34a437bae14510e53a617384285ef69b57fcf04e1673c968ca38b26e5ba1efc6

Analysis

max time kernel
148s
max time network
145s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260629-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
03/07/2026, 02:35

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 737B
Sample260703-c3asmafs4k
SHA256 34a437bae14510e53a617384285ef69b57fcf04e1673c968ca38b26e5ba1efc6
MD5 c498862ebc049bfa4bcd5d0fcfdbb075
SHA1 7039f325ab4b043de4251006acb45f3293f03bcd
SHA512 e6bb23f4ab4e7bcf3f0ab28cbec7568f40ff24ff05f4334f9257a39a8259af256f43fb4d503749a55cf049353f61e3135d665cf4a9bb817196a949016b54e2f0
TLSH
T1A101DD8C2549D80900317335CE83F028F1B702735928C581F7CD2F922FB561999E3ECA
MD5 SHA1 SHA512 TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5148	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134275197498154544"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1797646245-3139070211-3019596475-1000\{1AAE0E0E-0A8F-4454-B355-4E2C1C8FF619}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5524	msedge.exe
5524	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
3620	msedge.exe
3620	msedge.exe
3620	msedge.exe
3620	msedge.exe
3620	msedge.exe
3620	msedge.exe
3620	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
3620	msedge.exe
3620	msedge.exe
3620	msedge.exe
3620	msedge.exe
3620	msedge.exe
3620	msedge.exe
3620	msedge.exe
3620	msedge.exe
3620	msedge.exe
3620	msedge.exe
3620	msedge.exe
3620	msedge.exe
3620	msedge.exe
3620	msedge.exe
3620	msedge.exe
3620	msedge.exe
3620	msedge.exe
3620	msedge.exe
3620	msedge.exe
3620	msedge.exe
3620	msedge.exe
3620	msedge.exe
3620	msedge.exe
3620	msedge.exe
3620	msedge.exe
3620	msedge.exe
3620	msedge.exe
3620	msedge.exe
3620	msedge.exe
3620	msedge.exe
3620	msedge.exe
3620	msedge.exe
3620	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
3620	msedge.exe
3620	msedge.exe
3620	msedge.exe
3620	msedge.exe
3620	msedge.exe
3620	msedge.exe
3620	msedge.exe
3620	msedge.exe
3620	msedge.exe
3620	msedge.exe
3620	msedge.exe
3620	msedge.exe
3620	msedge.exe
3620	msedge.exe
3620	msedge.exe
3620	msedge.exe

Suspicious use of WriteProcessMemory 36 IoCs

description	pid	Process	procid_target
PID 3620 wrote to memory of 2104	3620	msedge.exe	88
PID 3620 wrote to memory of 2280	3620	msedge.exe	89
PID 3620 wrote to memory of 5148	3620	msedge.exe	90
PID 3620 wrote to memory of 2280	3620	msedge.exe	89
PID 3620 wrote to memory of 2280	3620	msedge.exe	89
PID 3620 wrote to memory of 1664	3620	msedge.exe	91
PID 3620 wrote to memory of 1664	3620	msedge.exe	91
PID 3620 wrote to memory of 3068	3620	msedge.exe	93
PID 3620 wrote to memory of 3056	3620	msedge.exe	94
PID 3620 wrote to memory of 3068	3620	msedge.exe	93
PID 3620 wrote to memory of 3068	3620	msedge.exe	93
PID 3620 wrote to memory of 3056	3620	msedge.exe	94
PID 3620 wrote to memory of 3056	3620	msedge.exe	94
PID 3620 wrote to memory of 2672	3620	msedge.exe	95
PID 3620 wrote to memory of 4928	3620	msedge.exe	96
PID 3620 wrote to memory of 2672	3620	msedge.exe	95
PID 3620 wrote to memory of 2672	3620	msedge.exe	95
PID 3620 wrote to memory of 4928	3620	msedge.exe	96
PID 3620 wrote to memory of 4928	3620	msedge.exe	96
PID 3620 wrote to memory of 124	3620	msedge.exe	97
PID 3620 wrote to memory of 124	3620	msedge.exe	97
PID 3620 wrote to memory of 124	3620	msedge.exe	97
PID 3620 wrote to memory of 4596	3620	msedge.exe	99
PID 3620 wrote to memory of 4596	3620	msedge.exe	99
PID 3620 wrote to memory of 4596	3620	msedge.exe	99
PID 3620 wrote to memory of 4052	3620	msedge.exe	101
PID 3620 wrote to memory of 5648	3620	msedge.exe	100
PID 3620 wrote to memory of 4052	3620	msedge.exe	101
PID 3620 wrote to memory of 5648	3620	msedge.exe	100
PID 3620 wrote to memory of 4996	3620	msedge.exe	103
PID 3620 wrote to memory of 4968	3620	msedge.exe	107
PID 3620 wrote to memory of 2356	3620	msedge.exe	108
PID 3620 wrote to memory of 2084	3620	msedge.exe	109
PID 3620 wrote to memory of 1956	3620	msedge.exe	110
PID 3620 wrote to memory of 1956	3620	msedge.exe	110
PID 3620 wrote to memory of 5524	3620	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ff8900ec188,0x7ff8900ec194,0x7ff8900ec1a0
  2⤵
  PID:2104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1648,i,2505521787628340262,1767769430987798988,262144 --field-trial-handle=2588,i,8579504399743054924,15156271751098996861,262144 --variations-seed-version --mojo-platform-channel-handle=2440 /prefetch:2
  2⤵
  PID:2280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1876,i,17897605197400787247,6952300794326677042,524288 --field-trial-handle=2588,i,8579504399743054924,15156271751098996861,262144 --variations-seed-version --mojo-platform-channel-handle=2624 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2224,i,1394587585636441134,13347645419523209537,524288 --field-trial-handle=2588,i,8579504399743054924,15156271751098996861,262144 --variations-seed-version --mojo-platform-channel-handle=2732 /prefetch:13
  2⤵
  PID:1664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3580,i,15708589989434961900,14567310886087257689,2097152 --field-trial-handle=2588,i,8579504399743054924,15156271751098996861,262144 --variations-seed-version --mojo-platform-channel-handle=3608 /prefetch:1
  2⤵
  PID:3068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3576,i,1825895183979384253,363494487548753245,2097152 --field-trial-handle=2588,i,8579504399743054924,15156271751098996861,262144 --variations-seed-version --mojo-platform-channel-handle=3604 /prefetch:1
  2⤵
  PID:3056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4224,i,7236849570530562089,11173831015620162537,2097152 --field-trial-handle=2588,i,8579504399743054924,15156271751098996861,262144 --variations-seed-version --mojo-platform-channel-handle=4784 /prefetch:1
  2⤵
  PID:2672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4236,i,1596706967189909863,17459130712564443225,2097152 --field-trial-handle=2588,i,8579504399743054924,15156271751098996861,262144 --variations-seed-version --mojo-platform-channel-handle=4788 /prefetch:9
  2⤵
  PID:4928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3648,i,8313137033402398028,14638253481410143310,2097152 --field-trial-handle=2588,i,8579504399743054924,15156271751098996861,262144 --variations-seed-version --mojo-platform-channel-handle=3600 /prefetch:1
  2⤵
  PID:124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=3616,i,200227450740077199,17316467006108939014,2097152 --field-trial-handle=2588,i,8579504399743054924,15156271751098996861,262144 --variations-seed-version --mojo-platform-channel-handle=4204 /prefetch:1
  2⤵
  PID:4596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5184,i,552136130902880955,14819880250044660598,524288 --field-trial-handle=2588,i,8579504399743054924,15156271751098996861,262144 --variations-seed-version --mojo-platform-channel-handle=5660 /prefetch:14
  2⤵
  PID:5648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5596,i,2076528447677443931,6982887249663527739,524288 --field-trial-handle=2588,i,8579504399743054924,15156271751098996861,262144 --variations-seed-version --mojo-platform-channel-handle=5680 /prefetch:14
  2⤵
  PID:4052
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6368,i,5538525268381073623,13856208240507726059,524288 --field-trial-handle=2588,i,8579504399743054924,15156271751098996861,262144 --variations-seed-version --mojo-platform-channel-handle=6384 /prefetch:14
  2⤵
  PID:3720
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6368,i,5538525268381073623,13856208240507726059,524288 --field-trial-handle=2588,i,8579504399743054924,15156271751098996861,262144 --variations-seed-version --mojo-platform-channel-handle=6384 /prefetch:14
  2⤵
  PID:4996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4820,i,2352584441284216219,14684150538042928877,524288 --field-trial-handle=2588,i,8579504399743054924,15156271751098996861,262144 --variations-seed-version --mojo-platform-channel-handle=6432 /prefetch:14
  2⤵
  PID:4968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4832,i,8187054455724558772,7004463341890934110,524288 --field-trial-handle=2588,i,8579504399743054924,15156271751098996861,262144 --variations-seed-version --mojo-platform-channel-handle=5108 /prefetch:14
  2⤵
  PID:2356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,5503642010172100653,6213198872971726743,524288 --field-trial-handle=2588,i,8579504399743054924,15156271751098996861,262144 --variations-seed-version --mojo-platform-channel-handle=6488 /prefetch:14
  2⤵
  PID:2084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5800,i,8823112018882253310,8866349335814653717,524288 --field-trial-handle=2588,i,8579504399743054924,15156271751098996861,262144 --variations-seed-version --mojo-platform-channel-handle=5828 /prefetch:14
  2⤵
  PID:1956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=3704,i,10980667613268950792,11307757724051156053,262144 --field-trial-handle=2588,i,8579504399743054924,15156271751098996861,262144 --variations-seed-version --mojo-platform-channel-handle=5008 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5524

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2604

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5240

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 85900118c71217b605d5ac64fa104d9bdf3a2ae1825187ef3a6a9c3ea75946b8
MD5 b694af012c621426ee8e90a8ed586333
SHA1 e839cf90b93d2693f8046fc19ae1373628f0cf99
SHA512 b9142bc76c532d8974de0c5db727ec4870a44225dc222a9fdc138b1278d0f4cb8cef786ed6b936ee6b436177a50e31c07b489d69dd8d25de345ea17638a55e56
TLSH
T188D08055364DB40CC151253254615365F6749651B42B57185460B01CDC78DA173576DF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 9ee8b00c5eccab84404f41fa5a938e6b9e2129213bd97cde6c60973bfccf9540
MD5 0a273f57544ca9c385c90abd2fb2f8b8
SHA1 663d351037054236aaa58a924f66180602045244
SHA512 8a731bd22460fb3b026847be48aab957fe90f0ad7e2dcb291305580f3553409cfdff67355886d3d2f95cd8f8ff1d2726447bc2b96bce2cdcc51a8a15cbcb9d0c
TLSH
T1CFD0C010324DB00CC040203214210360F2309610602B47084020F02CCC78DA173466CF
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 a8dec0ef9cc7dbbcf73966293156f23781354f3983e30f27fecb4a70a7f3c15b
MD5 fbbf5b20f71433e0470d62ef33aaac0f
SHA1 c53e81d14192b78a93035f7dfe0b4e2e145d880b
SHA512 24c524d7076c5e5a6a0fc4064b9245640c694f866cef04f64b17d8e261a7d02a551fd21947b167b2bd426ca41e32215a8cb0c3e9718de68477e1200bf3340551
TLSH
T1BC51A3718F638D1EC7265A7B04E553ABFF7C989E14236E187039A139CEEBF485251122
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe599e3a.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe599e3a.TMP
Size 2KB
SHA256 5290e30e4b23361ca5dc6ccb05637b5d60449ba2817166a45f3fe7805ddc4181
MD5 643214636972ef6fe82ce32579fe858c
SHA1 47331f74b440bb8a292ce7ea67257c3a5377af38
SHA512 120b34732bca22823bb241772c2381ce6321f83c670be2c8b8e350f46b4e1fc201628bab725e1080b1d94ab18377875e46e6bfc474931d4f4e44ad1ad6a6aa40
TLSH
T1215192718F638D1EC7224E7B15E1439BFF7C889E25236E197038A038CADBF585281023
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 2ba193a95338dfa3083f810503ae25c6ba892d35749f51b70d4c341a48f6c15a
MD5 f6532126111089e8fbff4a48ccfcb735
SHA1 9a57792aa84f39c19a6ec2b146a2c360ae78ff00
SHA512 96177a7e3c598d5836d8d4d29946a111ea41dcc3abe60a5ba2d44d622af570a6826f24eecc990a8a526c1df985649c68fa20c92e6560d9e0afc67c2db2e6d8fd
SSDEEP 48:YALlNjOhlLhetheIhtkhtus5aAsMfoKs93gmgCZsGzEsWu0EsFcsSnqwBj6AspFo:DlOjLSdzkv3aUqiizCu0J+nqwBj6xtvE
TLSH
T15C919CF7C3E8852EC90156F4AB15AF1FCE2D0A14432C3C6AC8E4BE5B93E2471E115A5E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 caddb5e820255d6b51fab46af89ae80a326c58361276bc4f88553582912e537d
MD5 1c929822bda424e5cb4e9570ecb061d1
SHA1 3ab9df4a4ac9bbaa824b8eeaebbc29d47031d3a6
SHA512 ca1631ca8e302b492656577bda25b76419b83a76b0943d9f2988943dd705293bc34ed656d6ac6399d70fc98eccc169c3ed9ecd8b6532c66592cf4a25623954b6
SSDEEP 192:sxRmReyM/jK1Ml8wFw/fjsr9ahrIswocdzoA8pj/Pn/g6+WNIYH1HMBG4IgD5J:sxRmcbw/fjsr9xQcQT/5Io4v
TLSH
T1CD62FA566634997BCCDBD209F9557F53D6F80533A2901E44AAFCCA1C01E7AEC221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 71380fa9b483d963b012f6d91fdd93067de27da81c2a6fb718c97ad7d36025e6
MD5 8df074c06980e00fbe456b40326419dc
SHA1 a4b4ae8ce0d53f1958a7f882391850beda51f9ef
SHA512 fcb13c2f895dda2eeaeff08cc748140a65925e8af9de2207857e02ab93f4b6545621f959ae8185f33a1096453bce6368748c7d8153a29f6b3ffa140998d3fa5c
SSDEEP 192:sxRmReyM/jK1Ml8UQKFw/fjsr9ahB1IswocdzoA8p1/Pn/g6+WNIYHSHMBG4IgDh:sxRmcqww/fjsr99QcQV/5IJ4d
TLSH
T1E762D956A624997BCCDBD209F9517F53D6F84533A2901E04AAFCCA1C01E7ADD221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 52b36952efad5f87bc4aaee8560e8182a371194d96c176b597ff0dce5ef1489b
MD5 2ffb0b8e1f2b1e98a09fa901291e664d
SHA1 b2fab945f307049f6f16d0ab63f16aaac2eea049
SHA512 362954f5dc43e9069ea14515dab3be35eee9b4b330674614c0d296f7c37b601fb5bf24f439975e394ad8b85666c4e9dc2534daf588d89751db86b230b2d63ae3
SSDEEP 192:sxRZReyM/jK1Ml8wFw/fjs69ahrIswocdzoA8pj/Pn/g6+WNIYH1HMBG4IgIJ:sxRZcbw/fjs69xQcQT/5Io4s
TLSH
T13D62EA566638997BCCDBD209F9557F53D6F81533A2901E44AAFCCA1C01E7AEC220382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 a8591748354a38da588a15a6240e31695121455acb493e515803e788e48eef51
MD5 822e3dbb9fafc77251c27a23458a3b65
SHA1 467c0908ba29204c947039102ab6273902d4364b
SHA512 e0488cf118a7a9606b230762e5501516b3de5032255267b6df79b211fdffe0d2f02491da1b12057deafc9fdc018c506d06912cffdc45d2138f1c0684a9eed382
SSDEEP 768:JOVP+1WgesfvQ8F1+UoAYDCx9Tuqh0VfUC9xbog/OVxPE+lroXIhoAX:JOVP+1WgesfvQu1jawc+eio4
TLSH
T192C2FC2B240CC77E4F84499DEC2D7ED66DD802CB5B988D5447EA890C03C77EB921A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 1d2ed5f5cf0bd2b33d0ce445789d46aa06825b1fcd415d7d2d2c42c5881b7e92
MD5 ce730b374352af3f21b905f6cf38188f
SHA1 f55c165949e61d65efbfdf69409e713f4dcae293
SHA512 1d1a623f8706c092f71acc21eb2bfc99dfc790c956b3e0e5889ed37a4a6b94a9c82f2069d57c74c864bb41919c17f25c6809138a0be54e1738ab32b57e2879ec
TLSH
T1FBA0021011C90CA2C90017FB519A25D53624EE9A320A8B8360EF15458E922A9721920E
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5a1adc.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5a1adc.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 9d5dbb2deccd87c26eac23fb39682a1dd56c51cb0c262239a688c16c9ea28809
MD5 ff56a3557a64662a43dc5741e3628cef
SHA1 1088a27c9331dd17e7c23b06ca09f0945e4c5586
SHA512 aab7c0830223554cc58ef82f1eb10e653ac3ac43bcee91ef1d8bf4e3af0451d72e0d3234b89a573c32f72b15c891604f392e9560b5dba324bd3d1bd0f77b5759
SSDEEP 384:BtNn/s3n9SL38NGu/+uyRuaefQCvBF69cP0RybqWUb69hVlLzm6ZFsqjRVsam+UP:Bj+9g3b9R2BFfPYyDPm6MGjzJULb9MtU
TLSH
T18AF2B031AC90AE775CD2C689724B3B577FE4D26786C41F84AADD6F0E02CBA6C5307816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 0a1338f8b463d54417548fcc524f11ce26373c0cffdde00838f7249712079ae6
MD5 496355ee5ccf984e79072ec4cdd31add
SHA1 8728361332ccaedb300e5ae52df88b1761bd0b50
SHA512 28cdb46985a68c29f8d4bff797d230539c4494ec3c697f494884a11243b23fdde9d4f8592f8b153efbb7c8159a5e1efce7189b59d05393c6e5289aeb94a73680
SSDEEP 384:FtNn/s3n9SL38NG7/+SyRuaefQCvBF69cP0RybqWUb69hVlLzm6ZFsqjRVsam+UP:Fj+9g3K9R2BFfPYyDPm6MGjzJULb9MtU
TLSH
T15CF2BF31AC90AE775CD2C689724B3B577FE4D26787841F84AADD6F0E02CBA6C5307816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 42KB
SHA256 df6685e3ec37341475911385992fcae28ac7485307616d9b86593334371150be
MD5 c90801b7fec6cca94ed608f9a1b14470
SHA1 8ebe3d25f252ec68a032f985026194b340bd2a62
SHA512 a96fac601a74bcfd9910a6c993cdd94d9e67048f58721295396c0e34d86d06a5a4c95749a14cf036f8544d3f1510a4650a23ec74ed42a152c47d01cb10df604b
SSDEEP 768:8F1j+9G3xwgM9R2BFgPYyDPm6MGjzJULb9MtU:x9G3koFgQyDnMiqb+tU
TLSH
T15F135AF24CC39976EC9D8B87637E2E06AEBCC163B5845A40B7C95A0DCE8757FC206851
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 34acf655bbd89345145407505ff935c755533721bb9cfb497804a2fdaae7e2e1
MD5 b5e0fd9fc02f1bb2e2b8d9b5eb878ef5
SHA1 93eac07c0722842c93f006ee2cd493ceede27b42
SHA512 08c6cd985cd2e6c6bff51296ae3c62889a4944a493ef1403dce5f971b14e7d0831f196e4e0bbffee05b4348e53b45dc5a3698fb7c1eff333f5c768d615a32bf1
SSDEEP 768:Vrv+4UNbdl3/TR2BoPYyDPm6MGjzJ8u+8rY0n:Vbsbn3tooQyDnMiPDrY6
TLSH
T1B203C0319C9469776CF2CA85364B7A077FF4919386C40B8499DE2F4D429FAAD130B8A3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4d96cfc1-e420-4768-b093-3ff44d1ae285.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\4d96cfc1-e420-4768-b093-3ff44d1ae285.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download