931de2092f7c
SSDEEP 192:sxZWQUnURXkt/fksoCfCodpdBHW6+WNGYCkDr8uIg5XJ:sxZonUqt/fksoCbnHbGMXz
TLSH
T18432C7126E28997BACCBD21AFB1ABB13D6F95032E1D51E58E6FC860C04E66CD130741F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 3d45d8827930ba6c3a809b45d221240d185658cc37969849a2567705f28cc504
MD5 b61ba57534ef1875df59e83a62b36ee0
SHA1 efd8a2045011628107e7c548ca1219ea2902eb95
SHA512 2739b2762109e854bb94a22d992ee521ac6466bbdb31c2326be74f48978fd55f4a4fdbbf1b719aef4fa99ef0cb52e95f4cd7e21ffe74e207575cc830b6cc70dd
SSDEEP 768:W+qbUj+WvSCs68F1+UoAYDCx9Tuqh0VfUC9xbog/OVHZLlRTKrnroI:W+qbUj+WvSCs6u1jaaZLbWr0I
TLSH
T1F7C2E83B340CCA7E4FC01E9DDD5A6F972E9802C7AB588D4447FA994C02C77EA512A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59119a.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59119a.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 b9a078afb6d7bf82dbda6cc59de478f69b8e7fded33600b47bb815b6e6ce0a85
MD5 1b9376357328f60ca7045f1c73b4dd57
SHA1 16e31d8113e330858c63cd56f944fcd19d911441
SHA512 2cc85cd33618b3c85bad813442c4c46233f107ac9f140dd2668eca5eb754488d71da98553647be338d8bbc68ee374ca245c832ca0de84f0313cfd703394401dd
SSDEEP 384:stNn/s3n9SfsNAsVvxrEa+lOy+HVYo5Q+Scjmw6:sj+9UqQa8Oy+VW+1je
TLSH
T1B5928E3769789D766DE65595F84B36178FA800B7C6C52F84C9EC6F0C00DB7AC031AA3A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 7a674b541f3749af8b033cc1e516c8f21eb0321a206f91eef1452ea639bc2255
MD5 65f08e53c6cdb8b3fc3f3d4c34f68b06
SHA1 1dddeb1f9eec6ba8fae1711f4946ba9dd5235f04
SHA512 f364656240e399be09e565e69b68884e15f437deb514a6a11ff950dcb612ee55573e5ed7ed30e738694aaa56d392477568a201c37d9e8bd424cd04bcac14aa93
SSDEEP 192:vONf6Db6QmiUy0xHBa+jpOmN+BRgGRrU6:vONf6uvHBa+lOy+IwrU6
TLSH
T15902D73968785CBB9EE26E49F48B27275FD4203BD9966B94DAD81F0C00D765C230B836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 068e77f9834a91b3280feca2bbdc016f5f7bbc39a722bde9330c5e6cbcb4c82f
MD5 6b88b9d5d76dd862f7a486e3f391468e
SHA1 03aa703a6cdfae2b0ca51f63ca095d77b363a87c
SHA512 3b6b716af53021e12b50c23d4a2b83e7108a3ecd12a0e45f457d9f37ed4a126b9416c9709f59e7b161ae492f11a85a5a62fc1bb42b8ef27654145e81441a9f7e
SSDEEP 384:otNn/s3n9SfsNAbVvxrEa+lOy+HVYo5Q+Scjmw6:oj+9UnQa8Oy+VW+1je
TLSH
T1FF928E3769789D766DE65595F84B36178FA800B7C6C52F84C9EC6F0C00DB6AC031BA3A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 33fe5c7206044bcf75ef972606b98d4587c7d71226a9ad4e9b9ed793264b8d9b
MD5 000cc5958d713ad06f9260a2e54ccce8
SHA1 56e63c81a98e91c110eb844d569dbb1840ad36ce
SHA512 29badc1297a64b2fab08478e0b482a2dc10be669630e8f838979b71b69c900972b050db9dd84b681dc8ff8ef29ba561742299b2d6c18c3a9dd4dfacf55a267b8
SSDEEP 384:3iF1tNn/s3n9SPzsNA8TUNTUlIlbVvxrEa+lOy+HVYo5B+Scjmw6:yF1j+9slwgtQa8Oy+Vv+1je
TLSH
T18EA26C335968CD7AAEE64A85F94B36138FA400B7C5856A95D6DCAF0C00DB2EC034AD39
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 c89afa9c5c208232982cf7f52edb51a3dbea1eea61a98d38d31ebb97d50c4cd9
MD5 40bd668cbbd1b2782baafa52d76f358e
SHA1 301612bb0909536490fa356be5759a3d759bfa18
SHA512 d8e37e651ec7146f4d22349ffe16d2d3bc1333cee2cdb375621c8e75f7a2fd863fb4fcfce6063e5b1f1bf102116e15580bccbc4ea09e0d2d17067acc43720d01
SSDEEP 192:XONZ6DbQQmiUySxpBa+jpOmN+HVPPwo5qNz2dquU6:XONZ6InpBa+lOy+HVYo5e+U6
TLSH
T142121A3664789C776DD26995F48B36135EE8012BDA8A7B90D6DC2F0C00EF69C134E83B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

61865bf6-74fd-4971-82fc-437b9f6c06f3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\61865bf6-74fd-4971-82fc-437b9f6c06f3.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 812ffe4a3027bfd3c3c4450a6f775213dedeb72ed1577ef8d852fd6a554f0c2d
MD5 fc1656dee19d6ca6521f1b9fcb60fec2
SHA1 a3b552281d065a8862bf16c45edcdf62e744c919
SHA512 92123bbfab1206e14c535cc2acccc8f49b8ecf748e4d335d2a1156fbdfeef380a335dda5b8b44e41f6b6a5e2d99db3d645ddb01e4f1eb70942a8e467a3a48359
TLSH
T16B412758B6FA1148F3B77E1AABF6A86E447E7D672E0AD45D10010E4E0663B41CCA1B37
MD5 SHA1 SHA512 TLSH

Submit Download