bbc24cf0260b7c1dd0f7091fc4044dba4791902414003ee699f0ba031a6d5635

Analysis

max time kernel
148s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/07/2026, 12:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
application/views/admin/index.html
Size 142B
Sample260730-pdvgys1vbz
SHA256 bbc24cf0260b7c1dd0f7091fc4044dba4791902414003ee699f0ba031a6d5635
MD5 d92311600f6632e0f98c0e5777acf431
SHA1 e799bd5ab234730a641b034fb62d5f7ca0461c50
SHA512 0f6c1d055daf7e1ddc565fd70c9a98f38fc3ee874141494cb2c4f3ed41f43b2d4304167592ae7e41ac95af257b92e2074f5ac82a8f4286624878ed402e1bd09f
TLSH
T1D3C08C66220C2C0C52F233B01AC02260219323C002032B255B8451233A1111DCDC218D
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4776	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134298872319233893"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-889581200-2041691093-2048517887-1000\{7FF968A2-11CE-4826-94FC-35E1305F297D}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
768	msedge.exe
768	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4052 wrote to memory of 1676	4052	msedge.exe	85
PID 4052 wrote to memory of 4776	4052	msedge.exe	86
PID 4052 wrote to memory of 4432	4052	msedge.exe	87
PID 4052 wrote to memory of 4432	4052	msedge.exe	87
PID 4052 wrote to memory of 4432	4052	msedge.exe	87
PID 4052 wrote to memory of 3700	4052	msedge.exe	89
PID 4052 wrote to memory of 3700	4052	msedge.exe	89
PID 4052 wrote to memory of 4788	4052	msedge.exe	90
PID 4052 wrote to memory of 4788	4052	msedge.exe	90
PID 4052 wrote to memory of 4788	4052	msedge.exe	90
PID 4052 wrote to memory of 4072	4052	msedge.exe	91
PID 4052 wrote to memory of 4072	4052	msedge.exe	91
PID 4052 wrote to memory of 4072	4052	msedge.exe	91
PID 4052 wrote to memory of 3304	4052	msedge.exe	92
PID 4052 wrote to memory of 3304	4052	msedge.exe	92
PID 4052 wrote to memory of 3284	4052	msedge.exe	93
PID 4052 wrote to memory of 3304	4052	msedge.exe	92
PID 4052 wrote to memory of 3284	4052	msedge.exe	93
PID 4052 wrote to memory of 3284	4052	msedge.exe	93
PID 4052 wrote to memory of 3108	4052	msedge.exe	97
PID 4052 wrote to memory of 2216	4052	msedge.exe	98
PID 4052 wrote to memory of 3108	4052	msedge.exe	97
PID 4052 wrote to memory of 2216	4052	msedge.exe	98
PID 4052 wrote to memory of 2140	4052	msedge.exe	100
PID 4052 wrote to memory of 2816	4052	msedge.exe	104
PID 4052 wrote to memory of 2240	4052	msedge.exe	105
PID 4052 wrote to memory of 404	4052	msedge.exe	106
PID 4052 wrote to memory of 3960	4052	msedge.exe	116
PID 4052 wrote to memory of 3960	4052	msedge.exe	116
PID 4052 wrote to memory of 768	4052	msedge.exe	117

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\application\views\admin\index.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2b4,0x7ffe0732c188,0x7ffe0732c194,0x7ffe0732c1a0
  2⤵
  PID:1676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1836,i,4220092144509858766,8743277693153658794,524288 --field-trial-handle=2152,i,11553601520983410297,2320650927386079497,262144 --variations-seed-version --mojo-platform-channel-handle=2180 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1640,i,7611460544380525139,12862696110903394243,262144 --field-trial-handle=2152,i,11553601520983410297,2320650927386079497,262144 --variations-seed-version --mojo-platform-channel-handle=2148 /prefetch:2
  2⤵
  PID:4432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2612,i,409850403599902242,10036446363282696243,524288 --field-trial-handle=2152,i,11553601520983410297,2320650927386079497,262144 --variations-seed-version --mojo-platform-channel-handle=2620 /prefetch:8
  2⤵
  PID:3700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3488,i,1533205307671783295,16891167794058859767,2097152 --field-trial-handle=2152,i,11553601520983410297,2320650927386079497,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:1
  2⤵
  PID:4788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3496,i,4459025536343737768,10468757233852774083,2097152 --field-trial-handle=2152,i,11553601520983410297,2320650927386079497,262144 --variations-seed-version --mojo-platform-channel-handle=3544 /prefetch:1
  2⤵
  PID:4072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4276,i,10863553575767289855,17537131782276414564,2097152 --field-trial-handle=2152,i,11553601520983410297,2320650927386079497,262144 --variations-seed-version --mojo-platform-channel-handle=4336 /prefetch:1
  2⤵
  PID:3304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4312,i,378768603264101116,12835225404401617197,2097152 --field-trial-handle=2152,i,11553601520983410297,2320650927386079497,262144 --variations-seed-version --mojo-platform-channel-handle=4364 /prefetch:2
  2⤵
  PID:3284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3696,i,16417562031399883205,17609397188288338418,524288 --field-trial-handle=2152,i,11553601520983410297,2320650927386079497,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:8
  2⤵
  PID:3108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5088,i,3620957197340718315,17754200130190779238,524288 --field-trial-handle=2152,i,11553601520983410297,2320650927386079497,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
  2⤵
  PID:2216
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5780,i,8745421150708800702,16976712806599768693,524288 --field-trial-handle=2152,i,11553601520983410297,2320650927386079497,262144 --variations-seed-version --mojo-platform-channel-handle=5700 /prefetch:8
  2⤵
  PID:4576
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5780,i,8745421150708800702,16976712806599768693,524288 --field-trial-handle=2152,i,11553601520983410297,2320650927386079497,262144 --variations-seed-version --mojo-platform-channel-handle=5700 /prefetch:8
  2⤵
  PID:2140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5780,i,12064633695382404280,17497388981063591535,524288 --field-trial-handle=2152,i,11553601520983410297,2320650927386079497,262144 --variations-seed-version --mojo-platform-channel-handle=3704 /prefetch:8
  2⤵
  PID:2816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5864,i,7465374940104288248,14250774650759795078,524288 --field-trial-handle=2152,i,11553601520983410297,2320650927386079497,262144 --variations-seed-version --mojo-platform-channel-handle=5696 /prefetch:8
  2⤵
  PID:2240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5872,i,15202630098906872898,4791385205216552438,524288 --field-trial-handle=2152,i,11553601520983410297,2320650927386079497,262144 --variations-seed-version --mojo-platform-channel-handle=4572 /prefetch:8
  2⤵
  PID:404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5180,i,3892815393512489850,17323362718551164220,524288 --field-trial-handle=2152,i,11553601520983410297,2320650927386079497,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:8
  2⤵
  PID:3960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=760,i,6649705169979323072,3039683511249147267,262144 --field-trial-handle=2152,i,11553601520983410297,2320650927386079497,262144 --variations-seed-version --mojo-platform-channel-handle=756 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:768

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2036

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 11d3c4c52f9fc9cd2b10a22b48769759f994fd6364f9a0fc145f4cd2c2a22e9d
MD5 4751cf705a737c4226029624bf43b9a8
SHA1 fd8cf726ee3f8f75b97147829de5553530caa82c
SHA512 46e3fedbf7fa14bdc2b3aad129f2879a9d24252f5d7bd9b55766bc32a6b82ea77aaf193bcdbdf4423e3b67ef84955e589b6077609344091ef72204c1d50b0dab
TLSH
T17ED09B307A58A58BD14360F1A4114B4115375557205397757521508E9E98055B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 701082e4ac35f878dc5ff6eb27989aae9d20d9b5662643e20b3acd1720b367fc
MD5 2b3686986ce1fd99f079eb226e8b0a8b
SHA1 0d2cdee36351378b91ed7f6ecdb43457fe4d7b5d
SHA512 937da61c495fd21a02bb76a63556dec83ce132f1d1830ff8d9af6212d15f1844766dd4abadd15ea61b48f8ae03b52baca44c99117714c705da840dbff8f116dd
TLSH
T182D09B303A58A98BD54360F1A4104B41153755572053D7757521508E9E99095B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 152b02052e2918219d57c8a0cf076411c35d678f9f3e28ff81993ab1e44cf872
MD5 1efa0d9b494fef433c8c068ad14add79
SHA1 311e20dcc0f24cfb9a8bfc18bdc5fd52f19f0d22
SHA512 b345f3c0ddc04352e21fcd35411971d4a873385b0fc47bba37951168a63922d829dab4f7264117c5eaebdd23f8c16b82eb46acf0e326146da2f996dacdeb2f26
TLSH
T1DB61F8FD176208E1E7694071B0E2064074BC3EDAF93F7E8E535088FA6616F668F5928C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58e26c.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58e26c.TMP
Size 3KB
SHA256 1d4173db784ae7e5cc5d0ff55a7b3553da4e1d165f51883e74764c019fd04c96
MD5 928b61ea82f760aadc453f215edc9d0c
SHA1 1ced17603651f7fc29e73a0d7260bf969818eebd
SHA512 4ef4dadb67117f69c8d42e03e5bb0760e418f02c901da77aed4db4e70ffb82bd519bb6d907a6fe104f4d867bfd890c195348d46b713a1984d560b11311b1bccc
TLSH
T1CE6108FC176208E1E7694071B0E20640747C3EEAF53F7E8E535048FA6606F658F5928C
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 478B
SHA256 b5a72586872f8f4f7a045854f905c87611d679fc1aa27c888794815ce93f7b24
MD5 059548f700d800407636a63d726f80c4
SHA1 b1edbde952bf77224142346df580bfa69794ee4b
SHA512 2b15d7cff6abd0bdf2880fcd8a0690638e91d45c5edcb8177469a321d9dac13b03956080783bd435c4884b70353e3d03bb53aa680d2ac25c4b57503bd9a2313b
TLSH
T127F09EB383E0556E8A0142F09518AE17CE6D0442831C7D65C5D4AF2B83E2474D400D9B
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 59dce14cfbeab3967469fbb346f0cfd70f23466909a789159bd009afcfb55371
MD5 3bbd462945117df49a4f7d878900e9ae
SHA1 d310e6f5bc502e4dd17ade8a41f79bfef95f5ef2
SHA512 bb4ac4a5f5389355a0a0c0e93e6e1974c91a64227561b4c0d9bed4fad426c9a38a98882802c87181563877b1837865102e20659307f806f690ca578f550f63b6
SSDEEP 192:sxZ+/yM/jK1Ml8UQUkA/fNsm/dSIdpHgHW6+WNGY9IKn8CFAlRIg5QJ:sxZ+7qvA/fNsm/VAHbGynqG
TLSH
T1F352C616AA349977CCDBD209B991BB53D6F94472D2900E44A9FCCA1C01E7BED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 7c1680047f977e7062d0d17be97e3a237852ebb53910aefe04051b2db6265260
MD5 08c0cbf72624dab6ab8569ba5031943a
SHA1 e6c5146f19312f02fb755ebb26abbacc517a1da3
SHA512 2dfd764f4dad2072e4d1c496659141f27c7f911d0e978b9a7d8a7eac73829914788793aa48348dca803e399fc1abd3bdf51dc8fb01ba22df974b413015cfece4
SSDEEP 192:sxZ+/yM/jK1Ml8MkA/fNsW6dSIdpdgHW6+WNGY9IKrFAlRIgrJ:sxZ+7MA/fNsW6VuHbGV9
TLSH
T17442D716AB34A977CCDBD209BA557B53D6F90472D2900E44A9FCCA1C00E7BED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 ec2b98f422aa9f09199c17f7138fd2e7f6fa87f772cee4760aabc8f90e3cbb54
MD5 beb60f43fa61d59b415fbfb782ac08d0
SHA1 82778178edc118061b918181eb677c47919590e4
SHA512 626a8d4ecc723e516e12b73f06aca79ef051b8e4fc0d0e41dc4d2bbd739e74a049ad098a879b23ac989b6d9f52d881f4558387f0311423eda14a59fc521bab0a
SSDEEP 768:C/cv21wWvu+Z+8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjFLlwmWN9ro3g66:C/cv21wWvu+Z+u1jaeFLeRN23q
TLSH
T13BD20A2B280CCB7E4F841E9CED2A6F8A6DD801CB57988D5447FA484C02C77EB511B59B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 e1aafd74737bab02580fe536ab3114ec66de8a0abe523169055dd053ee7feb0a
MD5 14c580c9f6a2714e24aca2a32c1ad6ad
SHA1 1aea8df334733b08a256aefb5a1ed113140d5991
SHA512 bfffb94408968c3117283341eaa0132ae1f4fb86b47ab8fd2b9ea34846a18f3f897c1797300049c80c0cbf3db6c0404b008a9dc763738161d1279153baef45b2
SSDEEP 96:KaRklRnHnqlPKZThqKLfTzqHxJSrBD+w/OBF/Rxxwlgs2dxKe42fxaXv4dxSKG8K:mTV/OBF/RxalgBdz42foXv4dxSPN
TLSH
T1DA913412713A0282283E694CA795E52ECE9174E67468F42B7FB840A14F67E215FFC4DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

656d9e58-49e8-4d49-be9b-8315bd24d268.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\656d9e58-49e8-4d49-be9b-8315bd24d268.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 118f1b0179aac945ecb9578d805d284f1baf99cb17bb2adc4dedbbde9c1db11c
MD5 8311131e3119a47071bbc1bbbcbffb3b
SHA1 fadcc1401e4eb3bba12625803c2b69662b8d5dd2
SHA512 e4edfd4b8290ebabe8fb4659f259e93f76b1d169ac1a069598a9665c5b4f38e3ca5a9c22801d425e80fa3e4b6e73b0a528d9e3ee39752722e19fcf2a5edcad8c
SSDEEP 192:u3LsNlUUwQmQflQ+YLe7JBQmiU1SIJj4e+CGy+FdeL9oCd1FS+2W+OuSJiDqgU8:osNlUUwKdQzilfgcMe+CMdceCBS+2W+5
TLSH
T170322B36AD745C779AE2A244F44735139FB94077DACA7F90D6EC9B0C01DF6AC230A816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 856e7d93b1b188a0475f07ab261bb58d58961807e6cb9a0a6d9239417a05c3a4
MD5 037c03a9570d8b5e8500111eddd0a4c9
SHA1 3c473fcfea15682c40bd82cb8b725ddae4423553
SHA512 d3bee3320fd0c6b2007313b518e7660659d8d2a667338b854ecd0e372e3f6f5849f2872630fadcc6cc78280318dd202a5bf2cec5061e55525e7b35ad0812707c
SSDEEP 384:IiFiZcICzsN/8TUNTUlIlpH8XKdQzilfgcMe+CMdceCBS+2W+avTOObjI9G6w799:TFQKawg5cOnklCclVcT29M99
TLSH
T113A28D339C648C7BEAB69A41F48A35138FF95077DAD5AB80E2DDEB0C01A75EC1306C15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 4ceb1ffbd00bc73b5aa669df1327c1245cdb9961a8e0f0a4f700bb6354f53613
MD5 c34e03e81af616e3d016fd1cbbca4567
SHA1 7a4323820341872819e24f192db5617781258146
SHA512 a5d5d47f3d7646e296659b29b7f5cad586a51a6175927a8494331bdaaef850f2f84de21e83a2d27b8265cf553ddb7dd215d591c9ea0f62ecee90b7c723cba5ed
SSDEEP 192:JONU6v+YLNQmiUyTXZh+CGy+FdeL9oCXusAfU6:JONU6vz/GZh+CMdceCDmU6
TLSH
T1D802E9396D382C6B9FF2AE45F5873A275FA82177E9912F84D9E81F0C01D765C2306826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 16KB
SHA256 901f3fb3f0f196a75388104f794d19c3fe41d74a698045e30e732697fd0fcb94
MD5 5f2dbfa712badb0f1e62faba81b38c7c
SHA1 9dfd9b0d037909d1066526bbed5315d58c404fdc
SHA512 db9bf5399a113cc13c959c5efd7ae9324374dd8bd7cc5eaaf789471e363d724b1f69464360496f16f5e71ec7870404fd262f109c8c4fd942b396708f7b51edc1
SSDEEP 384:XsNlp3FKdQzilfgcMe+CMdceCBS+2W+rLTOObjI9G6w79e:XtcOnklCclVvT29M9e
TLSH
T134726C36AC345C7799A3A611B48735139FB95077DBC92F80A6EDAB0C02DB6AC5306816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 97c3fb5b840a56f1da5eb7969d67610286b5fce133598fa89c91f64f62ff3a22
MD5 923fd3ddb72bf85084ecdbb1106f1ae3
SHA1 5624f9627c2e145ff34092c800785b158c0cd69d
SHA512 64bf15ca400f08b386d8955210a1cc01fa80093280f26f617c739fcb8afe872a5979e4f8a221299e96d9bfd7af5eaba551e47b85c9c2a5d37fb15fc2414e1cd7
SSDEEP 384:YZcIhsNlpH8XKdQzilfgcMe+CMdceCBS+2W+rLTOObjI9G6w799:mhucOnklCclVvT29M99
TLSH
T180929E36AC345C7799E3A511F48635134FF99037E7D96F80A1EDEB0D06EB5AC1306816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 ed179e9ee025001b5b02618d2a1c81db8021442e337a944216a0a1df79e611cc
MD5 f69a75365f6ac123928032ee31b52050
SHA1 047c4691eaf60c81ccbe02fd971110bfebfed666
SHA512 35971cdfec158771aab8c5771ebd2f89dd9ae3199f5e6f17a7fbac7074ca2fb29e92800fa4c2c9503b508276e94a4e053d301bf64209044aeea9e1624c35cab3
SSDEEP 192:kONg6v+YLhQmiUyEiXch+CGy+FdeL9oCd1FS+2W+dCHDqgU6:kONg6vzLzOch+CMdceCBS+2W+KTU6
TLSH
T1E7123B36A8385C6B5EE2A551F48335135FA85123EECA7F80E5EC6F0C02EF6AC1346816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

70b01c62-dd06-4986-9ee2-d689575e5edc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\70b01c62-dd06-4986-9ee2-d689575e5edc.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 b5134a1f2c0fe84b9a39145fe45b2c723fbd863ae8279c4bd22237628f21ff7d
MD5 f9ba8c0f1d9aba476086b3810e770f1c
SHA1 b967cd0b5d1bd06d01b67d3ffaae8f9e55086ca9
SHA512 f63d0062bcf9827fa62e0823c85c5e6038eecbea84003c6a95e0ba1babb20b9501f07442d4dd0d402c76b88009c47f941dd115066ddbd5761e17aa433e9fc286
TLSH
T1B0410A58BAFA1158B3B77F5A9BF7A4AD447F78772E0B949E10110D4E0A62A00C871737
MD5 SHA1 SHA512 TLSH

Submit Download