hxxp://ronaldo14715[.]github[.]io/Proyecto-Desarrollo-Web

Analysis

user interaction
yes
max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
31/07/2026, 14:36

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://ronaldo14715.github.io/Proyecto-Desarrollo-Web
Sample260731-ryyffsca55

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4804	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134299822207251663"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-540052884-2969440504-464782435-1000\{45AA7C4D-7F4B-4F98-9400-EF085FD07514}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2552	msedge.exe
2552	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
4420	msedge.exe
4420	msedge.exe
4420	msedge.exe
4420	msedge.exe
4420	msedge.exe
4420	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4420	msedge.exe
4420	msedge.exe
4420	msedge.exe
4420	msedge.exe
4420	msedge.exe
4420	msedge.exe
4420	msedge.exe
4420	msedge.exe
4420	msedge.exe
4420	msedge.exe
4420	msedge.exe
4420	msedge.exe
4420	msedge.exe
4420	msedge.exe
4420	msedge.exe
4420	msedge.exe
4420	msedge.exe
4420	msedge.exe
4420	msedge.exe
4420	msedge.exe
4420	msedge.exe
4420	msedge.exe
4420	msedge.exe
4420	msedge.exe
4420	msedge.exe
4420	msedge.exe
4420	msedge.exe
4420	msedge.exe
4420	msedge.exe
4420	msedge.exe
4420	msedge.exe
4420	msedge.exe
4420	msedge.exe
4420	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4420	msedge.exe
4420	msedge.exe
4420	msedge.exe
4420	msedge.exe
4420	msedge.exe
4420	msedge.exe
4420	msedge.exe
4420	msedge.exe
4420	msedge.exe
4420	msedge.exe
4420	msedge.exe
4420	msedge.exe
4420	msedge.exe
4420	msedge.exe
4420	msedge.exe
4420	msedge.exe
4420	msedge.exe
4420	msedge.exe
4420	msedge.exe
4420	msedge.exe
4420	msedge.exe
4420	msedge.exe
4420	msedge.exe
4420	msedge.exe
4420	msedge.exe
4420	msedge.exe
4420	msedge.exe
4420	msedge.exe
4420	msedge.exe
4420	msedge.exe
4420	msedge.exe
4420	msedge.exe

Suspicious use of WriteProcessMemory 37 IoCs

description	pid	Process	procid_target
PID 4420 wrote to memory of 1680	4420	msedge.exe	85
PID 4420 wrote to memory of 4804	4420	msedge.exe	86
PID 4420 wrote to memory of 1636	4420	msedge.exe	87
PID 4420 wrote to memory of 1636	4420	msedge.exe	87
PID 4420 wrote to memory of 1636	4420	msedge.exe	87
PID 4420 wrote to memory of 4716	4420	msedge.exe	88
PID 4420 wrote to memory of 4716	4420	msedge.exe	88
PID 4420 wrote to memory of 4088	4420	msedge.exe	89
PID 4420 wrote to memory of 2296	4420	msedge.exe	90
PID 4420 wrote to memory of 4088	4420	msedge.exe	89
PID 4420 wrote to memory of 4088	4420	msedge.exe	89
PID 4420 wrote to memory of 2296	4420	msedge.exe	90
PID 4420 wrote to memory of 2296	4420	msedge.exe	90
PID 4420 wrote to memory of 3996	4420	msedge.exe	92
PID 4420 wrote to memory of 3996	4420	msedge.exe	92
PID 4420 wrote to memory of 2968	4420	msedge.exe	93
PID 4420 wrote to memory of 3996	4420	msedge.exe	92
PID 4420 wrote to memory of 2968	4420	msedge.exe	93
PID 4420 wrote to memory of 2968	4420	msedge.exe	93
PID 4420 wrote to memory of 744	4420	msedge.exe	97
PID 4420 wrote to memory of 744	4420	msedge.exe	97
PID 4420 wrote to memory of 744	4420	msedge.exe	97
PID 4420 wrote to memory of 4800	4420	msedge.exe	98
PID 4420 wrote to memory of 384	4420	msedge.exe	99
PID 4420 wrote to memory of 4800	4420	msedge.exe	98
PID 4420 wrote to memory of 384	4420	msedge.exe	99
PID 4420 wrote to memory of 644	4420	msedge.exe	101
PID 4420 wrote to memory of 460	4420	msedge.exe	112
PID 4420 wrote to memory of 4312	4420	msedge.exe	113
PID 4420 wrote to memory of 1920	4420	msedge.exe	114
PID 4420 wrote to memory of 4552	4420	msedge.exe	123
PID 4420 wrote to memory of 4552	4420	msedge.exe	123
PID 4420 wrote to memory of 4688	4420	msedge.exe	124
PID 4420 wrote to memory of 4688	4420	msedge.exe	124
PID 4420 wrote to memory of 5060	4420	msedge.exe	125
PID 4420 wrote to memory of 5060	4420	msedge.exe	125
PID 4420 wrote to memory of 2552	4420	msedge.exe	128

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://ronaldo14715.github.io/Proyecto-Desarrollo-Web
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ff9851ac188,0x7ff9851ac194,0x7ff9851ac1a0
  2⤵
  PID:1680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1788,i,2595075328009632794,10329343922906105815,524288 --field-trial-handle=2336,i,16604534576075390987,7611568669919271419,262144 --variations-seed-version --mojo-platform-channel-handle=2364 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1648,i,8308181149114162344,16408306766208872616,262144 --field-trial-handle=2336,i,16604534576075390987,7611568669919271419,262144 --variations-seed-version --mojo-platform-channel-handle=2332 /prefetch:2
  2⤵
  PID:1636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2320,i,11647599881644379159,11250622349286901063,524288 --field-trial-handle=2336,i,16604534576075390987,7611568669919271419,262144 --variations-seed-version --mojo-platform-channel-handle=2388 /prefetch:8
  2⤵
  PID:4716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3452,i,10202265086922721643,16649173710802746304,2097152 --field-trial-handle=2336,i,16604534576075390987,7611568669919271419,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:4088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3472,i,10539590242178809524,1783807974400964740,2097152 --field-trial-handle=2336,i,16604534576075390987,7611568669919271419,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:1
  2⤵
  PID:2296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4224,i,5100482648503543838,17955200114800920196,2097152 --field-trial-handle=2336,i,16604534576075390987,7611568669919271419,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:1
  2⤵
  PID:3996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4280,i,5690636246142685044,4991066492606200097,2097152 --field-trial-handle=2336,i,16604534576075390987,7611568669919271419,262144 --variations-seed-version --mojo-platform-channel-handle=4324 /prefetch:2
  2⤵
  PID:2968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3536,i,7861665116352112205,4971381281928385168,2097152 --field-trial-handle=2336,i,16604534576075390987,7611568669919271419,262144 --variations-seed-version --mojo-platform-channel-handle=5116 /prefetch:1
  2⤵
  PID:744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3688,i,5219538174631867642,5171769491697384173,524288 --field-trial-handle=2336,i,16604534576075390987,7611568669919271419,262144 --variations-seed-version --mojo-platform-channel-handle=3656 /prefetch:8
  2⤵
  PID:4800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3540,i,2455383134741438324,13496781584925951560,524288 --field-trial-handle=2336,i,16604534576075390987,7611568669919271419,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:8
  2⤵
  PID:384
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5852,i,312561366734731979,6356252935732173731,524288 --field-trial-handle=2336,i,16604534576075390987,7611568669919271419,262144 --variations-seed-version --mojo-platform-channel-handle=5868 /prefetch:8
  2⤵
  PID:1036
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5852,i,312561366734731979,6356252935732173731,524288 --field-trial-handle=2336,i,16604534576075390987,7611568669919271419,262144 --variations-seed-version --mojo-platform-channel-handle=5868 /prefetch:8
  2⤵
  PID:644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4524,i,10714707405301077501,15730937623017082543,524288 --field-trial-handle=2336,i,16604534576075390987,7611568669919271419,262144 --variations-seed-version --mojo-platform-channel-handle=4272 /prefetch:8
  2⤵
  PID:460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4508,i,3211689708864770077,10634977307879267589,524288 --field-trial-handle=2336,i,16604534576075390987,7611568669919271419,262144 --variations-seed-version --mojo-platform-channel-handle=4496 /prefetch:8
  2⤵
  PID:4312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4512,i,7253718589518337629,15063212558307979391,524288 --field-trial-handle=2336,i,16604534576075390987,7611568669919271419,262144 --variations-seed-version --mojo-platform-channel-handle=6312 /prefetch:8
  2⤵
  PID:1920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2912,i,13739945428733353031,8660779950986566255,524288 --field-trial-handle=2336,i,16604534576075390987,7611568669919271419,262144 --variations-seed-version --mojo-platform-channel-handle=6432 /prefetch:8
  2⤵
  PID:4552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6080,i,800140243198531783,15955454257881381354,524288 --field-trial-handle=2336,i,16604534576075390987,7611568669919271419,262144 --variations-seed-version --mojo-platform-channel-handle=6084 /prefetch:8
  2⤵
  PID:4688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=776,i,5617940732788229059,7125338567773813964,524288 --field-trial-handle=2336,i,16604534576075390987,7611568669919271419,262144 --variations-seed-version --mojo-platform-channel-handle=5024 /prefetch:8
  2⤵
  PID:5060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=3492,i,8154304250150811264,9540338235894382098,262144 --field-trial-handle=2336,i,16604534576075390987,7611568669919271419,262144 --variations-seed-version --mojo-platform-channel-handle=6164 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2552

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:812

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 5979511f17d9bab4aa926f0c20b164d6c33492308eb56a9942fcd4bb675f480c
MD5 9aee5a984729e6ff5cd90b109ef28087
SHA1 b2d02c5451edb3bdc562ddfb460845168df5af4b
SHA512 90c9d2f8b87cc15ace21ce502e85a8a09d1e380fa85c648aeeb4b756fb3f21386e81654a0dd95871d349bac1e628f18cb17d279a9eee0a0340bd3316162a7633
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7h:fwUQC5VwBIiElEd2K57P7h
TLSH
T139B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 cc11c2ba3ec4cb292b61dd36af338e083bb0ce5868e654b17f3c58ecf3c8fdfb
MD5 22bfe5ff5070c92c37e54f6f278efd25
SHA1 2fc94025f3a738879f1fcececb95937cbaa0cdd1
SHA512 b57abd220e674cf733b39ea299fc66d6fe964ab448ae0758482efe80597e3678909cd989b9635acc0317001af0fe6dbbbccfd3cf110ec5ad1b9e4c084de22188
TLSH
T16FD09220B719A2C3E24704BA94A6AB52A916C57AA0B7F7017232640CAE65089F28F192
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 201729318e073e437978c4f830a6df095e397d14193bbab8cb94016e3e0e1540
MD5 038903102cb76ddedd18207430e00005
SHA1 e694b970e01eb43fddfb00d36857e2b64f8c931b
SHA512 bacb50167c8d736bccc259f2ffbffff915c7c6dc188c6c2c1476ded8cbd822ff968f690173d1b8e35c352ec62f9ace3913a556b80bc1a59211be000ee9ea7447
TLSH
T17DD092207759A6C3E24704BA94A5AB52A916C57AA0B7F7027232640CAE66089F28F192
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 357B
SHA256 e14c35f2e1c722fd8cd901e5675d9930b25d30b1bc60c89e27072f7876c34ff6
MD5 31d206c035aabe2ba240e44602bdc031
SHA1 5bdcc79f3ef7eba2b8d267e697df4dcc424bc7fe
SHA512 210b0ca3a64c696ae278996fa4947e5c9cd9d06c90e79c900f2c935e64bcf13a0f835207af6d7117eea6c26a1574729781cf51d9c516a261383c35838a32ebee
TLSH
T126E09A1D6A9CCAE5C1A0A7C7C268A2D842286136B7CCC86F231CA8AB3440020B38949A
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
Size 158B
SHA256 249358b1eab901f0b034023569e7f01b1f94c9179591789d99d6f279761d6e1c
MD5 e3fe72c0f542fbb29d9eb8933eefb382
SHA1 fce9a5a6bf89b76d58b4c0f0c691531330ab3b3e
SHA512 f71315278d44c74df19833e56e16d62705ddd45cc9bbabd13be55f51927a3d7464736846a1c4bcda6770c5b8c0720e1defbfbddb5206de648079efb1a9250340
TLSH
T17EC080D9BD4D845FD385187E5716F00007906511942796171650FDC032419A01E29220
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 aac7e69f0687e4e9e236fe48e30fede830bc52612d4f7016596203b9abf41c67
MD5 0c13f2d63c2303c0672662055a6513d2
SHA1 9afae292ad176843675540bcbcdac54cdd895d2a
SHA512 53b6988ec3a3dde9d3909d90c86c56cb594824a239c7341cfa271bab37f181c0ac35f2b2845e891956f5bf31f9441fd3734f35c3ef50bc8400b2fbbcf5152587
TLSH
T19C717F31B25140EFE7D161F164E252897570CEDAF9339EB2C15A55F1E639360B2282CB
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5871ef.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5871ef.TMP
Size 3KB
SHA256 dedfd93d98cbb6a5d4acd39ca1d7f492757a625987d3490d299b6d49c07feae4
MD5 d410e41993e7e6025929a36ce15efc54
SHA1 dbd617f42003342fb3a84adfef65e1d2c8075961
SHA512 b41022c8282a2a01c73fd0a20b2f8a4cfcc2166b235c86813c3c5bd430e0793fbf988ed251109f230b373130f271b22772351a60d1273bb565ddfd3fdcdaef6f
TLSH
T12C717F31B25140EFE79121F124E252897570CDDAF9339EB1C15A55F1E639360B6292CB
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 1715ccc188728c1c7af52efbdc079f3dc214e6c73b06c7aed19f98494c52d39f
MD5 364d52c60c58541294b1a5f25bf61058
SHA1 1336edf9e0c8daf3af65a80aeeb02fbf24b34c63
SHA512 c678ef2d5ac9a3fc73d1eb3b6d5da77ab5529f6d631e7c831ae03b0a82865738ee9c8990f4374c48af646f0e3b95e64eb8d7fa39f4762c845025c4219768c55f
TLSH
T105519EE6C2E8C52FC90266F49E646D63CE2E056942183D6DC4F8BE8B93E34B1D15178F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 37c3fa25ccc37a2198127a3e245396413b569daec0198bb8c1a935a6b78551ab
MD5 8bf0304af578fba7634015677c4e8ff6
SHA1 910dd0528a13513e2445f11f4e5e14aafe7a7f65
SHA512 c5972fd71130f2d6f94941e65ad9807e17f6d2620e5b8d0035939442e7250e48d467636ad45dba7304bec7db38bad2ada3dc16cef8a8613d0072d8aae59db926
SSDEEP 192:sxZ6RGFyM/jK1Ml8UQiky/f0ss0RIIdpDlXHW6+WNMcSXYIPnrDIg5Du9J:sxZ6Wqhy/f0snR5xHb2XlkH
TLSH
T16F52B616A6349977CCDBD20AB945BF93D6F91462E2900E44A9FCCA0C04E6BED6207C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 2fd211fe66d98b6322759b6133533fde8691090d2b7e169c5d3306a8213705a0
MD5 5febf9127edfe3699c8262add1b1c03f
SHA1 ec318570129f2ec7a35f2df190ee27a7926b3b0e
SHA512 c1929238c38bdaafaa9d68496299398e1faf9ebd9b5aeb427560af047ed76255a763be21a4db355f80696a1b800663a8ad2a74c8e461bcc9df5ca549eecc114d
SSDEEP 192:sxZ6RGFyM/jK1Ml8Mky/f0srFIIdpdlXHW6+WNM1y/YIB8fDIg/u9J:sxZ6WMy/f0srF53Hbb/w2H
TLSH
T1B252D8166A34997BCCDBD209F945BF93D6F91562E2900E44A9FCDA0C04E6BED2207C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 c5aa57b4ad275f394b210fd2ddb0b98afc3dc7b099f9e152b22768f9fbeea4b3
MD5 5d0001fa793af68646bac1a615fab63b
SHA1 c7e28b99077aa2ca1a2638877a9f390795fa0234
SHA512 95343d0b6988b57ba2c99697dc80d068523accfd65160d8d65e65be722bf357ca0ba6edd4f6e8347d5f3a0bc1a0d6ac83d4dc97d9baa5ae2d84879f9d0aa992d
SSDEEP 768:NRsqxXlWvJD6T8F1+UoAYDCx9Tuqh0VfUC9xbog/OVk4Ll6AR9Dro2Is:NRsqxXlWvJD6Tu1ja54LAs9w29
TLSH
T146D21B3B694CC77E4F840E6DEC266FD66ED801CBA7988D5447FA880C03CB2EA51165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 b45faf50e07cfb69775948aeb11fb5b6f4910708932fdd5dfaba658a4b4c54e3
MD5 f8a64015d5671d7e3197e72f2ac3d3b1
SHA1 837abb9f9784004a4736272cea0df71a6659b978
SHA512 f8f0587adea99347a6cf50c5a0ad550ef1b182a32673eb55d3bc1c8be1dc79225e046f922fc4757599ccd105884b3b90c9facd59c0f8b822ab6304cf6c45b42b
SSDEEP 48:KPYNs4iCiac6vpI9IaKGveOaS4K7H2oTyZaIPK/q8vy5kIXKtuMfD+3jBpp:KYbaKYIKqawK/q+KkgKtuGD+3jBpp
TLSH
T1EF910546327A1252383E2958B666C5370F8235633118B47F3FF844624FAAE210DFD9ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

273d023b-dadc-4604-bf7b-fdd56f4c7047.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\273d023b-dadc-4604-bf7b-fdd56f4c7047.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 5656e5cd31485a9686c71b6efdb8caf6fb3b8642b5c5e874a0f78f59d9275dc9
MD5 e76d3b6071de8d2ae43720485042df50
SHA1 b410d264287545dbc815224c967ef35cfa474cfe
SHA512 93e34c7c2b530235d6c5d281aa8234e402cb95c75a9b1a0c72664f44639514d1ec886ffb31adc0741de1c6df200065826005751e1ef8c08a90944c4770f8a9ca
SSDEEP 384:2iFiZcIgHsNh8TUNTUlIlCt5RbzU/VRNmOfI9K+DOObjI9G6w7YQ:dFQk8wgU5CtHmOA9Kc29MYQ
TLSH
T1E7D219F258E74876D96E4B03A77E2E134EBCD167F6846A40B3C85A0CCD965BFC30A815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 99f95945c0805d55bc6d7745f74fdff9b3470275efa58d13d6c30350a4e58d7c
MD5 159581627b273f2da2d5089dc4707d8e
SHA1 0c4fe142badcccc7b9e8f00a55d2b6296055396c
SHA512 894bb84f708d22bcdf92e4939eabc178f13d437e43683e31707ef3d92408620b53e2a69c026b216927a28b6878a8f6f111087734c43ef18ab323871bc8e0a542
SSDEEP 192:tONX6JkRtQmiUygGW+RNmOmoTh3+zRvU6:tONX6UrqW+RNmOfl+BU6
TLSH
T18D02D935BD382CB79EF26E49B98727135FA5207BF9952B80DAE81F0C01D765C2306936
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 dac0dac5e8170af84b82f7002796a10aa9f4610f926d3476e0ff7e7434a3bb2a
MD5 265fad62ca83ff679643e5b4a78696f4
SHA1 354e248a5147a03d2b95ecc4366e7868d5f3453d
SHA512 9b29b38a65595de66ed23cd6baf22207e8fc1bf3772fa4cc44ca3b60581fcc6bd3a2e269b6ddbf7a28420012b47c167be30d5d6437beef3ee5c4b2bd02dfba3a
SSDEEP 192:2ONi6JkRuQmiUyOGd+RNmOmos19RNVc+2qJ1U6:2ONi6Uq2d+RNmOfI9m+DU6
TLSH
T19012F73669385C7B5EE26945F48732434EA5512BEB8A7F80D5DC1F0C02DFA9C130ED26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 620654377a6ae5a577ff23d5323955805147b000a63408ced09267f8b97e886b
MD5 c3f0787dc682b8debcde2b6e97d9896d
SHA1 23a7540aac9c8ee50a3aaab2f7b4b5ca1234c2ad
SHA512 c71e4bc656cae5f75de6e751265f7732a9f09c76cb24e1931be1d84125476e9ed0304a2cf8a950447dc6dd5db32a557f89413222733431a64990e51ad290933f
SSDEEP 384:9ZcIdsN/gt5Rbz2/VRNmOfI9p+DOObjI9G6w7YQ:ld754tHmOA9pc29MYQ
TLSH
T122927D366C345C779EA79512F48B36534EF8A137E7C86B80D1DDAF0D06DA99C130AC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 329d9b95b15b67ea370dc271a6560c9056e1f3f29916d7564841526d6ad94f1a
MD5 049219b763587e419c2c5b3ae146f887
SHA1 99a68e9eb79b9e21daad875ada82eda009312fba
SHA512 f59a158d456ebe8c70c9bfeba83e9bf3b2fd55ec9dd7d5a6b032e79ab9f74800e2ff7447d8f635b4060309beac52189ccfd7271b64c581ba9c3a6330e54e8394
SSDEEP 384:2ZcIdsN/Ct5Rbz2/VRNmOfI9p+DOObjI9G6w7YQ:kd954tHmOA9pc29MYQ
TLSH
T107927D366C345C779EA79552F48636534EF8913BE7C86F80D1DCAF0D06DAA9C130AC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 f5e3a0e0ef08589372a59341bd257c5564e5d195fafe26e9b8dee8b7ae64e279
MD5 44eb032325c8492b3bd89f036ddf7acc
SHA1 ccc84c9bbb0fc0537dfa26299a6a70939f6507c1
SHA512 7705a7262734465e0f3303712e3562eb2e9a0353326ea293a8b2f4a73c0f30882138bf3c939181cd5d66a558f690ea3b838dc500659f77876577c7000dc27529
TLSH
T126411858B6E91149B3776F5AAFF6A86D847EBD732E0AD45E10010D4F0A22F40C861737
MD5 SHA1 SHA512 TLSH

Submit Download