bbc24cf0260b7c1dd0f7091fc4044dba4791902414003ee699f0ba031a6d5635

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/07/2026, 12:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
application/views/admin/index.html
Size 142B
Sample260730-pg1hdaxcjc
SHA256 bbc24cf0260b7c1dd0f7091fc4044dba4791902414003ee699f0ba031a6d5635
MD5 d92311600f6632e0f98c0e5777acf431
SHA1 e799bd5ab234730a641b034fb62d5f7ca0461c50
SHA512 0f6c1d055daf7e1ddc565fd70c9a98f38fc3ee874141494cb2c4f3ed41f43b2d4304167592ae7e41ac95af257b92e2074f5ac82a8f4286624878ed402e1bd09f
TLSH
T1D3C08C66220C2C0C52F233B01AC02260219323C002032B255B8451233A1111DCDC218D
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5004	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134298875732485610"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-876885714-46325919-1482798410-1000\{4C2BD032-9072-4821-8D9C-A446D93B7771}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4316	msedge.exe
4316	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 1528 wrote to memory of 2992	1528	msedge.exe	85
PID 1528 wrote to memory of 2040	1528	msedge.exe	88
PID 1528 wrote to memory of 5004	1528	msedge.exe	87
PID 1528 wrote to memory of 2040	1528	msedge.exe	88
PID 1528 wrote to memory of 2040	1528	msedge.exe	88
PID 1528 wrote to memory of 1648	1528	msedge.exe	89
PID 1528 wrote to memory of 1648	1528	msedge.exe	89
PID 1528 wrote to memory of 2296	1528	msedge.exe	90
PID 1528 wrote to memory of 4524	1528	msedge.exe	91
PID 1528 wrote to memory of 2296	1528	msedge.exe	90
PID 1528 wrote to memory of 2296	1528	msedge.exe	90
PID 1528 wrote to memory of 4524	1528	msedge.exe	91
PID 1528 wrote to memory of 4524	1528	msedge.exe	91
PID 1528 wrote to memory of 4484	1528	msedge.exe	92
PID 1528 wrote to memory of 4484	1528	msedge.exe	92
PID 1528 wrote to memory of 4484	1528	msedge.exe	92
PID 1528 wrote to memory of 3456	1528	msedge.exe	93
PID 1528 wrote to memory of 3456	1528	msedge.exe	93
PID 1528 wrote to memory of 3456	1528	msedge.exe	93
PID 1528 wrote to memory of 1788	1528	msedge.exe	97
PID 1528 wrote to memory of 1864	1528	msedge.exe	98
PID 1528 wrote to memory of 1788	1528	msedge.exe	97
PID 1528 wrote to memory of 1864	1528	msedge.exe	98
PID 1528 wrote to memory of 4660	1528	msedge.exe	102
PID 1528 wrote to memory of 3356	1528	msedge.exe	109
PID 1528 wrote to memory of 780	1528	msedge.exe	110
PID 1528 wrote to memory of 1332	1528	msedge.exe	111
PID 1528 wrote to memory of 4936	1528	msedge.exe	112
PID 1528 wrote to memory of 4936	1528	msedge.exe	112
PID 1528 wrote to memory of 1776	1528	msedge.exe	113
PID 1528 wrote to memory of 1776	1528	msedge.exe	113
PID 1528 wrote to memory of 4316	1528	msedge.exe	116

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\application\views\admin\index.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x218,0x2f0,0x7ffb6119c188,0x7ffb6119c194,0x7ffb6119c1a0
  2⤵
  PID:2992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1924,i,5082356010554073024,16229405681686480688,524288 --field-trial-handle=3080,i,96822035709238729,4228024878155700777,262144 --variations-seed-version --mojo-platform-channel-handle=3172 /prefetch:3
  2⤵
  - System Time Discovery
  PID:5004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1676,i,16204659246378621629,13964463907906572534,262144 --field-trial-handle=3080,i,96822035709238729,4228024878155700777,262144 --variations-seed-version --mojo-platform-channel-handle=3064 /prefetch:2
  2⤵
  PID:2040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1752,i,4486353023922145090,8172400946626995715,524288 --field-trial-handle=3080,i,96822035709238729,4228024878155700777,262144 --variations-seed-version --mojo-platform-channel-handle=3240 /prefetch:8
  2⤵
  PID:1648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3500,i,16145454350461327072,3583736904992095601,2097152 --field-trial-handle=3080,i,96822035709238729,4228024878155700777,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:2296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3508,i,4453834814062724735,8887103587944929397,2097152 --field-trial-handle=3080,i,96822035709238729,4228024878155700777,262144 --variations-seed-version --mojo-platform-channel-handle=3536 /prefetch:1
  2⤵
  PID:4524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4168,i,13858745104726046689,3909505753314562610,2097152 --field-trial-handle=3080,i,96822035709238729,4228024878155700777,262144 --variations-seed-version --mojo-platform-channel-handle=4176 /prefetch:1
  2⤵
  PID:4484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4236,i,142433688397832892,8065993224881991773,2097152 --field-trial-handle=3080,i,96822035709238729,4228024878155700777,262144 --variations-seed-version --mojo-platform-channel-handle=4320 /prefetch:2
  2⤵
  PID:3456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4656,i,7016835717028174339,13966664595499595410,524288 --field-trial-handle=3080,i,96822035709238729,4228024878155700777,262144 --variations-seed-version --mojo-platform-channel-handle=5012 /prefetch:8
  2⤵
  PID:1788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5072,i,6707191144708837300,13602004563918059623,524288 --field-trial-handle=3080,i,96822035709238729,4228024878155700777,262144 --variations-seed-version --mojo-platform-channel-handle=5168 /prefetch:8
  2⤵
  PID:1864
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5872,i,14861941345107277398,15439604650006262786,524288 --field-trial-handle=3080,i,96822035709238729,4228024878155700777,262144 --variations-seed-version --mojo-platform-channel-handle=5892 /prefetch:8
  2⤵
  PID:2652
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5872,i,14861941345107277398,15439604650006262786,524288 --field-trial-handle=3080,i,96822035709238729,4228024878155700777,262144 --variations-seed-version --mojo-platform-channel-handle=5892 /prefetch:8
  2⤵
  PID:4660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4344,i,15775690057502616812,9444172556849799693,524288 --field-trial-handle=3080,i,96822035709238729,4228024878155700777,262144 --variations-seed-version --mojo-platform-channel-handle=5932 /prefetch:8
  2⤵
  PID:3356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4476,i,3693539418177589705,8049244770026720590,524288 --field-trial-handle=3080,i,96822035709238729,4228024878155700777,262144 --variations-seed-version --mojo-platform-channel-handle=5940 /prefetch:8
  2⤵
  PID:780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4552,i,2293963074644346393,15951343132334034606,524288 --field-trial-handle=3080,i,96822035709238729,4228024878155700777,262144 --variations-seed-version --mojo-platform-channel-handle=4560 /prefetch:8
  2⤵
  PID:1332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6132,i,17679791380917317143,16004635637190893103,524288 --field-trial-handle=3080,i,96822035709238729,4228024878155700777,262144 --variations-seed-version --mojo-platform-channel-handle=6172 /prefetch:8
  2⤵
  PID:4936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6164,i,14780456421260319893,13823581135419918062,524288 --field-trial-handle=3080,i,96822035709238729,4228024878155700777,262144 --variations-seed-version --mojo-platform-channel-handle=5740 /prefetch:8
  2⤵
  PID:1776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5332,i,15098851536875282767,7949394111160292383,262144 --field-trial-handle=3080,i,96822035709238729,4228024878155700777,262144 --variations-seed-version --mojo-platform-channel-handle=6128 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4316

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4444

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 8bd193269cbc0101b18807144d6cd741576381f849ecee6df4fd3079b1e2a2ea
MD5 7f4cc8bd47cae9e9cfcbdc3a9dea31d4
SHA1 6406135db9fdcf767dc9e78333ef0cb8dfd551a1
SHA512 894acd81265a2f42a77360eaacfcdb7e50c7d9b0a2718871318cc1ab538e27cb24b8d3dba4cdc1a6de030a8f0012aac3b2f7e8fbaaf939ef83c5f7ce1469a61f
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7S:fwUQC5VwBIiElEd2K57P7S
TLSH
T1A2B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 6de34b260036ecaa4ce5839bc4a7ff7495e50b7b94349b12d9f840ca0e76da3b
MD5 56d82099872fb501c566d072ae897035
SHA1 2c96501551fc13c09496780960d8e7ccb4957b77
SHA512 c4b4017256caf25e88f146e6104134cddfd15089203e8e74c5196627fc92897f9fe7e3fc5c8305032be88e9409cdbc5dfe1e81017fcd5e38b3579b3d823b4a41
TLSH
T160D0C073378C7C00EA090170D013C3031FA7855824C39F03B100C01C54B43D9738B093
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f5dece638cd89af82b06bd2fcb3d1738eef64d2275be237184ea8bff7af3fdfa
MD5 f19ec2293392af872f10929c41627e26
SHA1 0576f5277c470f5bb8c3f4d3786ca8d967d0a33e
SHA512 4cc85dc71d34bb516f8fe45b565a6a9b4cda255a931f33289247ed84150baf0e2df40fc87109df41771553b92545ed858197cdd3d673694c83458cf9812aa9dd
TLSH
T16CD02272268C6C00EA090170D01383021EA6855824839B03A100C01C44A52D9728A093
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 85e04043b66cced47f89a5ec71065bb441f3ff3f4af19fb0ca8ec59d30a5fe80
MD5 1a2e28049f9c7a0e0989d48c76693893
SHA1 afa02a488b37b7ce32afd0ec4b6ea297f3a7f474
SHA512 7f84263f01254f92de9a33d07ae6e5ba31ada51e5556e1317dd02a3528292d06aec9ba8f335802a8bda95cd11740011b6c96b59c201885c053318cc08aff4bbd
TLSH
T1D9615D1802C24972EFBE1172C0F196193EF3599F8EDB8E1247E4C4FE6039B5EA9E6004
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58ae8b.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58ae8b.TMP
Size 3KB
SHA256 b76d7a6cb65206ba3c92ea7a16de03abe676f1c2a8629d7be6ad89a3887ff0c2
MD5 bac8fee6d0a8e127ab868bafe5a12ef1
SHA1 f0cbfbdf23c74fe26f259db11338cd60a851c58c
SHA512 76acd6dd8112a80bde72a8da16f16b2aa343aa85a946711ec66af351f2c47c09c3864ec59aa69e801c437405a8f12d6618f65fbf07775a5c616ef35eb6344fff
TLSH
T1A7614C1802D24972EFBE1072C0F196193EF7499F8EDB8E1247E4C4FD6039B1EA9E6004
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 733B
SHA256 68d221f1a811ca0c3e0655ef4c0f22ae81e1db603d206795b54d6157bf77c4b4
MD5 f89f9c92afe3e79544d8c522fb2d5fe5
SHA1 fde8122dd36c4d5b916ddf2e973d5ee7c94936be
SHA512 9e559be64a192a78fbaf74ea6e90c8d462184d0ae9667165c4ed325b1c8143fa45d3baf45627750cd160b5704369671d5826962928c9ee68f24ab1063716f0c5
TLSH
T1220168B7C3E4856E8A0056F06A18AF1BCE2D0906832C7C5AC5D4EE2BD3E3475E101C9F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 c5886845b662be2b94201b9e7e37e98565441d5bda30c573fb25d174438d8ca6
MD5 01d1cf1e6185a2dda6019280c9e0e8b7
SHA1 8f7526ac874f8fb22a55ef9f234410d9a0da26cb
SHA512 8c37152fdeecaa4a95d504b7d0e117a48c115e29d559cb9cfd8a7e76c2d424348f80e73d49acb70965fae60f4b108e0c3d9f53647dfb4df40d0d89b2e8fb4995
SSDEEP 192:sxZLRgyM/jK1Ml8Mkc/fpsrY5Idpd7HW6+WNGYwK8W2IgrJ:sxZL+Mc/fpsrYSRHbGb9
TLSH
T1FA42F806AB349977CCDBD209FA55BB53D6F54572E2900D44A9FCCA0C04E6BED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 5d6599651ca7a6b2f079fa0a06128220ea2596f8bd59dfdb47266a5bb7f2ec54
MD5 655cec76fe0f3f152dd3d594c9b23555
SHA1 c4a0c62d09e5c82c0385580dd761cff8027073e8
SHA512 367f1d5fd9971f97146b629fee943b992e35a2de82a2e068d8cac505cb2e0a7658dd431e2913eb68e4118c753642b5e67a83882242499f61834a2782a47488b9
SSDEEP 192:sxZLRgyM/jK1Ml8UQSkc/fpscn5IdpH7HW6+WNGYwXl+2Ig5XJ:sxZL+qRc/fpscnSbHbGxv
TLSH
T1BD52E816AB349D77CCDBD209BA517B53E6F54472E2900E44A9FCCA0C05E6BED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 3a39c6fdfa3071767102c7ea6db31cb26be47745c0213fe06928978252fa6a7b
MD5 986413f5940274948cc53ed39ec9359e
SHA1 704d0e3828d709ca7ada12a601799789e8841abb
SHA512 41ac9625e27ed003c0fcb37cf37439ed98763a184dff0cdbfb43027fb809f9c1c6f4904784984768f8aedbf06b3839c6196ad56636c19c418ee56ce0433d590c
SSDEEP 768:JG4jeXmWvmKLE8F1+UoAYDCx9Tuqh0VfUC9xbog/OVhPLlrZ+diroh6cVaH:JG4jeXmWvmKLEu1jacPLZQd5Dm
TLSH
T14AD2093B280CCF7E4F844E5CED26AE976ED801CB6A584D5447FA894C03C76EB512B49B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 eff94241645a397560f49a1dcc8227f7fb766d5897ccf92dbb6370fb19338154
MD5 eb35c064bf98f6edfd2b22bdbc777dcd
SHA1 29e023659c67e0ea0221d2ba5b7655104ec5e8fb
SHA512 b32f675d0d7e996a7d8e83a52a44c230ace2f5e052fb5352bab1fc44bf63a00e1fa36178ea04b69811e2f6ff0e946a640a0fcad6a7610cc51b21487cd050c085
SSDEEP 24:KdhfsX+a7djP34HL+uIjL3KighaV31EBnSmZMM8fcyXYsfj45a2dOuq4GC+ZIjkA:KceI3KLKIjy9lI5KGUcm2IXKDqsXy2
TLSH
T10D914696717B46023C3E260C9791DA2ACD81B1A37024B42B7F6C04F66F26E109EFC8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f1d9cb73-1728-484a-b648-a2ff272d44cb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f1d9cb73-1728-484a-b648-a2ff272d44cb.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe594a4e.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe594a4e.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 a56a8b0ed35e49642814b7152526b04482b2d3183530f1876fa422cc3cef5a2d
MD5 5ae58a10436cd7e0c423f7e58715ecc7
SHA1 c6b0698059f9a0bfc464a4ba767ddc894bd3d39e
SHA512 510f54cbff604c1d4c2646bfeec833d17f68caf240e18ef815023bde9a87e638516de3ec2aa7e41593a2729914ca938d60b827a62955f17349317a597a7e975e
SSDEEP 384:TtsNYqacO3nyf+j8IMX/+2xF9d+wvDm4vE36:TtKIaj/lL9d+w7
TLSH
T10A724A366869AC275EE2D685F14732135EF9801BDBC56F90D6EC9F1C00DE2AC2307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 b86c9a1b7050394f65098b45775b550528093ea49b19c4655372c63e7c520582
MD5 aeef3273a4e7bf47f43923bf232526c4
SHA1 ba7e9bceedb7990f3ebaadc1618f74ee33e05d96
SHA512 436996dee1555846f61409a1cc8ce88b4fb9f0bcf861402d3c0969e2dc101bcc2b1d9d4915b9f165a196f0faeac024b29e9f2143a1b4f74aeb8c45f0f41beae0
SSDEEP 384:xoiFiZcIzzsNI8TUNTUlIlPacO3nyf+j8IMX/+2LF9d+wvDm4vE38:xzFQX9wgRIaj/l59d+w3
TLSH
T11EA26C335D649C2BAEF6DB85F54B32135EF94027DAD5AA90E7EC9F0D009A2AC1307C25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 b02733d3098c18c9582edd3bebdd7dedb4b7f019666c55db4d8c85eb579eff95
MD5 438d599a02bd58f04527357575af0076
SHA1 a42af828e86d60b33401809baca6c5fff6e0951b
SHA512 fdb2471835a7214e4c5048425fcade3fb65d6c23b74dfc806aa6769708acd1f8cd01665530ec5145458c6e2c476a35c9e1d8a06804dbade7b457097c4163871d
SSDEEP 384:ZyZcIhsNYPacO3nyf+j8IMX/+2xF9d+wvDm4vE38:ZAh/Iaj/lL9d+w3
TLSH
T113928D366D34AC2B5EE6E685F54732135EF99027EBC56B80D6EC9F0D009A6AC1307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 17717644216448111b9999e55d8e6ea5845af5aec7f4e372fbb420d841f67a5c
MD5 53b0e27ac2ab967bfbd8a34c9c01a824
SHA1 52a2a5b117947633c85a2405a99c5d324a6a2b4f
SHA512 83c0868cc3abeaef56d4f6383db524c4c7b3c3b627a61abf8633eaba48229aee723457709b80113c77b003ad7081a312f72b8e8b30459f2cde296e0ab10d2c0f
SSDEEP 192:EONJ6hZ0QmiUyeApc/+jVRjzorIz5wOZIAhU6:EONJ6oipu+j8IK2fhU6
TLSH
T14402DA3968687CBB8EE2AE45F48737135FE5116BE9956F84DAF81B1D00C769C2307832
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 16KB
SHA256 9aefb71fbe0cc65099444cce5e86fe76fefb296c44a7135e6344632dab93c664
MD5 d60754d4bb4b03a3f1988d3308f51525
SHA1 521417154eeea7df1d180004c8721400ea3661cc
SHA512 73915bfc057f0dafb31f4c9e1534fd5b55f7beecdcd5d96db360ec038d2e686ace7a86fa6aa1afbaecbf662473de42d5e62a2212a71afdf2036a2369d73b9c93
SSDEEP 384:ZtsNY/acO3nyf+j8IMX/+2xF9d+wvDm4vE36:ZtvIaj/lL9d+w7
TLSH
T1F5724A366829AC275EE2E685F14732135EF9801BDBC56F90D6EC9F0D00DE2AC2307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 72f5787a5b8b5f58e21cec4d9c47f6943de2783bdea368cb361460c2189d1261
MD5 5098477063d409e0760d93a101f65033
SHA1 77e19479405458bbff3d639cc3be537279b98ab5
SHA512 ea423913ce93838f764bd39cf05bf1dcb5318f15fbe0d5dc1b051dceaf47d87fd5ff597f64e0dce9bd97709728bbc3fb5b41ddcce8d8a5bf767a2efb5a9345ef
SSDEEP 192:JON56hZoQmiUydAd4c/+jVRjzorIMXTr+2D5cOqwq7U6:JON560nuu+j8IMX/+2+99U6
TLSH
T18A12EB366968AC674ED2A695F48732135EE55227EBC6BF84D5EC1F1C00DF66C230BC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4651180c-7060-4f5c-8dba-9da82c4e475c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\4651180c-7060-4f5c-8dba-9da82c4e475c.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 fa751635cb831869fd1f7d908002fe902c00e70c219060492b252208a27b8d6a
MD5 dced58cf6d61f48e48a2762ffd2920cb
SHA1 e1b48ad0f8fb54704725bb99def6541ceacd5087
SHA512 ca0001dbf735280aef07561ee891a821d9052c9e2c45c3a502dde09034fc926b24560fe1b33c3c13cf90008082d7b626aafe75558ae8ad5aeaa0e9e57a6dfa3b
TLSH
T1ED412A58A6FA1148B3B76E5AAFF6AD2D487B79732E06D45D00110D4F0A27B40C871737
MD5 SHA1 SHA512 TLSH

Submit Download