868c1482d4a31734394937122220a67d4320b2fcaf149e3ca599e928561c2db0

Analysis

max time kernel
150s
max time network
143s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
19/08/2026, 00:12

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
ngo-samity/resources/views/layouts/app.blade.html
Size 3KB
Sample260819-ahejzacb56
SHA256 868c1482d4a31734394937122220a67d4320b2fcaf149e3ca599e928561c2db0
MD5 8fbac730edd8d65513b9ad660ba7b917
SHA1 dc8f00e38d5e98339ce572c43febcef33db27053
SHA512 25c90757b4892630f7605089b74dd696d16d016ee8b1faaed7e53af84a145bff71639f25f5b3e5c2ddf486f16eaa8b84bf867c657fd17543099ffbab583cc3d0
TLSH
T1017163B560E512EB2A43C29C89A15B232CC79C53F2436279BB6D425CCFE6FB38C4B045
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
936	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134315721117895355"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1738198120-2966725515-3980530802-1000\{CCE9E0CD-C663-4349-93C0-1442FF95E1D5}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1920	msedge.exe
1920	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4884 wrote to memory of 1932	4884	msedge.exe	88
PID 4884 wrote to memory of 936	4884	msedge.exe	89
PID 4884 wrote to memory of 1284	4884	msedge.exe	90
PID 4884 wrote to memory of 1284	4884	msedge.exe	90
PID 4884 wrote to memory of 1284	4884	msedge.exe	90
PID 4884 wrote to memory of 2640	4884	msedge.exe	91
PID 4884 wrote to memory of 2640	4884	msedge.exe	91
PID 4884 wrote to memory of 5484	4884	msedge.exe	93
PID 4884 wrote to memory of 5484	4884	msedge.exe	93
PID 4884 wrote to memory of 5484	4884	msedge.exe	93
PID 4884 wrote to memory of 2276	4884	msedge.exe	94
PID 4884 wrote to memory of 2276	4884	msedge.exe	94
PID 4884 wrote to memory of 2276	4884	msedge.exe	94
PID 4884 wrote to memory of 1836	4884	msedge.exe	95
PID 4884 wrote to memory of 1836	4884	msedge.exe	95
PID 4884 wrote to memory of 1836	4884	msedge.exe	95
PID 4884 wrote to memory of 5280	4884	msedge.exe	96
PID 4884 wrote to memory of 5280	4884	msedge.exe	96
PID 4884 wrote to memory of 5280	4884	msedge.exe	96
PID 4884 wrote to memory of 3428	4884	msedge.exe	98
PID 4884 wrote to memory of 3428	4884	msedge.exe	98
PID 4884 wrote to memory of 5424	4884	msedge.exe	99
PID 4884 wrote to memory of 5424	4884	msedge.exe	99
PID 4884 wrote to memory of 1052	4884	msedge.exe	101
PID 4884 wrote to memory of 2004	4884	msedge.exe	105
PID 4884 wrote to memory of 6088	4884	msedge.exe	106
PID 4884 wrote to memory of 3920	4884	msedge.exe	107
PID 4884 wrote to memory of 1152	4884	msedge.exe	108
PID 4884 wrote to memory of 1152	4884	msedge.exe	108
PID 4884 wrote to memory of 1920	4884	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\ngo-samity\resources\views\layouts\app.blade.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x144,0x274,0x7ffc1484c188,0x7ffc1484c194,0x7ffc1484c1a0
  2⤵
  PID:1932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1832,i,2435608397725344918,9151072334428463924,524288 --field-trial-handle=2516,i,1527680092730653555,9201244349724159995,262144 --variations-seed-version --mojo-platform-channel-handle=2556 /prefetch:11
  2⤵
  - System Time Discovery
  PID:936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1552,i,8427739365911307426,2125254021933277676,262144 --field-trial-handle=2516,i,1527680092730653555,9201244349724159995,262144 --variations-seed-version --mojo-platform-channel-handle=2512 /prefetch:2
  2⤵
  PID:1284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2152,i,13913880559833695762,14991569069319763111,524288 --field-trial-handle=2516,i,1527680092730653555,9201244349724159995,262144 --variations-seed-version --mojo-platform-channel-handle=2568 /prefetch:13
  2⤵
  PID:2640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3552,i,4424864441596411764,4565820724774182680,2097152 --field-trial-handle=2516,i,1527680092730653555,9201244349724159995,262144 --variations-seed-version --mojo-platform-channel-handle=3548 /prefetch:1
  2⤵
  PID:5484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3556,i,12898092509446456461,3417206653284225946,2097152 --field-trial-handle=2516,i,1527680092730653555,9201244349724159995,262144 --variations-seed-version --mojo-platform-channel-handle=3592 /prefetch:1
  2⤵
  PID:2276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4312,i,6306347888848283481,9389739033605819439,2097152 --field-trial-handle=2516,i,1527680092730653555,9201244349724159995,262144 --variations-seed-version --mojo-platform-channel-handle=4836 /prefetch:1
  2⤵
  PID:1836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4324,i,11675632606896225620,11511821026031999205,2097152 --field-trial-handle=2516,i,1527680092730653555,9201244349724159995,262144 --variations-seed-version --mojo-platform-channel-handle=4900 /prefetch:9
  2⤵
  PID:5280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5264,i,11227741598219957526,8834961305022447924,524288 --field-trial-handle=2516,i,1527680092730653555,9201244349724159995,262144 --variations-seed-version --mojo-platform-channel-handle=5396 /prefetch:14
  2⤵
  PID:3428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5276,i,10151499144918206674,3659936947819596511,524288 --field-trial-handle=2516,i,1527680092730653555,9201244349724159995,262144 --variations-seed-version --mojo-platform-channel-handle=5376 /prefetch:14
  2⤵
  PID:5424
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5960,i,6866980217589541469,1340196149350212696,524288 --field-trial-handle=2516,i,1527680092730653555,9201244349724159995,262144 --variations-seed-version --mojo-platform-channel-handle=5984 /prefetch:14
  2⤵
  PID:1152
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5960,i,6866980217589541469,1340196149350212696,524288 --field-trial-handle=2516,i,1527680092730653555,9201244349724159995,262144 --variations-seed-version --mojo-platform-channel-handle=5984 /prefetch:14
  2⤵
  PID:1052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4972,i,2738701287423177053,338182687766018323,524288 --field-trial-handle=2516,i,1527680092730653555,9201244349724159995,262144 --variations-seed-version --mojo-platform-channel-handle=4892 /prefetch:14
  2⤵
  PID:2004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4900,i,2288096964431961050,532652596800669698,524288 --field-trial-handle=2516,i,1527680092730653555,9201244349724159995,262144 --variations-seed-version --mojo-platform-channel-handle=5136 /prefetch:14
  2⤵
  PID:6088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5092,i,16854461846179858147,1150764519460539014,524288 --field-trial-handle=2516,i,1527680092730653555,9201244349724159995,262144 --variations-seed-version --mojo-platform-channel-handle=5124 /prefetch:14
  2⤵
  PID:3920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5632,i,11248806422890808903,2283511625227113169,524288 --field-trial-handle=2516,i,1527680092730653555,9201244349724159995,262144 --variations-seed-version --mojo-platform-channel-handle=5608 /prefetch:14
  2⤵
  PID:1152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6524,i,8747335507849965550,16130245152418938962,262144 --field-trial-handle=2516,i,1527680092730653555,9201244349724159995,262144 --variations-seed-version --mojo-platform-channel-handle=6608 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1920

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3236

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4312

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ac1b1f93ff87eb876027f4166d705375c0f5d3d22dcb03f6a66f6100e88dd10f
MD5 b99f03c5cfe71b03836f8b5fcf09425b
SHA1 8a5078499c0b5ea40183efb77f9c1028c196409c
SHA512 6b9feec4ead7bf05f67d0d480907e21a3b770d8d12dedd2b0d785904186eac7448583e61abacb23582948de55c8ea2043bfd6908efd7faecdd82cee91404cfe6
TLSH
T16DD02BE037909D18C440353163D0122091006C30880923090100A02C8D3E2C3054F0BE
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c95a47aec5edba88214fad580cb869417b6620a91d8ee97e2d0b7801d3372be5
MD5 aad5f2ca0dd16bb2ea6c7757ea569c50
SHA1 5228b0b132542be004ea1bb32f3748964d065af5
SHA512 9d59c0291d741bd9d6cf50c22972d4baef00e7c1a48d6a3311a6cc82c04ceeba6e2be9458334cb954878915cc9eb91a8fd8bc4a47c966d57a2a05d6ee8211640
TLSH
T1D4D09BE177A19D18C545353567D1522591416D31451927194241E13D9D7E2C3455F0AA
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 833e23c68eb137308e1f8d91888ea45ab3a064e88253932d3b9217ff486722e8
MD5 6ca17874bb98b0f3ce8cdf7f57b2357f
SHA1 096229046753bb1ee0473094c347f2856514fb05
SHA512 23cefe0197d9328c176857d19d45fa0642cfa64444cd4199145294e4eed2c94b077424d18404214a09cd997885d53690e3a169e3d6e37a5634eb7ab0fa7df429
TLSH
T14E51CB97432379C3D77AA5B225E30CDABEBC848E05CFAFDF4811B1768A8B3946050631
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a346f.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5a346f.TMP
Size 2KB
SHA256 13abb17ee223e46196456857c48dedc2b8c4fdb649f0430e7909d22b11254940
MD5 5e0cf4e28600b805105ebc3072c89594
SHA1 a8188e086b3d247405c8ad98dc7ac42f263f6952
SHA512 1a9cff8d5b1d57370eb3fdaa782bb0176a2821cecf050c59d1cb20f9a3ccb8136131d27faebf9bebd7f8f177890f89331528d6d59199b5060847502ea1614c9a
TLSH
T15251CD97472379C3D77AA5B225E30C9ABEBC848E05CFAFDF4815B1768E4B3946050631
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 a6282e69df2003b1cae40c933a6021bfa60cb15f9e3ba3495c8cf7d46964389a
MD5 02551ade14b19ef08ce636bfba56b946
SHA1 ed38796062fe02412e296f1df5aee1fee103eec8
SHA512 8fec9843060005c4b11a7b8ce0cd3f48eeeaf2c0873fa0657661a4563ebf5e46ded0d9daa181c26c10e23e6bb0e716918ecaedd2209aa8be231a6ba51d44dd38
TLSH
T1DE51CFF7C3E4867E890156F0AE28AE2BCE1D0516432C3D56C9E4AE5BA3F34B1E14165F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 aee9ebdc672bf245839a19f55832a00de852d87e9aed6e25c99bbe895c8de6d6
MD5 6a22935ca520b4d352326f0789ced29c
SHA1 a35df0b807601ca1dd7accbf716bd34c481a0fb1
SHA512 bb960fba3b2379d159e01468204159901e8f49b627bc82548f05958e1df406608a00436b8fac2fa94c6a04938918b4ebb2ec51343c872ab247ebb562300f1e3c
SSDEEP 192:sxRBR1Zbi/fKskVwGqzoA8p4La/g6+WNIYoFCCYjGHIgD0J:sxRBBi/fKskVpnX/5IDt8
TLSH
T1FF42A6166928A97B4CC6E31DBB66BF53D2F9507261D02E48BBFC861C04EB6DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 1261f233416f6546cdcf1b72d0c3d69a8a555bdeaea3dd2cafc4cce1018b2d6a
MD5 066fb2c4a38765b35edcbbeda6b8dc36
SHA1 536bf43f4b97bb560598797f9aa4711fe5a14c74
SHA512 8280daeac650aaf11edab0b5a9f716058e75f4e031f81370646c259d77e2f408e797d9816e65eda5d29803246c49e8b087ee9dc8f58b3f54dd454f213479ed3f
SSDEEP 192:sxRyR1Zbi/fKsSEwGqzoA8p4La/g6+WNIYo5sCYjGHIgIJ:sxRyBi/fKsSEpnX/5INts
TLSH
T11B32A7166928A97B4CD7E31DBB66BF53D2F9503261D42E48BAFC861C04EB6DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 fb8d75fdd421766d13ca1a694ab12d6203d74ec3282b3e37be6ad9da060faeae
MD5 99b111a0748eb3dfd598b646d0e694cb
SHA1 173d21b9c9fbee857faa7ef9ffff8ee7764df77d
SHA512 de65003c6a6f72b99140985193cf6efe16e41bb3e01a68d34b6650c4cd110ed8d5ec2cd89a1acad572e84a0f264f6ac17d27aa7f5dd3ca9c4579d0aa8d511435
SSDEEP 192:sxRBR1Zbi/fKskEwGqzoA8p4La/g6+WNIYo5sCYjGHIgDuJ:sxRBBi/fKskEpnX/5INt+
TLSH
T14432A7166928A97B4CC6E31DBB66BF53D3F9507261D42E48BAFC861C04EB6DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 1dd02cb1a7bea207102fb098d42ca8a84df3fdd07cfbf0ff2dc1cc5d10e7c93c
MD5 1b95170b0e169a7d9fbb9388f9218519
SHA1 ec73e44b08a07e8a4e2aa32a0e3c2fcb542daf9c
SHA512 9ce4ff4a8871a4c44363c19451687c4e04fd00ada2c23e681ec3d6fb2024b1720de4e68b5e6ee7d448174b6f8870f01ad39d2221ed5356ba10e4550fba86e727
SSDEEP 384:jzK6H0dfCtgsqFf02KhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVvf9uaRXMro98r:j26H0RWgs2f028F1+UoAYDCx9Tuqh0Vf
TLSH
T175B2EB2B640DCBBE5F800A9DDC196FDB6D9802C797588D4047FE994C03C77FA911A4DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5acd83.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5acd83.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 fc2a2ee9bf7f19792ab90b4f5538a66cb932c25fe416fd5d0de5c0912b5cfe08
MD5 6a692cb213465d8d8ae59a060245a68b
SHA1 3fa9733cc2571ba2d616a6744180ea77a568f45e
SHA512 8f704bd2549270f3b89e186346133c8c325de5086366e59fd13de7ae6ea687ee0771107e333e76017f6cbac6dde66d2a41021057e51df943e8bd13723b2b23f0
SSDEEP 768:073HxM/TBOW3v9QONXyer1IRCzni9MUn2AI:073KPQSIqnjU2P
TLSH
T19EF2BF75E8A0AE234CE5E3C3B1463202BFF99067E5C45B50ADDD6F5E01979AE130B81B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 d192395199f405bd15977b9eff84d23e03d8a5563bf98daa781f320ad993dffc
MD5 d2ff9ea6ff590aa6f99e315b9900ad80
SHA1 754ed12a34fec96db64c1331eb0e83d1b43c1684
SHA512 2a7989067761977ff0bab33d9b2fb82853d303c8edb074edc2422405a926ffeb2c588b9b2c1320edcfbb07593bc3331e4300f3646074a5dda57604530c732d0a
SSDEEP 768:Z73JxM/TBOW3v91ONXyer1IRCzni9MUn2AI:Z73sP1SIqnjU2P
TLSH
T123F2BF36E8A4AE234CE5E3C3B1463202BFF99067D5C45B50ADDD6F5E01979AE130B81B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 65f2ab8ce0b5f5c17c9465d18123c7d39c1498e09a90d4ca8240af29a513fd1b
MD5 da2aed7f22d6a69c0099329091ad348c
SHA1 6551214b99c9dc36052e8f1bc6cb1d23117e3cf1
SHA512 8e5483153778bbc590ad35753dbb12f650655440e4552a0b6fd8a4b93a9cca18aeac265d8f19429750f67626aff3584fa71d0573ad9907811ef6edf56a304ed6
SSDEEP 768:BFQM31wgpxM/TBOW3v9/ONXyer1IRCzni9MUn2AI:QM3YP/SIqnjU2P
TLSH
T19103BE72D890EE375CF6A7C2F54A3202AFF550A7D5C09B50AADDAF4D019759E030BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 bcf36a0f1f888ef96b7f42e5c1c0b551f3c239b5f619a42aaaac9104dd27694d
MD5 d8e97a69889272c4fc7042bd910bf101
SHA1 b41209e28b1fe179ecdb9844d33b72053fbeece8
SHA512 de6dc6e726f0582b0c4873219ceb302f08ddc2250cf85dec43aaf3a63b02fa52b7ca48d78e83fd915eceffe48ce4fd6e7f8ed45117bf5a1e492d39c303404870
SSDEEP 768:hrv+4UNbdz3m7+/TBOW39ONXyer1IRCzniBeeVH1SK7:hbsbV3bnSIqnBEH1l
TLSH
T1ED03CF32A4A89E334DE2A3C6B14776137FF86057D6840B90EDDE2F4E069B49D130B91B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 0165c9ed48d5b1fb39a418c0797b39491d7d7123fccd34d6a8d882e555bef6cd
MD5 d1cbbc4cc421ac7629bb7f46894e3060
SHA1 c771897ed413ab320071460c07f3f07b7874979f
SHA512 0b2cd8986e4325a51d2bb64d9accd0e1bd7ee7c8623886ac28b73994bb395eccde0cee9c49c3d73c7f09addc2e3bc0292ac806c8f2da031caaafb519a5d24de8
SSDEEP 768:Orv+4UNbdz3lx+/TBOW3v9rONXyer1IRCzniwMeVH1SK7:ObsbV3CPrSIqnIEH1l
TLSH
T12803BF32A0A8EE334DE2A3D5B14772037FB95057D6840B90EDDA2F4E069B59E130F95B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

93b2eea3-d92f-4d8f-b226-934db99c7729.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\93b2eea3-d92f-4d8f-b226-934db99c7729.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download