1dd503e93d14aed96ecc993aedd091d0cae241bc08570a0cea2412ec062cc0a7

Analysis

max time kernel
148s
max time network
152s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
05/09/2026, 15:55

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
mode-3d-main/docs/index.html
Size 77KB
Sample260905-tc11kavthy
SHA256 1dd503e93d14aed96ecc993aedd091d0cae241bc08570a0cea2412ec062cc0a7
MD5 79db065481ef2d084438c141545beabf
SHA1 11735eb2957f07b48f018a48d0070be42d7af08f
SHA512 202e27e6334cfb3ceb1b3d9fb988546e8903dd347a7cca7d1ce7483a73096b201be2ab4378485106132197a4ceaad0903e967c4d7e8f817384f5e1d3a4484f6b
SSDEEP 768:QS4XP2ppgJcaYzLoDT07khZFfl9UUulurWbd0uC4RM+4t8yWicH+hopAj/cX:9wcayyg+PfTWMWbd0sRM+4t8ylceMO6
TLSH
T1B573192622F1223E13938372F36B6766E7799147D50BD92C70AD81A42F86C64CABF344
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3104	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134330973473450051"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-189034102-168398478-1159367937-1000\{C38C966E-DBA0-4DC7-B554-163C8AC3A858}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5080	msedge.exe
5080	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe
1168	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 1168 wrote to memory of 4676	1168	msedge.exe	89
PID 1168 wrote to memory of 2660	1168	msedge.exe	90
PID 1168 wrote to memory of 3104	1168	msedge.exe	91
PID 1168 wrote to memory of 2660	1168	msedge.exe	90
PID 1168 wrote to memory of 2660	1168	msedge.exe	90
PID 1168 wrote to memory of 1852	1168	msedge.exe	92
PID 1168 wrote to memory of 1852	1168	msedge.exe	92
PID 1168 wrote to memory of 4288	1168	msedge.exe	94
PID 1168 wrote to memory of 4288	1168	msedge.exe	94
PID 1168 wrote to memory of 4288	1168	msedge.exe	94
PID 1168 wrote to memory of 5948	1168	msedge.exe	95
PID 1168 wrote to memory of 5948	1168	msedge.exe	95
PID 1168 wrote to memory of 5948	1168	msedge.exe	95
PID 1168 wrote to memory of 3388	1168	msedge.exe	96
PID 1168 wrote to memory of 3388	1168	msedge.exe	96
PID 1168 wrote to memory of 3388	1168	msedge.exe	96
PID 1168 wrote to memory of 6072	1168	msedge.exe	97
PID 1168 wrote to memory of 6072	1168	msedge.exe	97
PID 1168 wrote to memory of 6072	1168	msedge.exe	97
PID 1168 wrote to memory of 6080	1168	msedge.exe	99
PID 1168 wrote to memory of 6080	1168	msedge.exe	99
PID 1168 wrote to memory of 4544	1168	msedge.exe	100
PID 1168 wrote to memory of 4544	1168	msedge.exe	100
PID 1168 wrote to memory of 3348	1168	msedge.exe	102
PID 1168 wrote to memory of 5628	1168	msedge.exe	106
PID 1168 wrote to memory of 3236	1168	msedge.exe	107
PID 1168 wrote to memory of 4172	1168	msedge.exe	108
PID 1168 wrote to memory of 468	1168	msedge.exe	109
PID 1168 wrote to memory of 468	1168	msedge.exe	109
PID 1168 wrote to memory of 2932	1168	msedge.exe	111
PID 1168 wrote to memory of 2932	1168	msedge.exe	111
PID 1168 wrote to memory of 5080	1168	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\mode-3d-main\docs\index.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x264,0x268,0x234,0x2cc,0x7ffecacfc188,0x7ffecacfc194,0x7ffecacfc1a0
  2⤵
  PID:4676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1552,i,3005194133884273138,1455370963076571391,262144 --field-trial-handle=2192,i,18048285618533597421,6644508278162866716,262144 --variations-seed-version --mojo-platform-channel-handle=2188 /prefetch:2
  2⤵
  PID:2660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1920,i,12057800645983864469,13083810878251572358,524288 --field-trial-handle=2192,i,18048285618533597421,6644508278162866716,262144 --variations-seed-version --mojo-platform-channel-handle=2240 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2376,i,17547975922233973486,5916810466689249940,524288 --field-trial-handle=2192,i,18048285618533597421,6644508278162866716,262144 --variations-seed-version --mojo-platform-channel-handle=3164 /prefetch:13
  2⤵
  PID:1852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3640,i,12310166608730608817,15676989781518574324,2097152 --field-trial-handle=2192,i,18048285618533597421,6644508278162866716,262144 --variations-seed-version --mojo-platform-channel-handle=3716 /prefetch:1
  2⤵
  PID:4288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3644,i,14583750336691915054,16446661749792517639,2097152 --field-trial-handle=2192,i,18048285618533597421,6644508278162866716,262144 --variations-seed-version --mojo-platform-channel-handle=3720 /prefetch:1
  2⤵
  PID:5948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4324,i,8846337723886428176,3582922812272213073,2097152 --field-trial-handle=2192,i,18048285618533597421,6644508278162866716,262144 --variations-seed-version --mojo-platform-channel-handle=4356 /prefetch:1
  2⤵
  PID:3388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4332,i,10447409428341883742,11974529633207342300,2097152 --field-trial-handle=2192,i,18048285618533597421,6644508278162866716,262144 --variations-seed-version --mojo-platform-channel-handle=4828 /prefetch:9
  2⤵
  PID:6072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3828,i,946572446258267091,10970300421901902830,524288 --field-trial-handle=2192,i,18048285618533597421,6644508278162866716,262144 --variations-seed-version --mojo-platform-channel-handle=5456 /prefetch:14
  2⤵
  PID:6080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3816,i,4145786630358129785,6220641806974294493,524288 --field-trial-handle=2192,i,18048285618533597421,6644508278162866716,262144 --variations-seed-version --mojo-platform-channel-handle=3716 /prefetch:14
  2⤵
  PID:4544
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5972,i,4128292404490836095,2844397335081297468,524288 --field-trial-handle=2192,i,18048285618533597421,6644508278162866716,262144 --variations-seed-version --mojo-platform-channel-handle=5988 /prefetch:14
  2⤵
  PID:2136
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5972,i,4128292404490836095,2844397335081297468,524288 --field-trial-handle=2192,i,18048285618533597421,6644508278162866716,262144 --variations-seed-version --mojo-platform-channel-handle=5988 /prefetch:14
  2⤵
  PID:3348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4332,i,12077574495482561672,4203142390859071123,524288 --field-trial-handle=2192,i,18048285618533597421,6644508278162866716,262144 --variations-seed-version --mojo-platform-channel-handle=6500 /prefetch:14
  2⤵
  PID:5628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5988,i,13242152684831888701,8921238937480095156,524288 --field-trial-handle=2192,i,18048285618533597421,6644508278162866716,262144 --variations-seed-version --mojo-platform-channel-handle=6508 /prefetch:14
  2⤵
  PID:3236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5984,i,9660626595971492944,552129784673272455,524288 --field-trial-handle=2192,i,18048285618533597421,6644508278162866716,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:14
  2⤵
  PID:4172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6616,i,12682351710754809158,5072901261247252422,524288 --field-trial-handle=2192,i,18048285618533597421,6644508278162866716,262144 --variations-seed-version --mojo-platform-channel-handle=3192 /prefetch:14
  2⤵
  PID:468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5820,i,2766058526744692040,15311021622575806700,524288 --field-trial-handle=2192,i,18048285618533597421,6644508278162866716,262144 --variations-seed-version --mojo-platform-channel-handle=6200 /prefetch:14
  2⤵
  PID:2932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5576,i,16404258609171995729,5857176008500002630,262144 --field-trial-handle=2192,i,18048285618533597421,6644508278162866716,262144 --variations-seed-version --mojo-platform-channel-handle=3676 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5080

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3356

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3800

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 bd5dff6b6a2953b678276fe774acb1020dcf956eee918258c4fbcebd9799de50
MD5 ad9e9cc59d40b3c4a865c23e526c194b
SHA1 ec6e5c23153f46461256dc2ee3316df628e2eda9
SHA512 781d6d2d74c84caa1d22367f03cb2eef3a2125624c47277182248dc2b092992ad8756b1ea9759b2d56ee2b90c008cd691688382416e421209d33f546892f8550
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P74:fwUQC5VwBIiElEd2K57P74
TLSH
T14FB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7add6572365d752d8c3a090b9a256c43e3c5ff716f29ed7aa3c53dc57a08ba60
MD5 0da70f521ac5aee3489abf6e3eb4e375
SHA1 0f3cd9919820116ecc86bab93f4712c08485dc56
SHA512 a9cddd04863b2ac842fe4f91265c19a41d8b7442be8f07a91747705beca52c1e1d563e3c46cf68e1b73606695624f13ca69a8246653c2535d0684ced42c37d33
TLSH
T182D09BD479045D78C4C1353231A673155A616435DA5C46481051F3AACD65141667F5AD
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ffe13798c5910685872d371e84c30baa9eefaaa5db1419603eb30d473d7b2e37
MD5 03c111f9396889c77f6d9883c5df333f
SHA1 be65300843096dba92c5695fd35e2dffcbb7eb0a
SHA512 a77dfe3b48fcb72648f1adfafbf0d0fcd4d88690dcf41609a03e1d6b645d1336b6e322931b2205673283b920d20ed0225c6aa320a83a2d3a410771f18d120c19
TLSH
T1B1D09BD079145D78C4C1353231A773155A516435865C46481151F3BACD65141667E59D
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 c7b5a731d67302f9c8565b5b96f6965b3cb5418c43d462667163eee3fc886060
MD5 2ce1bd7518bc7f52fe181f53b6810bfd
SHA1 1ffaa47b0ef6b2ad07ace39dfc5e8da3ffbad5ce
SHA512 1fb53eba5d01d6163a9f7c7495f56c2b390a8e703ff2b9ffa0412471d4b721562b6b8b870936c14f7139cf63dea5cadc3f9932624e5070fa1110842cc108d5eb
TLSH
T1C8614C07A73939CEEB3485B128A1587F76F6C4670E076E125044EDBE5B46F14E7C8223
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe597f77.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe597f77.TMP
Size 3KB
SHA256 5a2d09ef9c79a7b9c810329eee3bd28478239c7b358d8b2fe943082cdbcf8fb7
MD5 81932fe8759c22fc64bb18461b0db110
SHA1 86682dc56a37b1d5b120b3acb1b60dbb428b8670
SHA512 a08b511d9a3d4644530e1ba342b1ec00b2537dc2cd1c4bdc3013900c9cb140835e3282949206d4a8f843d1b8661852f2e09585bfa300ec7554f07be855560df3
TLSH
T1F8613D07AB3839DEEB3485B168A1587F76F6C4670D076E125044EDBE9B46F14EBC8223
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 9d593c93cdf4643069a450ade7c93e7d1e45799eda5bb2a6cab525b4cfe9567d
MD5 d488daad0d416cf0f1baf597cc538011
SHA1 db9d869217f968802d9cf269d4bed9838b1f3dd5
SHA512 cf4a4d65129bafa2b1f33fad526181afd824ec7d69381702a4af0050f50839161bbd731587d4783219ee5754c3244a5c010b644b756a9f8422a7650a1d0c7df4
TLSH
T16061DFF7C7E4827E990142F0AB156E1BCE1D051A432C7C9688F4AE2BA3F34B1D10169F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 e9761f3ce26be58c8430fb061c67b107cde4ae680531ee9119fab6740b1e96a7
MD5 cf4b581236f037a17e0e69eca5c2c5f0
SHA1 b4e1d79733cc9bf9e7c015cb195b38194599d2a6
SHA512 7b9ffc7e0f55d01395275c9df6e4cd28d99ea35d6daaa5da08c8d92aded801c3d3e49b1dac6c306b194cae6690d0133aa8a574ebb6efdb09a5f4d2775440e553
SSDEEP 192:sxRWCMRB7bRW/fgrsR+zon8bN2G0RzoA8p4W1/g6+WNIYlmZW7i+rG/KdIgDcdJ:sxRWCMffRW/fgrsR+zon82G0Mh1/5IGs
TLSH
T14242C8166928A93B8CCBE20DBB557F53E7F95032A0D41E08A7FC861C14E7ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 b2ac2adbe9362164b6fdc83661a80b8f25ba00d08a97eb45307f24610559afa8
MD5 25fbb88b847f133fc1c77cb5ddb81ab4
SHA1 23bf8bb24367a60ebf793ae95c2f69b1a61e184d
SHA512 346a4d9e58e8f5942f6f323c63619494ad6b2592bafe3f9aab312c37e828156c4b471876853916789f4ea55ac0c077bfd0a452e69f6544ba34325110661ad798
SSDEEP 192:sxRWJMRB7bRW/fgrsYin8bN2G0RzoA8p4W1/g6+WNIYlzZWFi+rG/KdIgIJ:sxRWJMffRW/fgrsYin82G0Mh1/5IRU+i
TLSH
T1F932C6166968A93B8CCBD21DFA55BF53D6F91032A1D42E08E7FC861C14E7ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 efd3050209252ed1f9b0ee0fc37b1f35477d3bca63021ee79ba30a3c8adc2218
MD5 070350aa3059a268154fdb0a3e9a6fb2
SHA1 a5782c5872c99afaba4772cc350b2fc218c8e1a1
SHA512 d859443fd504e2427be672db750215f68ee8681bd28dcb09987187e7770d6df852472cb99e083da9dce8584fddebf629599b13bb42ae29c6dd829782794cf467
SSDEEP 192:sxRWCMRB7bRW/fgrsR+in8bN2G0RzoA8p4W1/g6+WNIYlzZWFi+rG/KdIgDcLJ:sxRWCMffRW/fgrsR+in82G0Mh1/5IRUB
TLSH
T1B132C6166968A93B8CCBD21DFA55BF53D6F81032A1D42E48A7FC861C14E7ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 cab48ec7677d73cec3e26e2ce4dd19c6e7d9eff28b242d679169ad07d52e1ce4
MD5 8e395666cc1c252731be63195a2edc2d
SHA1 4bae44ea79d78e946121d79bdcb7c0a7a02b3df6
SHA512 43756839d536d9de283421f3871762cbe7df75ec009e4d87ab219eabdcbb411843b3f1b3e20fa12385bf4a15ab206714702209e09515df28629a4e77715e4490
SSDEEP 384:dpCfAo9fCtggCFfJJKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OV//93VRRRMroKv:dofAoxWgg+fJJ8F1+UoAYDCx9Tuqh0VL
TLSH
T194B2D93B600DCB7E8FC04A9DEC19AF977D9802C796549D4047FE994C02C77EA911A4CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 1c4f7e01e1597f463b482d99e4e270041ea1c170ad282a08a839e25c87b5fd45
MD5 2a417ac22408385dcbf90d36da704f80
SHA1 0586298e8aac8ea0be25edd27ca6ba23707dfdbf
SHA512 15c65ce6830a790661139479bdb42e62c722fc88d81d0d140a84c409a9cd5ece9f28c1459545c0204275a65450a052e8345d4c2c10a3961898d6cef57ac1202e
SSDEEP 96:KRPY95PNtBWZWcghBK4ogPBcX/ehNCHVCbvlfjHWLQeg3HK4GgJHcNVIbKXuKAY8:CPY95PNtMZWdhrogPuX/ehNCHVCbvlfP
TLSH
T18F913911333A46D0393E6A0991B8DD1F8782B9E23054E52F37E909624F66E1A5EFCCDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

08dfcfa2-ed3c-4ef4-9640-f0274c0bfc7c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\08dfcfa2-ed3c-4ef4-9640-f0274c0bfc7c.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 65444b83f6f3b4bc6632fa42bce06d124e8b9f69c43c303b59b2ad02c320f538
MD5 3680a899e9cd35c841ffc71a547e71dd
SHA1 b6c949e81e269da2c86ccb3d68f63cc3413f6c59
SHA512 bc0b04f5d33d1e11d4948055108fc2bde42c2c0a1c48ef81e74c0955bd3d305d85dd7494f1b49a6137e8c472678c8a566a7bb71e2d2aaa69ee45c27b951c170c
SSDEEP 768:aYrv+4UNbdbj3iNTN5G/R3whiJvfNPgNHXmTWTbc+H7oqoB2sa:aYbsbdj3iNJ5G/RAhQNIeWn1boqoB2sa
TLSH
T16403C071ACA99F339DEA8688B50B7B477FF811A388C41A98CDDD6B4D118705E170BC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 d7da23ef8095727701e37c667f12bafd05a6a3fb412c8fb4fa8aa374660577f2
MD5 8bb74abfd482059eac5c7da294a53395
SHA1 e31ce0abf176c53e5f91a3a24598eeccb13e506d
SHA512 37a7287a8019fa395ef703dbb7b56b1c1cb1443b10467ac21cde904ab0feaf502b6de8017c1adf534faf7a5a75a6ec5f7b4cededb3742c0a805fe614bb1d82cb
SSDEEP 768:cF08j3i0TTN5x/v3whiJvfNPUpNHXmTWTbc+H7oqcTRnQDP/P:cF08j3i0TJ5x/vAhQNM/eWn1boqcTRnm
TLSH
T12DF2BFB16CF59E335DEAD288750B7B46AEF900B398C81D44D9EDAB0E158754D031B82B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 f9e1c691db5f482b4d428c190830b88d84b90c1ce7a344507849acccce89d548
MD5 d12072980f473b852ee4d9c7e86c2e84
SHA1 51da7ddc814f43ae90f2e41be9d750360e35b80b
SHA512 a84772be0b2a13c314a9f08476e5fb190c6a7b2c4cd64743932850dd6146572b412f17637089d085976c671672ddaa93368e402ef720bd1bd3e7adec5a5571f1
SSDEEP 768:a08j3i3TTN5x/v3whiJvfNPUpNHXmTWTbc+H7oqcTRnQDP/P:a08j3i3TJ5x/vAhQNM/eWn1boqcTRnQL
TLSH
T1CEF2CFB1ACF59E335DEAD288650B7B46AEF900B398C81D44DDEDAB0E158354D071BC2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 e5d8c51d8b5555775de62f807426c1844214e0d307214ea70ae863b2751668bb
MD5 011bc190b3e2d033746e945af4667d1f
SHA1 bc78ae143b1bc408a8af957f1979c22523b3e9dd
SHA512 de19c0c1c6bd532fd58d88a620087f1c3728deb5020fa3dacd36c5129419db1152a2ece47b71af42f8b24b027ea3803bbd49b663b4ac648def7a1d963e50e2dd
SSDEEP 768:EFEFQaj3itwguTTN5x/v3whiJvfNP8FNHXmTWTbc+H7oqcTRnQDP/P:EFnaj3iSTJ5x/vAhQNkTeWn1boqcTRnm
TLSH
T101F2AFB25CE5CA37ADFA8B84A60B7745AEF501B3C8C46954DADDAB0D118719D030BC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 ac2dd9754b7a139dd5cf488abe4ebbcf5b931f8218b08b91d86471211deb3123
MD5 63c61feabf7150eecc203822dacce193
SHA1 c9356255b7727002a96b131ad8ab5800bfdd3bd2
SHA512 9f875d5b6654ea6d7dc59c3c783b1d25460efa3b344f0227befc47c54067079790528120afaa75cf4b39b4038cec965576e4a122ce3943d86a8b4647b9626edf
SSDEEP 768:arv+4UNbdM38HUhPiJvVNHXmTWTbc+/7IeVH1SvyZ:absb+3SUVkeWn1TIEH1dZ
TLSH
T1E903CF329CB98B37ADF68788748BB6573EF8116389C40A84C9D96B4D428744D130BD3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 04b69c2151d1b6069cc590af52afb3ef79e71f6518809d8eef99b527d906d863
MD5 16d1b5ea0c0603e909444caa4471859a
SHA1 5590438320b8e5e678f788fb7fe5bed13993e000
SHA512 59e47b8e7d7edc6b17e1b956ebe1207b0c67f9d6d287e30d5e0cda878b3f949368ed14a93de7238c6ace8e31479e45b2d7ad80ccf51f766db137b7448dc9d488
SSDEEP 768:Hirv+4UNbdM3lye+phwziJvfNPTNHXmTWTbc+e7oqeVH1SvyZ:Hibsb+3l7+pazQN9eWn1GoqEH1dZ
TLSH
T11603CF729CB99B37AEE796C8B44B76577FF811A389C40A84C9DD6B4D068704D030BD2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4446d823-bdcc-4b25-b03f-b71a54caa787.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\4446d823-bdcc-4b25-b03f-b71a54caa787.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download