b715b02538c6befb774364b526f14d2e6b2f990f9e7a1c721e4f02b04e7885eb

Analysis

max time kernel
148s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
13/08/2026, 12:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
pages/admin/usuarios.html
Size 8KB
Sample260813-ppynrayxbv
SHA256 b715b02538c6befb774364b526f14d2e6b2f990f9e7a1c721e4f02b04e7885eb
MD5 deb9d479d03716ff0741830666c18243
SHA1 90274fab980943e03961d72791f5a9f1951ec1f9
SHA512 b76f535e97d165bee7fa8ec65dade25ca85e772ed98f2bcc24d6338b110bee91e3161bd414c594582f0b7c9f1c4a20579580f52c7752d82da51857cfc7abb4c9
SSDEEP 192:QvzhXP/6Ribg0dMDQovGySFSUG2pOsK1QytKIpKJwaQi4N2S16121/yfASfV:Qg8U2oPg
TLSH
T16B121D9172F336B3B92381D61B26EF536AE0C063D485C9107BBE1BF94F89DD0694790A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4184	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134310978982301178"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2937465464-4167303362-2236413517-1000\{7DB39672-A628-4038-896F-4E0AFF4E11CF}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
392	msedge.exe
392	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 4272 wrote to memory of 4892	4272	msedge.exe	84
PID 4272 wrote to memory of 4184	4272	msedge.exe	85
PID 4272 wrote to memory of 780	4272	msedge.exe	86
PID 4272 wrote to memory of 2304	4272	msedge.exe	87
PID 4272 wrote to memory of 780	4272	msedge.exe	86
PID 4272 wrote to memory of 780	4272	msedge.exe	86
PID 4272 wrote to memory of 2304	4272	msedge.exe	87
PID 4272 wrote to memory of 3036	4272	msedge.exe	88
PID 4272 wrote to memory of 3036	4272	msedge.exe	88
PID 4272 wrote to memory of 3036	4272	msedge.exe	88
PID 4272 wrote to memory of 3796	4272	msedge.exe	89
PID 4272 wrote to memory of 3796	4272	msedge.exe	89
PID 4272 wrote to memory of 3796	4272	msedge.exe	89
PID 4272 wrote to memory of 2860	4272	msedge.exe	91
PID 4272 wrote to memory of 2860	4272	msedge.exe	91
PID 4272 wrote to memory of 2860	4272	msedge.exe	91
PID 4272 wrote to memory of 2836	4272	msedge.exe	92
PID 4272 wrote to memory of 2836	4272	msedge.exe	92
PID 4272 wrote to memory of 2836	4272	msedge.exe	92
PID 4272 wrote to memory of 3928	4272	msedge.exe	96
PID 4272 wrote to memory of 1460	4272	msedge.exe	97
PID 4272 wrote to memory of 3928	4272	msedge.exe	96
PID 4272 wrote to memory of 1460	4272	msedge.exe	97
PID 4272 wrote to memory of 896	4272	msedge.exe	99
PID 4272 wrote to memory of 1540	4272	msedge.exe	103
PID 4272 wrote to memory of 3792	4272	msedge.exe	104
PID 4272 wrote to memory of 2060	4272	msedge.exe	105
PID 4272 wrote to memory of 3368	4272	msedge.exe	112
PID 4272 wrote to memory of 3368	4272	msedge.exe	112
PID 4272 wrote to memory of 2712	4272	msedge.exe	113
PID 4272 wrote to memory of 2712	4272	msedge.exe	113
PID 4272 wrote to memory of 392	4272	msedge.exe	115

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\pages\admin\usuarios.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x254,0x7ffa248bc188,0x7ffa248bc194,0x7ffa248bc1a0
  2⤵
  PID:4892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1872,i,14373838819693977929,8049386677430890227,524288 --field-trial-handle=2328,i,6222362030577224076,7202758790622961507,262144 --variations-seed-version --mojo-platform-channel-handle=2380 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1764,i,14909203989687578340,9518751332450067655,262144 --field-trial-handle=2328,i,6222362030577224076,7202758790622961507,262144 --variations-seed-version --mojo-platform-channel-handle=2316 /prefetch:2
  2⤵
  PID:780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2516,i,6540567242792334034,14571849938096309353,524288 --field-trial-handle=2328,i,6222362030577224076,7202758790622961507,262144 --variations-seed-version --mojo-platform-channel-handle=2528 /prefetch:8
  2⤵
  PID:2304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3452,i,14262171197617628800,6364177203817513412,2097152 --field-trial-handle=2328,i,6222362030577224076,7202758790622961507,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
  2⤵
  PID:3036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3456,i,9999442530177533633,15538154152454562013,2097152 --field-trial-handle=2328,i,6222362030577224076,7202758790622961507,262144 --variations-seed-version --mojo-platform-channel-handle=3532 /prefetch:1
  2⤵
  PID:3796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4224,i,2003373300296373683,11999651902738475975,2097152 --field-trial-handle=2328,i,6222362030577224076,7202758790622961507,262144 --variations-seed-version --mojo-platform-channel-handle=4260 /prefetch:1
  2⤵
  PID:2860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4236,i,18366320202782637448,2312515179862535692,2097152 --field-trial-handle=2328,i,6222362030577224076,7202758790622961507,262144 --variations-seed-version --mojo-platform-channel-handle=4264 /prefetch:2
  2⤵
  PID:2836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,12528131619562429071,6691113119289845625,524288 --field-trial-handle=2328,i,6222362030577224076,7202758790622961507,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:8
  2⤵
  PID:3928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5132,i,2010071145262277576,7593167796468521726,524288 --field-trial-handle=2328,i,6222362030577224076,7202758790622961507,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
  2⤵
  PID:1460
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5916,i,10048337673220470268,4064694290190157798,524288 --field-trial-handle=2328,i,6222362030577224076,7202758790622961507,262144 --variations-seed-version --mojo-platform-channel-handle=5932 /prefetch:8
  2⤵
  PID:4928
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5916,i,10048337673220470268,4064694290190157798,524288 --field-trial-handle=2328,i,6222362030577224076,7202758790622961507,262144 --variations-seed-version --mojo-platform-channel-handle=5932 /prefetch:8
  2⤵
  PID:896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4208,i,5293182282316447437,15859858233385666588,524288 --field-trial-handle=2328,i,6222362030577224076,7202758790622961507,262144 --variations-seed-version --mojo-platform-channel-handle=4376 /prefetch:8
  2⤵
  PID:1540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4236,i,17294609836652512161,18034346183088202595,524288 --field-trial-handle=2328,i,6222362030577224076,7202758790622961507,262144 --variations-seed-version --mojo-platform-channel-handle=560 /prefetch:8
  2⤵
  PID:3792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4368,i,3825019775359773767,3635969968877268107,524288 --field-trial-handle=2328,i,6222362030577224076,7202758790622961507,262144 --variations-seed-version --mojo-platform-channel-handle=6220 /prefetch:8
  2⤵
  PID:2060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5732,i,793008522199499476,11229223106434022122,524288 --field-trial-handle=2328,i,6222362030577224076,7202758790622961507,262144 --variations-seed-version --mojo-platform-channel-handle=4384 /prefetch:8
  2⤵
  PID:3368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5884,i,12515091733698751433,5374745662367096557,524288 --field-trial-handle=2328,i,6222362030577224076,7202758790622961507,262144 --variations-seed-version --mojo-platform-channel-handle=5892 /prefetch:8
  2⤵
  PID:2712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6100,i,6675916764965304998,9130795545128470591,262144 --field-trial-handle=2328,i,6222362030577224076,7202758790622961507,262144 --variations-seed-version --mojo-platform-channel-handle=1728 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:392

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4664

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 05210635590ecfe61f0ff004344f0d07b5a87e284e29db76f0bd61e97f43da5d
MD5 f3021567e2b276da7e7b2413e95d0918
SHA1 2925767ee01df1ce973aad0d342ba0f82a41cd81
SHA512 5b21fac88299defcd3a29d897631cfc4c2389199b22dd9059a42d23770fa290b889a287add6c819d88e1fd4c377eaeb1334a84e81ea1e94cb895145f971870b3
TLSH
T1D1D09B207A48F441C745017195059F553B2654542057D90AE165585D6CA519493D9682
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 be88a9fcb586ab02a57db2570b72d14d60e373df18bbd843503f61d56e0a4f6e
MD5 5e70095a31e4a86d76de928d6d392013
SHA1 495b5f3de78340ed4b246d4227442a5ff0e6504a
SHA512 25b213a822a714eff54c0f6f49a77335505572eb8e8b714a43202eb464e2805e95618b949599e0b275444e3e8935181b906ad8894e8b9212d55f4e41a51a27b3
TLSH
T16F61073C32574187E75F85F1F8F95E4C327941BB9B1F9E3C0658483D7A08B2A8023418
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 733B
SHA256 9c15be60add47d42538fa6f6c3a09c82a64626f7b693e561442b241a1cefb883
MD5 16baf6c388a1c0791e19fbc1018eae0d
SHA1 e5fc06925a7629093122e7bc5ef4f0f8c08638e7
SHA512 2a70e8946e7886b1090e03968013c9c6e99db19ab5a5698be02f5cbd39419ddfdb5aade09cddf1eb27776808bde305e6b226f344ec4a6a851ca3eed1b91cb0fe
TLSH
T1E8019CB7C3E4956E8A0552F06A18AE1BCE2D0552831C7C1AC9D4AE2BE3F3479D40189B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 7e8bbb71521d83ae7737eb829cd6f22eddc03ee137dbac283f2949c5e50d35b7
MD5 b42fce05ccc03f4a5c47293d589e39a4
SHA1 522986079e3bb001060e172bcd0905c1025b1b50
SHA512 fd27e09469526794e774e69105277e6354b104dad797a2c2db2231f8ae1e42baa4867faa794bd1d1e002b9d75741f93a54464ac5787d58a099b90bd1eb04c42a
SSDEEP 192:sxZLoRkkC/f8ssl1IdpdMHW6+WNGYLzrfRIgrJ:sxZLo1C/f8sslG2HbGs9
TLSH
T13A22C9126E38A9774CC7E219BA25BF53E7F91032A5911E58EAFC961C04E66DD230780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 f09ee2870abd191aa9ae97a3b4844f1499b02115c52f5a48263a40b791e51c6d
MD5 4e164babfc512d6b0f416352574e90e6
SHA1 c29c00d347189aaf2fab3ec569e79e253c85caa6
SHA512 9dc399dd39a55709d2cc7ea6a2815cfff709e6b4abf99acd853a7cdbd014f8e2ad66bc456ca62eadf0678845d3ae3808c19d51af06aafa34c28d7905b0b6dde5
SSDEEP 192:sxZLoRkkC/f8sntl1IdpdMHW6+WNGYLzrfRIg5Y2J:sxZLo1C/f8stlG2HbGst
TLSH
T1F622B9126E38A9774CC7E219BB25BF53E7F9503291911E58AAFC961C04E66DD230780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 fbc1d7371f39d4c34eb8ab59eb52cd329a9417e6d3136d78a04ef5683a763fa6
MD5 341ef47a464ccd870142805bac1d9df5
SHA1 9dfb1da1124a8ec8df7d828ea8f5955dbe0e8e7b
SHA512 e4fd6bc8189a1a3ce402992317eed4b98243a2464d9213692e04f522798136d61f50d16d241f6228e6a58a34f1e1301fe2f77e95c669ee7f9a644335be739ff5
SSDEEP 192:sxZLoRkkC/f8sntr1IdpdMHW6+WNGYLxlfRIg5YcJ:sxZLo1C/f8strG2HbGqj
TLSH
T1E722B8126E3869774CC7E219BA25BF53E7F9503291911E58AAFCDA1C05E6ACD230780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 468cd1594e62caa9595ea0e6680024b2725707fe0eab1757dcf1f004f93de829
MD5 1c58e56791f2366eb7fa10d272d42923
SHA1 5df4d07fb3c11b04ac3f39db3a3abb415388f68a
SHA512 74ecc7e0f5cafb262ea20a028b2dadc0f92befa9b203d84688d5116a74a18bb9acb4d62c8af8ef59fc6bb2f8b23c86d9220be1724df6fe2d6e9667a30f02abbc
SSDEEP 768:zeO6fP1Wvxz3j8F1+UoAYDCx9Tuqh0VfUC9xbog/OVkILlWwJv8ro16:zeO6fP1Wvxz3ju1jaZILIsvn16
TLSH
T18BC2E83B240DCB7E4FC01A9DAC5A6F977E9802C7AA588D8447FE854C02C77EE51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 d41789b8634d22e445f5b1905d4299c744d65b32f1eb918566467da107801103
MD5 945ad243ddc60b577469a6869c9b812c
SHA1 c530f0ccb0083a7e1f19da465312c1a1be669ebf
SHA512 093e0fe2b8f5a7b8a0ed2dd37cade652ad76ffc32ee6b8d42dcdf05e0896527628e4705c41d9b15165cba3452cac80f9ab6a67bfd524aa9b1c9b4c9e3b9c2704
SSDEEP 48:K0PY7/VpdktpmPImHkKzBb9k3f0oGVIyFOuI3KvasrylxIhKq00qrI/bhj:KUAAKteP2OuwKvaCOxuKq02
TLSH
T1FEA1131372BB03437C3E294CA7958B664B4672633018B42B3BA910765DAAE384DFD5ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c95c2500-0736-4e6f-8bbd-5ad0a25db45a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\c95c2500-0736-4e6f-8bbd-5ad0a25db45a.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 b3137420a1ee1d87869e6298b25a901aaaf8ddc2f4c09f452bfa77b12fe0fb44
MD5 ab776041f8dfaf0c2026a22833df53e1
SHA1 f4c2b721fe6337f618d04c6167b1aa7a81ff1a6b
SHA512 18cb639c17b30f5524afbe1d42f6fa1c02490c86385036c456f8b2e16fa9cac7b62dac90a842326e13c42345981a923ea41ce9fc04973a95291e4f6d0bbdb9e5
SSDEEP 384:IZcIhsNT1wM44EBa9DOMMe/7zJr2rQ4EXG/rYIg:2hEQUJO+/fh2rdbY3
TLSH
T109926C316C385C7759E2A142FA8A3A139FB44077E6DA2F84D5FCAF1D01DB5AC134AC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 9fa72f5665578ed92a86a6ec2410f6d45c196b0d21e92bdebcaa45004fff576a
MD5 47ca0b103a419ee2671827700271aaa9
SHA1 d99823c00305167fc9ac49b26cdf3cc84cae9315
SHA512 2f366a9a18c8290c53247ef41c84e9da2015281492afff8e22a70ceb2bbd1660e42031983adbc301e489fef333bda684cd64804a121bc78b7ada339a71fbf7e2
SSDEEP 384:ziFiZcIqsNt8TUNTUlIlwwM44EBa9DOMMe/7zJrVrQ4EXG/rYIg:eFQqAwgEQUJO+/fhVrdbY3
TLSH
T17EA27D325C648C7BADF6AA41FA4A36139FF44073D9D66E90E6EC9E1C019B1AC134BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 47c0c464cfe330601375e17102fe1f3814f7e50ea20e919356f78d8bdd6bba75
MD5 064a6b5ed00424560e9aee60759a4bfb
SHA1 f0086de1129a614f0aa06a4cfd471e6c096e0113
SHA512 37cb6e5b72615cba4b9a766c585e49f6f5d3c7f900363fd59aae11eb7a04e1ca786859f62dc412cb992d75c0e0d7c875ce348f6487f063ace40a0e05bad8591a
SSDEEP 192:qON8S6O7+3hQmiUy0AGttb02O2bbh2eQgGwoiU6:qON161QGt9DOMMe2qU6
TLSH
T15902F9346D686CB74EF2AE05FA8737279FA5102BE9952F44DAE81F0C00D765C2347C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 64d060c4bb8e9c6763a7a3ab50da77d546a46b2d71766fe67338fd730b41ebc6
MD5 19766855e5b9bd07890431bf2e4732f0
SHA1 b613fb8e2b46afd7834a984fd6f0e77932bf32bd
SHA512 adb41cd898c005e669b18784914b4fbbf0fe759721190cb9ff3ac335573b4cc96bdba90223568d6eb2904dd62c29fbf7f3c19bc7e8a7ab3f8854604d4cf9167d
SSDEEP 384:MZcIhsNTwwM44EBa9DOMMe/7zJr2rQ4EXG/rYIg:ahBQUJO+/fh2rdbY3
TLSH
T1A3926C316C385C7759E2A142FA8A3A139FB44077E6DA2F84D5FCAF1D01DB5AC134AC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 d3b8e8b716b90cee0be9b017378b93a5ec10faaab00026b93f258ce013f60c37
MD5 548e5b0993a9f3def9104c8130c41be2
SHA1 fd4ff3355ad9a0672a66510c5e7b7a7b40e0f85e
SHA512 e41f89661f09cd59230944708131a58feecc44e060fd71be5fe79f5f87e6b4fa192ee64519a685fc56ce9ad79f00dd98824945d1f07a70ba6e0ae67979bc473f
SSDEEP 192:CONG6O7+3bQmiUyRAzttb02O2bbh2e/FF0SJr2cN+qCHsU6:CONG6HDzt9DOMMe/7zJrXrU6
TLSH
T106120A31A8289C775DE2A541F98736239FA54177EE8A6F80D5EC2E1C01EF66C234AC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1bab00ed-23ef-44de-9f91-d104d4a69d9d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\1bab00ed-23ef-44de-9f91-d104d4a69d9d.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 fd4a7d62aedd9f44c9a299f35dd28a62c51ad9a5d6d6f22ea940c1304b4f398b
MD5 ff2a3d6c47bd314d3849a479b60bfff3
SHA1 d321eae26c903402d109845045f4b5f8cc483026
SHA512 2412ca21b33d6d0b936fa9992cd4e595bda386869fba578c40d0f052109652c4fba8336224f753f6f40f122606142725edb218087e82ca5578df5c1b9074d79d
TLSH
T18D412758B6E91108B3B76E1A9BF6A86D487E78672F0B955D10010E4F4662E40CCB1B37
MD5 SHA1 SHA512 TLSH

Submit Download