d88f8811d5b9d9f22ee15d189415bb33e0057ffd297bc87736d81e636a5e3365

Analysis

max time kernel
148s
max time network
157s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
09/08/2026, 18:12

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
resources/views/errors/503.blade.html
Size 1KB
Sample260809-ws75xsbm6v
SHA256 d88f8811d5b9d9f22ee15d189415bb33e0057ffd297bc87736d81e636a5e3365
MD5 a13d8c27654baadeb2687fa9be87522e
SHA1 dc8c9c46f8259c9e9507b12961650547a984bcd6
SHA512 dccc7dc1f843fbb4776336d436489949b9adc3c9ac2a6b42e09062163705b5020e37f7c96015fc5d7c85836e810fc43eb21b44771d830568059c8006a0b6b104
TLSH
T1FF21233221A0502A524291C199903B2E3D428A5B9E4B686177AC11AACF94EE3C96214C
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2068	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134307728099368937"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-889581200-2041691093-2048517887-1000\{45EFD361-D7E0-4916-90ED-CD83CF871900}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2928	msedge.exe
2928	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4560 wrote to memory of 1560	4560	msedge.exe	84
PID 4560 wrote to memory of 2068	4560	msedge.exe	85
PID 4560 wrote to memory of 2168	4560	msedge.exe	86
PID 4560 wrote to memory of 2168	4560	msedge.exe	86
PID 4560 wrote to memory of 2168	4560	msedge.exe	86
PID 4560 wrote to memory of 516	4560	msedge.exe	87
PID 4560 wrote to memory of 516	4560	msedge.exe	87
PID 4560 wrote to memory of 3204	4560	msedge.exe	88
PID 4560 wrote to memory of 3204	4560	msedge.exe	88
PID 4560 wrote to memory of 3156	4560	msedge.exe	89
PID 4560 wrote to memory of 3204	4560	msedge.exe	88
PID 4560 wrote to memory of 3156	4560	msedge.exe	89
PID 4560 wrote to memory of 3156	4560	msedge.exe	89
PID 4560 wrote to memory of 2652	4560	msedge.exe	91
PID 4560 wrote to memory of 2652	4560	msedge.exe	91
PID 4560 wrote to memory of 2652	4560	msedge.exe	91
PID 4560 wrote to memory of 3864	4560	msedge.exe	92
PID 4560 wrote to memory of 3864	4560	msedge.exe	92
PID 4560 wrote to memory of 3864	4560	msedge.exe	92
PID 4560 wrote to memory of 1896	4560	msedge.exe	97
PID 4560 wrote to memory of 1896	4560	msedge.exe	97
PID 4560 wrote to memory of 4336	4560	msedge.exe	98
PID 4560 wrote to memory of 4336	4560	msedge.exe	98
PID 4560 wrote to memory of 3392	4560	msedge.exe	100
PID 4560 wrote to memory of 1912	4560	msedge.exe	111
PID 4560 wrote to memory of 628	4560	msedge.exe	112
PID 4560 wrote to memory of 4588	4560	msedge.exe	113
PID 4560 wrote to memory of 2880	4560	msedge.exe	114
PID 4560 wrote to memory of 2880	4560	msedge.exe	114
PID 4560 wrote to memory of 2928	4560	msedge.exe	116

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\resources\views\errors\503.blade.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffbd950c188,0x7ffbd950c194,0x7ffbd950c1a0
  2⤵
  PID:1560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2004,i,2569078911932439486,15753432306899463697,524288 --field-trial-handle=2244,i,16240328917734240185,16063242738868944495,262144 --variations-seed-version --mojo-platform-channel-handle=2272 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1744,i,15295651027683672534,11586687192326635872,262144 --field-trial-handle=2244,i,16240328917734240185,16063242738868944495,262144 --variations-seed-version --mojo-platform-channel-handle=2240 /prefetch:2
  2⤵
  PID:2168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2548,i,8572649787419118005,18381862338925754536,524288 --field-trial-handle=2244,i,16240328917734240185,16063242738868944495,262144 --variations-seed-version --mojo-platform-channel-handle=2612 /prefetch:8
  2⤵
  PID:516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3440,i,6489076396190046473,510485453481201764,2097152 --field-trial-handle=2244,i,16240328917734240185,16063242738868944495,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
  2⤵
  PID:3204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3460,i,15223137296239067857,4323507415735562741,2097152 --field-trial-handle=2244,i,16240328917734240185,16063242738868944495,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:3156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4192,i,8379959167552866972,911140982622766063,2097152 --field-trial-handle=2244,i,16240328917734240185,16063242738868944495,262144 --variations-seed-version --mojo-platform-channel-handle=4224 /prefetch:1
  2⤵
  PID:2652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4204,i,5533196735898053430,11279065647837213002,2097152 --field-trial-handle=2244,i,16240328917734240185,16063242738868944495,262144 --variations-seed-version --mojo-platform-channel-handle=4308 /prefetch:2
  2⤵
  PID:3864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5076,i,9354986992640784324,9744607903364538850,524288 --field-trial-handle=2244,i,16240328917734240185,16063242738868944495,262144 --variations-seed-version --mojo-platform-channel-handle=5128 /prefetch:8
  2⤵
  PID:1896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5084,i,11058445987633147513,5259411020674580242,524288 --field-trial-handle=2244,i,16240328917734240185,16063242738868944495,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:8
  2⤵
  PID:4336
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5884,i,1522103202013562760,17971626751991861507,524288 --field-trial-handle=2244,i,16240328917734240185,16063242738868944495,262144 --variations-seed-version --mojo-platform-channel-handle=5868 /prefetch:8
  2⤵
  PID:812
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5884,i,1522103202013562760,17971626751991861507,524288 --field-trial-handle=2244,i,16240328917734240185,16063242738868944495,262144 --variations-seed-version --mojo-platform-channel-handle=5868 /prefetch:8
  2⤵
  PID:3392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4468,i,3217934462189867372,17846874465474441792,524288 --field-trial-handle=2244,i,16240328917734240185,16063242738868944495,262144 --variations-seed-version --mojo-platform-channel-handle=4552 /prefetch:8
  2⤵
  PID:1912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4216,i,17947101097617134081,15593789593604467661,524288 --field-trial-handle=2244,i,16240328917734240185,16063242738868944495,262144 --variations-seed-version --mojo-platform-channel-handle=4452 /prefetch:8
  2⤵
  PID:628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4308,i,8098411918468988535,2141455235407966735,524288 --field-trial-handle=2244,i,16240328917734240185,16063242738868944495,262144 --variations-seed-version --mojo-platform-channel-handle=5548 /prefetch:8
  2⤵
  PID:4588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5752,i,8279484523201921123,7006551669890450812,524288 --field-trial-handle=2244,i,16240328917734240185,16063242738868944495,262144 --variations-seed-version --mojo-platform-channel-handle=5380 /prefetch:8
  2⤵
  PID:2880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=756,i,13213381147904251141,11268963166209005221,262144 --field-trial-handle=2244,i,16240328917734240185,16063242738868944495,262144 --variations-seed-version --mojo-platform-channel-handle=6092 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2928

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1884

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 11d3c4c52f9fc9cd2b10a22b48769759f994fd6364f9a0fc145f4cd2c2a22e9d
MD5 4751cf705a737c4226029624bf43b9a8
SHA1 fd8cf726ee3f8f75b97147829de5553530caa82c
SHA512 46e3fedbf7fa14bdc2b3aad129f2879a9d24252f5d7bd9b55766bc32a6b82ea77aaf193bcdbdf4423e3b67ef84955e589b6077609344091ef72204c1d50b0dab
TLSH
T17ED09B307A58A58BD14360F1A4114B4115375557205397757521508E9E98055B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 b712452f59251f63d76bb5df2ab726ab3e26af98d36df0b7a2268b5cdbe1dee8
MD5 eae231031d3ee9f098d57b38c7b41e13
SHA1 69fc7f0af23d67e5353c6b924a560a5d306a3024
SHA512 40d2ead40991aa45def2ded3ca404086874b47d1293e8763931c696fe76ecb59033f8207e8a216f0aec7db2156fe2033707e93e9fd767adcfe4fb07551f0e744
TLSH
T1E641D6F002A25B41DF3116B190F01B00367683DDF9737E18829299BE3A3EF63852647C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 f46eb14db01b37eaff49cf2630cdba9e4713d1aed1ca789b1d1da8ae366952f9
MD5 9e8e147f6f55ed41e0e4e6ab154ddd07
SHA1 4e98ed7ae1b5847de37ae0dbfd07978975d79eb0
SHA512 8c254e00f3f5605388d510fc55b161de62adea87eaa221f2b39dc8ff2ecc8e396228468f09a78607695255935ca326288bbc0859df5a0e7e55fcba1df09dd7e3
TLSH
T1332179F7C3D5867E891156F05A28AE2BCE1D0906422C7C1989E4EF2BD3E2475E10299F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 67bd6f30583fc0c112c901eaf8f0f771bdc84c793370c4c6d3f3a05589cdd78f
MD5 3c20bc6e8b3b4f89b3a0a17cf42e2d67
SHA1 75e4a35b83f03a8316dd71fe5d8a191fb804f5d3
SHA512 a21a6656ee5cc1112771112b0860308234db909c38c38488a4a86d2ee4f5588648a3c1b051b13e0c0f41c9435361f41eb1d137c98667ddb78f8276850e1d0eed
SSDEEP 192:sxZEaRVkd/fdsym9C0xbIdpdWHW6+WNGY9IKwPQIgrJ:sxZEaUd/fdsy6C0+4HbGs9
TLSH
T1B722B8126E38A9778CCBD209BB25BF43D6F95032A1D51E58E6FC961C04E7ADD221780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 adc6ef10e741837d4d0ff0a5d34400a575ecc0f89b3462db3ef6805b4ae22789
MD5 072a41b25ff5845809281d8d3b359194
SHA1 5036d104bab6b82ed4e936122e9c7efa35a57400
SHA512 f1c888b3c335ee6e008046005cfd8203c58b9269fcfd5a9e1c187be629b1f3909d7ed60149ae4a87c21c8bee51b1dd750e2cc25de60e1954b22b0b060dd69ebb
SSDEEP 192:sxZEaRVkd/fdsn+m9C0xbIdpdWHW6+WNGY9IKwPQIg5nJ:sxZEaUd/fdsn+6C0+4HbGs7
TLSH
T1F922D8126E38A9778CCBD209BB15BF43E6F95032A1D51E58E6FC961C04E7ADD221780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 06fea1b65d9198c0f950ce4ea11789f0d062e961112e05a6efb1af1a34eb704c
MD5 bda4a3b43aee1f7a70aca5b09c4bcd2a
SHA1 fb096c86d3674c79db42473d071a901941b108cb
SHA512 6645fb0bf90919ad9492e246d4e80123b33c22aff3d4f1529b8ebfd7716daa1ccf7982e56b84b4e6deebad9319d66097eedea87b4450be815814b0a6ef0136bb
SSDEEP 192:sxZEaRVkd/fdsn+m9t0xbIdpdWHW6+WNGY9IUUPQIg51J:sxZEaUd/fdsn+6t0+4HbGg9
TLSH
T13C22C6126E3869778CCBE209BB15BF43E6F95032A1911E58E6FCD61C05E7ADD221780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 f5434ea215d432a50ef4bcd851462f810c68b587051f60e452e77c1493d01130
MD5 1f2e135d12fffdb85efef6a87c2d122a
SHA1 3ffc753043e9b689afb4a927ac3de79789bfd1d2
SHA512 3b85a50807a11474c76579a3b81cfcaedec6a58bc2cb712c875c267605770af25b6c35c25b0c3d7857c6b157fab1a08f949ffdb52727df25cfa95efb2018bd84
SSDEEP 768:nNyvIZwWvu+Q+8F1+UoAYDCx9Tuqh0VfUC9xbog/OVDFLlwmW7Aropbqn:nNyvIZwWvu+Q+u1jamFLeR7Lp2
TLSH
T107C2E92B240CCB7E5F801E9DDD5A6F9B3EA802C767588D4047FD994C02C77EA512A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 2607e7e9b6074bd893260cdb1ff4891a07ee5610ce149a330103612359d85bee
MD5 86e3fd91f6302261ceef68ab14bcb528
SHA1 79085b57c72308e9e47577cba0d139d0893eca67
SHA512 1f86b5a0b3d69ed1a9262e58203fbf62afaf8bb1f80a9d50b2d7fe96a64b2b13e4d9869f2966862b75f745ba2c35e020b57188914552f9b5d5ec6ee10694a80c
SSDEEP 96:KaRklRnHnqlPKZThqKLfTzqHxJSrBDaAYKhy+iVoZFf7Xkn76P59kKBB53ktlFaz:mTXjiVoZFf7Xe76B9hB53ulFaf7
TLSH
T13E911002B13B02D239BF685DA3A599368E4131637914E96F7FB900A18B67E111DFC4DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

009c4e5e-3c75-4804-b827-988ff8f14a66.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\009c4e5e-3c75-4804-b827-988ff8f14a66.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 876e924124ba83cd9ffc237113981af74840a8e777d333d5ac7796802587c18a
MD5 ea08d2a0a1efe402b9f35a421f1cb295
SHA1 1dd1719bb1bd3f0746c9f6907540ea358eabe7fc
SHA512 1873c0eb1a3e79a4e2ce28886d09f41de4487dbc2c367c808b5cc569409a32ca3a3f068cc5f4553736cdfc9933ddc03d306a1b4c0319cddc7e66a06c39e99d20
SSDEEP 192:u+LsNpVQ6dc+YLe0PQmiU1LG+4e+CGp+Fdes9omOQN/JiHqcU8:nsNpV/ezigYhe+CndHeRewTU8
TLSH
T146323A35AC786C678EF3A540F04736139FA8916BDAC53F94E5ED9A0C01DF7AC131A826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 6346ba3730f57e31acdbe05bf6f90e8289fda5c12f587cb3c8e7b8030db3195f
MD5 dd40a075774db4f4081cd218c3fa5364
SHA1 03fde55d235a949838d79e61f073161d80498d7a
SHA512 857fc97e4e674f35e088c5c99ad233ae15d77df66ae43060d66ca4b15f30302781811f1991a9b7e320b6e7e7c1f9ce5d778518a0f68bc2560af56b2fd1750702
SSDEEP 384:IiFSzsN88TUNTUlIl3/ezigYhe+CndHeReeTKJO:TF6DwgAGYfEhTv
TLSH
T1FD622A379CA49D3B9EF69A81F54636039EB481A7C9C57B90E7D99E0C01DB2DC130AC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 4d0582b0ec989015d9eaeb2861564d49df5537639939f2655fbc36f32e659b21
MD5 8371d59bee6eb646104eef8e1118928e
SHA1 a9807914687d1720de80d54c8f70dedf1e88bba6
SHA512 785fa5b3b8665d694f29f64a2dad4d10a12c916241a208935b40eabbc4d05985d5bd6bdd68b1519f36274ea0c5ab2175e981fd307aff9b7007c134c055afdcf6
SSDEEP 192:umLsNpuQ6dc+YLe0PQmiU1LG+4e+CGp+Fdes9omOQN/JiHqcU8:XsNpu/ezigYhe+CndHeRewTU8
TLSH
T1BD322A35AC786C278EF3A540F04736139EA8916BDAC53F94E6ED9A0C01DF7AC131A426
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 0b93f24e1616fc66ac030dd6bcf2ee3fc95e73bd7939380672d54e120cf31166
MD5 60d115304834f843c520037fa745f6e1
SHA1 bb75ce03b0190d2fc01def6011492144f5672419
SHA512 70db8de6335ff583903259440fab51e95f9a4a4351cf8e5abc9107c1eaed1635fa724c56f3f45a193f09c04276d5d751df671b5eda719919f0050e116de154a4
SSDEEP 192:JONii6v+YLNQmiUykEZh+CGp+Fdes9odusMPU6:JONii6vz/+Zh+CndHe9WU6
TLSH
T11702E935AD382C6B9FF2AE45F48736135FE8117BE9962F84D9E81E1C01D765C2306827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 7d10397576fa337c07d5fadc1c27cb5da1e75c81abb66fb8e67cb589e83de8cc
MD5 921ccc34fecdf09a4b98e484fdc82a61
SHA1 9f1865210c0a91783736ac387036514f0cee8a75
SHA512 92f25a87b89abfdac41ab192685eb44718a17d759dbda78082f3decfdf8d61d568015f6b0e9e34a9418ff900de9de14a90efa4c2bae80ba89d2e70bdf564e1f3
SSDEEP 384:IiFSzsNL8TUNTUlIl3/ezigYhe+CndHeReVTKJl:TF6+wgAGYfEcTc
TLSH
T185623A339CA49D3B9EF79A81F54632039EB481A7C9C57B90E7D99E0C01DB2EC130AC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a887baa1-258d-4865-aa89-9cea5a229c34.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a887baa1-258d-4865-aa89-9cea5a229c34.tmp
Size 8KB
SHA256 3113ffdc0a8f332bc13f0fefd5f9024bd9147a7d0d1e6f94c46eacd7aeba5594
MD5 c5645067a3aa7962b91b05c96b720dad
SHA1 18bfe0b1f5f2ccf9b7597e85f3151a05d069e5a1
SHA512 892c2bdf9f8663b3d10125e100a60d67cd099f73a6c90dd1c7180f68508c62c6db2308449dfc735ff17f434ee4f01b8a88d42454a7959cfa81f17217fe4d2dd2
SSDEEP 192:WONE6v+YLRQmiUypETh+CGp+Fdes9omOQNxCHHqcU6:WONE6vzj7Th+CndHeRe2TU6
TLSH
T116122B35A8782C6B9FE36541F08735135EA89277EE863F80E5EC6F1C01DF6AC1306426
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ec30681d-674f-46f7-b048-c3de3dd5a5b2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\ec30681d-674f-46f7-b048-c3de3dd5a5b2.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 d5c1d2e88c1f1d0221582d44cbf3a033a3333e72fbc639664975b3428a2781c2
MD5 5c57c48fbe029b0b7fa991daeaacb886
SHA1 f101aea71589a77785bcd7d398c50b856d0c5d5f
SHA512 2a1ee067938b133f36bedafbc3e3dbb03aa47cc87864e15256732d806439b94f2e53b0015c83b599d2650d84e9341f2a4d92b8f600dfafe5631079789d344e9d
TLSH
T1AE41F85CBAE91148B3B77F5AABFAA86D487FB9372E06C45D10110D4E0A62F40C871B37
MD5 SHA1 SHA512 TLSH

Submit Download