53a684465b5b0d3e88d267c1b6fee8e6ac6c3b7963e7a9333576a70dd6f1d8a8

Analysis

max time kernel
148s
max time network
152s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
13/08/2026, 12:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
consultapp/pages/reservas.html
Size 1KB
Sample260813-ppynrayxbv
SHA256 53a684465b5b0d3e88d267c1b6fee8e6ac6c3b7963e7a9333576a70dd6f1d8a8
MD5 60271d563f14391340491e4ecb812b68
SHA1 568109875f387e4b84f8662cb2413e82bebcd599
SHA512 f39859f8e592b451857e1fd1d4b660edf2fb730603d3ef5b2d27ccfbd97482b8afcd4100a0c43aa589ca57d141884c5c75169ef11be419c2bdb2f79855d1f051
TLSH
T118315345868C6E7F511B14CB54CDA60870EF8D318A706492F97B59B1DDD0E48C715C7B
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
968	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134310979218022692"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1079202589-886135813-2527035092-1000\{746184CD-CF31-47AE-A2A6-C4274B26EB91}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5904	msedge.exe
5904	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2744 wrote to memory of 2976	2744	msedge.exe	89
PID 2744 wrote to memory of 4520	2744	msedge.exe	90
PID 2744 wrote to memory of 968	2744	msedge.exe	91
PID 2744 wrote to memory of 4520	2744	msedge.exe	90
PID 2744 wrote to memory of 4520	2744	msedge.exe	90
PID 2744 wrote to memory of 5832	2744	msedge.exe	92
PID 2744 wrote to memory of 5832	2744	msedge.exe	92
PID 2744 wrote to memory of 3532	2744	msedge.exe	94
PID 2744 wrote to memory of 2668	2744	msedge.exe	95
PID 2744 wrote to memory of 3532	2744	msedge.exe	94
PID 2744 wrote to memory of 3532	2744	msedge.exe	94
PID 2744 wrote to memory of 2668	2744	msedge.exe	95
PID 2744 wrote to memory of 2668	2744	msedge.exe	95
PID 2744 wrote to memory of 4964	2744	msedge.exe	96
PID 2744 wrote to memory of 4964	2744	msedge.exe	96
PID 2744 wrote to memory of 4964	2744	msedge.exe	96
PID 2744 wrote to memory of 2000	2744	msedge.exe	97
PID 2744 wrote to memory of 2000	2744	msedge.exe	97
PID 2744 wrote to memory of 2000	2744	msedge.exe	97
PID 2744 wrote to memory of 1088	2744	msedge.exe	100
PID 2744 wrote to memory of 2840	2744	msedge.exe	99
PID 2744 wrote to memory of 1088	2744	msedge.exe	100
PID 2744 wrote to memory of 2840	2744	msedge.exe	99
PID 2744 wrote to memory of 5888	2744	msedge.exe	102
PID 2744 wrote to memory of 1936	2744	msedge.exe	106
PID 2744 wrote to memory of 1540	2744	msedge.exe	107
PID 2744 wrote to memory of 2808	2744	msedge.exe	108
PID 2744 wrote to memory of 2916	2744	msedge.exe	109
PID 2744 wrote to memory of 2916	2744	msedge.exe	109
PID 2744 wrote to memory of 5904	2744	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\consultapp\pages\reservas.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2cc,0x7ffaa688c188,0x7ffaa688c194,0x7ffaa688c1a0
  2⤵
  PID:2976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1588,i,13527432784401873016,17379693175901000566,262144 --field-trial-handle=2772,i,12047625105450385139,14505858753960820076,262144 --variations-seed-version --mojo-platform-channel-handle=2768 /prefetch:2
  2⤵
  PID:4520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1792,i,12610415758961039804,14134526285760965493,524288 --field-trial-handle=2772,i,12047625105450385139,14505858753960820076,262144 --variations-seed-version --mojo-platform-channel-handle=2968 /prefetch:11
  2⤵
  - System Time Discovery
  PID:968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2252,i,4629498967335745385,17929563580598268397,524288 --field-trial-handle=2772,i,12047625105450385139,14505858753960820076,262144 --variations-seed-version --mojo-platform-channel-handle=3140 /prefetch:13
  2⤵
  PID:5832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3604,i,6377296047787799951,3291094106397874283,2097152 --field-trial-handle=2772,i,12047625105450385139,14505858753960820076,262144 --variations-seed-version --mojo-platform-channel-handle=3660 /prefetch:1
  2⤵
  PID:3532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3624,i,2666984941148983945,12226200559168415848,2097152 --field-trial-handle=2772,i,12047625105450385139,14505858753960820076,262144 --variations-seed-version --mojo-platform-channel-handle=3684 /prefetch:1
  2⤵
  PID:2668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4340,i,1859396447436953088,6023933736286078034,2097152 --field-trial-handle=2772,i,12047625105450385139,14505858753960820076,262144 --variations-seed-version --mojo-platform-channel-handle=4372 /prefetch:1
  2⤵
  PID:4964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4344,i,5304393848614238804,11356738145421700716,2097152 --field-trial-handle=2772,i,12047625105450385139,14505858753960820076,262144 --variations-seed-version --mojo-platform-channel-handle=4424 /prefetch:9
  2⤵
  PID:2000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3712,i,3433010793031748813,7835565071535380588,524288 --field-trial-handle=2772,i,12047625105450385139,14505858753960820076,262144 --variations-seed-version --mojo-platform-channel-handle=3764 /prefetch:14
  2⤵
  PID:2840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3788,i,7150865767869960725,7606911194824354003,524288 --field-trial-handle=2772,i,12047625105450385139,14505858753960820076,262144 --variations-seed-version --mojo-platform-channel-handle=3672 /prefetch:14
  2⤵
  PID:1088
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5924,i,14724387048336884594,2219981976848083583,524288 --field-trial-handle=2772,i,12047625105450385139,14505858753960820076,262144 --variations-seed-version --mojo-platform-channel-handle=5940 /prefetch:14
  2⤵
  PID:1020
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5924,i,14724387048336884594,2219981976848083583,524288 --field-trial-handle=2772,i,12047625105450385139,14505858753960820076,262144 --variations-seed-version --mojo-platform-channel-handle=5940 /prefetch:14
  2⤵
  PID:5888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5416,i,10909207190782778063,1083464754948326026,524288 --field-trial-handle=2772,i,12047625105450385139,14505858753960820076,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:14
  2⤵
  PID:1936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4344,i,6577283938765888397,14197747765054977774,524288 --field-trial-handle=2772,i,12047625105450385139,14505858753960820076,262144 --variations-seed-version --mojo-platform-channel-handle=5408 /prefetch:14
  2⤵
  PID:1540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5328,i,13691381721396803417,13416296036683103416,524288 --field-trial-handle=2772,i,12047625105450385139,14505858753960820076,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:14
  2⤵
  PID:2808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4344,i,7959331009813923300,13600407879032359960,524288 --field-trial-handle=2772,i,12047625105450385139,14505858753960820076,262144 --variations-seed-version --mojo-platform-channel-handle=5264 /prefetch:14
  2⤵
  PID:2916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5924,i,1594841344277337481,17552142954990269741,262144 --field-trial-handle=2772,i,12047625105450385139,14505858753960820076,262144 --variations-seed-version --mojo-platform-channel-handle=812 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5904

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3448

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5624

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2d6015222f1312f2737e561f5cb789cba16ddda90131d3af679ca4d112ce8de9
MD5 c1a7f665f2c508cc6aaf2ab720e9bbac
SHA1 f10047340073ccfd0dfa0a1ac50f19824703c6c6
SHA512 3b4b2c7997cc3a8e382662b8ab84779147222db6dcf3b614fe3750efba14aade687800978cd24780f580eacb766daa34fe0e560c30dde1f463983613dda767cb
TLSH
T188D092693B904E08C5C4207228E0A6A6A2604A31B82E024840A2B23CF8A5ED6073F4AA
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0c59160a51f6f3c09faaf3593a45b43a14b1da3961c2cccaed8346e6543c20e0
MD5 a2b289a93fce671046a365170f24567f
SHA1 d545bd953aab467815db42a92fd1d54047d5e6af
SHA512 ce7bb8aa1a40366ad652feb8233f60cd807014cb9e8ca999c2c1931eeb40a4afa1dc2c94c60d58639e2cece8c73d3a46da7a30c651ca6da0834f57b890bd2572
TLSH
T1CFD092653BA04E08C5C4207628E1A6A6A2504A31642E024841A2F23CF8A5ED6073F4AA
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 24b9f414df120a4e5b359046e9521e7bea1a65f6018da4d13feae392cc07fe5a
MD5 702ee95eff7a0feb425087a23cb9b525
SHA1 7cee1fa42bb55069b7682b64c387749fb6d9a598
SHA512 a0d16ca3f0bf0e4f76b82053ce1aeaea214cd131e5e678bd6119301d1a902e1a15a7c6d9d7b5466129efda7c265b712cc2015d1a63dc26c1d838f755e6bb4ed3
TLSH
T176512C3303290AC2FF75CEBB30E424AAB2F59484360B6E1618517EF45907F1792E056F
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59a0f9.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59a0f9.TMP
Size 2KB
SHA256 b3f46d8afeb00c178045220c18b6d5ae26d35a9c4afe3ecde3cb1b67bc217a85
MD5 6165fcd160d234163d74054676149d77
SHA1 48cafffa03f274af6fe61046186584f970b52080
SHA512 99bde41dbd795abcd9b4348ee5c7ff800085d782c6df72adecbd54da6b7148c35416cee3594a4e70465fd3e9fd39edc1bfa2979dcc7bb262984c9ce79aab0476
TLSH
T1FE512C3303290AC1FF75CEBB74E464AAB2F59488350B6E1618517EF45807F1796E056F
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 d6f7cb0729587fcfecf6b1a55a63f33e0e6276f72a44bed502b69b8e13a6d837
MD5 fa9cd44dbd8488412c193ccf4627603f
SHA1 24022f7eedb9366b01055a779f66fb7bcd41ac1d
SHA512 65527ff8ef2cf9c6058c071bc31f105e3fa2b9b87e5026638ee95369872e3773e82c835611ef186e075ac8ee3bcae0c565916bc26a64e986a5e8b11e3ccc7409
TLSH
T1E22180F783B4957E8A0196F0AA086F1FCF6C0511431C7CAAC5E46D2793F3461E041A5F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 ada69068bda0d400aa0c38dd6dff698b6a9b2ef3b41f82df684935f6bd4edf31
MD5 2e96e068a4dba5b4a389e434cfcb15c2
SHA1 d5f2287155131291ea79faa531a022012b80d0ac
SHA512 bba505c9bba932f54a633bb52495143edf3abf3d6c7787677f5124200364b35904f773e2023aa8d3af3c982bf2e9e0c6a326366cefcfe609712fe06833123695
SSDEEP 192:sxRU7Rrbev/f9sYuHFSajzoA8p4c/g6+WNIYbpQDZ6JGMIgDKX9J:sxRSV+/f9sYulSaSF/5I16bAH
TLSH
T13742C716A928A97B4CCBE21DBA557F53D7FD203261941E48BAFC861C04EB6DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 c7de212ad032e16ba0793630d9bbefaa15d92f223331761168ad868aaa11cd73
MD5 57744ce2aec7140bc0550e215519da58
SHA1 bca5434e35b7331564e4024d63066746394dc8fa
SHA512 35d92eb5e33a79e41beb631d42d70484b4444257c61b9e6f7f89e079c7328c8952a36fbb04199dde37484087e7eeb6d4cf1b1dd0b96addfc14b972609293e432
SSDEEP 192:sxRU7Rrbev/f9sYzHFSajzoA8p4c/g6+WNIYbCQzZ6JGMIgDKXrJ:sxRSV+/f9sYzlSaSF/5Ik6bA9
TLSH
T1B832B916A928A97B4CCBE21DBB557F53D7FD2032A1D41E48B6FC961C04EB6DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 feb9dfe5736a7c1c929cf64958a9a084875987f1394deb96706807ed261f3e82
MD5 f3c92d40abc31c754cda5a68c5e37737
SHA1 1461c4717a4215b46c686e490d2b074192d01f76
SHA512 607ee88ddc19bb059951eda5ab39d8db3b046937dbe97116b21b3afef878b089612985505fcdcbab98a7e1f44bb910f071c812887ab57da6ad8b71cb426da209
SSDEEP 192:sxRJ7Rrbev/f9sSzHFSajzoA8p4c/g6+WNIYbCQzZ6JGMIgIJ:sxRtV+/f9sSzlSaSF/5Ik6bs
TLSH
T1B232A8166928A97B4CC7E21DBA557F53D7FD2032A1D41E48B6FC961C04EB6DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 369dccf2ecefc513d842f37c6a7eacef78339e379ff72546b0608ec3fcac207e
MD5 62899108867d2fdb4a2965dce28e7468
SHA1 b73af77af62942d1d24e3c667564eb046f4fbf34
SHA512 9b7d7ca03cdfc18bf85c3e444030710bd020d895746144cff8d435af96581ef754b50d714aa5fd760fde86286d31244fdb0a92142123cab529cdf819ba23c4f0
SSDEEP 384:Flp1pABfCtgisFfq4KhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVnz98ERF4roAoY:Fb1pAtWgikfq48F1+UoAYDCx9Tuqh0VT
TLSH
T157B2DA3B600DCB7E5F800A9DEC19AFD76D9802C797988D4447FE994C02C77FA921A4DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 2KB
SHA256 72305f650bec7a41f6d97be7b20d22ad398e2b98ece666cf49e2e737be6a2c30
MD5 ea37b6975cc2a0ccaff7e2a092fdb6e7
SHA1 42c276e67cb2b1fee5ec7c62b3181c930a993b7d
SHA512 3d47bfeb1341581f8d24907b3d777e15ca6cb5518609b4153710a5ef82ecd7078b3b9b9928474b1173a377894c078c81996af2f9eafdedc20c8c0c9d1e77abba
TLSH
T134513742747B02D03CBF790DD4AA89599A83306B7659F52B379A01A70BABD436CFC4C9
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5a3867.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5a3867.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 1feb73200b3dec74d83536c5ca2edc7cb37682dce15e90ccc49360fd0c3b565a
MD5 e880cb0efc6b15cd259f047db79269f4
SHA1 5433af9ee1a845091bd250145b9676ba9ee5c1f2
SHA512 da821e73ded8044caa6c995946597925163c89e2afdaba271b217463d90a25ed7072d5bbff31f5fb7e6e9d6aaf024aeb6d497332fdad28f91ade999aa9499d76
SSDEEP 768:lrv+4UNbdC3Av3BqobGL2/KtZu4aWADIidy8Lb1eVH1S1C:lbsbw32itZzaNsuVLJEH1d
TLSH
T19E03BF36E859DA739CF79284B1877A0B7EF89163C5890AE088DD1F8E45CB4AD130BD17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 574a37eac660e452b11246d7e6d64855a2e8bd88e6e91956a2df111b61b01029
MD5 0f0002834a8c24caba71e0cac393c1b8
SHA1 4769d65a29bf44af5d5af77226639dbafbc944d6
SHA512 18acd46d021024c1c07debe59f2bf8d866bb5015d453ea2ed1e4acc8d1a80d9aa879dce8f5c7d16257efe15e14cc3bc49dacd8b3c6ab4f9368522663f1d778d3
SSDEEP 768:uX3RVJBqobGL2/+tZu4aWADIidy8Lu18pJ/rhd4:uX3tGtZzaNsuVLuoJ/rhd4
TLSH
T1D3F2BF7AFC55AE779CBAA284B2433A07AEF89163D0CC19D599ED1B0E14C74AD0317C1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 f56b9ca8173ab91ef77c1fda54df8a85b1dffaa3130cde5b5b9a2b90ae1ac99d
MD5 2ce300bf8be7ba18968e8d749a6449ba
SHA1 45a1c57ed31336504efe2bb3b162ee841e348527
SHA512 90fdc4b861e7ea2f49456e33650003777c5440fe8cb05dc1d3dbf22153e9ec4ef53aad54ed88910cc8d29d4526ffa3d2fdf14985ff970d60bc51ba692208da7f
SSDEEP 768:sX3OVJBqobGL2/XtZu4aWADIidy8Lu18pJ/rhd4:sX3y/tZzaNsuVLuoJ/rhd4
TLSH
T1C1F2BF7AFC55AE779CBAA284B2433A07AEF89163D0CC1AD558ED1B0E14C74AD0317C1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 9d29ad68955eb5dc967aeab80b8e56b1ce6b69a1dc1ded67a32fdb69f098ab21
MD5 4a4ff8429576ed212ef152f49fd19580
SHA1 18bf07ae3169b2096e9e381a620c8c8cddc07faf
SHA512 90407410c48954fbe72590c60095090834034b4d518c219d504de9337af356e6826dca262ebda748c2cb2b5d6fa71030185fe928a1ac4c9cf5167cc40226977b
SSDEEP 768:5FQz3cwg0VJBqobGL2/0tZu4aWADIidy8Lu18pJ/rhd4:4z3TMtZzaNsuVLuoJ/rhd4
TLSH
T1B303AE77AC84DEBBEDBAA784F2463606AEF891A3C4C855D59ADD1E0E10C70AD0347C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 d6eac13e2c8fc1c4a541298ea1146b679e016473f06e7c161b4250f2172e9b7b
MD5 5a0f1c46fba3479c74c04dcf1b36587c
SHA1 96f996e96b6f76e56317c4b4188857809b225026
SHA512 f11294125ec17bf0080c26d1188e365246aee6757d0d51a7816d3b43f403eb74144a035f703e32fa036a6e061d6c7f5053e09fc05e43f9ab7a713851a4afbec1
SSDEEP 768:9rv+4UNbdC3rOZBqobGL2LpZu4aWADIidy8LqweVH1S1C:9bsbw3oLpZzaNsuVL/EH1d
TLSH
T17B03BF36E869CA739CF79284B187760B7EF8916386880AE0C8DD1F4E51DB4AD1307E17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e80ab0fc-3101-44e7-b00d-4458e0372ca1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\e80ab0fc-3101-44e7-b00d-4458e0372ca1.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download