hxxps://letsconnect[.]biz/login?redirect=/dashboard

Analysis

user interaction
yes
max time kernel
149s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
26/09/2026, 17:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://letsconnect.biz/login?redirect=/dashboard
Sample260926-v1rbpsyarg

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4280	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-747854149-4118156852-591593384-1000\{6AEA862C-5519-42E2-A6B1-C6B8D34A3401}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3556	msedge.exe
3556	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe

Suspicious use of WriteProcessMemory 41 IoCs

description	pid	Process	procid_target
PID 4744 wrote to memory of 1556	4744	msedge.exe	87
PID 4744 wrote to memory of 3868	4744	msedge.exe	88
PID 4744 wrote to memory of 4280	4744	msedge.exe	89
PID 4744 wrote to memory of 3868	4744	msedge.exe	88
PID 4744 wrote to memory of 3868	4744	msedge.exe	88
PID 4744 wrote to memory of 4356	4744	msedge.exe	90
PID 4744 wrote to memory of 4356	4744	msedge.exe	90
PID 4744 wrote to memory of 1232	4744	msedge.exe	105
PID 4744 wrote to memory of 452	4744	msedge.exe	93
PID 4744 wrote to memory of 1232	4744	msedge.exe	105
PID 4744 wrote to memory of 1232	4744	msedge.exe	105
PID 4744 wrote to memory of 452	4744	msedge.exe	93
PID 4744 wrote to memory of 452	4744	msedge.exe	93
PID 4744 wrote to memory of 4500	4744	msedge.exe	94
PID 4744 wrote to memory of 4500	4744	msedge.exe	94
PID 4744 wrote to memory of 4500	4744	msedge.exe	94
PID 4744 wrote to memory of 3140	4744	msedge.exe	95
PID 4744 wrote to memory of 3140	4744	msedge.exe	95
PID 4744 wrote to memory of 3140	4744	msedge.exe	95
PID 4744 wrote to memory of 1820	4744	msedge.exe	100
PID 4744 wrote to memory of 3376	4744	msedge.exe	101
PID 4744 wrote to memory of 1820	4744	msedge.exe	100
PID 4744 wrote to memory of 3376	4744	msedge.exe	101
PID 4744 wrote to memory of 4352	4744	msedge.exe	102
PID 4744 wrote to memory of 4352	4744	msedge.exe	102
PID 4744 wrote to memory of 4352	4744	msedge.exe	102
PID 4744 wrote to memory of 3368	4744	msedge.exe	104
PID 4744 wrote to memory of 1232	4744	msedge.exe	105
PID 4744 wrote to memory of 1232	4744	msedge.exe	105
PID 4744 wrote to memory of 1232	4744	msedge.exe	105
PID 4744 wrote to memory of 4108	4744	msedge.exe	109
PID 4744 wrote to memory of 4108	4744	msedge.exe	109
PID 4744 wrote to memory of 4108	4744	msedge.exe	109
PID 4744 wrote to memory of 3368	4744	msedge.exe	116
PID 4744 wrote to memory of 4472	4744	msedge.exe	117
PID 4744 wrote to memory of 1760	4744	msedge.exe	118
PID 4744 wrote to memory of 5048	4744	msedge.exe	127
PID 4744 wrote to memory of 5048	4744	msedge.exe	127
PID 4744 wrote to memory of 4164	4744	msedge.exe	130
PID 4744 wrote to memory of 4164	4744	msedge.exe	130
PID 4744 wrote to memory of 3556	4744	msedge.exe	132

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://letsconnect.biz/login?redirect=/dashboard
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ff93291c188,0x7ff93291c194,0x7ff93291c1a0
  2⤵
  PID:1556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1640,i,2296315814285843046,14287815641744653905,262144 --field-trial-handle=1808,i,7114875712308597297,6181450817551530968,262144 --variations-seed-version --mojo-platform-channel-handle=1804 /prefetch:2
  2⤵
  PID:3868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1860,i,14139911707989361598,18087857075455577951,524288 --field-trial-handle=1808,i,7114875712308597297,6181450817551530968,262144 --variations-seed-version --mojo-platform-channel-handle=1984 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2596,i,16421869760283283623,13108306108910714263,524288 --field-trial-handle=1808,i,7114875712308597297,6181450817551530968,262144 --variations-seed-version --mojo-platform-channel-handle=2620 /prefetch:8
  2⤵
  PID:4356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3452,i,6675775757470635972,4107582721430680232,2097152 --field-trial-handle=1808,i,7114875712308597297,6181450817551530968,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:1232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3468,i,8007638061913748925,7882403090240192678,2097152 --field-trial-handle=1808,i,7114875712308597297,6181450817551530968,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4236,i,15489076019614048925,9927188279529864873,2097152 --field-trial-handle=1808,i,7114875712308597297,6181450817551530968,262144 --variations-seed-version --mojo-platform-channel-handle=4244 /prefetch:1
  2⤵
  PID:4500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4304,i,17819247655559220893,13048480232025087992,2097152 --field-trial-handle=1808,i,7114875712308597297,6181450817551530968,262144 --variations-seed-version --mojo-platform-channel-handle=4388 /prefetch:2
  2⤵
  PID:3140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,18381042532321738824,17317128050482766049,524288 --field-trial-handle=1808,i,7114875712308597297,6181450817551530968,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
  2⤵
  PID:1820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5132,i,6467295758964600638,5339654045182301282,524288 --field-trial-handle=1808,i,7114875712308597297,6181450817551530968,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:8
  2⤵
  PID:3376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=5836,i,13283657727419778629,10570582401076417556,2097152 --field-trial-handle=1808,i,7114875712308597297,6181450817551530968,262144 --variations-seed-version --mojo-platform-channel-handle=5844 /prefetch:1
  2⤵
  PID:4352
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6064,i,12774121341254825955,7348187272466991981,524288 --field-trial-handle=1808,i,7114875712308597297,6181450817551530968,262144 --variations-seed-version --mojo-platform-channel-handle=5864 /prefetch:8
  2⤵
  PID:3664
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6064,i,12774121341254825955,7348187272466991981,524288 --field-trial-handle=1808,i,7114875712308597297,6181450817551530968,262144 --variations-seed-version --mojo-platform-channel-handle=5864 /prefetch:8
  2⤵
  PID:3368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=5788,i,13871179756683600602,8900932834698247400,2097152 --field-trial-handle=1808,i,7114875712308597297,6181450817551530968,262144 --variations-seed-version --mojo-platform-channel-handle=5980 /prefetch:1
  2⤵
  PID:1232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=6516,i,12735257840921670560,7912459278261824535,2097152 --field-trial-handle=1808,i,7114875712308597297,6181450817551530968,262144 --variations-seed-version --mojo-platform-channel-handle=4340 /prefetch:1
  2⤵
  PID:4108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4376,i,6067252149039536606,17260567868724454717,524288 --field-trial-handle=1808,i,7114875712308597297,6181450817551530968,262144 --variations-seed-version --mojo-platform-channel-handle=5544 /prefetch:8
  2⤵
  PID:3368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4588,i,15728514513952214926,5750483014134667210,524288 --field-trial-handle=1808,i,7114875712308597297,6181450817551530968,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:8
  2⤵
  PID:4472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4592,i,11289589938939111943,8158708225475473612,524288 --field-trial-handle=1808,i,7114875712308597297,6181450817551530968,262144 --variations-seed-version --mojo-platform-channel-handle=4532 /prefetch:8
  2⤵
  PID:1760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2440,i,3749237827299372495,1261272447756723311,524288 --field-trial-handle=1808,i,7114875712308597297,6181450817551530968,262144 --variations-seed-version --mojo-platform-channel-handle=5424 /prefetch:8
  2⤵
  PID:5048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5816,i,3482676180740983026,3427275227088486426,524288 --field-trial-handle=1808,i,7114875712308597297,6181450817551530968,262144 --variations-seed-version --mojo-platform-channel-handle=748 /prefetch:8
  2⤵
  PID:4164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5220,i,15779816174569295593,8344758722345831631,262144 --field-trial-handle=1808,i,7114875712308597297,6181450817551530968,262144 --variations-seed-version --mojo-platform-channel-handle=4240 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3556

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2512

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a62a1faeaaa56a5f5375b4d4921e6b263c0bc10a5ecc1f991894c66c32a88aef
MD5 64fcd85513a139bcf5844ab49aea8206
SHA1 3c834eccb77da48c4abac17c440971305fd9b653
SHA512 cd1b39ff43d56158fbb01c5408a5bf247d5bd82279b205a914ab4cdccfece77a5399e430bb26db6f7d10e70dc3503c3bf37c5de59e23cb8f62d6337066c4114f
TLSH
T15DD02232EBF00E82C00B0032082282880F08C03C08003222A23C20AE3A80CEC2E23000
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d1cc89f8f1c9f75d127814445edc4d6d9314209d3b11e5a2b4cc826747683f30
MD5 3bc9cc32c2de3150dc7916bb61984962
SHA1 d75ba9bc7ad74cb95dcb4ec6de6e6b18f5813a04
SHA512 fd090e624e91a98337689ed57390fc5813fab21acd3af426c9de6566ea4d92a7875c4f92a1b64d547eaf9ce40cad3d8a85472a30cf521aea6198cf74b69805ac
TLSH
T12ED02232ABF00E82C80B0032082082880F08C03C0800B323A23C20AE2A82CEC2E23000
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 624f7984c00aac527dfc02a293f14a2c463f60e47462518b1e4c3a23397c2c31
MD5 5e5659dbd7652890e8974f1858542014
SHA1 562bb342739fa880f48ba1e649f0025e0010f9af
SHA512 112ab164727f9021f86d4f7b9ea4cbd23526a9fa3f6f2e034130d90758732f9cf744ece6b160a0835a534a565a2fb1236c4aa4e082f0f7bc921c2ede72659240
TLSH
T19561A77AA960E2B9FF95447AD4DE14CF38324D54B483BEC30EB4E47ACC76304A0B8100
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58e3a4.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58e3a4.TMP
Size 3KB
SHA256 75a42eb5285babc4d2da2297e9b46c490e8f08b0c9d91bcf11a60db7ee911716
MD5 c0a23badcd28141987a34bcb8994b623
SHA1 c3f1ce8df13da66b63764221d5dc02f25f0963cd
SHA512 3b9d86d66ecc5b7e722ecc49597238367824755e7b0ff29f970ed684589b930e7d87c8d05552a33c84098708b35d34b1f400b6d558921191ac8e6c72d947e432
TLSH
T14C618479AA60E2B8FFA84479C5DA14CF39325D95B447BEC30EB8E87ACC7630491B8100
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 1ed80bb25542045e402935dde3c7ce2f38c9a9c6d38851bb11c6b8a4c3933483
MD5 eac68bb3c62dd79bf836049b11760a0b
SHA1 294f3f8c164ec23bbad3810d0938a06c0ac786b3
SHA512 6f62270388926f0e85326313a76f472c5b185b90523fcc25ba319f8cbc1d2ae5d5cd74f4b57df1905c3ea9dffb25ad95b3583ef58654c74644a024f4bc96adab
TLSH
T1A781CCFB83D4C66E880156F05A257E2FCE1D0529621C3C15CADDAE9F93E2473C11269F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 a4c120cc7d5719fd688c172597f5422c0d570c776e016b8ad5bd19fc83c4f335
MD5 c91937a92dac7dcd08e34888cdb9487f
SHA1 163f352699edcd1482b5e228136fc4a5ff78038f
SHA512 bd96edcc058f223f7b430c400eb3c81f5c18ce4b4284110a62d265886012a53970ba2bb059c283e07c207126dbd2a8c16a5fdfa4c9acce13ba6834c2ce8c4176
SSDEEP 192:sxZfRjWG/fwsQnqIdp0KDHW6+WNj/V/YgFHPIgrJ:sxZfgG/fwsUj9Hbh/P9
TLSH
T1D222C7526E64AA7B8CC7D21DBF15BF13E6F95031A1D41E48BAFC861C04E67CD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 9c9a8c5754939bc302ec0035ad371b5beb05d8b7ab6e645d726e1dce89d83f12
MD5 1be2740fdb9e34bee57671144d92feaa
SHA1 fd27360a745eb5eb6e9dfd92f30fd6bd74d06c8b
SHA512 62a7fab69f123623fdeeedb2e3c4911f188650498fd1dfd7d7b11a29a9ffb42f8b8024efca8d036c806b48165b164eb3e797ab09385646c507414a1f541d1e86
SSDEEP 192:sxZfRjWG/fwsxnqIdp0KDHW6+WNj/V/YgnHPIg5vJ:sxZfgG/fwsVj9Hbh/Fv
TLSH
T18022B6566E646A7B8CC7D219BF15BF13E6F9503291D11E88ABFC871C04E6BCD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 6779a2c6f4dd7cbaa7cd835864493107457a092d584d3c0265840860142fd2bb
MD5 b034a9de1404bfae580b9365688625cf
SHA1 3d02e921fd78609d53672adfbdca46ee5270e88c
SHA512 0550fd5cce00ab2f08bed9bcba0aa0aa7ac480ad179d3df86e2914ced7d8b1338f43dea409fed3043fbdf34de27d4ec4f33cb72686ca2f1d07d9f9ebd11675a1
SSDEEP 192:sxZfRjWG/fwsbnqIdp0KDHW6+WNj/V/YgFHPIg5FJ:sxZfgG/fwszj9Hbh/PZ
TLSH
T1BA22C6526E64AA7B8CC7D219BF15BF13E6F95031A1D11E88BAFC861C04E67CD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 290e5d64538f52dfc2bd524c0d7069d9091fd8a20d870d9ed7d68ea9e5b1b856
MD5 4ffe2ddc99f9129ca0ea590ba1008d2f
SHA1 de82dcb868b6ed6fdcf0383008ed2ddd78283454
SHA512 cbee2f1361c890cbb10eb3296aadef3e502c1e98eb8dbe61f1e721a4e9328d50c2bd7672ab37d365239905ce2e975d9046fce7f1bbbf75543ef590508efcf945
SSDEEP 192:sxZfRjWG/fwsxnqIdpKKDHW6+WNj/V/YguHPIg5vJ:sxZfgG/fwsVj3Hbh/kv
TLSH
T13B22B6566E646A7B8CC7D219BF15BF13E6F9503291D11E88ABFC861C04E6BCD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 2b1c9971e50f7705a1a6e91c4d9363037a21a9c6a9674fef99adad08b7410829
MD5 20631279317f5d55613055bd13456ed0
SHA1 9ff99ab3b0feeaa750ed787eb8c4e923974d13ee
SHA512 ec5b46ca6ba121f83f67f7cae0f062b5995711632d5292f75acf7e7937bdf5452ec668d74cb30c568d9985459ed3a32d4c47b6eefed9578e5f8c6532149de7be
SSDEEP 768:taichfPWvPZpl8F1+UoAYDCx9Tuqh0VfUC9xbog/OVu+LlEKXzLrohdZ:taichfPWvPZplu1jan+LKgz4TZ
TLSH
T1F6C2E93B644CCB7E4FC01A5DDD1A6F9A7E9802C7A6688D4047FA984C02C77EE91264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

96a7e571-ec0d-44e7-bc3b-56808d668143.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\96a7e571-ec0d-44e7-bc3b-56808d668143.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 088128e1cd2ccf5699afd06f6bd48cb11e5456eeff84c4c2b207a557dde68d52
MD5 c0aab6a7b27086d9efd272267b4d3c72
SHA1 e6b36744778cbbec1dcfc3ae65734fccfce2bce1
SHA512 89bb6b440968a81aa8f237f25db4943fa9139328ce183d6b63ce0de9242d4d27b9df7e38d0c2344b7717d1876a8b3e9b08d1d465d631eb882f77a0f760f92dfd
SSDEEP 384:QZcIhsN8TOAu5iizfBGYX5E0S+YpD7utgOIwZOyNjoU:uhawUpGYu0SVpHuXsET
TLSH
T13D828D3298B89C7B1CE7A551F98B3A034FB8952BE7C96B9495ED1B1D00DB198030BD27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 ec077d17a3a7a8afe88a59e8a6804f73dfcaaa9b24deaad55dbb16e657a0c993
MD5 0f69a46adfd79a6d806b2f6e30076c2c
SHA1 04e486d09ce75ab7e3406ce0319f733757119889
SHA512 cad61e1df09ead1974a8f374dba82bd8b7455de39fddfba47716b39320df0c5e5b08e5276c2de486a5fa38298708abd707b75473bb8a7ccf3392769139e0af77
SSDEEP 384:NiFiZcIBzsN08TUNTUlIlOOAu5iibfBGYX5E0S+YpD5utgOIwZOyNjoU:EFQxlwgBwopGYu0SVpNuXsET
TLSH
T1A0C22AF248E7897AD9AE5743B77E2E034EBCC127F584A654B399061CCC961BFC30A811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 5e310f54d8f5a86c1e70f6dc9f12ac7ea0ca7425359ee82409bccb95ddbb31e5
MD5 331d732dbe1c7aa905350e378295144f
SHA1 8461a711f132bd4e2bfc11dfa17bbe6a35988143
SHA512 e6f3cb54bc6932a1d4219b364015051e25ba07d9776b1baebcfa3ca3d19e04514940555631f5c26b9a482c6e60847bf4454c3e786e40cbb4302d881bd7cc6cc8
SSDEEP 192:LJONc6DphmqQmiUyKxq8wGYX59ezVCNY+Yjkk7Lr/U6:lONc619PRwGYX5E0S+YbHU6
TLSH
T10702E935E878BC7B8DE36E55B48B2A235FD4112BAA942F84D6E81E1D00D768C1307837
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 1c648b70fab3b01d208304ffd6ef4390841c440d6f306e445ac7feaefaf19f05
MD5 f6a87a2c75f471d2eda498c463221c6e
SHA1 57663b0c065e3267fcbbb2a099701e7675972f74
SHA512 635fad15915f1d518b8f37d78af2c96d5791bcb2dcef8449deef9eb9d04ee90392e2f548312adc140b61164330e9360df47efafb3715b49cdd494d121bb58dd8
SSDEEP 384:uZcIhsN8OOAu5iizfBGYX5E0S+YpD7utgOIwZOyNjoU:MhHwUpGYu0SVpHuXsET
TLSH
T17F829E7298B89C7B1CE7A551F9873A034FB4912BE7C96F9495ED1B1D00DB198030BD27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 cf271a548267791fd7204d318b981ef6d36517e5f1b243775a78f5ce4b703342
MD5 4609f12648256cc1de1a12471c70accd
SHA1 23938886c1998b6ff382fe27b3ef3c2325f52533
SHA512 dd46d1942e1010adfa7d9c56b64e8a5b07b223b30a9871b2d91a4ff96b19e6f4ef3ebafae588a5ec016207f6ed4d622f7646dedb832d81cef621e2d741eed879
SSDEEP 192:LJON16Dph4qQmiUyPx9wGYX59ezVCNY+YpDyeykIIuqz+U6:lON1613A9wGYX5E0S+YpD5uU6
TLSH
T1D5121A35E8B4AC7B4DD3A991F48B39135FA4522BEB887F94D5DC1A1C01EF29C130B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bceef327-e86a-4c82-8c26-65dd0065927a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\bceef327-e86a-4c82-8c26-65dd0065927a.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 67a3a576fc1190dceff4d2e13ae1a007b589ee3527b7b0b0af716067756fcce8
MD5 89766ecbcbc230907ab96ac47fd5c569
SHA1 36eb53ef86e06b2c7dc65792e4f379018d4aab12
SHA512 9d12674bd2a82a6a1f0c10a242cf10c0d9190900dacd9d217efdd1cca25f391ae78a851b4dd47aa46e1d50bf59c19014d39032a59b5ea83726600d7794587745
TLSH
T1D5412958AAE91148B3B76E5AABF2A86E487FBC732F07C05D10010E4F0B62B45C961737
MD5 SHA1 SHA512 TLSH

Submit Download