34a437bae14510e53a617384285ef69b57fcf04e1673c968ca38b26e5ba1efc6

Analysis

max time kernel
148s
max time network
152s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260618-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
28/06/2026, 03:43

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 737B
Sample260628-d985fae12q
SHA256 34a437bae14510e53a617384285ef69b57fcf04e1673c968ca38b26e5ba1efc6
MD5 c498862ebc049bfa4bcd5d0fcfdbb075
SHA1 7039f325ab4b043de4251006acb45f3293f03bcd
SHA512 e6bb23f4ab4e7bcf3f0ab28cbec7568f40ff24ff05f4334f9257a39a8259af256f43fb4d503749a55cf049353f61e3135d665cf4a9bb817196a949016b54e2f0
TLSH
T1A101DD8C2549D80900317335CE83F028F1B702735928C581F7CD2F922FB561999E3ECA
MD5 SHA1 SHA512 TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3884	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134270918494742646"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-487906980-2895880840-1957110281-1000\{21A24B46-3060-4B99-A6B7-D57A3374C332}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4472	msedge.exe
4472	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe

Suspicious use of WriteProcessMemory 36 IoCs

description	pid	Process	procid_target
PID 3260 wrote to memory of 1912	3260	msedge.exe	89
PID 3260 wrote to memory of 6020	3260	msedge.exe	90
PID 3260 wrote to memory of 3884	3260	msedge.exe	91
PID 3260 wrote to memory of 6020	3260	msedge.exe	90
PID 3260 wrote to memory of 6020	3260	msedge.exe	90
PID 3260 wrote to memory of 5764	3260	msedge.exe	92
PID 3260 wrote to memory of 5764	3260	msedge.exe	92
PID 3260 wrote to memory of 6132	3260	msedge.exe	95
PID 3260 wrote to memory of 5872	3260	msedge.exe	94
PID 3260 wrote to memory of 6132	3260	msedge.exe	95
PID 3260 wrote to memory of 6132	3260	msedge.exe	95
PID 3260 wrote to memory of 5872	3260	msedge.exe	94
PID 3260 wrote to memory of 5872	3260	msedge.exe	94
PID 3260 wrote to memory of 5192	3260	msedge.exe	97
PID 3260 wrote to memory of 5192	3260	msedge.exe	97
PID 3260 wrote to memory of 5192	3260	msedge.exe	97
PID 3260 wrote to memory of 3920	3260	msedge.exe	96
PID 3260 wrote to memory of 3920	3260	msedge.exe	96
PID 3260 wrote to memory of 3920	3260	msedge.exe	96
PID 3260 wrote to memory of 3868	3260	msedge.exe	98
PID 3260 wrote to memory of 3868	3260	msedge.exe	98
PID 3260 wrote to memory of 3868	3260	msedge.exe	98
PID 3260 wrote to memory of 596	3260	msedge.exe	100
PID 3260 wrote to memory of 596	3260	msedge.exe	100
PID 3260 wrote to memory of 596	3260	msedge.exe	100
PID 3260 wrote to memory of 2360	3260	msedge.exe	102
PID 3260 wrote to memory of 5840	3260	msedge.exe	105
PID 3260 wrote to memory of 5840	3260	msedge.exe	105
PID 3260 wrote to memory of 1248	3260	msedge.exe	106
PID 3260 wrote to memory of 1248	3260	msedge.exe	106
PID 3260 wrote to memory of 4356	3260	msedge.exe	108
PID 3260 wrote to memory of 5956	3260	msedge.exe	109
PID 3260 wrote to memory of 4256	3260	msedge.exe	110
PID 3260 wrote to memory of 5868	3260	msedge.exe	111
PID 3260 wrote to memory of 5868	3260	msedge.exe	111
PID 3260 wrote to memory of 4472	3260	msedge.exe	113

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x268,0x26c,0x270,0x264,0x25c,0x7fffc538c188,0x7fffc538c194,0x7fffc538c1a0
  2⤵
  PID:1912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1576,i,13362128386243148301,1184390463134158076,262144 --field-trial-handle=2396,i,13204126639075579510,17570822717823056285,262144 --variations-seed-version --mojo-platform-channel-handle=2392 /prefetch:2
  2⤵
  PID:6020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1848,i,13932397566702357127,7627425163323676200,524288 --field-trial-handle=2396,i,13204126639075579510,17570822717823056285,262144 --variations-seed-version --mojo-platform-channel-handle=2488 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2200,i,13301735697867511136,4708125062691823626,524288 --field-trial-handle=2396,i,13204126639075579510,17570822717823056285,262144 --variations-seed-version --mojo-platform-channel-handle=2708 /prefetch:13
  2⤵
  PID:5764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3596,i,16880727608096962846,10041774962730161829,2097152 --field-trial-handle=2396,i,13204126639075579510,17570822717823056285,262144 --variations-seed-version --mojo-platform-channel-handle=3688 /prefetch:1
  2⤵
  PID:5872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3620,i,1095641560905137469,12753639321305652594,2097152 --field-trial-handle=2396,i,13204126639075579510,17570822717823056285,262144 --variations-seed-version --mojo-platform-channel-handle=3692 /prefetch:1
  2⤵
  PID:6132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4344,i,16756727022304536344,5692297187180636265,2097152 --field-trial-handle=2396,i,13204126639075579510,17570822717823056285,262144 --variations-seed-version --mojo-platform-channel-handle=4868 /prefetch:1
  2⤵
  PID:3920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4352,i,5148609079746432737,1145542237384772148,2097152 --field-trial-handle=2396,i,13204126639075579510,17570822717823056285,262144 --variations-seed-version --mojo-platform-channel-handle=4872 /prefetch:9
  2⤵
  PID:5192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5280,i,15385032096861783334,16973798685837363395,2097152 --field-trial-handle=2396,i,13204126639075579510,17570822717823056285,262144 --variations-seed-version --mojo-platform-channel-handle=3924 /prefetch:1
  2⤵
  PID:3868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=5456,i,15389827697448479253,1629534630397348364,2097152 --field-trial-handle=2396,i,13204126639075579510,17570822717823056285,262144 --variations-seed-version --mojo-platform-channel-handle=5540 /prefetch:1
  2⤵
  PID:596
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5972,i,12072630968924375171,16950911031071125239,524288 --field-trial-handle=2396,i,13204126639075579510,17570822717823056285,262144 --variations-seed-version --mojo-platform-channel-handle=5988 /prefetch:14
  2⤵
  PID:2484
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5972,i,12072630968924375171,16950911031071125239,524288 --field-trial-handle=2396,i,13204126639075579510,17570822717823056285,262144 --variations-seed-version --mojo-platform-channel-handle=5988 /prefetch:14
  2⤵
  PID:2360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3584,i,6408923495522491415,8735376514778101977,524288 --field-trial-handle=2396,i,13204126639075579510,17570822717823056285,262144 --variations-seed-version --mojo-platform-channel-handle=6344 /prefetch:14
  2⤵
  PID:5840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3660,i,17988585037241556873,1982488446522612408,524288 --field-trial-handle=2396,i,13204126639075579510,17570822717823056285,262144 --variations-seed-version --mojo-platform-channel-handle=3756 /prefetch:14
  2⤵
  PID:1248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4340,i,8393322547560410844,14545035659642303162,524288 --field-trial-handle=2396,i,13204126639075579510,17570822717823056285,262144 --variations-seed-version --mojo-platform-channel-handle=4332 /prefetch:14
  2⤵
  PID:4356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5104,i,11314519158345770456,5791890583494263753,524288 --field-trial-handle=2396,i,13204126639075579510,17570822717823056285,262144 --variations-seed-version --mojo-platform-channel-handle=4324 /prefetch:14
  2⤵
  PID:5956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5108,i,9497268332301463588,2795227578246499361,524288 --field-trial-handle=2396,i,13204126639075579510,17570822717823056285,262144 --variations-seed-version --mojo-platform-channel-handle=5168 /prefetch:14
  2⤵
  PID:4256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3740,i,17258562704325510624,13633760931468312763,524288 --field-trial-handle=2396,i,13204126639075579510,17570822717823056285,262144 --variations-seed-version --mojo-platform-channel-handle=6544 /prefetch:14
  2⤵
  PID:5868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=816,i,4776371699582746348,10215894919549803314,262144 --field-trial-handle=2396,i,13204126639075579510,17570822717823056285,262144 --variations-seed-version --mojo-platform-channel-handle=5812 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4472

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2132

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4712

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 86bd3a0f7328ff17cf8f5c348bd8ac04b7d41c52ef238ad0b048b09e5a964859
MD5 c6e3af776b1f4463a76e29cca079d5e5
SHA1 19b7f1bc72393d7717302ee15e0e4afa431cea45
SHA512 b15ef012a17356e47acc81e1922c433a19e6e554795a46fdf0ae05df1e9abbc87a47b05bc831bac2c6c32faad3f39c7a7cb21ae65ceb4f96f3deb3ea0d83e9c6
TLSH
T1D7D080613B05A616D54B19729C18E7117237844234E3D9097171D10EDABD3C4F3C51F7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 be05b8d7f0bed3c8d0e89a1a49e4bae1f45619d94149f9abd8291f558897f2f2
MD5 e02c579c3ab95f9c3a77f9c2199a30f0
SHA1 f96c7c58830f56a993117d75a3b0f9e30bfc93a7
SHA512 264a83561849b0e2a1c42c3e478b7d5a3b3fa31f901f29440fc853108e9046e73ba21a692d0dbdef7d9fd76e9b6aac64489fb603c47ab551280df09d26d7e2a4
TLSH
T140D080613B05A516D54B19729C19E7117237844224E3D9097171D11EDABD3C4F3C51E3
MD5 SHA1 SHA512 TLSH

Submit Download

390ad6d0-1f91-4de1-86f9-ebd2e1fac44e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\390ad6d0-1f91-4de1-86f9-ebd2e1fac44e.tmp
Size 27KB
SHA256 425c5a058f81d0214737c7237cb29cc21859649333f6723711663a06d6843b55
MD5 090ecd047e885324e7c149d08171c7e3
SHA1 daf3a2d0a31c7ce79de3acf000ec82c7aa2c9bad
SHA512 205cbce166dca764f0ba520979e6c8df641d3a5e92f719b91f4dbacef952c260009d942fe33dc8d8cbed96421f18d58f1a214610a08a87ba3c9aac77e1ec2c4f
SSDEEP 768:l1Av9+WgI+f2z8F1+UoAYDCx9Tuqh0VfUC9xbog/OVZ7zV1ro9soE:l1Av9+WgI+f2zu1jaM/VOSoE
TLSH
T162C20A2F640CC77E4F840AADEC2AAED769D801CF97584D5447EA894C03C67EF921A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 e85d556ae34bd88b54f7536fdd97ed755fa3329d2c0d62bc85c5bd25b45b2b9e
MD5 1b077fed77a476565359a6ef9769e06e
SHA1 a745b51c6e641d5a43f94d80583b4fec44babf1e
SHA512 32215fcfc4416623988d8a46e6c7336af3a93324ab16d1394804d3f90f71e0583eb5a9f275ae0edc6f80dad5046637e2352d6e831d85db28a45ddd89e5ecbca0
TLSH
T192715D6233690064DBA64279A0F1C08B73701D5CEB2B2DAD5CECF0F83C4177ED249295
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe593668.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe593668.TMP
Size 3KB
SHA256 4eecbad79bb5f9122a6f831231e4f20b3f35499a2f43348a92ada8dfa9b6eaec
MD5 e981d59a2ab3ba316ee0398bce35e0c1
SHA1 6bda53c70d2786b1e4eec8f2c21a35acf572ddb2
SHA512 0718fa8c73deae33abd4af24cbf38667997847a814313daa7d234c58aae4dd4e1a93f9fd720873301090fe67858db6e2388582310493e7293d2f92600e90efa4
TLSH
T158612B5233690060EBAA427960F2D08B73B01D5CE72B2DAD5CDCF5F8784677ED64D284
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 504f6b68c2872d029e034910707eea059726e84ff85e90c701625a8c91ab7b49
MD5 e68cd9346558cd1fc86863244314e6c5
SHA1 a8129e61a97ce61e7f4e9ba542909a6d1f1c56a0
SHA512 6324e9c76e00ff842cbce1e82a0ef4c1963d5b96f8eb65ae6f40ce7b3ff65f5c0e47a4efe3730fd4725ac882f9ed2394c45f482d047b440ffcce0ef8e9cd7c47
SSDEEP 48:YALlNWOhSh2h/htIhfAsQRshfoKsBlhgmzsLjhhnONzsOzEsKu0EsHcsUBsD4sXg:DoOo0RsVo+67gjhEzeu0bowXmwnGj68
TLSH
T1A191CCF7C7D9822DC91156F4AB15AF2FCE2D0A14432C3C6AC8D4AF1B93E2471E21665E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 e98f084f7723a6710e0c8f2677ba4492e08dc166434b042cd1769d60c17e7860
MD5 17a0ceed77c55ee9130346e0035624f1
SHA1 451c33125a2192e752bffcef5eacf99bf49cd019
SHA512 613801c0a25d78da7fdc33aab250c1e79f08cabee56442a553fd41865fc6e1dda9fbacb639e35ec59303b9550c1581677bad68ff92357f3fab97396832b3e502
SSDEEP 192:sxR+zRMVyM/jK1Ml8wFH/fHsoxYt/diyFzoA8pj/eZ/g6+WNIYAizwWgYw+GJIgs:sxRMcbH/fHsoxY9oC/5IiwWgYwbs
TLSH
T1EF62E916AA34997B8CDBD20DFA557F53D2F91433A2901E44AAFCCA0C05E7ADD221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 6d1c7950f449a0d49b5a56730c81dcbb6c88b6e4ea4af8ba8837b3b11c449ffc
MD5 49b95eeec54899f279e4b68b7a383675
SHA1 9550c76c2cce17baaf62a576f801e9e70dbe0613
SHA512 74862a1c18f27fc2ce56ee7d794909d04fced77c9f50b37e1819c27a13085f5cbd7621f9de187f4b2a4cd80e519be53d7b4f195f07ab55f9d6d2641a077fa8f6
SSDEEP 192:sxR+8RMVyM/jK1Ml8wFH/fHs8xYt/diyFzoA8pj/eZ/g6+WNIYAizwWgYw+GJIgl:sxRDcbH/fHs8xY9oC/5IiwWgYwbl
TLSH
T1AD62E916AA349A7B8CDBD20DFA517F53D2F91433A2901E44A6FCCA0C05E7ADD221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 ab377f124baed90b08dc4a88cec00ded9d22a58b204629ad5245f3dff443cb16
MD5 849234455fa3d5a9bfcf0380f1f76a4c
SHA1 525428a4f82491368db04cd5bf2cf4142f71d87e
SHA512 b0d79b7bdcc52b5ff17fba9792a8b9dfb8c8ee68fa7db16406c61fccf4023a2c4727e9e78aa5b4c35645cf510213738da65635258e72761c071c732fedff059c
SSDEEP 192:sxR+8RMVyM/jK1Ml8UQAFH/fHs8xYp/diyFzoA8p1/eZ/g6+WNIYAZzwWgYw+GJf:sxRDcq2H/fHs8xw9oA/5IBwWgYwbf
TLSH
T1BC62D816AA349A778CDBD21DF6517F53D2F91473A2901E44AAFCCA0C01E7ADD221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 88274339cf507fd45abc8b3c86fb22eabfda3f1829eea2d39789ed83b268d451
MD5 6e0a8862b68b6204dc8cbe18ebedeada
SHA1 7c4a2bbb5138cf0a91aff28406c6259367bc1b45
SHA512 ef502fd2ee9136ff4d91bb019115a071b2b18fbfb42345dc28de3e1589ceadd18fb32a35f2d39cdd7c2f99d50f310cad8e6e26c99f85deb0d9222eda4255ede8
TLSH
T1D1A002A485D48839DC4006BA109E86C132547A20B20ECB47A0AE94D6DDD2D8D7309842
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 142ce7a680d89b7a2baa89559745863688e28b46104a9e7ac57808283ef7a076
MD5 43524d36df260c0caddaef8dc542c7a4
SHA1 4610b7ad1f029352b1a5a1640d042ee934b4297d
SHA512 15c0e015fedcd3cf953db6495bc8a59a9d7e6e5600dcdf77bf0ce41f6920589eec74f3bea6f4bb13f41a04504613390a63b83f62d905d1edc9f7f2b749924aa5
SSDEEP 768:UjaeqD4MlshiLdMmI3oj+jNebW5BwT7VWs+DoLSpG0/TIo5AKTx:UqcjhIdMb31OVmoTiTyQ
TLSH
T17103AE76B8A89DB75CA6C7C1B207B5431F700653C5C83F98D9DD6A0D069B2DE630782B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 cf7dca39bebc4887f6acd23464257e0b905340e70ee4e7ae569cb9b695c38fae
MD5 4d0e712a09d543b2f4ca34d6752744cb
SHA1 34c09aee39e1266dbf3abac7a9b2cb5644ecf1fc
SHA512 4dc1daf7958e16c92d92d31ee43f5cb42f3a4e46f8588da5f904c1e06d54966960981b829167ed3c074691405a669ac8b7dede3ea54a3535922d6a8b68e37d54
SSDEEP 768:rj+963oL+jNeb65BwT7VWs+DoLSpG0/TIo5Azn12bfZwu:+963pQVmoTiTyByZwu
TLSH
T150F2AE32B8A89E735CD6C7C5760776476FB44623C5C82F94C5EC6A0D0ACB2DD630B82A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 5bb6ee0d335c7663771687dabc592256d44db62c6be70fd6b77562db3e1717d6
MD5 ffc4c051bdcb3e6742d645a15f813b44
SHA1 4a9ea4bb1acd97b57661a4ff084add49850beab8
SHA512 e14d09d739fc3fbed06437f6ab5ff71c98b22411d13eb8da31ae48a8f58af18c10b39779e142687a4ebda56f1567c557d9a6a9a0efd25e0a6f87c1fc2d0c152c
SSDEEP 768:1j+963pL+jNeb65BwT7VWs+DoLSpG0/TIo5Azn12bfZwu:A963uQVmoTiTyByZwu
TLSH
T1C4F2AE32B8A89E735CD6C7C5760776476FB44623C5C82F94C5EC6B0D0ACB29D630B82A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 42KB
SHA256 b004289befa0e25b7c3da44ea1c5de6bdff8c33bcecd2aeefd3cfeee085fd39b
MD5 10c569396d72f8f3cab04f1ef40c1431
SHA1 cb1064a8aec0311534573339a9e223b0b7f5dd6c
SHA512 724c778c2a7139789a5d88dbc756c6897b5489e585c9a569661d5eb56c50ab5d78f27c53ad4089a5e221971fe9c9e2a573a4dd40d58da05344c94ff2f88e852b
SSDEEP 768:vF1j+9H31wgrU+jNebq5BwT7VWs+DoLSpG0/TIo5Azn12bfZwu:G9H3b8VmoTiTyByZwu
TLSH
T175136CF2A4D78976DC9E8783673E6D025EBCC263B4842A94B7D8590CCD871BFD207815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 939c3977ea0fa18f4e0887fca0a130004a7432b7e03748e67fb56d04cac992cd
MD5 bb58b3df8f3938527968ae9b7846efe4
SHA1 0610ea237440dfa5a088753ca93a091ab4743271
SHA512 d0d5b0dd7622c75bfc755429d219316b91df6b62916fa8ed021ee917f187479665607c7158b93dfb47a24b9c0275e3bf9701c225da3985675acfad98e8b54e75
SSDEEP 768:ojaeqD4MlshiLdMmp3NEcjNebn5BwT7VWs+DoLSpG0/TIoFs+ApXGFTX:oqcjhIdMC37NVmoTiTm+KXi
TLSH
T16003BF7AA8A89DB39CB6C7C57607A5432F744253C6C83FD8D9DD6E0D02972CD630782A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

22c67c83-2716-446a-94ef-f2b11a4e0f5c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\22c67c83-2716-446a-94ef-f2b11a4e0f5c.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download