dc72cfc1f1d2a5013bb9de34f8cacf5e26e542d7d713fcbe09b865b4aaca6ddf

Analysis

max time kernel
148s
max time network
125s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
24/09/2026, 03:54

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
3Sixty2027/data/flutter_assets/packages/flutter_inappwebview/assets/t_rex_runner/t-rex.html
Size 80KB
Sample260924-egcffade33
SHA256 dc72cfc1f1d2a5013bb9de34f8cacf5e26e542d7d713fcbe09b865b4aaca6ddf
MD5 16911fcc170c8af1c5457940bd0bf055
SHA1 eb44540186285271130b056fa6099b1988319fc4
SHA512 131a00b7895a40ea0fb355ecc5292b3cbbcd23b45dd59b07da1b8eb86501ff0ec698ab5446687cd7ff5fba03d97b7a0b6e47196dc284a51c677cf04dbe13e393
SSDEEP 1536:V5OdudTTa8udsB7g1BuqHkFT5VgYzMGgbJsMPz:Vq0y80I7OuikXm3bJsMPz
TLSH
T1CC836C37231A1A7896D8A41AD00E835DDF33F187910885BD7BBCFED4B4AAC06516E778
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3308	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134346959531995805"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-4280978039-528710165-233981602-1000\{C3F0C3FA-248F-4FAE-8AD0-F3DC3FA3CB4C}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2420	msedge.exe
2420	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe
6092	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 6092 wrote to memory of 3256	6092	msedge.exe	89
PID 6092 wrote to memory of 3048	6092	msedge.exe	90
PID 6092 wrote to memory of 3308	6092	msedge.exe	91
PID 6092 wrote to memory of 3048	6092	msedge.exe	90
PID 6092 wrote to memory of 3048	6092	msedge.exe	90
PID 6092 wrote to memory of 3900	6092	msedge.exe	93
PID 6092 wrote to memory of 3900	6092	msedge.exe	93
PID 6092 wrote to memory of 4244	6092	msedge.exe	94
PID 6092 wrote to memory of 4244	6092	msedge.exe	94
PID 6092 wrote to memory of 4272	6092	msedge.exe	95
PID 6092 wrote to memory of 4244	6092	msedge.exe	94
PID 6092 wrote to memory of 4272	6092	msedge.exe	95
PID 6092 wrote to memory of 4272	6092	msedge.exe	95
PID 6092 wrote to memory of 1096	6092	msedge.exe	96
PID 6092 wrote to memory of 1096	6092	msedge.exe	96
PID 6092 wrote to memory of 1096	6092	msedge.exe	96
PID 6092 wrote to memory of 1692	6092	msedge.exe	97
PID 6092 wrote to memory of 1692	6092	msedge.exe	97
PID 6092 wrote to memory of 1692	6092	msedge.exe	97
PID 6092 wrote to memory of 4344	6092	msedge.exe	99
PID 6092 wrote to memory of 4940	6092	msedge.exe	100
PID 6092 wrote to memory of 4344	6092	msedge.exe	99
PID 6092 wrote to memory of 4940	6092	msedge.exe	100
PID 6092 wrote to memory of 1348	6092	msedge.exe	102
PID 6092 wrote to memory of 4768	6092	msedge.exe	107
PID 6092 wrote to memory of 5664	6092	msedge.exe	108
PID 6092 wrote to memory of 2372	6092	msedge.exe	109
PID 6092 wrote to memory of 2756	6092	msedge.exe	110
PID 6092 wrote to memory of 2756	6092	msedge.exe	110
PID 6092 wrote to memory of 2420	6092	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\3Sixty2027\data\flutter_assets\packages\flutter_inappwebview\assets\t_rex_runner\t-rex.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:6092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x264,0x268,0x26c,0x260,0x28c,0x7ffd12b9c188,0x7ffd12b9c194,0x7ffd12b9c1a0
  2⤵
  PID:3256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1552,i,14710308382588472051,4843569018984027253,262144 --field-trial-handle=2596,i,2429159063325695760,5067182585345013146,262144 --variations-seed-version --mojo-platform-channel-handle=2584 /prefetch:2
  2⤵
  PID:3048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1684,i,17363741264525852036,12680355976645563546,524288 --field-trial-handle=2596,i,2429159063325695760,5067182585345013146,262144 --variations-seed-version --mojo-platform-channel-handle=3008 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2272,i,9714922872160661319,3825274187637741760,524288 --field-trial-handle=2596,i,2429159063325695760,5067182585345013146,262144 --variations-seed-version --mojo-platform-channel-handle=3324 /prefetch:13
  2⤵
  PID:3900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3640,i,13610541468615077391,12145705507057197948,2097152 --field-trial-handle=2596,i,2429159063325695760,5067182585345013146,262144 --variations-seed-version --mojo-platform-channel-handle=3684 /prefetch:1
  2⤵
  PID:4244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3644,i,7693946020716294994,14120814169444657590,2097152 --field-trial-handle=2596,i,2429159063325695760,5067182585345013146,262144 --variations-seed-version --mojo-platform-channel-handle=3748 /prefetch:1
  2⤵
  PID:4272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4336,i,2206555633120911750,11840480918985079707,2097152 --field-trial-handle=2596,i,2429159063325695760,5067182585345013146,262144 --variations-seed-version --mojo-platform-channel-handle=4512 /prefetch:1
  2⤵
  PID:1096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4352,i,13592761431369703440,16030696849114321693,2097152 --field-trial-handle=2596,i,2429159063325695760,5067182585345013146,262144 --variations-seed-version --mojo-platform-channel-handle=4516 /prefetch:9
  2⤵
  PID:1692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4580,i,15249956822737074726,15242616977498907129,524288 --field-trial-handle=2596,i,2429159063325695760,5067182585345013146,262144 --variations-seed-version --mojo-platform-channel-handle=5488 /prefetch:14
  2⤵
  PID:4344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4480,i,3142754868829978287,16247551800999249387,524288 --field-trial-handle=2596,i,2429159063325695760,5067182585345013146,262144 --variations-seed-version --mojo-platform-channel-handle=5508 /prefetch:14
  2⤵
  PID:4940
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5972,i,5639693823135822462,16876304192075017972,524288 --field-trial-handle=2596,i,2429159063325695760,5067182585345013146,262144 --variations-seed-version --mojo-platform-channel-handle=5996 /prefetch:14
  2⤵
  PID:1548
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5972,i,5639693823135822462,16876304192075017972,524288 --field-trial-handle=2596,i,2429159063325695760,5067182585345013146,262144 --variations-seed-version --mojo-platform-channel-handle=5996 /prefetch:14
  2⤵
  PID:1348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4548,i,4877894931409139788,1267006167296989014,524288 --field-trial-handle=2596,i,2429159063325695760,5067182585345013146,262144 --variations-seed-version --mojo-platform-channel-handle=4576 /prefetch:14
  2⤵
  PID:4768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5192,i,14462496381121128302,12026590258184083113,524288 --field-trial-handle=2596,i,2429159063325695760,5067182585345013146,262144 --variations-seed-version --mojo-platform-channel-handle=5208 /prefetch:14
  2⤵
  PID:5664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5276,i,17989637141453478619,8427344079358942713,524288 --field-trial-handle=2596,i,2429159063325695760,5067182585345013146,262144 --variations-seed-version --mojo-platform-channel-handle=604 /prefetch:14
  2⤵
  PID:2372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5652,i,17410126157773629011,643106835105648173,524288 --field-trial-handle=2596,i,2429159063325695760,5067182585345013146,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:14
  2⤵
  PID:2756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=824,i,470181973193410133,12247477757578715829,262144 --field-trial-handle=2596,i,2429159063325695760,5067182585345013146,262144 --variations-seed-version --mojo-platform-channel-handle=5828 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2420

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3444

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:440

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:620

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 08b551008bdcc4de6c80e8d8ffe37c1b7477ababb9604ca97c52b81aed70fdae
MD5 4cd8e5e902146ba19eacbbf4f2e5586c
SHA1 94f807b68c16fd008173350beb37c8686810bcbd
SHA512 6381a86b9ddf9099cf403e36e8c774a996a2a9e547c95e0b2070ef6e2e5e94028cf8284c9fb284f5f80b523066ed68d34895e768192628c20598a4e881c034ca
TLSH
T1D5D02BF4B7DCD543C084507400F11574113571306918C2F02311E18805042810512329
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ec6a4f25194d7df920f023b94035789770d82b866f099f5b5c173cc54b917115
MD5 3f1c1794ec8ced524804973bbce2d4ac
SHA1 6590c89953e8a722e5a484b9a6cf54a706728368
SHA512 4d64e702748a9bdaaf0d9e615e1a53c00d60b36678bc7c8cbf081669c63c3b8c23886cf0b3633e50e54853f273a2e585b73bb1a35f53ef1493bf40ac357ee359
TLSH
T1F1D02BF0B7ECD443C084507800F21574112571301518C2F02311E18805042810511315
MD5 SHA1 SHA512 TLSH

Submit Download

773ca811-0aec-4902-9596-f27708e82b53.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\773ca811-0aec-4902-9596-f27708e82b53.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 6d7a79e51463704d3027e223630d451ea3c6f89edfe502006705e8b22ab5aeb9
MD5 4ce285c529048760fc156bf9f49343a3
SHA1 d939c67be48dd3c9f37d1596e70645f2e6f9f08d
SHA512 6d95ec6b5fa98588122757e62466fae9dc0b6d21c622181ed3d18197f33277eae1cff5f12bfff352fb5e5cb13632bba339ca186aee8e53997e8e4cab33e94384
TLSH
T187513DC4824BCA66FBD8607498E6CCCFFAB47BE1A143EF6929B4CD355CA2366405507C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 8d82b86e7335c73e5a2436f0540a15ec270ebf4f02717b3facd1ddb8cda0cfc3
MD5 53b34744966b9ef4ecc732f687b34f9b
SHA1 459fbffa4c143ad40fd0a24dd03fffb2588c632d
SHA512 0fa08a2fd9103d12d3fba90ea527903db95eaad4720238f3bc91a83b20bd2149c0db8d6f3cdd201d6a3a6724928c4f28486b393e7566e51be7dc9ac585b3908c
TLSH
T1BB41ABF7C3E4866E890156F0AB186E1BCE1C0915831C3C5AC9E4AF2B93E34B1E14195F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 e1306cd2e909b8c25f3a78eb17e79a73d1a3fa4fc76c5c427b98f5d998427923
MD5 bcc3c513ad498fd1c647e2e73617aebc
SHA1 cfa62397b39e4a7e0a3a997382c57e896fe88232
SHA512 27b5a8d0c2046678bd7b16053095c237d0020b8290b9a6227c65384d8877c6bb5a0caa3fab6922e899c03d2e0cf12aed75bf8a4f5242206f30aa8aeadbd5099d
SSDEEP 192:sxRSR4b9f/f/smWOdqLzoA8p4j/g6+WNIYRLf3jSGGIgIJ:sxRSQ9f/f/sm/nW/5IE4s
TLSH
T1E032D706AD28A97B8CCBD61DBB667F53E6F9103261D11E08EAFC861C14E76DD230740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 a48d275baf654ee2beceb8cd70a9fb235363f86f4dccd08246dc2dde2bec5340
MD5 86409bb86747359856d3a69d75622f9c
SHA1 cab0a7d4ff4b17d1948d9fa7300e5888387f1641
SHA512 e56c32c19ec5201378b5191b69dfdbfb1693d093c7e6444bbd0974923daa49c1062e1c557c200fcdc7d36d5cf89ec1853bdf46bb19a803487ec17fb25e519de5
SSDEEP 192:sxRdR4b9f/f/sNdOdqLzoA8p4j/g6+WNIYRLt3jSGGIgDVJ:sxRdQ9f/f/sNsnW/5Ig4T
TLSH
T11332D80AAD28A97B9CCBE61DBB657F13E6F9103261D11E08E6FC871C10E76DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 00ad0267e78c435f913642abea4910988c570697a23497e63ff2820042d3a079
MD5 e836b0f72403d5633a1c365b62f5e30a
SHA1 544530f8e9e03ea87dbeedc59893d13863214e90
SHA512 d4d8a4727fc35492c9951760869a769016145ccdd9327a526851b95a4c358ce4f67b43d46e72d1ed91d3eac4f70a7ce228cedc710b585065fe5ff0f3229b4c1c
SSDEEP 192:sxRdR4b9f/f/sNWOdqLzoA8p4j/g6+WNIYRLf3jSGGIgDTJ:sxRdQ9f/f/sN/nW/5IE45
TLSH
T11732C71AAD28A97B8CCBD61DBB657F53E6F9103261D11E08E6FC8B1C14E76DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 38d079a03cc6c912267c346afacf7ef4900cd6dbf9c9b336f4dc7b514d8996ad
MD5 e1f45a84b1395ad57d3f4b9eb1f59bb2
SHA1 36bef8be0a5330603b76250220ebca2287f60add
SHA512 c4a5c1eb9950976dae29b3e747d6653c72ad29c7bb586012ffc0b8d065f83ff7cc76e2811fc61a80fb9b9bf6858f9142fbf61f10e8f1aef9978f5a5455e288e2
SSDEEP 384:Ua5g+TcfCtgflFfXHKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVwE9tTRkyroqYL:UEg+TuWgf/fXH8F1+UoAYDCx9Tuqh0V5
TLSH
T1C8B2DA2F644CCB7E4FC10AAD9C1A6F976D9802C797548E4047FE994C02C77FA921A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 d475da965474ec67ab7283abd5c63882243b78ebbde12b994a762d527c5ef518
MD5 13a0a5f6d3d52d3a2727ad4e369f36dc
SHA1 824e9f6aa7e82eb9d8133d66dfb708cebae04521
SHA512 b87d2e07c5a6bdf46f08f7da076edb604a774bb55b57edfa29846af321e5b596b69bf01284c028ef5553ef3521aa44d20a920933bdf96fef63d17dc8bf351662
SSDEEP 48:KIZIpKyM87yt/IR+gKW1+QgKOwXFwzyI/KzSovy2o9EYOy2kz:KIZGKyMKW/mKKYJyUKzSKOz
TLSH
T132915225317B4601397D7A0CA1A5A7EE035271B33028E62B7BF920E55E2BE150CFDADD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5a3ff8.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5a3ff8.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 7bdde7b7610deefd8881edbca93b11f132023cf98e5eb2ef203f668141d3e5b3
MD5 53195cfbed02a562be88ad21f8716877
SHA1 d1950317ecf160c0d05f427212b7f939e7161eae
SHA512 d6ad5e6822279be04099add4e7d3af4605cfa4cb0a346313c7ec55033cda1cc3f4aa98270265e4fd5537909ec2de0fa2f9b2e6733a0551e589b22226516ac4f2
SSDEEP 768:4+3qlLwOC1rq7H5fgGM1TnXMqOa4PSa7dLKkRQj0:4+33SZfgt1TnxOvPfQj0
TLSH
T129F2AE32AC659C735CF6D385B11AB1626EF18067C6881F98D9ED7E0E01D7A5E434BC23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 e8e51db483a20f66925afa2f595c58622977dd34955e72cc91acf917ba28a4f3
MD5 bf4090cbea79638bd47aa7893a371a8c
SHA1 febf791cbbf40751b0bcee02dee84d0284afb09f
SHA512 86633fd4b70b873dd9eab7332af42959c0d1016f8b830321e3a933e44ecb428726f6a633dadf3e9c71ebf7ba4576916e214d94131a5a4b1b8f74aecaacba539d
SSDEEP 768:U/UxvxjgC+33i9LwOC1rq7H5fgGM1TnXMqOa4u3H:BZj3+33nSZfgt1TnxOvu3H
TLSH
T10503B036AC59AC335CF3D785B21AA262BEF14063C5C51EAC99ED6E0E05CB65E430BC13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 131b1797e74df1d64b840ab9b85113c2cbbe97da5f7a9f42744ffc940b4de915
MD5 38468a6f0393cdcbc488abb36d095a33
SHA1 47da39d91f48670b8ffff1357e7ba271f68ce875
SHA512 dee634c8fa879aadad46dbee7c929f4b2a5953b363d738fee5f729a04ad6cf6e86e42295ebb97584d8a31502df1241080b1ab69054296c32e9d818dd8b9fb235
SSDEEP 768:8+3rlLwOC1rq7H5fgGM1TnXMqOa4PSa7dLKkRQj0:8+3oSZfgt1TnxOvPfQj0
TLSH
T190F2AE32AC659C735CF6D385B11AB2626EF18067C6881F98D9ED7E0E01D765E430BC23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 e1ba8c4957c06b158d280db8780e03c4cc01b92cf5842c6335edca3f9ff014e7
MD5 9cd7e96523292c8facf2ed7e5337518a
SHA1 30ef05c9ad77fc1945ec21f149e3ae658d7ad903
SHA512 3b4b3be8473490a30a57928f3c5f1655456622af74df111412c23757bcf2a55475bebf332f622d9ee71dac4cdef6b61f61e53f83a1481584d682a4ebd8cd0d30
SSDEEP 768:5/UxvxjgC+93MBwOC1rRu5fgGM1TnXMqOeCAaP8:sZj3+93jRcfgt1TnxOBAG8
TLSH
T1E403BF36AC556C779CF2D784720EA2A6AEF140A3C5C51EA889ED3E0E05DB35D530BC53
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c1d5b220-302f-45eb-9603-4cdd317da489.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c1d5b220-302f-45eb-9603-4cdd317da489.tmp
Size 36KB
SHA256 d89dbfa105fb8c933dbacfb46558e98a1e70b3cfebcaf792c5e1e1c46f630c16
MD5 24c3fb74422ec5923de885040e80cff0
SHA1 31d9fbdf969b7e95005e9585b79dfc4549916f7a
SHA512 6e9711d928a98827e59b04e5a16c0eb380a7b6cecf515ef9f220717124d0c8e9f7fdc2ad77e9afbae777f76ff7e3063ecb13e57056987ebcd7da0776311de0f9
SSDEEP 768:xFQ93CwgjlLwOC1rqG5fgGM1TnXMqOa4PSa7dLKkRQj0:A93Rrfgt1TnxOvPfQj0
TLSH
T1ACF2AF339C94C8776CF6D7C5F61AB112AEF140A3C5885E98E6ED6E0E019759E434BC23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

138a4148-5294-41ef-a40f-68f5e307df67.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\138a4148-5294-41ef-a40f-68f5e307df67.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download