ae83c04335206fd3226e24d248bbf4dafedb8e39d8de8a9cada98c0c49844987

Analysis

max time kernel
148s
max time network
142s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
01/10/2026, 18:31

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 12KB
Sample261001-w54chavcmd
SHA256 ae83c04335206fd3226e24d248bbf4dafedb8e39d8de8a9cada98c0c49844987
MD5 64451a14330f73cc6a2573216682dea0
SHA1 c84f61dc6c7bc04bc26c97124753bac15cf9b089
SHA512 47051285969f7ffc2fac4d527ea55369e8071fd25009becbcfd73bdf05f5eb5c679df966c7eb92ff8beddfbf737bf4d9f1b1655ec2b27e3e9580cfef418aa651
SSDEEP 192:PM3b6BV6U3i6qv0zvCyaDXJsuzDo93yyoF:PMr6BVuhqRuznF
TLSH
T1A942006072A53A0F9901E63FEF456EF61A91002713128724F55C62BF5FC89A7E4736BC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1092	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-895009113-1202185046-1686627690-1000\{7EAC3258-FEF0-43F1-8AA5-AA189D11A165}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2824	msedge.exe
2824	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2812 wrote to memory of 2792	2812	msedge.exe	87
PID 2812 wrote to memory of 1092	2812	msedge.exe	88
PID 2812 wrote to memory of 4680	2812	msedge.exe	89
PID 2812 wrote to memory of 4680	2812	msedge.exe	89
PID 2812 wrote to memory of 4680	2812	msedge.exe	89
PID 2812 wrote to memory of 4660	2812	msedge.exe	90
PID 2812 wrote to memory of 4660	2812	msedge.exe	90
PID 2812 wrote to memory of 2932	2812	msedge.exe	93
PID 2812 wrote to memory of 2196	2812	msedge.exe	92
PID 2812 wrote to memory of 2932	2812	msedge.exe	93
PID 2812 wrote to memory of 2932	2812	msedge.exe	93
PID 2812 wrote to memory of 2196	2812	msedge.exe	92
PID 2812 wrote to memory of 2196	2812	msedge.exe	92
PID 2812 wrote to memory of 2460	2812	msedge.exe	94
PID 2812 wrote to memory of 2460	2812	msedge.exe	94
PID 2812 wrote to memory of 2460	2812	msedge.exe	94
PID 2812 wrote to memory of 2328	2812	msedge.exe	95
PID 2812 wrote to memory of 2328	2812	msedge.exe	95
PID 2812 wrote to memory of 2328	2812	msedge.exe	95
PID 2812 wrote to memory of 4456	2812	msedge.exe	101
PID 2812 wrote to memory of 2752	2812	msedge.exe	102
PID 2812 wrote to memory of 4456	2812	msedge.exe	101
PID 2812 wrote to memory of 2752	2812	msedge.exe	102
PID 2812 wrote to memory of 4412	2812	msedge.exe	104
PID 2812 wrote to memory of 2968	2812	msedge.exe	116
PID 2812 wrote to memory of 3928	2812	msedge.exe	117
PID 2812 wrote to memory of 1808	2812	msedge.exe	118
PID 2812 wrote to memory of 1700	2812	msedge.exe	121
PID 2812 wrote to memory of 1700	2812	msedge.exe	121
PID 2812 wrote to memory of 2824	2812	msedge.exe	123

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x214,0x23c,0x240,0x20c,0x254,0x7ffb8753c188,0x7ffb8753c194,0x7ffb8753c1a0
  2⤵
  PID:2792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1840,i,13038058303503577602,14997337691943195210,524288 --field-trial-handle=2328,i,3895986307060721832,15864691989344862439,262144 --variations-seed-version --mojo-platform-channel-handle=2376 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1704,i,8540529012841849115,12380411494773091326,262144 --field-trial-handle=2328,i,3895986307060721832,15864691989344862439,262144 --variations-seed-version --mojo-platform-channel-handle=2324 /prefetch:2
  2⤵
  PID:4680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2056,i,3556998278046364607,6925588754110601823,524288 --field-trial-handle=2328,i,3895986307060721832,15864691989344862439,262144 --variations-seed-version --mojo-platform-channel-handle=1268 /prefetch:8
  2⤵
  PID:4660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3448,i,17085595680493150633,4589524779361048180,2097152 --field-trial-handle=2328,i,3895986307060721832,15864691989344862439,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  PID:2196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3452,i,810445921236383724,1149892934671186180,2097152 --field-trial-handle=2328,i,3895986307060721832,15864691989344862439,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
  2⤵
  PID:2932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4216,i,13067787131039063934,8104554828450519733,2097152 --field-trial-handle=2328,i,3895986307060721832,15864691989344862439,262144 --variations-seed-version --mojo-platform-channel-handle=4224 /prefetch:1
  2⤵
  PID:2460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4232,i,15630988077093008030,15869589435490965036,2097152 --field-trial-handle=2328,i,3895986307060721832,15864691989344862439,262144 --variations-seed-version --mojo-platform-channel-handle=4280 /prefetch:2
  2⤵
  PID:2328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4200,i,14300233578902456883,5112891334498749948,524288 --field-trial-handle=2328,i,3895986307060721832,15864691989344862439,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:8
  2⤵
  PID:4456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5144,i,8391252461253039369,9211607339591605186,524288 --field-trial-handle=2328,i,3895986307060721832,15864691989344862439,262144 --variations-seed-version --mojo-platform-channel-handle=5192 /prefetch:8
  2⤵
  PID:2752
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5680,i,12000055345893731841,5254368094583868929,524288 --field-trial-handle=2328,i,3895986307060721832,15864691989344862439,262144 --variations-seed-version --mojo-platform-channel-handle=5692 /prefetch:8
  2⤵
  PID:1096
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5680,i,12000055345893731841,5254368094583868929,524288 --field-trial-handle=2328,i,3895986307060721832,15864691989344862439,262144 --variations-seed-version --mojo-platform-channel-handle=5692 /prefetch:8
  2⤵
  PID:4412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4280,i,7761819513862577534,10025534893023333398,524288 --field-trial-handle=2328,i,3895986307060721832,15864691989344862439,262144 --variations-seed-version --mojo-platform-channel-handle=4392 /prefetch:8
  2⤵
  PID:2968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4276,i,17469294850978982172,14152782192525281843,524288 --field-trial-handle=2328,i,3895986307060721832,15864691989344862439,262144 --variations-seed-version --mojo-platform-channel-handle=6188 /prefetch:8
  2⤵
  PID:3928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5816,i,14858015048575097893,14980034382249417851,524288 --field-trial-handle=2328,i,3895986307060721832,15864691989344862439,262144 --variations-seed-version --mojo-platform-channel-handle=4424 /prefetch:8
  2⤵
  PID:1808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5540,i,18113256160721947708,15312496735834441915,524288 --field-trial-handle=2328,i,3895986307060721832,15864691989344862439,262144 --variations-seed-version --mojo-platform-channel-handle=5708 /prefetch:8
  2⤵
  PID:1700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6176,i,10432961625857722776,1601647523662755565,262144 --field-trial-handle=2328,i,3895986307060721832,15864691989344862439,262144 --variations-seed-version --mojo-platform-channel-handle=6180 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2824

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1424

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

1c6d07cc-e8c7-4de9-baee-21f209bea456.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\1c6d07cc-e8c7-4de9-baee-21f209bea456.tmp
Size 18KB
SHA256 f5b8f57ff7bd3d9e327d119026c7abe91ea3df154d480cfced969a4565cc4944
MD5 1c2df10b874e7e149bc711c1b1d757ad
SHA1 06d47de8e5ff40e80134e5674af0f6726e1fff6b
SHA512 d5648903298dfab997c4cb67f22859679776ed746c2a35a082f3fa137462ae2854d35e88ad92baf6178f22345fcbbb40a3d31dde027013e1b265242939db3598
SSDEEP 384:SZcIhsNnURVbmArh//2wJCtgOIwZOyqovoo:ghRd/PCXsuvr
TLSH
T17D828D32AC78AC7B6CF79444F18776034FB48427EBD8AB8495ED6B2D01DA1A80307D17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

20ae8579-0686-4e78-96a9-05f17d343e27.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\20ae8579-0686-4e78-96a9-05f17d343e27.tmp
Size 21KB
SHA256 749b0adcd7e18bddc605d931344b943d6ecfb463d670551ed8365ce781f90147
MD5 e41f6d7ba914e4ab0ab50f519dd3943a
SHA1 bc0b78bad598ce8e302c7063ec5c07a2ddd49049
SHA512 50a118fdb75eb1a254ca60d4cdf4ac98b9a9e0fb61d6df06547c3d256f083972952949183f0c626dea7e4ca72fa61bdb477243f483ba4e11fc0728644b50f72f
SSDEEP 384:iiFiZcIOzsNc8TUNTUlIl8VbmArh//2wlCtgOIwZOyqovoo:pFQO9wg4d/3CXsuvr
TLSH
T1A7A26C339CA89C7BADFB9A44F54B32038EB44067DAD5EB94E6DD9A1D01D719C0307D12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5fa7cdfa-55e6-4f11-8d73-da677b73cfd4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\5fa7cdfa-55e6-4f11-8d73-da677b73cfd4.tmp
Size 8KB
SHA256 20398ec366805527d9ccfeddfa8458e9c3a6a38e8d127c9f16af7a7ecb832cd1
MD5 7e8759b53692cd18fbe1df4df15c39d7
SHA1 fe6d1b1b53e71fdecea558a6734a5740bc293d51
SHA512 bad061c8533075f6b23f818040a2186a3a770b2361b90cb16ca8010ef91fb4dc885eb61b99d361fafef512db16f33ee5288d13e6c90b85bbf20584ab8e3454f2
SSDEEP 96:KqONklQsjpfbUkH5ih/cIPURHl8h4otop5QbDpNBRP4v+Y1xf//ojdnx/yw8Oxw5:BONN6JU7QmiUyGxpo//aywwQNxaqUlU6
TLSH
T10012F835B868BC7B5EE3A984B08736139EA44127EBC96F94D6DC2E2C01DB26C5307D17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

872ba36a-c8d3-46a6-8a8b-db1bd514ab06.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\872ba36a-c8d3-46a6-8a8b-db1bd514ab06.tmp
Size 18KB
SHA256 522b39972822a8346b327c57accad6a7621e7480c5ee94606d39d2598e6098d4
MD5 f52320b6224dade12d36f8f33091afbe
SHA1 7cab5ca2eacaef2f2453c7011d0f618177a59234
SHA512 5b8cc51f192872cf3484c19574b2a2c7ed29ef8f9c80a434fe78d3e69aef73dc0b480442900bbae604a3ba2d4783a4afe2a71a4cc003a15e1375ad55149b21ac
SSDEEP 384:ZZcIhsNnU8VbmArh//2wJCtgOIwZOyqovoo:xhmd/PCXsuvr
TLSH
T174828D32AC78AC7B6CF79444F18776034FB48427EBD8AB9495ED5B2D01DA1A80307D17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 928eda824fe964cd23927cf06086d7d24e20a3a5092daf1acee5b632c76c962a
MD5 4ac43ee6512ba8635b7ba6bd015c291b
SHA1 5f9e2474b00ec0e2a9472c049fbea550e26309aa
SHA512 e5ebf9e92458f66e31e080121135313e828b8ebade0bc0e085221ae0d4f5afe0d2035c566590cbfb5902d96f17befe7b24310b4fb9e647b999113175af800ebc
TLSH
T17BD022B2B3A038CFE300083302A083BA2C0A80F300FAE2208C30E08C0BCC02AC283880
MD5 SHA1 SHA512 TLSH

Submit Download

02148b57-3cfe-4e46-9679-7be91cd5efa3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\02148b57-3cfe-4e46-9679-7be91cd5efa3.tmp
Size 10KB
SHA256 8ed6587d21a2bac8e61469bbef3d34cfd2633106bd9897300f7a450a6521b81e
MD5 5c8711cefb4b984dedc5ce7011a798be
SHA1 3fcf3eec1f40af33f775e9b77edf6f7a6cc7aef1
SHA512 3dd70b798a8afa7a8fb6fab44586e802d15191d33a14c4509276ff17227db4deeef2c566ae8e807d248b129aca5a21f1e5d4373a8ba6896c5dd2fa84864e2d07
SSDEEP 192:sxZ+RTWpa/fQsVNZIdpHrHW6+WNGY366C+VzIg5ZJ:sxZ+YQ/fQsV8LHbGXRaL9
TLSH
T15622C9526E38697B8CCBE60DBA25BF53E6F9503261901E88A6FCD61C05E77DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

295bd4fc-b7b7-4056-b3ee-5c74829fbba1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\295bd4fc-b7b7-4056-b3ee-5c74829fbba1.tmp
Size 27KB
SHA256 3b37f16fe2d04e9570270dddf338bf7fc61ce2a8d5091a18638a8ef0d8fff8d6
MD5 b9f413cf255c4287b1a1280cc398b062
SHA1 cef5e9f055d1750e2efcd4434942549305bf9866
SHA512 cb846d19436b902a1648e5620f401d85f65172824875b23c766e37145410c214f069b6cdbac68cd4b5cb4b7edc3c70b7eb3d9ee867707b9629967ae98677b520
SSDEEP 768:JZKlm7QWvUYe08F1+UoAYDCx9Tuqh0VfUC9xbog/OVh/LlpPs/+ro8g:JZKlm7QWvUYe0u1ja8/L/E/V8g
TLSH
T1B7C2FA3B640CCB7E4FC05A9DDC5A6F9B6EA802C7A6588D4047FA984C02C77EE51264DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

54b4043c-aec3-48b5-a680-0b32c34f921c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\54b4043c-aec3-48b5-a680-0b32c34f921c.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6f44177e-35f7-4bd4-b4f9-59e5f22ce2f2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\6f44177e-35f7-4bd4-b4f9-59e5f22ce2f2.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 fd7f14505aac2399e09a4c4a64b70b5bb6a65abd816549a4028444eee2a62517
MD5 9175ff9ad31da5e944902650b143f35d
SHA1 d812eb2ea054c6c7a23514455fe509b8d6e3b6d4
SHA512 72bc05b2c7437c7e6483f0d78a65fc1f91d11047aaeff24229040324496a76abc224ab2b86768168cfdcdd34c566798c7b3d2312b3c6f0681300755f5cf8c205
TLSH
T1B8514CB1F6ED74C0F75C903997E001973F34B6C1A6B32E4A1EE4DBB408CA70D800028A
MD5 SHA1 SHA512 TLSH

Submit Download

a52ca1e4-f591-43d3-bc23-e9ba201cbdbc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\a52ca1e4-f591-43d3-bc23-e9ba201cbdbc.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

2af232af-3e5f-4fb8-b0ca-71236aee15f8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\2af232af-3e5f-4fb8-b0ca-71236aee15f8.tmp
Size 949B
SHA256 35d91447e9aa283b308c43ef486cafa54ef53ba97e3f6b837c7e9e3f580f8ef7
MD5 e16224ab1096da2ea5482f7f4b655c99
SHA1 f30ae1c863203b66165169c4e1ee05de46f2d92d
SHA512 86ea9b13ef90d4fdd2af7159037e1de5d0873da7c191dfd0a64f71a97ea419ca66712ba032b3773ec689e0651d7141ec8a8c88f2fa116ce186127dc9be0fa119
TLSH
T11811BDF3C3D585AE8A055AF05A28EE1BCE1C0606421C3C1989D4EF2793E3475D00259F
MD5 SHA1 SHA512 TLSH

Submit Download

afa81a15-019a-401e-a4ad-6580308013aa.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\afa81a15-019a-401e-a4ad-6580308013aa.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

f2ecc21d-2652-4880-bd90-e811c9d52446.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\f2ecc21d-2652-4880-bd90-e811c9d52446.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 36a7ebf8cc642918335c084a02f3aecc70ac059bf01412314dc4a0d0c2ebe2f8
MD5 7a581adc669344e42c8b8ca31adae841
SHA1 4d417f7e6392543512be46305672c0e343458ca3
SHA512 afc570e3e5fb047cfe9a605242e65f04d9dfca2eaa2ba9154a6f3278881422982cc8c07808348bc7713cdb5a18203c125c5293b4582d598a756a00a05477aad2
SSDEEP 48:K0wfWaAqefbWt2ISyfK9O1UfxoPYVGuuyLb5bIbVbpbzb3bLbkbb3bSbPISbBbkU:K4fSKcYwKOoKXqsm4Kra+uz
TLSH
T1D491500032BF1611387D694941B5DA6B468231F33128E92F7BFCA4E24EAEE145DFD6C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a1a19f96-a557-46e6-8c3d-f9383e4cb0c8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a1a19f96-a557-46e6-8c3d-f9383e4cb0c8.tmp
Size 10KB
SHA256 064ec02f360d73e633a95f3c56da5834d6bea61e4cde47fc2ddbf320e93444b9
MD5 be3d00f31dadc1f7667bdcedaf26ddb6
SHA1 7efd4694c72745451d3b02adc373e2515982b31f
SHA512 e79599cb4ea6717403139418045998e8a172bdcabdcf0015b871c174799ee10500fdf124e6bc2efc69b00239f568e0e69177d25e2d9dc80a95068469019fb785
SSDEEP 192:sxZ+RTWpa/fQsqNZIdpdrHW6+WNGY36aC+VzIg57J:sxZ+YQ/fQsq8lHbGXxaL7
TLSH
T12B22C8126E38A97B8CCBD60DBB25BF53E6F9503261D01E88AAFC951C05E67DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cc8ed125-d709-46c2-8d29-811e7d670e0f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\cc8ed125-d709-46c2-8d29-811e7d670e0f.tmp
Size 9KB
SHA256 3e3471dab6ed812968639dca4e7da438818ee69f2591c5bebdc8d1413636ae28
MD5 c631d3e61d3844686ed0bd5256277888
SHA1 338d61966a45e7d0c0cba42719eef6249d49a9ee
SHA512 a64af976bb7e788dd6cd9169548edd1a06ed0bae41ede285b62db44b44885f17eff501b1b7d9e36a41f29f0037ff6e87b2d0daf6a61ae8057adfaee5d5b96b4e
SSDEEP 192:sxZ+RTWpa/fQsfNZIdpdrHW6+WNGY36aC+VzIgrJ:sxZ+YQ/fQsf8lHbGXxaL9
TLSH
T1DE22C9126E38A97B8CCBD20DBA25BF53E6F9503261D41E98EAFC951C05E66DD130780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d6ce790a-4536-41e4-8fcd-2c8d687330fc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d6ce790a-4536-41e4-8fcd-2c8d687330fc.tmp
Size 10KB
SHA256 03bd67d3a2706d02260e1c441e765b2be663d53d21def96f91ab54466023cd5f
MD5 98be9c8b7fec7b1f4b3fd7f509ad43b1
SHA1 5c71d6eb02ac34a949b2a04e1b7f7809a7053752
SHA512 17e1dadcc041047aa5015830db6dcd30614194907663b1d44578df616de96e271f4e050008d1b18c413489638d9c8e4dea0b184b33394d250871ca57400d0f18
SSDEEP 192:sxZ+RTWpa/fQsVNZIdpdrHW6+WNGY36XC+VzIg5ZJ:sxZ+YQ/fQsV8lHbGXSaL9
TLSH
T12022B8526E38697B8CCBE60DBA25BF53E6F9503261901E88A6FC961C05E77DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ba67c869-05c4-4ae7-9d85-b84517cbbfd0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\ba67c869-05c4-4ae7-9d85-b84517cbbfd0.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b1e78867-bce0-49c8-961b-d0bbfd689dff.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b1e78867-bce0-49c8-961b-d0bbfd689dff.tmp
Size 8KB
SHA256 b4893a4494e7218cd3a05241f7df470904845c09b9845a76ce32c50c0edd9dd2
MD5 fb48b1503c2e2fd897018e44c5761569
SHA1 51f9be50c4e3abcd11ff77579a68c7f89093bc19
SHA512 424e93000dd69f22fccd133e7129f5ab84d2bf3334965576c4c1e5af9045e2e90dfe6391568c5a7e518a79361778d6d5081dd7a3b8ef9f2d2e8e75370aa63b03
SSDEEP 96:KqONkGQsjpfbUmjH5ih/cIPURHl8h4otop5QaDpNBKP4v+Y1xf//ojdnx/yw8eBj:BON+6JUm0QmiUyJxso//aywNBC96U6
TLSH
T1CA02C838BC697CBB9EF3AD45B44777139FA4106BAA915F84DAD81E1D01D715C1303C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6d17aa49-fd22-4f3e-bc1e-1534af40e291.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\6d17aa49-fd22-4f3e-bc1e-1534af40e291.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 7f86da33f2a77ea9ae48c4c804ad439c4458179598e9f8212442828c4ff82809
MD5 4129539e19089cb646415076ed368366
SHA1 313e7466221c2a1b5bacd5e8dc859efa314f267c
SHA512 58e1a8908a9a101d8e41df4fc03f504c2082efa9ae44a0322b65dc0e3d415b77b717f5d0a00b50d5a4f30efa77501b05d15d436074c2d7e5653c5903a7abe3ad
TLSH
T192411D58B6E90158B3B77E1A5BF6A86D447FB9371E0BD45E00110D4F0662A40CD61777
MD5 SHA1 SHA512 TLSH

Submit Download