5e0f9b946a7023ecaa897691078ad5692eb3b7be05723b4b7ea1dbda05422006

Analysis

max time kernel
148s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/10/2026, 12:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 119KB
Sample261002-pgd95s1crd
SHA256 5e0f9b946a7023ecaa897691078ad5692eb3b7be05723b4b7ea1dbda05422006
MD5 a9158f7daadd2ae3518cd44270c91f22
SHA1 64983ae7b1ab1ac71d703d8b531575b0375d66e0
SHA512 31b9d2863ebce4a2f46ee205cdb4d025a1313726e8a11af6eef953b90c3842ec3dee801dc80eecf62208b07f9fd8ae05a65f5f3b3386ce248b6fe41a89d8ccb9
SSDEEP 3072:Uu/4U3e2Awy7lTX5auquUM/Iy5sSEBHa0eUbk7msxKpuZyufK4iDKwZJW4/yZMtd:6wy7lTX5auquT0eULufK0LO
TLSH
T1FDC3FB22A06654AB4117B0DDFA21DB75B4E2541DCB431A93B2FEBD9BD7CAC14CE2600F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3692	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2091445952-3649787497-104050984-1000\{3B8E30D4-77B3-4A2B-B29B-33C902F81074}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1616	msedge.exe
1616	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe
4824	msedge.exe

Suspicious use of WriteProcessMemory 24 IoCs

description	pid	Process	procid_target
PID 4824 wrote to memory of 4100	4824	msedge.exe	86
PID 4824 wrote to memory of 3692	4824	msedge.exe	87
PID 4824 wrote to memory of 5916	4824	msedge.exe	88
PID 4824 wrote to memory of 5916	4824	msedge.exe	88
PID 4824 wrote to memory of 5916	4824	msedge.exe	88
PID 4824 wrote to memory of 4068	4824	msedge.exe	89
PID 4824 wrote to memory of 4068	4824	msedge.exe	89
PID 4824 wrote to memory of 5912	4824	msedge.exe	90
PID 4824 wrote to memory of 5912	4824	msedge.exe	90
PID 4824 wrote to memory of 5912	4824	msedge.exe	90
PID 4824 wrote to memory of 2320	4824	msedge.exe	91
PID 4824 wrote to memory of 2320	4824	msedge.exe	91
PID 4824 wrote to memory of 2320	4824	msedge.exe	91
PID 4824 wrote to memory of 2940	4824	msedge.exe	97
PID 4824 wrote to memory of 2940	4824	msedge.exe	97
PID 4824 wrote to memory of 5312	4824	msedge.exe	98
PID 4824 wrote to memory of 5312	4824	msedge.exe	98
PID 4824 wrote to memory of 652	4824	msedge.exe	100
PID 4824 wrote to memory of 2300	4824	msedge.exe	118
PID 4824 wrote to memory of 4412	4824	msedge.exe	119
PID 4824 wrote to memory of 4200	4824	msedge.exe	120
PID 4824 wrote to memory of 2312	4824	msedge.exe	123
PID 4824 wrote to memory of 2312	4824	msedge.exe	123
PID 4824 wrote to memory of 1616	4824	msedge.exe	125

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x25c,0x7ffee708c188,0x7ffee708c194,0x7ffee708c1a0
  2⤵
  PID:4100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1804,i,3165740380209248211,12474684928099894664,524288 --field-trial-handle=2304,i,10351782667544761099,9883656177472276541,262144 --variations-seed-version --mojo-platform-channel-handle=2340 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1696,i,2560095847489518793,4053006146350299834,262144 --field-trial-handle=2304,i,10351782667544761099,9883656177472276541,262144 --variations-seed-version --mojo-platform-channel-handle=2300 /prefetch:2
  2⤵
  PID:5916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2616,i,3521362761685073344,2305173729895203992,524288 --field-trial-handle=2304,i,10351782667544761099,9883656177472276541,262144 --variations-seed-version --mojo-platform-channel-handle=2636 /prefetch:8
  2⤵
  PID:4068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3476,i,8960777104545044551,16087435924744882209,2097152 --field-trial-handle=2304,i,10351782667544761099,9883656177472276541,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:5912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3252,i,1680239328815287163,16617540653236758627,2097152 --field-trial-handle=2304,i,10351782667544761099,9883656177472276541,262144 --variations-seed-version --mojo-platform-channel-handle=3556 /prefetch:1
  2⤵
  PID:2320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3460,i,3610311691076410348,10802383419578414396,524288 --field-trial-handle=2304,i,10351782667544761099,9883656177472276541,262144 --variations-seed-version --mojo-platform-channel-handle=5048 /prefetch:8
  2⤵
  PID:2940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4920,i,15899087185377510360,1682372124014882726,524288 --field-trial-handle=2304,i,10351782667544761099,9883656177472276541,262144 --variations-seed-version --mojo-platform-channel-handle=5072 /prefetch:8
  2⤵
  PID:5312
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5692,i,17847707400676650640,15542269892882734552,524288 --field-trial-handle=2304,i,10351782667544761099,9883656177472276541,262144 --variations-seed-version --mojo-platform-channel-handle=5716 /prefetch:8
  2⤵
  PID:1504
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5692,i,17847707400676650640,15542269892882734552,524288 --field-trial-handle=2304,i,10351782667544761099,9883656177472276541,262144 --variations-seed-version --mojo-platform-channel-handle=5716 /prefetch:8
  2⤵
  PID:652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6084,i,13274945596125426508,5912880879648776934,524288 --field-trial-handle=2304,i,10351782667544761099,9883656177472276541,262144 --variations-seed-version --mojo-platform-channel-handle=5712 /prefetch:8
  2⤵
  PID:2300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5784,i,11629698465384856331,3230112186744648741,524288 --field-trial-handle=2304,i,10351782667544761099,9883656177472276541,262144 --variations-seed-version --mojo-platform-channel-handle=2760 /prefetch:8
  2⤵
  PID:4412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6080,i,15969331670319020459,6983603390252626994,524288 --field-trial-handle=2304,i,10351782667544761099,9883656177472276541,262144 --variations-seed-version --mojo-platform-channel-handle=6188 /prefetch:8
  2⤵
  PID:4200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5092,i,747926648675015795,1633749800328509846,524288 --field-trial-handle=2304,i,10351782667544761099,9883656177472276541,262144 --variations-seed-version --mojo-platform-channel-handle=6196 /prefetch:8
  2⤵
  PID:2312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6348,i,8164584391372400994,1002485568700958290,262144 --field-trial-handle=2304,i,10351782667544761099,9883656177472276541,262144 --variations-seed-version --mojo-platform-channel-handle=6344 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1616

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5236

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3044

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

44a773ee-e47c-4b34-a16a-5a4922bd53d9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\44a773ee-e47c-4b34-a16a-5a4922bd53d9.tmp
Size 26KB
SHA256 a7386e1a68f503885d19dcf982a4b22b522b324e18ac51216d992b8dccde26e2
MD5 569dc455fbb187e7ae812406905993d5
SHA1 8b42538c2d556c6351446d17c3514220d3dd1364
SHA512 b601166a475896d0cc980007c754928133932be6c74b5f7240474b3d49ec6370f067ca8aeed7b4eae89f8e5f8c05188bc2cc1488d8446206feb93b314b5a48bc
SSDEEP 384:nO+iFiZcITj3sNH8TUNTUlI4iaKMuYuw2f0BCUvPAVG9gtuLnmsVZh6DKhHzgL//:OVFQX3awgSR7BCUwVAgtonmsfYGHAN
TLSH
T1DDC26C32EC58DABBEDEA5FD6A74A3A03DEE04263858C9AC8D5D91D1D00D74AD130BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

53b6fd8a-54b0-497d-aef7-3b22218df08c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\53b6fd8a-54b0-497d-aef7-3b22218df08c.tmp
Size 25KB
SHA256 f5e660ae154f67c79330f08ff6a4690277e01a3ef2858a4a00fc490f1e61bef2
MD5 3efb8fa0f7df5a281403f787496b89e6
SHA1 f62704d8e3803710d038a1fc5c4f7701db6f7706
SHA512 f4b7356819fa834e64c03c98083bb892f2d5c976b5ec343e68c96df7573a6b1c4a3c502094c673303e583d6f87ce270b39395f490829d330fefb657bcac1cf66
SSDEEP 384:nCiFiZcI63sNK8TUNTUlIm2aKMiB4w2f0BCUvPAVG9g7FA7O6R2FeoSqgL/7Iz7Q:JFQ63DwgcGZBCUwVAg7FA7TRXyQ
TLSH
T1B8C24B32EC99DAABEDFA4FDAA74A7A07DEF00163958C89C4D5D81D1D00835AD130BC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3c1c88a1dc8e5439a1a520e9db930955bf4755654f664147c54e6cba8b43ed4c
MD5 22184503a294aa98846d9a4c3975971b
SHA1 44809070563819cceeff10eeef861544783faf98
SHA512 5d29c381872b72159a2d05366e0578c0ad56eb5ef51240db505660b787e0b3b88212c74bad2c16783f95846d95fdad86172cdc01a84d34426cca804e937a679d
TLSH
T1F4D02B24B2AC7654E01A343C0114428C30CE5970140BB400805413940FC261201C4069
MD5 SHA1 SHA512 TLSH

Submit Download

89161d19-9303-48d3-b0cc-701477ff499c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\89161d19-9303-48d3-b0cc-701477ff499c.tmp
Size 11KB
SHA256 9989008687081304fc51d856e9170d58672766ff5952aa367cd568758dba0672
MD5 f20f1d5da85ab8a2ff2a584495a70020
SHA1 e349701ef38955ced7b48938e43344702f5c7491
SHA512 181480c799281605cadd21dabecf7a8f7267f4e86b0dcf149fd7ae71432737dd9717949ada182799e213d788549b8bf38376a071565bdb8db4a5baea8ed4ceed
SSDEEP 192:sxZCRrkoe/foshaQZLh8VzodpHOHW6+WNGYoW/SbAIgjtEJ:sxZCKr/fosUOi+uHbGWSYjtI
TLSH
T16B42D8156E28697B8CCBE219FB557F53E3F9503390911E48AAFC8A1C15E7ADD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

90d54f62-9583-48fe-bff0-51835d4ff12b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\90d54f62-9583-48fe-bff0-51835d4ff12b.tmp
Size 27KB
SHA256 b889e5382c9e415bcf4e5e68d2959c49597a0b5dcecea8a5067e3c14924f16f9
MD5 355b4edfda2a0287b0e92e6bb13bfc45
SHA1 654be442ee8176e74f3cbcc353b26ad58f0793b3
SHA512 d5ac6b4b1c43a1693926a1f4b0344b0e9c9c7b4f201b20fbb4e5c9a919e780eab5d79897f6e3aca7afe239b52cbfa08377837a95a157097e70915d91fefeb0cb
SSDEEP 768:Px6r8j+WviyUK8F1+UoAYDCx9Tuqh0VfUC9xbog/OVXpLlvVajYroorbgnov:Px6r8j+WviyUKu1jaqpLd4jjovgK
TLSH
T1D4C2E93B640CCB7E4FC41E9DDC1A6F972D9802C796588D408BFA954C02C77EA912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6ccb0552-8364-4551-89c6-5a6e596d18d6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\6ccb0552-8364-4551-89c6-5a6e596d18d6.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

08e4d7e2-f7a6-47f2-a15d-1b3328eceee6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\08e4d7e2-f7a6-47f2-a15d-1b3328eceee6.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

1e676f78-5dfd-4fe4-ab1b-f41985fdfa08.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\1e676f78-5dfd-4fe4-ab1b-f41985fdfa08.tmp
Size 1KB
SHA256 dfb7b61f818467c566be54d5275266e4da019724b91b6cb16762ddb1ff6fa978
MD5 74973c0442ae2e5b98400c37d77cfe8a
SHA1 a3488ef1054f4ace216727fcf8ed9eaf2bda8287
SHA512 0e3593c6e2db96029b53a26a01a6a950e3d9ee1b0e26f602caca8eef261fdc118d4a66264e29bd3711dd233c3734d099a2201818d013fa43b1d11b837e4d8129
TLSH
T1C941C0F3C3E4866E890196F0EB18BE1BDE1D0515432C3C5AC8E4AF1B93E2471E14169F
MD5 SHA1 SHA512 TLSH

Submit Download

dcfe1730-e47c-46f3-a97f-19ccf3634148.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\dcfe1730-e47c-46f3-a97f-19ccf3634148.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 d47b108c42ac0b909b34b0a2b5fac4ca834a583bbce0747e121878bed1ec5490
MD5 396c4dbb617c7598a498dba30f27993a
SHA1 6bd1f03303f766d4980843517b6c58785e185b58
SHA512 d5e33b87a1830a7a5dbad824205b93d29176d1f5508b453106f4a2a9e9510313cf6f63ceee6e31c4580f8bdc7daacfccd4e883041d4f67410ce5c4fad30fecf0
SSDEEP 384:SL29ObJffppdNlrtEYFdFyFJFtF3FrFPFYFrFsFRFFFxFBpFvFIFNFtFMF3FE:SL29ObJffppdNlrtEoHWL31R9oRkj/DE
TLSH
T16FB2111571BB421039FE295892B6972E064231B33119E66F7FBD00B68E6BF085DFD8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

a0f3d2eb-7631-4800-af38-cd4278d00c1e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a0f3d2eb-7631-4800-af38-cd4278d00c1e.tmp
Size 649B
SHA256 6637b4b554f016606e8c70849f965b21ddf89e4c703b8e504b66795d43eb6d3a
MD5 6e708d633e537e07b67e5ee1d7dc183c
SHA1 f0e0a915f0e09bc7bb57248c132d51d3034aaddf
SHA512 ddd4fc765eab42ffb984b9921423d6a809e5dc97125ee66284b8798a2a351fc23cc11988f22b204d3d507a9e761dcb220a73dd61515aff9d0066cb8bd83c4ebe
TLSH
T195F028B9C925FC3B08FD1B3960940B46F751236B3A41998F3B3E810C8FB053B869582C
MD5 SHA1 SHA512 TLSH

Submit Download

c6c85e22-2b3c-43b9-8988-7c5c4b7890ca.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c6c85e22-2b3c-43b9-8988-7c5c4b7890ca.tmp
Size 11KB
SHA256 fc85b09cd2e75aee461a0411389826b048a449475df928e29a76c2384a27e094
MD5 597ac74023059f1487a9f8bfb0a03a5c
SHA1 32aabfcead68da9940338ebb46d9f90e3b4aa36d
SHA512 a8794c57ff556a456a9d3c78bed6375b23dfed346efbc181515c5a7d779f68a22e4aa25fa7b8fe8990694be6982fee352b41be34e12abf5ac6d8b11a99b91375
SSDEEP 192:sxZCRrkoe/fosJaQZLh8VzodpHOHW6+WNGYoW/SbAIg55tEJ:sxZCKr/fos8Oi+uHbGWSYHtI
TLSH
T1DC42D8156E28697B8CCBE219FB55BF53E3F9103290911F48AAFC8A1C15E7ADD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ecc979ae-3897-4df7-9375-b622504e32a9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ecc979ae-3897-4df7-9375-b622504e32a9.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f051dd82-78e2-44c8-8b4a-b234ec119dce.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f051dd82-78e2-44c8-8b4a-b234ec119dce.tmp
Size 11KB
SHA256 7df269fc19fb3796ef43fd7076425a554f04f5a60ab3d1f1816fa9e7943536cf
MD5 a42a264aa6d5618dee805486fc78a138
SHA1 4f9094944b78e6ab4246cde44e2db45417a40a61
SHA512 e60477754896fb921b7f5072c581d367a45918dbe4f11d749823aaeac01144419afc85b54dec9f9dc3a34f7ee7464ffb9cf667a3d502d9015e6f618452be28cd
SSDEEP 192:sxZCRrkoe/fosCQZLh8VzodpHOHW6+WNGYo0/SbAIg55tEJ:sxZCKr/fosCOi+uHbGASYHtI
TLSH
T12842D7556E28697B8CCBE219FB55BF53E3F9103290911F48AAFC8A1C15E7ADD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ae0626e6-d3df-4cf9-9fc8-6506d4181f13.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ae0626e6-d3df-4cf9-9fc8-6506d4181f13.tmp
Size 26KB
SHA256 8dbe74a7ff1217f65bd8c3d749f2f2473ee5e3f25fd8edd867872c1d284406c8
MD5 36874a2e60b73414918eb217afd37673
SHA1 72234fc3ac79ab33e22523e83d1b8c20ed0cf4e4
SHA512 85dffea40d3aa6b7287b1a7cc17a292f3b01ba3680b96308859886e05fd2d5a1b5e2c9e792ffef8cdf7293e402b8052b126c77f526b51a0cdb28ad6fdac50bd4
SSDEEP 384:nuiFiZcIV3sNH8TUNTUlI4iaKMuYuw2f0BCUvPAVG9gtuLPisVZh6DKhHzgL/7II:FFQV3awgSR7BCUwVAgtoPisfYGHAN
TLSH
T1D2C26C32EC58DABBEDEA5FD6A74A3A03DEF04263858C9AC8D5D91D1D00D74AD130BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

badaceb5-0a1c-4d1a-8eec-99408c37e770.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\badaceb5-0a1c-4d1a-8eec-99408c37e770.tmp
Size 26KB
SHA256 c8489f3f479a9d95ee0821552f3e684d901469a3101ceaabbfad6a4035e16ca9
MD5 89d013843d03cf4179a80945763f1596
SHA1 35b67e57bddf287a847532c77ead0d9f8ecbc8c2
SHA512 aadf7c09cb347300a818056e63777b1261c52e411399b717746350f2406eb74c9ad1855f2659c87538fdc2ab85ed236d72d27c334d4468af34abb1609cbd61f6
SSDEEP 384:npiFiZcIV3sNH8TUNTUlI4TaKMIYuw2f0BCUvPAVG9gtuLPisVZh6DKhHzgL/7Ii:AFQV3awgRH7BCUwVAgtoPisfYGHaN
TLSH
T186C26B32EC58DABBEDEA5FDAA74A3A03DEF04263858C9AC8D5D91D1D00D749D130BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 f15bf9d79b387ba0d110d8f5b3ec8e92ded0621c01237f3c8347046a1c842d38
MD5 2e714a681229ab1784380b9d06952f42
SHA1 a80d926c34909c51f7d7044a0e5df898598e6c15
SHA512 569a8b367f9036bb762189d0d8ec8adfc05410727a3f101543e780d3d115e8e0f8beda183fcfe724efb0276ac66781ad6643588cc8311d8bfd4a6eedae35ce9e
TLSH
T128412C58A6F91148B3B7AE5A6FF6A86D947E78772E06D05D10110E4F4632A00CDB2737
MD5 SHA1 SHA512 TLSH

Submit Download

memory/652-193-0x000001DCC8AE0000-0x000001DCC9AE0000-memory.dmp

Download