463a816d2c5918f1e1e787e494dde9812e7ed6a803c6771806ade0be221f50c8

Analysis

max time kernel
148s
max time network
159s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
09/08/2026, 18:12

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
resources/views/layouts/admin.blade.html
Size 6KB
Sample260809-ws75xsbm6v
SHA256 463a816d2c5918f1e1e787e494dde9812e7ed6a803c6771806ade0be221f50c8
MD5 ffde62b2fc9cedb08795e25fc474214f
SHA1 1afea4e977c0d84d02ba9e644e906acd3f8605ea
SHA512 6c075479d79726d3cee28513701d5cb09c4638b59c473bb681959a40c7d32b8eca0c8746f4f5e3e2bc91c5beeed1ad705a64442606528ff676178ec58e22d920
SSDEEP 48:cPuiGNSNvj8feLBq5tE8pCVt8sCYtIEBD/5QaqSgW6H8aMMFEN8N4ZeNhqo/vDeN:guIZFtvVtrWaqS0DFEegsT/rejR
TLSH
T1E1E1E0B556EC6A2D70438295C7B17336265FA1E3B10A1128B57D0374CF93F8BDC2B4A8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4768	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134307728202664156"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1788976790-1541110888-1636651838-1000\{A2DB674B-698C-4287-A3B9-02FBB86C70D3}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
212	msedge.exe
212	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe
4468	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4468 wrote to memory of 2452	4468	msedge.exe	81
PID 4468 wrote to memory of 4768	4468	msedge.exe	82
PID 4468 wrote to memory of 2684	4468	msedge.exe	83
PID 4468 wrote to memory of 4892	4468	msedge.exe	84
PID 4468 wrote to memory of 2684	4468	msedge.exe	83
PID 4468 wrote to memory of 2684	4468	msedge.exe	83
PID 4468 wrote to memory of 4892	4468	msedge.exe	84
PID 4468 wrote to memory of 2920	4468	msedge.exe	85
PID 4468 wrote to memory of 2920	4468	msedge.exe	85
PID 4468 wrote to memory of 2920	4468	msedge.exe	85
PID 4468 wrote to memory of 4080	4468	msedge.exe	86
PID 4468 wrote to memory of 4080	4468	msedge.exe	86
PID 4468 wrote to memory of 4080	4468	msedge.exe	86
PID 4468 wrote to memory of 3656	4468	msedge.exe	87
PID 4468 wrote to memory of 4312	4468	msedge.exe	88
PID 4468 wrote to memory of 3656	4468	msedge.exe	87
PID 4468 wrote to memory of 3656	4468	msedge.exe	87
PID 4468 wrote to memory of 4312	4468	msedge.exe	88
PID 4468 wrote to memory of 4312	4468	msedge.exe	88
PID 4468 wrote to memory of 5036	4468	msedge.exe	95
PID 4468 wrote to memory of 4820	4468	msedge.exe	96
PID 4468 wrote to memory of 5036	4468	msedge.exe	95
PID 4468 wrote to memory of 4820	4468	msedge.exe	96
PID 4468 wrote to memory of 3724	4468	msedge.exe	98
PID 4468 wrote to memory of 2908	4468	msedge.exe	105
PID 4468 wrote to memory of 4644	4468	msedge.exe	106
PID 4468 wrote to memory of 1016	4468	msedge.exe	107
PID 4468 wrote to memory of 116	4468	msedge.exe	112
PID 4468 wrote to memory of 116	4468	msedge.exe	112
PID 4468 wrote to memory of 212	4468	msedge.exe	117

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\resources\views\layouts\admin.blade.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x25c,0x7fff9dd4c188,0x7fff9dd4c194,0x7fff9dd4c1a0
  2⤵
  PID:2452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1948,i,6063038141976287430,13715621372174156755,524288 --field-trial-handle=2316,i,237700013140848864,18003304339009635654,262144 --variations-seed-version --mojo-platform-channel-handle=2364 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1708,i,4214968663231326394,3996268571411867426,262144 --field-trial-handle=2316,i,237700013140848864,18003304339009635654,262144 --variations-seed-version --mojo-platform-channel-handle=2312 /prefetch:2
  2⤵
  PID:2684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2388,i,2575504601136615041,12814856234531644714,524288 --field-trial-handle=2316,i,237700013140848864,18003304339009635654,262144 --variations-seed-version --mojo-platform-channel-handle=2392 /prefetch:8
  2⤵
  PID:4892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3512,i,15119195582450021626,13544426739873753476,2097152 --field-trial-handle=2316,i,237700013140848864,18003304339009635654,262144 --variations-seed-version --mojo-platform-channel-handle=3572 /prefetch:1
  2⤵
  PID:2920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3516,i,6697136612012935545,18226959400586918281,2097152 --field-trial-handle=2316,i,237700013140848864,18003304339009635654,262144 --variations-seed-version --mojo-platform-channel-handle=3628 /prefetch:1
  2⤵
  PID:4080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4232,i,10592497547749637280,4450801766683542173,2097152 --field-trial-handle=2316,i,237700013140848864,18003304339009635654,262144 --variations-seed-version --mojo-platform-channel-handle=1692 /prefetch:1
  2⤵
  PID:3656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4244,i,5652591356875316684,15267108363078525437,2097152 --field-trial-handle=2316,i,237700013140848864,18003304339009635654,262144 --variations-seed-version --mojo-platform-channel-handle=4356 /prefetch:2
  2⤵
  PID:4312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5140,i,15502286381183935565,7473264226098849726,524288 --field-trial-handle=2316,i,237700013140848864,18003304339009635654,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
  2⤵
  PID:5036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5160,i,6159060133840645015,4694584575237332453,524288 --field-trial-handle=2316,i,237700013140848864,18003304339009635654,262144 --variations-seed-version --mojo-platform-channel-handle=5236 /prefetch:8
  2⤵
  PID:4820
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5856,i,3863917084538170442,15293558958920904715,524288 --field-trial-handle=2316,i,237700013140848864,18003304339009635654,262144 --variations-seed-version --mojo-platform-channel-handle=5864 /prefetch:8
  2⤵
  PID:2176
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5856,i,3863917084538170442,15293558958920904715,524288 --field-trial-handle=2316,i,237700013140848864,18003304339009635654,262144 --variations-seed-version --mojo-platform-channel-handle=5864 /prefetch:8
  2⤵
  PID:3724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4240,i,6397361177882954721,14152813984956835030,524288 --field-trial-handle=2316,i,237700013140848864,18003304339009635654,262144 --variations-seed-version --mojo-platform-channel-handle=4400 /prefetch:8
  2⤵
  PID:2908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4816,i,5797666504240595790,13006844001370060183,524288 --field-trial-handle=2316,i,237700013140848864,18003304339009635654,262144 --variations-seed-version --mojo-platform-channel-handle=6272 /prefetch:8
  2⤵
  PID:4644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4996,i,16604668926810454557,12251844805136787110,524288 --field-trial-handle=2316,i,237700013140848864,18003304339009635654,262144 --variations-seed-version --mojo-platform-channel-handle=4880 /prefetch:8
  2⤵
  PID:1016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5420,i,15999755258495555080,17363247604220268001,524288 --field-trial-handle=2316,i,237700013140848864,18003304339009635654,262144 --variations-seed-version --mojo-platform-channel-handle=5444 /prefetch:8
  2⤵
  PID:116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=120,i,18068862527590527765,15249660184301303915,262144 --field-trial-handle=2316,i,237700013140848864,18003304339009635654,262144 --variations-seed-version --mojo-platform-channel-handle=5856 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:212

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:636

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 92b83a0e542b7bb3ed324c35b5f2a40c47a6351981065b804e4d9d80ddd6d7ee
MD5 9ea20a12d0c030ae7f84014f382662b7
SHA1 7912569189cf07c1ce092a268e67e9f391b7c8c7
SHA512 39ca414f13163c8479fe7650ae0dd1607b267fe3f319c09aec7bd5f68448e9ac604351069bf6b166b3f897d3afb5d7f35e609b9fc72b9debbcb05bad8fad7d81
TLSH
T132D02B20FF04E002D1072172540047100E0848902093C140E030441CDCEC804D395307
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 2adbfc6756ff018c13ee1c5fa604beec648f0d7b7deb0b7fb4f70ed23fc361f5
MD5 87e80006a9861711648609e3b02a1579
SHA1 43df3b0fb124f624449f34e2bb5db211f9d8a235
SHA512 8c22a9744a83501010f97e7d74964029fda243701ff4bf186194bfe9064aa6d4d9f0b9b0a9028dcfbd2a30cc390774988d13c956c5f4a0ffa30444a5d632fde4
TLSH
T1F961C537054A0C20E7600D3195EDD224B976A6EFFD0FAE842190D8B11603FB2B5D5D79
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 7ddb48f94adce76fe7f0ceb7cfa14fc94039646cbdfa861acd58e63aa95556e0
MD5 593b498a709e3abf48143b6930e0c1fd
SHA1 cb487ab5363dc0bce3d750ba8a212e2a1b1af146
SHA512 97ff1aebdcf7a6c6471deab4b5c5d7b3cb014287f6f9be52855b96fb696a64f7d839114e716b7aa2765392e6a7235d0ffbd4245077802cd0f86f81cd8298807c
TLSH
T1E1216EF7C3D5866E890156F05A28AE27CE1D0906431C7C15C9E4EF2B93F3475D50159F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 67e72e9afc93be2f9e9a1225f5f514aebaecd875a622dc224c7e57f51d632bdf
MD5 2e4c7f549170e7a930130fc67ed5d502
SHA1 4f80b5e9f14841131096cc8cf094ed9c165b404f
SHA512 a501484c181a7d9a8449a8f7bfe167f3774443b1001a1146875624a4f9e58467a75e61d0f35cff0d33195e8de07ed0afa951659c4a3b924810969bc7f5d387cb
SSDEEP 192:sxZgRTyM/jK1Ml8Mk5E/fIsSxLVuIdpdZHW6+WNGYvrPHt4IgrJ:sxZgtM5E/fIsSxd3HbGi+9
TLSH
T10942E6116A34A977CCCBD20DFA55BF53D6F91462A2900E44A9FCDA1C04E7AED2217C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 a338f0528dcabcb676a151affae4658627d964a37900b4dccabeb5079aa2031a
MD5 fc6538fc31b7a2155f711a6bcdbcdeb2
SHA1 d11360dcc830273b40ae1e92cef65b7910e304ba
SHA512 85641bfcb3bbfd44df8a9edb44bd79c47c4fe583cf85fbc41de7026be76a6964876e45c0c96ba2e1d693b8d9ad391ab97407d99fbb57bc9b765c6eaceacd7913
SSDEEP 192:sxZgRTyM/jK1Ml8UQpk5E/fIsbZLVuIdpHZHW6+WNGYvXzS4t4Ig5eJ:sxZgtqq5E/fIsbZd5HbGQ+Y
TLSH
T1B052F611AA34A977CCCBD20DFA45BF53D6F91472A2900E44A9FCDA1C04E7AED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 5468fd112acf9c1befee826efce10b5fb344e0ae94c4ec85344f29182be6167f
MD5 6d0303a9cc7fe4f2f073a16337f3c90b
SHA1 35f3d511ba68ec99a2da7b43833cc6e54d503f75
SHA512 1c93f0484ffc189f91f198fedc868ee9cddc03236e47486d6632fb37310d640dd76df01cefd2b8ec78e7c4e2bacbeba57c73c11e240c58852f740c53d4d51f27
SSDEEP 768:awseJ3xWvhfyn8F1+UoAYDCx9Tuqh0VfUC9xbog/OVYcLly0pp9rogv:awseJ3xWvhfynu1jaVcL88p2M
TLSH
T1EDD2FB2B280CCB7E4F844E6DEC266F966EE801CB57944D5487EA884C03C77EB51275DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 942598c3f796efd03379536776dba08a7a6454031867a8121dd519df03b9c28c
MD5 7b60a2c7e4a30160094ba2a95dd04b60
SHA1 4e0e4e59472cbb3468c5ae3d90bf5c1634fa421b
SHA512 875c1b7b7d54eac8eb851ad9f580c6a8747966c9a0d1d32f1a53facb552188f23375bf30a700b0e86da974566a7594ee4562e0afa363717cc3ff371c3117cacc
SSDEEP 96:KYH+KggmG3GKIY+iGEKr6+2fuKoAQbUb5bwbkbebCb+b4Kbabc:49VNPjdrS1WC8ocjQc
TLSH
T1B4C12346317B061338BE2489B3A595364F4231B73058A8BFBFB900A65E6BE111DFC8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe598b10.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe598b10.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 e45ab7c21b875ff2e88d72fd128596a9a5ce534a2393c9d93a66bdef2188baeb
MD5 b465febf0b5d493057e0c2ff0484af5f
SHA1 22dd13e143c178c0b76e47b622acfb7d2237c020
SHA512 14e0fa9d6a7332818a31dd98f88d42208fd6e8db47cf64a1a401123e83a0e98792a354e269386ab835fd11fb17db5122fc07d8d1a12301dcc84b35f7bd3a6bec
SSDEEP 192:uOLsNFWQaQvKM7IDiQmiU1dJb4MTCz+FdLlf7K8z1Lq8UMZ:nsNFWIvn7aeJEedFXUMZ
TLSH
T1A7423A31AC74AC3B99A3A245F44A37036FF4806B96C46FA4EADD6F1C01DA2AC1316D17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 e0686438e32e9d98bccddb5d4ac153165bf6fb97db38fdeba0ba1a166d87d267
MD5 9f700f5346c18d23d7f8ee35f2c50b23
SHA1 88ffef6d0c64fa9701f03b53bb5cd5d2905d6e80
SHA512 dc92063381ef67aa038ea685324b7b242d9b95290270e6d1a3255b8dd5c47ecec385e4923cd0a15f17b212678c81d2599724fcb875c20cae9ef06b95de75f298
SSDEEP 192:ugsLsNFKQaQvKM7IDiQmiU1dJb4MTCz+FdLlf7K8z1Lq8x2:jKsNFKIvn7aeJEedFXx2
TLSH
T1B9422931AC746C3B99A7A245F44A37036EF4806F96C46FA4EADDAF0C01DA2AC1317D17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 9218c0c94ce7ba6e2f756b74213db1ed2d99813975db40d852bf8fefb8bf78f0
MD5 ff90bd1932af7ce2c85839619f9177fe
SHA1 b2bacac4f32b1933d8dc951e9ab56490bec6e439
SHA512 02bfd1935351574e90fcabab483360d054cc0e3e8d3d1bc71ea7ff69c994ee327ea160906776d6c4bb7ddf8537baaeac6467212f3b429964a838f91904ec1bd3
SSDEEP 384:71iFiZcIhzsNf8TUNTUlIlUIvn7aeJEedNXUk:78FQRKwgZnPpLXUk
TLSH
T177824C739CA4997BADB7A745F54A33039EF4806BC6C4AAA0F6DDAE0C01D71AC0307D16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 bf560543519d76b30b48784d312aa46417bd7956d70a050736f4b13e9d5754d8
MD5 18a7642a6d9f1b0e926008bfd2a5d56a
SHA1 32f8fb12f103529c69390e53683d6ea104b26325
SHA512 53ca4ad3826640dcedaec4f3c8f876c176e47022615e5f9129849ff379b0188a0280cdfe75b32f07fb34a64014abd76006b85839cc2e9a8515520b2b826f56c6
SSDEEP 192:ugsLsNF9XQaQvKM7IDiQmiU1dJb4MTCz+FdLlf7K8z1Lq82Z:jKsNFBIvn7aeJEedFX2Z
TLSH
T126422931AC746C3B99A7A245F44A37036FF4806B96C46FA4EADDAF1C01DA2AC1317917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 0180a2ee452dacd379cca47eff230d5d86499655e8116eba921256ddf2a283d9
MD5 ec7c1174117546687e503157fc511553
SHA1 f17d228e5b4f4c44cecf457785f013714b4efadd
SHA512 d2d6820d6310a3b760c153f8d8d9c90d8d4909e6fbdc65708148204ce318d93af2591e8fc05e8d910fe00f75940489be7bf65790db244519f7d7e3b372306aee
SSDEEP 192:lONZ6vMtPQmiUyxSThTCz+FdLv8475fU/u:lONZ6UtRnTNdTFU/u
TLSH
T10A020935AC786C6BEAA3AD45F48A27175FF4216FD5D05B90EAE82F1C00D764C1303C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 9KB
SHA256 426a3e64083cfa78615e3ebff2362ab8919928dc5fbe706f71f1734130ba2c55
MD5 496b4493aefdc87355a9c8543b1daf11
SHA1 e080145a4ec9b750d7cedf58a329db3bd7b2d56c
SHA512 26e915c2d9f097f2e0fa1f659b05b2a4721d95047839efafe6f3da6b6a4502ecc50e3251dae537e384ef0ce043955d76a9a1d4543fb20a7da690308abb0781c7
SSDEEP 192:MONA6vMRPQmiUyqSEhTCz+FdLlf7F80ILq8U/u:MONA6URR6ENdcXU/u
TLSH
T190120A31AC68BC6B9E93B545F48632075EA4912FDAC4AFA0E6DD7F1C01DB66C1307816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

VariationsRuntimeSeedV1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\VariationsRuntimeSeedV1
Size 484B
SHA256 9fd2b7fae87c2d863b486a425834283f19b1444749c84650d5a48c9eadb12e2b
MD5 e9289cc1f579fdfa9d46acfae9b38330
SHA1 7eac8e241d8c35d873280d6b9dbc1cca7a9b2231
SHA512 b1f37da50e387c8408a960ef5276a51336510286c1db7eaea4cde65af4efc343f8ac1d9de65df1fd0818513823a485733e5c155da615344bc044f46021ecf586
TLSH
T134F0543C33D821A4F08C46B23596ED8B88BF313247DC2631CA50F550315387701B5095
MD5 SHA1 SHA512 TLSH

Submit Download

VariationsSeedV1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\VariationsSeedV1
Size 583B
SHA256 c6028ef42dbc7f0b9c48067b986a692181942d2ceb68eb80e1a75bdf31a7edf8
MD5 dea753b436372d7a85c16f95bc9c9a89
SHA1 97952ef6de19bca1a768b69ca52bbecb88a9f315
SHA512 ab1272a85c135c4402e7f004600b215c665b104ec8653248cbc6948df44f8f229885f320dc6c51c40667a34beabed597ecc21e7b419b696191816a36bf120915
TLSH
T10EF0471A442F9817F043A5FB6373FDC61D14776404389220343A5AF721D978259D9487
MD5 SHA1 SHA512 TLSH

Submit Download

VariationsSeedV1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\VariationsSeedV1
Size 2KB
SHA256 1c93b692a8f399e13351a7497c0c5f8b3f26c13ea93fde8b4a609cd769ca8d1e
MD5 f29eb4adbc0a68db5d13a24785260d78
SHA1 3d3f383ea75e95c5d7304b6b490378f23dcfb70a
SHA512 e7fd6c2303228d517c98c8872b5e48cfecc8ad3346f718f788d432b5c032abf332fe5efe7b8c11899169b52d687bdf299d7a4eb5ffe2c4c6a2d55505874b8cc8
TLSH
T1D0515E2CDAA6EE8D1474DBEDDBD0B137350E6EC53627722D9D4558C10EE556F84038E0
MD5 SHA1 SHA512 TLSH

Submit Download

c7ec4b61-1ba1-4398-a8f5-cb174b91b67f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\c7ec4b61-1ba1-4398-a8f5-cb174b91b67f.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 bdfe4e3df9d84fc1880469a6c48281f5ede8a6b184cd53d676cb8bfebae81a90
MD5 f2a170063b101de911156aa75137a832
SHA1 2c9414436e1f89438c9b4c7a741186f15bd0704f
SHA512 de7b717ed6139331cfdeb5040f1ba56c2b9d74104b61d2deba2c4876e645ee081676724dbce6bdd88e4d07ab1ed5d0d97d03a6661e18a3cedcac16b8500af842
TLSH
T102411C58AAFA1148B3B36E569BF6696E547F7D772E06D09E10110E4F0A22B00C872B37
MD5 SHA1 SHA512 TLSH

Submit Download