0e3df7e8abedbf3619ed39c5ee87a9299b7f03ab61a9ec9c525912ab6800f7c7

Analysis

max time kernel
148s
max time network
156s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
09/08/2026, 23:49

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
resources/public/index.html
Size 383B
Sample260809-3t6f2sda25
SHA256 0e3df7e8abedbf3619ed39c5ee87a9299b7f03ab61a9ec9c525912ab6800f7c7
MD5 e582b9106fb430459c697d4c5a519c25
SHA1 418242c0ee36e592982e3569c6bbb78f7274546a
SHA512 dcc2c76bda2f6567f90161911ab49600cd7896ee5607a4bfb842439189745156941c20d32b09d64b2554f1184b413f0b9f7399ec10013452cd45b791a39c96a3
TLSH
T112E0DF43C0E18809D32182700CC1F15D4BA2F6DBA7CA6D49B98A20898FC0B90CED72E9
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2776	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134307933727652994"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-552508041-2681165170-3229858294-1000\{1A17A209-226D-4BA1-8E87-A56C6EEFB818}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2292	msedge.exe
2292	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3804	msedge.exe
3804	msedge.exe
3804	msedge.exe
3804	msedge.exe
3804	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
3804	msedge.exe
3804	msedge.exe
3804	msedge.exe
3804	msedge.exe
3804	msedge.exe
3804	msedge.exe
3804	msedge.exe
3804	msedge.exe
3804	msedge.exe
3804	msedge.exe
3804	msedge.exe
3804	msedge.exe
3804	msedge.exe
3804	msedge.exe
3804	msedge.exe
3804	msedge.exe
3804	msedge.exe
3804	msedge.exe
3804	msedge.exe
3804	msedge.exe
3804	msedge.exe
3804	msedge.exe
3804	msedge.exe
3804	msedge.exe
3804	msedge.exe
3804	msedge.exe
3804	msedge.exe
3804	msedge.exe
3804	msedge.exe
3804	msedge.exe
3804	msedge.exe
3804	msedge.exe
3804	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
3804	msedge.exe
3804	msedge.exe
3804	msedge.exe
3804	msedge.exe
3804	msedge.exe
3804	msedge.exe
3804	msedge.exe
3804	msedge.exe
3804	msedge.exe
3804	msedge.exe
3804	msedge.exe
3804	msedge.exe
3804	msedge.exe
3804	msedge.exe
3804	msedge.exe
3804	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3804 wrote to memory of 5552	3804	msedge.exe	89
PID 3804 wrote to memory of 2776	3804	msedge.exe	90
PID 3804 wrote to memory of 5944	3804	msedge.exe	91
PID 3804 wrote to memory of 2744	3804	msedge.exe	92
PID 3804 wrote to memory of 5944	3804	msedge.exe	91
PID 3804 wrote to memory of 5944	3804	msedge.exe	91
PID 3804 wrote to memory of 2744	3804	msedge.exe	92
PID 3804 wrote to memory of 2236	3804	msedge.exe	94
PID 3804 wrote to memory of 420	3804	msedge.exe	95
PID 3804 wrote to memory of 2236	3804	msedge.exe	94
PID 3804 wrote to memory of 2236	3804	msedge.exe	94
PID 3804 wrote to memory of 420	3804	msedge.exe	95
PID 3804 wrote to memory of 420	3804	msedge.exe	95
PID 3804 wrote to memory of 2364	3804	msedge.exe	97
PID 3804 wrote to memory of 5496	3804	msedge.exe	96
PID 3804 wrote to memory of 2364	3804	msedge.exe	97
PID 3804 wrote to memory of 2364	3804	msedge.exe	97
PID 3804 wrote to memory of 5496	3804	msedge.exe	96
PID 3804 wrote to memory of 5496	3804	msedge.exe	96
PID 3804 wrote to memory of 3816	3804	msedge.exe	99
PID 3804 wrote to memory of 3816	3804	msedge.exe	99
PID 3804 wrote to memory of 5600	3804	msedge.exe	100
PID 3804 wrote to memory of 5600	3804	msedge.exe	100
PID 3804 wrote to memory of 5724	3804	msedge.exe	102
PID 3804 wrote to memory of 5260	3804	msedge.exe	106
PID 3804 wrote to memory of 5676	3804	msedge.exe	107
PID 3804 wrote to memory of 4220	3804	msedge.exe	108
PID 3804 wrote to memory of 1404	3804	msedge.exe	109
PID 3804 wrote to memory of 1404	3804	msedge.exe	109
PID 3804 wrote to memory of 2292	3804	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\resources\public\index.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x274,0x7ffd8df3c188,0x7ffd8df3c194,0x7ffd8df3c1a0
  2⤵
  PID:5552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1876,i,10171145464786439189,13673251795442982655,524288 --field-trial-handle=2516,i,7700122332557116573,8223764201686837937,262144 --variations-seed-version --mojo-platform-channel-handle=2568 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1608,i,14318041215701705116,5625592289029517818,262144 --field-trial-handle=2516,i,7700122332557116573,8223764201686837937,262144 --variations-seed-version --mojo-platform-channel-handle=2520 /prefetch:2
  2⤵
  PID:5944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2304,i,10231702691508456431,17555228389306804855,524288 --field-trial-handle=2516,i,7700122332557116573,8223764201686837937,262144 --variations-seed-version --mojo-platform-channel-handle=2944 /prefetch:13
  2⤵
  PID:2744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3624,i,6406141160828380184,13610966318996692630,2097152 --field-trial-handle=2516,i,7700122332557116573,8223764201686837937,262144 --variations-seed-version --mojo-platform-channel-handle=3632 /prefetch:1
  2⤵
  PID:2236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3700,i,835221016547146559,11858954937723493699,2097152 --field-trial-handle=2516,i,7700122332557116573,8223764201686837937,262144 --variations-seed-version --mojo-platform-channel-handle=3704 /prefetch:1
  2⤵
  PID:420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4368,i,10740369345031271252,7053549075306301339,2097152 --field-trial-handle=2516,i,7700122332557116573,8223764201686837937,262144 --variations-seed-version --mojo-platform-channel-handle=4652 /prefetch:9
  2⤵
  PID:5496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4352,i,12546987432522628025,9024835869980065412,2097152 --field-trial-handle=2516,i,7700122332557116573,8223764201686837937,262144 --variations-seed-version --mojo-platform-channel-handle=4584 /prefetch:1
  2⤵
  PID:2364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5156,i,8293597035848580000,4130764120809720861,524288 --field-trial-handle=2516,i,7700122332557116573,8223764201686837937,262144 --variations-seed-version --mojo-platform-channel-handle=5420 /prefetch:14
  2⤵
  PID:3816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5168,i,7613444183497525442,939479105508513997,524288 --field-trial-handle=2516,i,7700122332557116573,8223764201686837937,262144 --variations-seed-version --mojo-platform-channel-handle=5400 /prefetch:14
  2⤵
  PID:5600
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5968,i,4524601759451275100,18174264134742897135,524288 --field-trial-handle=2516,i,7700122332557116573,8223764201686837937,262144 --variations-seed-version --mojo-platform-channel-handle=5988 /prefetch:14
  2⤵
  PID:6104
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5968,i,4524601759451275100,18174264134742897135,524288 --field-trial-handle=2516,i,7700122332557116573,8223764201686837937,262144 --variations-seed-version --mojo-platform-channel-handle=5988 /prefetch:14
  2⤵
  PID:5724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4616,i,14088869836107380089,4516288251892313749,524288 --field-trial-handle=2516,i,7700122332557116573,8223764201686837937,262144 --variations-seed-version --mojo-platform-channel-handle=4656 /prefetch:14
  2⤵
  PID:5260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4664,i,8563705434201246374,13010484792864216038,524288 --field-trial-handle=2516,i,7700122332557116573,8223764201686837937,262144 --variations-seed-version --mojo-platform-channel-handle=4476 /prefetch:14
  2⤵
  PID:5676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5280,i,3103326487373077014,9232454893907277652,524288 --field-trial-handle=2516,i,7700122332557116573,8223764201686837937,262144 --variations-seed-version --mojo-platform-channel-handle=4364 /prefetch:14
  2⤵
  PID:4220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5492,i,4832056565223767978,6309293274730878788,524288 --field-trial-handle=2516,i,7700122332557116573,8223764201686837937,262144 --variations-seed-version --mojo-platform-channel-handle=2180 /prefetch:14
  2⤵
  PID:1404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6484,i,8507960038001446556,17661581815185814555,262144 --field-trial-handle=2516,i,7700122332557116573,8223764201686837937,262144 --variations-seed-version --mojo-platform-channel-handle=6480 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2292

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3964

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5880

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f8dff5315a0bd3856381f405c1a16257337fd6ff2d8043dd8bea22404cd35129
MD5 5e53a2cd139f0cce4f8ceab3e015f7da
SHA1 1bd884dbaaa352a724c53bfb8f4bfad2623c93f5
SHA512 27cc4cb62f9aa4af6b521efd824b001f3b689bae2ffe57263da18e2bb22d0b13ba656141d7e6ea1d1c202d5f461a44243a00d604f78bd5b04fe6b8512e260ac1
TLSH
T178D02B1463108D04D441F13214D13311B1110833A80C96440050E1284CB634206738DD
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 1f3bc43c50f7d0fa02f98500baf5d78052a5560603459a9325b17de989d121f4
MD5 46a6445fd2c83830bb8c6e03f85bafc0
SHA1 46b07e35efbd47692fdc81ef0e82e2964da2831b
SHA512 800f82b05756fd6fab3fe29924147f0b86afeec21da661e646b431c6ca03903eb45bb09803f5cdaf3d2d1bb16f95d0f2e53a1f9ddde57505b0f3e1580c384ed1
TLSH
T188D02B1063208C04D441F13214D23311B1010833540C96440150E1384CB634206728CD
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 1d1eb7944ac6f1b8c2e28bb50993e93d83549a7503a03bff72095ccf63ecb4c5
MD5 cb706582c276432f1f5229e84e279fc5
SHA1 2822ee80c6a776a5cc0f88a1b06bb237d2756db7
SHA512 7b0f53214e5330a6ec9d5c047eb8e3a6f20cb5c32c207f801e35ad187733fb368159bdbd825a422661b073adae2d32567cac74299dc42d52a0f99c347ed05f65
TLSH
T13D41F856036647C3E7A889BBF0F1D68432F6E85E0B4F6E1162416E36CA06F4800E2DD3
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 1870b7b549dc0e128ff7c3bdf75dd9120555c07b3da68e9bdeb3e62e1b762f38
MD5 828fcc4a33adb75e16211c29d7874182
SHA1 9e4536c3701c7549c811de169d4588dc75f080a5
SHA512 91fbfc7641337142796cac93159b13eee852abfbc79ab1a51bed5f425319f78dc8db98f5d2975679babfbb9d05e787efa9859cec7fa9753340aa033bdeac7f76
TLSH
T14A31C2F787B4857E9A1186F0AA146E1FCE2D0515432C7C69C5E0AE27D3F3472E041A5F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 eb1aa9c95add08e2f927e49248bc0b759501e63731daf967b3f19e418f75bf92
MD5 6d01cc091cefb9c6bcb83b473288ac2f
SHA1 274c2af9752131c98445141b18d58c645ede5e2a
SHA512 1c223110483f35f905355c0170ed744a9589bdae419d718619335e661130c1c095dfbd44d068d2dcb64e19ddb45b7a8eea9ecf41e3eef832aab584a0af885b06
SSDEEP 192:sxRuRYb0/fasNtDde5lSQzoD8p4M/g6+WNIYCNmWOFGhIgIJ:sxRuw0/fasNtc5l9Z/5IIms
TLSH
T1BD32B7156E28A93B8CC7E20DBB55BF53D2F95032A5D02E58A6FC961C04EBADD620740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 22d240e799d132fc9dbffa64d7f3605d0de613bd6c93847d5a47fecddca0b579
MD5 578f954533c850a32b8cb183f8ebec47
SHA1 a558a335b9f5488111a3c5af46379eaef06ef3e7
SHA512 965884660a35a31fd5b395ae089a31b034347eb24e6be6c82334dde9fb9d4fa18718a80c24a990f8e7bafa09b7af5f505657a1066b495762b06ebddfd2109c41
SSDEEP 192:sxR9RYb0/fas7jDde5lSQzoD8p4M/g6+WNIYCISWOFGhIgDdJ:sxR9w0/fas7jc5l9Z/5ItmT
TLSH
T1AC42B7156D28693B8CC7E20DBB557F53E2F95032A5902E58A7FC961C04E7ADD620740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 3434eabf7c487a00ee316c30574d0676ac36d8ae6699157368e11f3f4c729622
MD5 2fa25b161db8e48381fe46a83c788142
SHA1 e4f5143a2406b7352fffdeb3b6cc4b98147571e2
SHA512 751b4f663bee6b140a09378f65a732cba53531bb1a78a6ac0d0f736ca89ac1090712df08cc3aad803b6e1e29b53b779b7344c533c6b51d83063ee01997976e1c
SSDEEP 192:sxR9RYb0/fas7tDde5lSQzoD8p4M/g6+WNIYCNmWOFGhIgDLJ:sxR9w0/fas7tc5l9Z/5IIm5
TLSH
T14642C7156E28A93B8CC7E20DBB55BF53D2F95032A5D02E58A7FC961C04EBADD620740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 adefd5408e2e067ee2cdfdfddd85da3621c56998a969e84bedbef3b11d6e780e
MD5 bed7ed188d9b440e3c74afb735b9cb7b
SHA1 871a2497d570ba883ab4192cd4f37f9ddebd18ef
SHA512 5d3c37c94ad42adc725a09a660e846df00311d9f84fdc80785a917c15612ec539a66923862decf80039bf37a14400c5f4ffad13a11e4299251d416c7337b6a97
SSDEEP 384:jjm+vhKfCtgQCFf4+KhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVmC9qyRvrroZS2:jC+vhQWgQ+f4+8F1+UoAYDCx9Tuqh0Vd
TLSH
T12CB2D92B600DCB7F5F800AADAC196FD76DA802CB97589D4047FED94C02C77EA92194DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 2599a154db35ddc253239a677449e2c2fce6e5e476048c420a6b2e3722e10480
MD5 f0d42815b5bd5cc90d8e5c841d96febe
SHA1 472b95f0fe64fada59bf9153d852d870a5b5da31
SHA512 8dcce4d19cf64c2ebc690d8c26c234a4b741252f94634594c966420a4c0b220bad97bb3421ad1608f10255c9fa84b7caaac4ebb709d30838692188c239622d65
SSDEEP 96:KRbEBVj5J1WdSIg91K4EgT1c7j6dJOHWLa2Q44eWIdFgWeK4rgEec+W10m/Hd0dP:CbEBVj5JAdSp9/EgTK7j6dJOHWLa2Q4D
TLSH
T1EB914A04343A0650B87EB60CC1BD8C2ED5C574723619E62B3F9C46960F6AE47ADFDAC9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5a0793.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5a0793.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 44ac29578df867899a24c777b31d7440cc8d6c49998734e4afd4f4cbdb29300c
MD5 7ae26ae0dab898148a7666f52c789a44
SHA1 5a959b2b5b3a90e8376f0dcb9cc306023cb21c7f
SHA512 1587fab038e07e906a891ce5ce0fa64f0e4d037e1134d3794e9fe51d136275268d9f3023b691d9465310eb6dd386b80f5c28ab2f2c5e6080201d42f851b9c445
SSDEEP 768:0rv+4UNbdD3oqFNNp8+p3bd66j+4BRv86aLITOh2bwCl1:0bsbp3dL8+p3Z6n4yth0ww
TLSH
T1AF03BE72E96899339CF6C644B1477A437FF851A39AC10ED4D8CD2B4E419A19E630BC37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 c92f2542df658338755142922ace8cfbf54ccca6674aac2bd0c4b90d424312ac
MD5 deb9913509eda876c6528f2c6f8ba97f
SHA1 873ade3dcd311f236867a449a8edaa47d9794ca7
SHA512 a41f38ff06056df0e91f6dd8d8f05f9dbaba50a8fbaf2b9e68bb583cd41246edbbee7795d10afe2d97fcd2d1aa70c2e3d708ee730fc9a301c96f07b8bb53e0e4
SSDEEP 768:UL3+B8FNNp8+p3bd66j+4BRv86aLIWOhhy6DqTF:UL3+gL8+p3Z6n4yYhT+
TLSH
T16AF2AE71E8A499335CFAD644B1463B03AFF445639BC41ED8E4DDAB1E118B1AE530B83B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 2816703e05a4b8585b75aa64c62027bd9d65d68c19b5da8f35ccec73638be384
MD5 ea8f8ef51ebe3a43188fbcbd890eca3c
SHA1 2612709c44f9ac2a0f928f487298e142afd712cd
SHA512 a459cc39171a16c932d27a1dc2e1777bdb3f15e814b5211ff29a7d7fa29dfa7f3b4bc704c0ace0da92749741aae61000d04703a5d9729d464c0a6b8604164db4
SSDEEP 768:qL3tu8FNNp8+p3bd66j+4BRv86aLIWOhhy6DqTF:qL3tVL8+p3Z6n4yYhT+
TLSH
T103F2BE71E8A499335CF6D644B1463B03AFF441639BC41ED8E4DD6B1E118B1AE530B83B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 62ea522916e456fb961bd9da9e8086fc2dee0d1c25e3a20d92a600f53a30b6c5
MD5 bf33a80b68783d1b04c97fc284b9763a
SHA1 2451d4dbecbbf4c78b88e11510a6f5c34b6e5ab0
SHA512 be0b0933839c65170fc44aef45226bca482f744aba68e76a58090a707562b94ee00c959f100561ceec240b3188b19d83797fdc76d7125f4dea8c47a97371e0b1
SSDEEP 768:4FQ53rwgSB8FUp8+p3bd66j+4BRv86aLIWOhhy6DqTF:b534P8+p3Z6n4yYhT+
TLSH
T150039E72D8A48A779CFADB44F54637039EF44163CAD06EE4E6CD6A1D11871AD130BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 67698070e18ae059208960a59cefd4e9ce0767bf82a03294e4acc48bae0245ae
MD5 16dd291fb3252f26225a29492980a437
SHA1 bf4ff445920937c3b9f8f53fb6bed2dbe3cd1644
SHA512 86bb14d88f6fd91a5719c0546930920d6de10297f0c82663b42106a8229c6db4bd9502f9b9a59ee311045223b13cbfc79a6733ea5f40c4e88be83ab33693751c
SSDEEP 768:Irv+4UNbdD39czNp8+p3bd66j+4BRv86aLIiR2bwCl1:Ibsbp3ML8+p3Z6n4yD0ww
TLSH
T14D03BE73F99899339CF6C644B2467B837FF851A39AC10AC4D4DD2B4E419A19E630BC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a5916840-12aa-461c-b59c-b0d5f4003766.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\a5916840-12aa-461c-b59c-b0d5f4003766.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download