723fa326a8311e9d10712e2e7e1430918e91aa84ccb27b26d663ee7f7349f00d

Analysis

max time kernel
148s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
13/08/2026, 12:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
pages/admin/usuario_form.html
Size 2KB
Sample260813-ppynrayxbv
SHA256 723fa326a8311e9d10712e2e7e1430918e91aa84ccb27b26d663ee7f7349f00d
MD5 0347641c7d72ccc449857018b18f7301
SHA1 7f3138eb67d64d5eb3dda20df10e090e1e152bf9
SHA512 e776cd378a3a68b387db583073ea8118f7a70fc6dd5261818114383caa4d7103b7a6eaae9b810afb285045bca436308f76200e5bc668b2f49fb65c9fd6fc4e00
TLSH
T1C441626024F09D1913A304885E95A9162C81CB13F2066580F6FC2FFB9FF2E4683271BF
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1776	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134310978901548838"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-889581200-2041691093-2048517887-1000\{99F31F66-2055-443B-A319-90C1BA9F53DB}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1792	msedge.exe
1792	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 4928 wrote to memory of 2508	4928	msedge.exe	86
PID 4928 wrote to memory of 1776	4928	msedge.exe	87
PID 4928 wrote to memory of 5032	4928	msedge.exe	88
PID 4928 wrote to memory of 5032	4928	msedge.exe	88
PID 4928 wrote to memory of 1292	4928	msedge.exe	89
PID 4928 wrote to memory of 5032	4928	msedge.exe	88
PID 4928 wrote to memory of 1292	4928	msedge.exe	89
PID 4928 wrote to memory of 2352	4928	msedge.exe	90
PID 4928 wrote to memory of 2352	4928	msedge.exe	90
PID 4928 wrote to memory of 2352	4928	msedge.exe	90
PID 4928 wrote to memory of 2696	4928	msedge.exe	91
PID 4928 wrote to memory of 2696	4928	msedge.exe	91
PID 4928 wrote to memory of 2696	4928	msedge.exe	91
PID 4928 wrote to memory of 2592	4928	msedge.exe	93
PID 4928 wrote to memory of 4956	4928	msedge.exe	94
PID 4928 wrote to memory of 2592	4928	msedge.exe	93
PID 4928 wrote to memory of 2592	4928	msedge.exe	93
PID 4928 wrote to memory of 4956	4928	msedge.exe	94
PID 4928 wrote to memory of 4956	4928	msedge.exe	94
PID 4928 wrote to memory of 4492	4928	msedge.exe	97
PID 4928 wrote to memory of 2800	4928	msedge.exe	98
PID 4928 wrote to memory of 4492	4928	msedge.exe	97
PID 4928 wrote to memory of 2800	4928	msedge.exe	98
PID 4928 wrote to memory of 4172	4928	msedge.exe	100
PID 4928 wrote to memory of 4308	4928	msedge.exe	107
PID 4928 wrote to memory of 4868	4928	msedge.exe	108
PID 4928 wrote to memory of 1984	4928	msedge.exe	109
PID 4928 wrote to memory of 1032	4928	msedge.exe	117
PID 4928 wrote to memory of 1032	4928	msedge.exe	117
PID 4928 wrote to memory of 4076	4928	msedge.exe	119
PID 4928 wrote to memory of 4076	4928	msedge.exe	119
PID 4928 wrote to memory of 1792	4928	msedge.exe	121

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\pages\admin\usuario_form.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x28c,0x7ffcaaaac188,0x7ffcaaaac194,0x7ffcaaaac1a0
  2⤵
  PID:2508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1792,i,1972872701203186248,6494928655606939287,524288 --field-trial-handle=2536,i,8544308799024150406,8626877456285511076,262144 --variations-seed-version --mojo-platform-channel-handle=2580 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1684,i,13062420812499954167,13883955306076981537,262144 --field-trial-handle=2536,i,8544308799024150406,8626877456285511076,262144 --variations-seed-version --mojo-platform-channel-handle=2532 /prefetch:2
  2⤵
  PID:5032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2296,i,12605745006990909065,12996412678088608186,524288 --field-trial-handle=2536,i,8544308799024150406,8626877456285511076,262144 --variations-seed-version --mojo-platform-channel-handle=2588 /prefetch:8
  2⤵
  PID:1292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3444,i,170054852275160731,13986115839901635724,2097152 --field-trial-handle=2536,i,8544308799024150406,8626877456285511076,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:2352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3452,i,3635532039272596549,15108785667469718487,2097152 --field-trial-handle=2536,i,8544308799024150406,8626877456285511076,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:2696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4156,i,15616883842655689725,12117381210134412571,2097152 --field-trial-handle=2536,i,8544308799024150406,8626877456285511076,262144 --variations-seed-version --mojo-platform-channel-handle=4280 /prefetch:1
  2⤵
  PID:2592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4168,i,3805828702225483314,17467687888103835975,2097152 --field-trial-handle=2536,i,8544308799024150406,8626877456285511076,262144 --variations-seed-version --mojo-platform-channel-handle=4304 /prefetch:2
  2⤵
  PID:4956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,12981409774166740451,6760476949583139913,524288 --field-trial-handle=2536,i,8544308799024150406,8626877456285511076,262144 --variations-seed-version --mojo-platform-channel-handle=5212 /prefetch:8
  2⤵
  PID:4492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5132,i,11253013562338929048,14984426252596889081,524288 --field-trial-handle=2536,i,8544308799024150406,8626877456285511076,262144 --variations-seed-version --mojo-platform-channel-handle=5232 /prefetch:8
  2⤵
  PID:2800
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5928,i,12982307380792403881,15771103336644921383,524288 --field-trial-handle=2536,i,8544308799024150406,8626877456285511076,262144 --variations-seed-version --mojo-platform-channel-handle=5880 /prefetch:8
  2⤵
  PID:804
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5928,i,12982307380792403881,15771103336644921383,524288 --field-trial-handle=2536,i,8544308799024150406,8626877456285511076,262144 --variations-seed-version --mojo-platform-channel-handle=5880 /prefetch:8
  2⤵
  PID:4172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3660,i,4452608690999858450,1375262737957171843,524288 --field-trial-handle=2536,i,8544308799024150406,8626877456285511076,262144 --variations-seed-version --mojo-platform-channel-handle=3656 /prefetch:8
  2⤵
  PID:4308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4384,i,6173719722806554958,8329756706128677359,524288 --field-trial-handle=2536,i,8544308799024150406,8626877456285511076,262144 --variations-seed-version --mojo-platform-channel-handle=6220 /prefetch:8
  2⤵
  PID:4868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4392,i,9922065815414856210,7799568326696233647,524288 --field-trial-handle=2536,i,8544308799024150406,8626877456285511076,262144 --variations-seed-version --mojo-platform-channel-handle=6232 /prefetch:8
  2⤵
  PID:1984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5236,i,7165586902785488774,3561804137026783193,524288 --field-trial-handle=2536,i,8544308799024150406,8626877456285511076,262144 --variations-seed-version --mojo-platform-channel-handle=5504 /prefetch:8
  2⤵
  PID:1032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3644,i,8762718481481318995,5714292471325218183,524288 --field-trial-handle=2536,i,8544308799024150406,8626877456285511076,262144 --variations-seed-version --mojo-platform-channel-handle=756 /prefetch:8
  2⤵
  PID:4076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5440,i,1528693580034087120,13127127360469492222,262144 --field-trial-handle=2536,i,8544308799024150406,8626877456285511076,262144 --variations-seed-version --mojo-platform-channel-handle=5252 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1792

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4760

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 11d3c4c52f9fc9cd2b10a22b48769759f994fd6364f9a0fc145f4cd2c2a22e9d
MD5 4751cf705a737c4226029624bf43b9a8
SHA1 fd8cf726ee3f8f75b97147829de5553530caa82c
SHA512 46e3fedbf7fa14bdc2b3aad129f2879a9d24252f5d7bd9b55766bc32a6b82ea77aaf193bcdbdf4423e3b67ef84955e589b6077609344091ef72204c1d50b0dab
TLSH
T17ED09B307A58A58BD14360F1A4114B4115375557205397757521508E9E98055B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 701082e4ac35f878dc5ff6eb27989aae9d20d9b5662643e20b3acd1720b367fc
MD5 2b3686986ce1fd99f079eb226e8b0a8b
SHA1 0d2cdee36351378b91ed7f6ecdb43457fe4d7b5d
SHA512 937da61c495fd21a02bb76a63556dec83ce132f1d1830ff8d9af6212d15f1844766dd4abadd15ea61b48f8ae03b52baca44c99117714c705da840dbff8f116dd
TLSH
T182D09B303A58A98BD54360F1A4104B41153755572053D7757521508E9E99095B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

3767c153-e639-4b0f-a2de-a630cb6f3907.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3767c153-e639-4b0f-a2de-a630cb6f3907.tmp
Size 12KB
SHA256 7beece7edfbd66e091d8cbd08ac317f0d7b76168c3c2fbf64f4d36d1fb196a30
MD5 c5570af3d0b017314a91b5cc04e2af09
SHA1 a7478a869fa47e747be55e1d47718d1177f80a6f
SHA512 dc37898ff7744b6d9d4747fe9d0152b14c26ca68a74491f7b6723082f6478741ec468f7406d4f1d01b4e346169eb54d886c36136601a325526f2d02c4e312a76
SSDEEP 192:sxZ7QRGyM/jK1Ml8MkR/fZssFPx3IdpdQHW6+WNGY9IKfasVIgrJ:sxZ0EMR/fZsshaWHbGy9
TLSH
T15242D7126A346977CCDBD209FA55BF53D7F50472A2940E44AAFCCA1C04E6AED2217C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 77da1a7fdd1d2ae1df520e541745de62eac8918d38501e24d3fb66801a742863
MD5 c26de9a69c7b8478f64167a7ac8b80b8
SHA1 de14e35b44020d7c6f735b8a1d11ddbbf43e4dc3
SHA512 10f57c4e4ca728df1952fa597c40bc70e39438abc48e9aa73d894b169b3f343bab2706df090b9b3b26975c613c5d8f21d8398529220873d991a0614231f70eea
TLSH
T1B361E5BE0592EDF6E3D13A3190C03A8738F190E8FD63FD5D02E348B5640AB118A6A4CD
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe588d28.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe588d28.TMP
Size 3KB
SHA256 22960b951c54d2821a3809ae40fa5464d870812df8aea1cde684f32cd9298322
MD5 2636785e277be1c5ba515cf6b2d0362f
SHA1 7d4d25b46121a97ad5385a69957aaf216c8d787c
SHA512 8514f938ae30c10e08fca8100d6610c115c32504102aba71e3ff3f8b72a6b880079e6233b7c8adcfebd94a7f6a6c7fbda8ad8344f2648040c16b216917a95f5c
TLSH
T1D261C3BE0582EDF6E3D13A3190C03A8738F190E8FC23BD5E01E748B5640AB214A6A4CD
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 9e4e6dac1355544e43428241f47e134afd5eb8a4200fab99c1d1184345e06ada
MD5 85032ad588edef436729dadde0bb94d1
SHA1 64f71c2b27b976032c730b65ef2cff42195efaf1
SHA512 40908bd24aebefeb54de200914372e8d2dee6dd5289bbc0013da53fa9b1b84bb31d7a5b94f4b7816d81560c9bc9d60e1460ddc6826d7c67e0adb18739d557e63
TLSH
T15A117DF3C7D5856E890116F06A24AE1BCE2D0646421C7D15CAD4EF6BD3E3475E40259B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 876c0f1aaae03d2856e15a03ec9b4ef9754bf585f6aca61dc2ddbc0ef67dbb3a
MD5 92b5a1ac2559c733cec722faf4541f9a
SHA1 6a1cc2b4262f8e55c96d07ab682e28af27f21543
SHA512 f395e7d2efa316e0b4c8c44b262dc98b900d69777f7dbc7544f5203b8a7768938d2e574ad097d4586a10479ba63720e60d8cbffc0151b4e9d324cac354ced5b4
SSDEEP 192:sxZ7QRGyM/jK1Ml8UQAkR/fZsfxPx3IdpHQHW6+WNGY9IDf5sVIg5Y2J:sxZ0EqTR/fZsf9awHbGWh
TLSH
T13B52D712AA345977CCDBE209FA51BF53D7F5447292940E44AAFCCA1C01E6AED2217C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 2ebe084e51d9105b0475b938d957c05b4cc8cc2ffd2a33711d5b600a5d48b892
MD5 8a30dbaf33f43d029465335933962cdb
SHA1 cf92fdac00db8030a71b08fd27c11743f1f70028
SHA512 b1c4867a55652a2fef193fd08aa67670b2c40711b50dd9dd3ccca786bd29d2644e9a932da23541088c059cbf14cb316d4fa62e6a81bb20b27d417cbcffcc1db7
SSDEEP 768:xScv21wWvu+Z+8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjFLlwmWNJroxg6u:xScv21wWvu+Z+u1jaeFLeRNix+
TLSH
T129D20B2B280CCB7E4F841E9CED2A6F8A6ED801CB57988D5447FA494C03C77EB511B59B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 5d6f022b3a34e0197c01c38bc7e386de755200f6576f44193aab6f7f70eaf13e
MD5 e5f6ea06a4d11a9d50112d2c3099a5fe
SHA1 96313ebce4a2201d995f58a69be4c50432038341
SHA512 06505723892fd21fa981dba4ea6858bc8992d8e8f886a3ba339a1b46683cb20daf610edbbd59136eb5f9fa030364f82687783e0b9aad7a1668e8fa6081780925
SSDEEP 96:KaRklRnHnqlPKZThqKLfTzqHxJSrBDCygKTyaauQKfaiaz:mTfHnfC
TLSH
T1C6915E12747A02D23C7F284CA76A86264F8235777909E56F7BB840924E67E526CFC8DC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b6c3c973-f4a1-4dea-9f13-a7a31b1362c9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b6c3c973-f4a1-4dea-9f13-a7a31b1362c9.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 dbf165a2eb25bb0b6db1d66abafa5138bf88aed63e11d76d458a0f2adc9060d0
MD5 3f84f2810e46635ebf184742a7e1a528
SHA1 27d849e1dcd2a4f258470bf2bc973bc2629fa178
SHA512 824de30b92958bdefcfe83cb74162ff38f43732e90019da426279f9a125c523cbb21e8866ad6b17b79cea14876681d5f454bcc82141d143cfed4d297612ec1e3
SSDEEP 384:JZcIcsNCn2Lzid//ue+CXOmep3JrhPuQ4EXG/jUT:BcInchvO9p3hhPudTi
TLSH
T132927D31AC341CAA59E7A545F94A3A239FF88073D6C92F84E5EDAF1D02DB5AC1307C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 57e2221e39d0d1f1a90218eaa50e40997f93f45fd01663f5f8dfd9d0ac73ce7a
MD5 c5392d7c28b216b80cf7f38218bedc62
SHA1 b9a926c192247a886ea26ec27dd3509d9b07b7bf
SHA512 6a907735fd09029d4d1a18c368850df8b41fbd0ec5968f50e65e6978870f9a6ba27e6b5d3bbca85aae7cd116d49027a76c4d82d5287b6b0b4aa482ddc460fb43
SSDEEP 384:gZcIhsNCn2Lzid//ue+CXOmep3JrgPuQ4EXG/jUT:ehInchvO9p3hgPudTi
TLSH
T122927D31AC341CAA5DB7A581F94A3A239FF88073D2C92F84D5EDAF1D02DB5AC1306C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 429c586bc17d29c491a1b22d36c8b7ee0e6164fd2443013e9a444144a83e14b8
MD5 36e0401f51fba92b542997ca58c2cfb0
SHA1 478182e22d527b4d8cac6c0a5daa5c71e96bf493
SHA512 f7dd99d2ee41eabae88fbb15cc6b19bb40e170a6d16f81ee57c801d6fb27e12ecfd1cc32f5099106892d2a0bc30af906d320ccda2da8ff9bb2bc76bc2def3d70
SSDEEP 384:SZcIhsNCI2Lzid//ue+CXOmep3JrgPuQ4EXG/jUT:ghtnchvO9p3hgPudTi
TLSH
T124928E31AC341CAA5DB7A581F94A3A235FF88073D6C92F84D5EDAF1D02EB5AC1306C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 a07f5e66cf6af3cec1f2161c91ba022005c1e12cb6488e932f4eaf64c7e5b326
MD5 3642d5c79b6311f6fd547b1089c05d32
SHA1 b6e01a3a6e8163be9c856cbdb698885bcdbf9ce0
SHA512 468982a8eddcfe4f06fa536edd2c2a11dd70d004f9a932cc0e8e5aa0700d5ad5176f343c8b59f8bb926b0e7543d139cd9ccc4cf8c55b9fcc3481e58bee675af7
SSDEEP 192:JONO6v+YLNQmiUyMTZh+CG6Om9oEus4lU6:JONO6vz/5Zh+CXOme6EU6
TLSH
T11402EA35BD281CBB9FF26E45F9873B275FA8217BE9952F80D9E41E1C01D764C2306826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 dad63433315d543b5a81996b25574582704624c18d306a84badc56f5ca192da6
MD5 f11f4210d9c4764c5732883ea9f5b08d
SHA1 7c929b1c3ca2cc8244adb4835481ca38a811d4f3
SHA512 16a838d90a6f20468845bd5ab63230f1568f3ed9a97c597f5396faebf2efe297a8bfaf13b1f480572ed40d480f45f1a03a4ce1c32e2d6623dce9ea0ec4c555b7
SSDEEP 192:EOND6v+YLRQmiUyZTCh+CG6Om9opwSJrH6CHPbq9U6:EOND6vzjWCh+CXOmep3JrDPuU6
TLSH
T1F0122C367C385CAB5EE36591F4873A239FA85167DA4A3F80D5DC2E1C02EF69C130A816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

282ee4f6-7a9c-44f4-8dcf-5133aac18e43.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\282ee4f6-7a9c-44f4-8dcf-5133aac18e43.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 1c4e4855072959e0ba30900a9a7d70e3ca4c514f98d3e06c63ebe7197aab9aac
MD5 33b3996a7930038b893c642affb8810f
SHA1 c62d0a9b54961389ebbc3d5b66c2c82420237ce2
SHA512 e512c92bd5236178e53223f13dc3e8c3116d353647efd28e7cb1b89fbe1cfaa5ab16d1dd100c5f8b1f213f6d47dc6b0120abb25c3bec817ead1ed90cd20c8915
TLSH
T1FC41F859A6FE1148B3B36F5A9FF6A86D447FB9772E06C49E10110E4E0562E40CC71737
MD5 SHA1 SHA512 TLSH

Submit Download