510ecfa4eb4547c7b0b77307475148ffbf096ac630a6881738f76855173ff4a9

Analysis

max time kernel
148s
max time network
151s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
28/07/2026, 10:54

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
SG Web V2/core/templates/website-frontend/404.html
Size 4KB
Sample260728-mz23tavydv
SHA256 510ecfa4eb4547c7b0b77307475148ffbf096ac630a6881738f76855173ff4a9
MD5 c75a2e32fb70a846c394fc7bda8b939f
SHA1 e736888392ca05886c07bc5e2d51bcf5ad540564
SHA512 6dd01011f35712652e5d2d6911ad4d6d1c8ca8f33066b002a2bcce8e4c7da745ba6aa343705daf974c48470d3e0044e4bd179f714c1c9f99ba646bf34af8f0e2
SSDEEP 48:t3yGUQsvqNMcF2Ut/NBKPRFQVoomAzOvxRLlve0RLkIhLmmdtDYs3ci4nDFWhosf:4IRF3Kko5RLl/RLkgYiYa
TLSH
T1FFA11D1ABA411502A137A3A4DFB3574DFB595013C303862A7FDD73828FB59458962FEC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
816	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134297097156538846"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3797332335-34111092-3597280141-1000\{BE441A04-7F53-431E-A2A2-7C6D2724F647}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3156	msedge.exe
3156	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
700	msedge.exe
700	msedge.exe
700	msedge.exe
700	msedge.exe
700	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
700	msedge.exe
700	msedge.exe
700	msedge.exe
700	msedge.exe
700	msedge.exe
700	msedge.exe
700	msedge.exe
700	msedge.exe
700	msedge.exe
700	msedge.exe
700	msedge.exe
700	msedge.exe
700	msedge.exe
700	msedge.exe
700	msedge.exe
700	msedge.exe
700	msedge.exe
700	msedge.exe
700	msedge.exe
700	msedge.exe
700	msedge.exe
700	msedge.exe
700	msedge.exe
700	msedge.exe
700	msedge.exe
700	msedge.exe
700	msedge.exe
700	msedge.exe
700	msedge.exe
700	msedge.exe
700	msedge.exe
700	msedge.exe
700	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
700	msedge.exe
700	msedge.exe
700	msedge.exe
700	msedge.exe
700	msedge.exe
700	msedge.exe
700	msedge.exe
700	msedge.exe
700	msedge.exe
700	msedge.exe
700	msedge.exe
700	msedge.exe
700	msedge.exe
700	msedge.exe
700	msedge.exe
700	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 700 wrote to memory of 4328	700	msedge.exe	89
PID 700 wrote to memory of 6128	700	msedge.exe	90
PID 700 wrote to memory of 816	700	msedge.exe	91
PID 700 wrote to memory of 6128	700	msedge.exe	90
PID 700 wrote to memory of 6128	700	msedge.exe	90
PID 700 wrote to memory of 2612	700	msedge.exe	93
PID 700 wrote to memory of 2612	700	msedge.exe	93
PID 700 wrote to memory of 2600	700	msedge.exe	94
PID 700 wrote to memory of 2600	700	msedge.exe	94
PID 700 wrote to memory of 2600	700	msedge.exe	94
PID 700 wrote to memory of 1292	700	msedge.exe	95
PID 700 wrote to memory of 1292	700	msedge.exe	95
PID 700 wrote to memory of 1292	700	msedge.exe	95
PID 700 wrote to memory of 1192	700	msedge.exe	96
PID 700 wrote to memory of 4592	700	msedge.exe	97
PID 700 wrote to memory of 1192	700	msedge.exe	96
PID 700 wrote to memory of 1192	700	msedge.exe	96
PID 700 wrote to memory of 4592	700	msedge.exe	97
PID 700 wrote to memory of 4592	700	msedge.exe	97
PID 700 wrote to memory of 1696	700	msedge.exe	99
PID 700 wrote to memory of 1156	700	msedge.exe	100
PID 700 wrote to memory of 1696	700	msedge.exe	99
PID 700 wrote to memory of 1156	700	msedge.exe	100
PID 700 wrote to memory of 2800	700	msedge.exe	102
PID 700 wrote to memory of 5600	700	msedge.exe	106
PID 700 wrote to memory of 5356	700	msedge.exe	107
PID 700 wrote to memory of 5984	700	msedge.exe	108
PID 700 wrote to memory of 4684	700	msedge.exe	109
PID 700 wrote to memory of 4684	700	msedge.exe	109
PID 700 wrote to memory of 3156	700	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\SG Web V2\core\templates\website-frontend\404.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2d8,0x7ffbd0fec188,0x7ffbd0fec194,0x7ffbd0fec1a0
  2⤵
  PID:4328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1512,i,1477042619279304842,5030765139692042211,262144 --field-trial-handle=2180,i,15327607800478916787,2685653617916292899,262144 --variations-seed-version --mojo-platform-channel-handle=2176 /prefetch:2
  2⤵
  PID:6128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1644,i,2623297336560826595,8088869406796846985,524288 --field-trial-handle=2180,i,15327607800478916787,2685653617916292899,262144 --variations-seed-version --mojo-platform-channel-handle=2216 /prefetch:11
  2⤵
  - System Time Discovery
  PID:816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2472,i,191974524382054244,6355178897652610859,524288 --field-trial-handle=2180,i,15327607800478916787,2685653617916292899,262144 --variations-seed-version --mojo-platform-channel-handle=3664 /prefetch:13
  2⤵
  PID:2612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3392,i,11400608430579265170,3467611953657344158,2097152 --field-trial-handle=2180,i,15327607800478916787,2685653617916292899,262144 --variations-seed-version --mojo-platform-channel-handle=2928 /prefetch:1
  2⤵
  PID:2600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3388,i,17610403030722234101,2848251437797853052,2097152 --field-trial-handle=2180,i,15327607800478916787,2685653617916292899,262144 --variations-seed-version --mojo-platform-channel-handle=3784 /prefetch:1
  2⤵
  PID:1292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4304,i,8577783873285078445,8909815955973085125,2097152 --field-trial-handle=2180,i,15327607800478916787,2685653617916292899,262144 --variations-seed-version --mojo-platform-channel-handle=4464 /prefetch:1
  2⤵
  PID:1192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4328,i,18389592922220770299,11153746720296976475,2097152 --field-trial-handle=2180,i,15327607800478916787,2685653617916292899,262144 --variations-seed-version --mojo-platform-channel-handle=4500 /prefetch:9
  2⤵
  PID:4592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5372,i,1970352439591879351,6965740572843525152,524288 --field-trial-handle=2180,i,15327607800478916787,2685653617916292899,262144 --variations-seed-version --mojo-platform-channel-handle=5424 /prefetch:14
  2⤵
  PID:1696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5392,i,1737771946014413179,438901093993723635,524288 --field-trial-handle=2180,i,15327607800478916787,2685653617916292899,262144 --variations-seed-version --mojo-platform-channel-handle=5436 /prefetch:14
  2⤵
  PID:1156
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5876,i,7491549850351816680,15148245342823703746,524288 --field-trial-handle=2180,i,15327607800478916787,2685653617916292899,262144 --variations-seed-version --mojo-platform-channel-handle=5888 /prefetch:14
  2⤵
  PID:3876
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5876,i,7491549850351816680,15148245342823703746,524288 --field-trial-handle=2180,i,15327607800478916787,2685653617916292899,262144 --variations-seed-version --mojo-platform-channel-handle=5888 /prefetch:14
  2⤵
  PID:2800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4888,i,4907943680399948960,2749276515945813241,524288 --field-trial-handle=2180,i,15327607800478916787,2685653617916292899,262144 --variations-seed-version --mojo-platform-channel-handle=4456 /prefetch:14
  2⤵
  PID:5600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5356,i,1315565184214617924,7885704152232324216,524288 --field-trial-handle=2180,i,15327607800478916787,2685653617916292899,262144 --variations-seed-version --mojo-platform-channel-handle=5016 /prefetch:14
  2⤵
  PID:5356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4452,i,14959421575592552887,13684398494619212249,524288 --field-trial-handle=2180,i,15327607800478916787,2685653617916292899,262144 --variations-seed-version --mojo-platform-channel-handle=4988 /prefetch:14
  2⤵
  PID:5984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5452,i,11964437023977217362,1804681082237009150,524288 --field-trial-handle=2180,i,15327607800478916787,2685653617916292899,262144 --variations-seed-version --mojo-platform-channel-handle=6500 /prefetch:14
  2⤵
  PID:4684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5784,i,2625820531079463763,16610212282901403660,262144 --field-trial-handle=2180,i,15327607800478916787,2685653617916292899,262144 --variations-seed-version --mojo-platform-channel-handle=6192 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3156

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2488

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5628

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e413e02b9e80ee8d76d52c1043fc32251e2d7634d4b2fbd970df9ace9d91831a
MD5 22959b3a06a842ac30237dd57e8a3801
SHA1 0b7c28071a592034aa2607038000f085c7bb6362
SHA512 644add9ab912ad7fdfc55bc7a1b84482c75cc9bc69a59d169bae63a0400619d999846ebbadb0ef2bd6d35c2bd08a5f07053b600874dd5dfcbda7e8f3076131fe
TLSH
T1A5D02BE476408A0CC980203335F6524092018910D801D1480040B325CC845C1257F0DF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8aaa68aad07ba45abe53bd513aa5f7e7b21bd1b29db6e1d5c1e0a79a5f4eb890
MD5 74012bbce5fada7634c1da1b567562b3
SHA1 09db27f38f27e35986cfd407b57f6f83c8fc59f8
SHA512 c1a6a98f972793c84274c29552107bfe07b775c7c8121e5fdf137ebf9a7cc3f4eb43fe9eadfc842e7b92ca7281bbcea3d660bdd8fc9adc56add068510c41e48d
TLSH
T1FBD02BE07640890CC980203335F75240920189108401D1480040F335CC845C1257E0CF
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 be5aec6d443f8037e0cf71a7c947d7c320a05a372d2551353023d5e428d2d905
MD5 b500fbba6ff792cd0f1343ce06e98bec
SHA1 1f5cb00a46bc0030ee84ba4ae7cb2d2660ffbc1d
SHA512 db283c9da43421a4c5430448514339db6f5f0e7eb4e70e6ee9ed073f00a076d521ed16afc245f6d25f719a35e6428c31b8080341799e5f0ed62a6a6de8778147
TLSH
T176512C5CA37604DAE32047B2BCE384553FF58CAB09035E172080AE7859C6F075EC2E97
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 5ddb84637b99920c792484d9c2b0539be611915536123c89eef79367bec6ec27
MD5 0ca7d4b8b014d4573dabd15d4bca6fa2
SHA1 102784997b93acd731db82426413b67bb8675752
SHA512 78d7b2b7a42d9faa650b01a2bf539819dc72492da4f93e431d83256e6436cb73401cc8a918eaddef9020ab39fc662316c9e28df473b28960bdae038d903d4be1
TLSH
T14341CCF7C3E4D66E890186F0AA14AE1BCE1C0915832C3C6AC9E4AF1B93E2471E141A5F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 4e39d2d855b8ca40ed8977bf4ed4598af3efa0eec8da2388f2468f8c3210da2f
MD5 d87ea68587c241b51fd28bbf70149505
SHA1 5aab5f3cd0aa72dfc80ddb36ab529af53230bdad
SHA512 4ced5aa14d0559cbcf33143db0f168f6d7d7efd85b16c9dbd8b6bfda1f52d6a05b94e5495774a2baa5d0ea2a8563cdd3e028e868d6f3aaf606e18852f828f136
SSDEEP 192:sxR3ERbbU/f7s4jprQ51zoA8p4M/g6+WNIYn831yGzZoIgDFJ:sxR3EtU/f7s4jJB/5ITFs7
TLSH
T12032B51A6A68A97B4CCBD21DFB55BF53D2F95432A1D02E48B6FC8B0C04EA6CD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 e41c443cdf14ce1947de69db492ea0d4e11b99b4afe5219014d76fc2e72a6ea4
MD5 a393be48b8a2dddef156bafd14c9203c
SHA1 643de376d54e7cfc97e262ac3ba2100322b6eec0
SHA512 76b3830fcb3d5a07045ab9e9cb44c45a3557b05496919cfe552fc56f6f32edb40d0d5fe539257d523bdf6c5e86345355527b2ad645637e3b1e7e584d7f182749
SSDEEP 192:sxR3HRbbU/f7sJjprQ51zoA8p4M/g6+WNIYn831yGzZoIgIJ:sxR3HtU/f7sJjJB/5ITFss
TLSH
T1C632B61A6A68A97B4CCBD21DFB557F53D2F95532A1D42E48B6FC8B0C04EA6CD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 7c717ba6e7cb85b9492e231e44ae80ccb21a3bd28d6852b4ecb5c774c2abe330
MD5 09ef1fd0653651317971f97936643db4
SHA1 5d760fb1a9a87af57cbc72857f9ed66c0e9867f3
SHA512 7ac3b1b41f60dbb6ca14da399cfe403d5490ad14d1995143edb1e976466e000c424ca3fd8a448f0057f9476e281e15e82ef29554855e733004caf087c88596d0
SSDEEP 192:sxR3ERbbU/f7s4OprQ51zoA8p4M/g6+WNIYn8t1yGzZoIgDLJ:sxR3EtU/f7s4OJB/5ITHsp
TLSH
T12842B51A6A68A97B5CCBE21DFB557F53D2F95432A1D02E48B6FC8B0C04E66CD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 a676c5a6678753b05b5e330c69f3d4d39001c9005821d8bfe6d304f32edb524b
MD5 f4ff2c9b1d5b4603ca88a39a891858fc
SHA1 d72f70851bd32f314f9d050a3e561cbac132395c
SHA512 0d1575832a2fb6bcb42a723e7e537ff3f4839d5fb76ce7d2ab37e8250b24c0be46309872b0d1cf85493c7eb79ebb79056b9bcf13c5a70e9d3956c47e54ab59e2
SSDEEP 384:wum8dzAfCtgoSFf6MKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVU494oRPWrohMg:wb8dz6Wgouf6M8F1+UoAYDCx9Tuqh0Vk
TLSH
T18FB2DC3B604DCB7E5F800AADEC19AFDB7D9802C79A948D4447FE990C02C77EA511A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 ce8f630eeb7a5bfd1339adbcc71ee695e31d837e794721085bc48e6b366a021b
MD5 6ac03f7d6c646210d72417ef7138fac7
SHA1 0ce7f11aa82dfb34929e81d113c197ac5d986218
SHA512 e62cf6289f57c6776d1da793305009475e317629603a51d4d9646a32365962045b02f191ba5d20c61540db49be847c63ca08dadcb940bcaf79966e21a81337c1
SSDEEP 96:KRoZs4q26gWeDzgggK41gCgcwgziItHCHuC0UECWMZxgyCK4ngoCcSaBg5LGKY8R:CoZs4q26neDsgU1gC/wgziItHCHuC0UL
TLSH
T14C919681347B0245387D6E4C8174985BE6D274A6309CB4AF7BA806B24FA7E074DFEDC9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

6d463c4f-f88b-43ee-81be-74138f4e521e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\6d463c4f-f88b-43ee-81be-74138f4e521e.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 ebae43870bcd379351703a0de8f33e8146960203fcd79b3b935d1e041a31904f
MD5 1c1d85ddfbb76ffaf9ed334374c85423
SHA1 3275ae184149d7044ac11ed7b2dc61efa42b97e1
SHA512 50ccf58061231ae4defd4ee41a3067a7806ccac4c7db476219763a95ba3edce995fda46c5784613bbbfaf0f0ec400cb44d105e23059f9643d8b9ae4891882fe6
SSDEEP 768:DM3wRskFDZIO0nBJThNzc4ReyIsP5zb9M5:DM3wQBJThtc44bsxb+5
TLSH
T164F2CF36EC258DB7ECEA9796F54735137DF0962BC2DC2E8496ED9B0C0A475AC070B412
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 072d59b40647c4b733aa0c8751d8acae14f029252fb1cab15fd561eda77a3591
MD5 ccd141150ac03b8e73729620ba68cbd0
SHA1 6fcaf0ecc6767abe396792307adda9cdc9dc6111
SHA512 890b37319ed241186c2e4b2cb3fad0f9702f3c75f76c4e75dd0964b73db561c80bed3f139ca1709e348c9d13d692b1e7e50f5a313da2c7bb12dbd26e94c5e689
SSDEEP 768:Yrv+4UNbdX3aRCkFDZIO0nBJThNzc4ReyIsP5z53eJ:YbsbV3aOBJThtc44bsxgJ
TLSH
T1B503BE36B82899B7ECFA9686F40735437EF4165BC2C81A94DADD5B4C468B1DD130F813
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 6d0496629124d340af4a3976b2935a92f8d304ddf2d0887f9618aa3c9135beaa
MD5 97aa9020aeb3bfc237a82742c74364e0
SHA1 1020e7ebd248b92690d3bed654d3466204c32fd6
SHA512 2f36ebb9b9a5e50f48628044b729d40082a953f54fe9b7ffc3296f6fab824f8eb947b77c728824c4b9fbe4779cf7adac84b7e21cc33907bd17de4a75a5ce4202
SSDEEP 768:0M31RskFDZIO0nBJThNzc4ReyIsP5zb9M5:0M31QBJThtc44bsxb+5
TLSH
T1B1F2CF36EC258DB7ECEA9796F54735137DF0962BC2DC2E8496DD9B0C0A875AC070B412
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 dd9a3c4a78eafa96a272f9b1b4855ec17f6a169eda4a751ae1958aa6ba8e7c1e
MD5 a0255b0615179722be281e8246df9768
SHA1 6319098eb412703ca16efdbdd79c50c36b1a8839
SHA512 c3afbc5b3a6d72b088a27a5d988e5869a681d629958eca1b428e852e30cce645b8c6b2824b7bf1a9d57d3abd775ae6cd8b15d8c2ca138afe88bfeba02c4d0351
SSDEEP 768:EFQt3RwgSRskFDZIO0nBJTUNzc4ReyIsP5zb9M5:nt3iQBJTUtc44bsxb+5
TLSH
T15703AE37AC54C9BBECFA9B96F94A3613ADF05667C2D86A84A7DC9B0C05471DC030B812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 268883cb672a0b117873e413441bfbf2c11f8fbaace2cf94425b79bfb6590216
MD5 a8c375fe3175060b6a38c714a0d72fac
SHA1 9b9b37ae8509589de0d2b142dfb44a99066e10a0
SHA512 fcb6a483c4cc45be2570e4cacec8259c7033948b27617cbbd86721e1b3a5f5c6b7346d9fe28761ddc536bffdf72d40290d711489709585191588dee037f3c2f7
SSDEEP 768:6rv+4UNbds3JfDZIO0bNzc4ReyIsXNeVH1S5D:6bsbS3Stc44bsdEH1Y
TLSH
T16303CF36A8688977ACFAA686B50775137EF8522BC2881BD0C5DE5F4C4A4B1DD130F923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download