7f2b926375b1f5d8a7dc8a03672fdbb0d576bee836c087c0537f6d4092432298

Analysis

max time kernel
148s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/07/2026, 12:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
application/views/admin/view_forget_password.html
Size 3KB
Sample260730-pdvgys1vbz
SHA256 7f2b926375b1f5d8a7dc8a03672fdbb0d576bee836c087c0537f6d4092432298
MD5 b9085173f00a1058d917d59b01ba495d
SHA1 73a3bc39169a21431593ec7eb4aed989d6920ef0
SHA512 f64fb993613350b3a15f5feefa1195dd4fb3f3abaa322fcc5cf09ae293ecfae14af20c8b9595de5c405c786ea51bbd45a424af68a016fa53e3a512fa16cac3ec
TLSH
T1CC81580A3D05CA5F010D9AE6603595CDB0EBE4197729CE2854BB05F70EA07DA3C1FEA3
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5372	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134298872349246756"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-876885714-46325919-1482798410-1000\{744B8A4E-D225-44E1-9570-EE1D9C968505}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3888	msedge.exe
3888	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe
5364	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 5364 wrote to memory of 5264	5364	msedge.exe	85
PID 5364 wrote to memory of 5372	5364	msedge.exe	87
PID 5364 wrote to memory of 2368	5364	msedge.exe	89
PID 5364 wrote to memory of 2368	5364	msedge.exe	89
PID 5364 wrote to memory of 4796	5364	msedge.exe	88
PID 5364 wrote to memory of 4796	5364	msedge.exe	88
PID 5364 wrote to memory of 4796	5364	msedge.exe	88
PID 5364 wrote to memory of 1476	5364	msedge.exe	91
PID 5364 wrote to memory of 2816	5364	msedge.exe	90
PID 5364 wrote to memory of 1476	5364	msedge.exe	91
PID 5364 wrote to memory of 1476	5364	msedge.exe	91
PID 5364 wrote to memory of 2816	5364	msedge.exe	90
PID 5364 wrote to memory of 2816	5364	msedge.exe	90
PID 5364 wrote to memory of 2836	5364	msedge.exe	92
PID 5364 wrote to memory of 2836	5364	msedge.exe	92
PID 5364 wrote to memory of 2836	5364	msedge.exe	92
PID 5364 wrote to memory of 6100	5364	msedge.exe	93
PID 5364 wrote to memory of 6100	5364	msedge.exe	93
PID 5364 wrote to memory of 6100	5364	msedge.exe	93
PID 5364 wrote to memory of 1500	5364	msedge.exe	97
PID 5364 wrote to memory of 1500	5364	msedge.exe	97
PID 5364 wrote to memory of 3944	5364	msedge.exe	98
PID 5364 wrote to memory of 3944	5364	msedge.exe	98
PID 5364 wrote to memory of 4600	5364	msedge.exe	101
PID 5364 wrote to memory of 4272	5364	msedge.exe	105
PID 5364 wrote to memory of 5636	5364	msedge.exe	106
PID 5364 wrote to memory of 5064	5364	msedge.exe	107
PID 5364 wrote to memory of 4160	5364	msedge.exe	108
PID 5364 wrote to memory of 4160	5364	msedge.exe	108
PID 5364 wrote to memory of 3888	5364	msedge.exe	115

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\application\views\admin\view_forget_password.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x218,0x2b4,0x7fff4709c188,0x7fff4709c194,0x7fff4709c1a0
  2⤵
  PID:5264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1756,i,14797755980674784682,10055979454701051599,524288 --field-trial-handle=2524,i,12617930115530110231,12749472565619935606,262144 --variations-seed-version --mojo-platform-channel-handle=2592 /prefetch:3
  2⤵
  - System Time Discovery
  PID:5372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1628,i,708212137657243829,16007221743262133351,262144 --field-trial-handle=2524,i,12617930115530110231,12749472565619935606,262144 --variations-seed-version --mojo-platform-channel-handle=2520 /prefetch:2
  2⤵
  PID:4796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2260,i,13621495235810112283,8822955869897285880,524288 --field-trial-handle=2524,i,12617930115530110231,12749472565619935606,262144 --variations-seed-version --mojo-platform-channel-handle=2600 /prefetch:8
  2⤵
  PID:2368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3452,i,6141440274477359808,8300449312275281545,2097152 --field-trial-handle=2524,i,12617930115530110231,12749472565619935606,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:2816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3460,i,8671468593060116012,847910524099272505,2097152 --field-trial-handle=2524,i,12617930115530110231,12749472565619935606,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:1476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4172,i,8727800012270252156,4290222644653130116,2097152 --field-trial-handle=2524,i,12617930115530110231,12749472565619935606,262144 --variations-seed-version --mojo-platform-channel-handle=4188 /prefetch:1
  2⤵
  PID:2836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4204,i,2255387972878044576,18215648817905080787,2097152 --field-trial-handle=2524,i,12617930115530110231,12749472565619935606,262144 --variations-seed-version --mojo-platform-channel-handle=4244 /prefetch:2
  2⤵
  PID:6100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5092,i,9242149728166718439,12505527622010172566,524288 --field-trial-handle=2524,i,12617930115530110231,12749472565619935606,262144 --variations-seed-version --mojo-platform-channel-handle=5144 /prefetch:8
  2⤵
  PID:1500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5100,i,14125873632820932952,9111535502540869508,524288 --field-trial-handle=2524,i,12617930115530110231,12749472565619935606,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:8
  2⤵
  PID:3944
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5908,i,11634369526171448082,685424668167867878,524288 --field-trial-handle=2524,i,12617930115530110231,12749472565619935606,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:8
  2⤵
  PID:5988
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5908,i,11634369526171448082,685424668167867878,524288 --field-trial-handle=2524,i,12617930115530110231,12749472565619935606,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:8
  2⤵
  PID:4600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4204,i,4018524790542046721,10685407127011883330,524288 --field-trial-handle=2524,i,12617930115530110231,12749472565619935606,262144 --variations-seed-version --mojo-platform-channel-handle=4256 /prefetch:8
  2⤵
  PID:4272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4168,i,16931088920987921308,17401461233541923824,524288 --field-trial-handle=2524,i,12617930115530110231,12749472565619935606,262144 --variations-seed-version --mojo-platform-channel-handle=4240 /prefetch:8
  2⤵
  PID:5636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4832,i,16321900658094452343,48680503302972340,524288 --field-trial-handle=2524,i,12617930115530110231,12749472565619935606,262144 --variations-seed-version --mojo-platform-channel-handle=4416 /prefetch:8
  2⤵
  PID:5064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2012,i,17957803368351266579,12933918481612008737,524288 --field-trial-handle=2524,i,12617930115530110231,12749472565619935606,262144 --variations-seed-version --mojo-platform-channel-handle=5452 /prefetch:8
  2⤵
  PID:4160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6180,i,10582432469958919289,10978600732846415162,262144 --field-trial-handle=2524,i,12617930115530110231,12749472565619935606,262144 --variations-seed-version --mojo-platform-channel-handle=5528 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3888

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1236

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 083d78ea5ea69126b24164f2e05fc467ce21fdcdf2ec67f8e94c4366a1284886
MD5 da79f81681859af2b76762aa37a5f73e
SHA1 53d69c959eb46848bc7ed7b5c480df864295389e
SHA512 f647681c342e36fa2f41fb9d54d089303f98b802703a42609226ef5755aafc91ef00af41a82f980c0f2819709322c59ef6cd1c18725ef5133691894902fc44c1
TLSH
T1FCD09B7077CDAC11D5450471D45547535D96CA4C24D7DB076011801D68557D9B35E067
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 965e5ede1dd95e7182bc6ed8b645e4796c53616af10fe7a02b411984e0f5fca1
MD5 252c38f22d645a5fc39fa9f1fdd92b34
SHA1 70c6079cc3ffdcb0efb6f56834b64311e1e951bc
SHA512 e23e1b164567d933593229d39744ddacb3330f715193f293c7aee9a5a95fc433809933ab830a7a1c5cdf37824965c32650c227083092c2a6488a2ab768744ad1
TLSH
T110D09B7077CDAC11D9450471D45547535D96CA4C24D7DB076011801D58567D9B35E067
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 829d99361b3d6fcb8b5e7e0107f9d964954d48a6c99e9a0fdcfae985b232ec2c
MD5 852ebf272e844d646a43e324960f63fc
SHA1 8c15a92ef2b37d49672a16e4f17625df326282a1
SHA512 fc77b3add7d2f2ef4b0cb2475247e3559a3d740a1a98169c12f6308dbdfca27a1c890c67c243423dfe75a9ece1083e69d2c7e0d3b532dc474e7b9c64254d6783
TLSH
T150613C1836CE007EE7538EB9E1EBD2013FF191B47A0B8E02E6C4F87DA925F354464804
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe594397.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe594397.TMP
Size 3KB
SHA256 ebcd842c8b1b0c60691bb85ded379c5169f86830fa9dd5cd52daaee4127a4f12
MD5 938e7739f0dea28d0b011f8f09081937
SHA1 4908033b85be4636125165a995bd580691087392
SHA512 40a520a49106e89c05de97c2fead2d6e1e1791871b0821429e6ead669b86711f5381a774750f5797e92c2c0bd3a487a54ecacdf9239e800e0721cda642ac8915
TLSH
T1B4613C183ACE007DE7538EB9E1EBC2013FF191B47A0B8E02E6C4F87D9926F314864804
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 f2330cb3d72c1258ac07db581c3eb5143f03b1e88772e86aaf4ad46a7fec5fa3
MD5 e7c00e0eac1c92854bdb5eb1b55c1aba
SHA1 97b01cda4c1961b5cb4e1078dee08602198288f0
SHA512 db75a907a8ba3157cc85b468892e8ac113c93bb67197852972731cf69a637204b1259b2441a6e8f8e425039fb54d13bad4d761d7d5e8e6514fe1a1327125093e
TLSH
T17B117DF3C7E5856E890116F06A24AE1BCE2D0505831C7D19D5D4FF6B93E3475E10195F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 0d39a41d5b26be9da8ae6076e4f2be7da62299565a9fe3faa462c100e5516095
MD5 6420839373dbf113ff1c85ea2ff3f742
SHA1 f81316540d9ea7f5c0a50499823320781f0bddcb
SHA512 31c59f12a86cd30d878172a100e33921903ea3b2331849956b6f2c6b495bf90e9e390df370afaa0fd45fef24fd9896b930b5bd6fc436d35f568e4bef03147263
SSDEEP 192:sxZxkRlkLJ/fcsE3yIdpdYHW6+WNGYwKC+iIgrJ:sxZisLJ/fcsE37+HbGV9
TLSH
T19A22C7126E38A93B8CCAD219BB25BF03D6FA503291955E48E6FC961C05E7ADD230740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 d8e5984a013eb7d4442cf2ed4f5148608c8eff7b88f184065f4f41f7de72d2c4
MD5 3718acd10a8df224a26d534492b592e6
SHA1 e945c7671e1774f42351d02e48ac25e7f9060aa5
SHA512 332ab7970c3f5e1a1a42211e8980258ac405485f81a87989f127a4051ada01e41270727803ab67e98f2f2ade8b81c298a5bc2833095ebced6b7c52116effe0ef
SSDEEP 192:sxZxkRlkLJ/fcsn3yIdpdYHW6+WNGYwKC+iIg56J:sxZisLJ/fcsn37+HbGVI
TLSH
T1F722C6166E38A93B8CCAD219BB15BF03D6FA503291951E48E6FC961C05E7BDD230740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 e7783afda06d43bf3861c3e5d030b4a5647a33bdda549f7bb5262bd711ad3d13
MD5 1bce1a8427f81f0d06e67ced092d68fa
SHA1 d45faec8e28bf7a238b4b5b7f87a10a148370ab9
SHA512 d02ecda71497926e59fb7170dac3ca5b8e6cd7666a923984172c3a4cd29a785c38272b0a80fabac03c55c54195f1fe6e948a984e4a0f6c1a0c2ffc6224e2bac9
SSDEEP 192:sxZxkRlkLJ/fcsn0yIdpdYHW6+WNGYw1tU4+iIg5QJ:sxZisLJ/fcsn07+HbGjthy
TLSH
T18222B5166E38997B8CCAE219BB15BF03E7FA503291951E48A6FC961C05E7BDD230740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 8e1ef4b34de078b96de2dfddc5bdf7714439ccd2b4fdeec8a7e841357bf0c3e1
MD5 d4a715f5eac35316a6738cce3366a35a
SHA1 db37fc37f87d7565a4708fb9a53277ea5e978243
SHA512 8142f49f376f507db119113c3e3b8dda529c871b7d9caf4c1afce3365b8c44a731a5251b71b0d772acff40c688c87d3dabe065e2c1f93ef1e077f44bdd2b41ad
SSDEEP 768:2amjYDmWvmKyE8F1+UoAYDCx9Tuqh0VfUC9xbog/OVBPLlrZ+DNrof6BaB:2amjYDmWvmKyEu1jakPLZQDmyQ
TLSH
T160C2FA3B244CCF7E4FC01A9DDD5A6F973EA802C7AA588D4047FA954C02C77EA512A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 8e1fe453f09b776a24859875f0376810ac7c4c75dfec17c9b5dc2ea135bf8edf
MD5 0127fee8a9c417a2ba177ff4732b0be7
SHA1 f9b485b705f9375a7e1c75ce1357a6a89d150b59
SHA512 077a02bdac0e890db1f6ad45159c25cca7551f1bc22406f80ef44bf623edff0c9135bc2b9584a3e190a47fbbe870d316388126fa378e8912c77cda00710944a1
SSDEEP 384:TZcIhsNik1QverA+2Drduf+k82EXH+2TUxFZOObjI9G6w7JG:LhDmCrgIHl+Z29M0
TLSH
T1E1929F366C7C5D3799E2E551F08B35134FF4907BD7D96B84E5FDAB1D048AAAC0306822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 b9ab07c1337c9dfb986a9cf88e51c01f3f1b8031312579206fe428d7a247279e
MD5 04f6aab8cd88f3443569b10d35267a36
SHA1 3ea72fec0ee3363452abb37b195f254132c14166
SHA512 9c1cf21b912393b073ca95669fcb219056f9e0d37d5478bfaed54f0b1a201b610c0ae3c1070a463d41ac80e103e7f27cc4b40247dd6bec5f2f26c0d1d1fd2b1e
SSDEEP 384:WZcIIzsNiN1QverA+2Drduf+k82EXH+2TWdFZOObjI9G6w7JG:E0SmCrgIHlQZ29M0
TLSH
T10C929F366C789D3799E2E551F08B35134FF8906BD7D96F84A5FDEB1D048BAAC0306822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 1e03fe30469439e181943da9ce1c658ded9ce97de821af2ad0d6e924b1a12a49
MD5 cbdfe39c75bd691cc992a3f918d6d7d5
SHA1 48472834b713eed9fa8b35b7a0884deb88183ba1
SHA512 f70fb28569f2f6ef0519b4bab2e171dd7e6bfe5330a7884ab8e5374797ce45b094eaf3685fc92cb19ae0244edd9c68c5eefe89bcf6dc5caf5f670a2eb6e6561f
SSDEEP 384:MZcIhsNiN1QverA+2Drduf+k82EXH+2TUxFZOObjI9G6w7JG:ahSmCrgIHl+Z29M0
TLSH
T1E0929E366C789D3799E2E551F08B35134FF4907BD7D96B84A5FDEB1D048AAAC0306822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 658d2f6121f209247b7bdf30e7c6482f15dd8d0f502842a7ab3c3373176c2662
MD5 80fa8dc61ffb32cf5954ce9c554eb19d
SHA1 8502aa1c43b10f5616341616d775d3416bd41f4d
SHA512 9354348713060c07de85eb301ca221511b89e4aa5dc5b22ff89807f3465d9b9f3ab245ec6f3eeb581f780846bef2b2e8d0bdf414dfe865be4f71073ea5bb8802
SSDEEP 192:EONq6hZ0QmiUy4dpc/+jVWjzor2tn5wOZHRU6:EONq6oZpu+k82A2xU6
TLSH
T14B02D93968786C778EE2AE45F48727235FE5116BE9956B84DAE81F1D00C779C2307832
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 fc61091d79b669c830cf8c9ebab53ac55e8c6faa0be8bdf952ebef32e9a048f7
MD5 64b0b925dda70522ce0bf93db1cf0248
SHA1 d137346dc06803fb14c31a872f79562a78840198
SHA512 ef93323d5512fd4494e389c57f3f49769cd12cb7258ade8ce3bf5a52ba40b8f02543933425bb4b60cda7a8690c9bf9628d33518cd2090d86d41d0372e1fa1979
SSDEEP 192:eONr6hZjQmiUyuJdUc/+jVWjzor2t+XH+2T95cOqGq9U6:eONr6hBDUu+k82EXH+2TI9ZU6
TLSH
T1B712FC366578AC675DD1A695F08732134EE55117DACABF84E5EC2F1C00DFBAC134A822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e524d31b-e4ba-426b-bbf3-b98a3c757d52.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\e524d31b-e4ba-426b-bbf3-b98a3c757d52.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 9c4b119d3dfc2e247b01d9b5f2ebe232dcf66816b9c02bdc5ae9142642c98149
MD5 aede979a583aa2ec97fa19a9f65ad531
SHA1 15e0c1cc94c43d54510e6d25bfa2350eefe945bd
SHA512 10db0851aca4058d9951d2cca763698b9ddef9b29aa1a6cfd7a61e588038a7fedbbff15c640561a552576a53ca3603163ef41b516536935c2fc05538b890fc09
TLSH
T1EC41EB98B6FE0148B3B76E5AABF6696D887AB8772E46D05D00110E4F0672B40DC61B37
MD5 SHA1 SHA512 TLSH

Submit Download