a7973ffaa1d6c760c0bf0e98d5b3e3bf7d2bd5f18da523914bc689134dc79384

Analysis

max time kernel
148s
max time network
134s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/10/2026, 12:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 18KB
Sample261002-pgd95sts3k
SHA256 a7973ffaa1d6c760c0bf0e98d5b3e3bf7d2bd5f18da523914bc689134dc79384
MD5 ada9010bf0e0176d83a405fd3ed4e8e8
SHA1 564803c0c9fe77fa1d3351918f72f7ad6a61caf2
SHA512 92fb9641886d91173bdd573a167c92f02a311ad54175d91ceb9b45301b68dfc27c6012c3657c8392c359a807e94492f9bacb6f0883163b22f0c571707ad8d84b
SSDEEP 384:WzW5qlCJ2nnGx7WGx5CnZY434plGxBKitFwthBmRI8Wt2p8AwaZX:L5Ek2nGIGiZYpfGWhsp5
TLSH
T1DB82937695089B6D0483D5A8CF73D1A0130F54BBB65E9294B4FFC3757B8BAD8D903828
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1508	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-4154726816-2055034831-2297277433-1000\{5AA698CA-227D-41F8-B4A1-82972D4660F7}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
6012	msedge.exe
6012	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4704 wrote to memory of 1832	4704	msedge.exe	88
PID 4704 wrote to memory of 3348	4704	msedge.exe	90
PID 4704 wrote to memory of 1508	4704	msedge.exe	91
PID 4704 wrote to memory of 4976	4704	msedge.exe	92
PID 4704 wrote to memory of 3348	4704	msedge.exe	90
PID 4704 wrote to memory of 3348	4704	msedge.exe	90
PID 4704 wrote to memory of 3000	4704	msedge.exe	93
PID 4704 wrote to memory of 4976	4704	msedge.exe	92
PID 4704 wrote to memory of 3000	4704	msedge.exe	93
PID 4704 wrote to memory of 3000	4704	msedge.exe	93
PID 4704 wrote to memory of 4300	4704	msedge.exe	94
PID 4704 wrote to memory of 4300	4704	msedge.exe	94
PID 4704 wrote to memory of 4300	4704	msedge.exe	94
PID 4704 wrote to memory of 1844	4704	msedge.exe	95
PID 4704 wrote to memory of 2916	4704	msedge.exe	96
PID 4704 wrote to memory of 1844	4704	msedge.exe	95
PID 4704 wrote to memory of 1844	4704	msedge.exe	95
PID 4704 wrote to memory of 2916	4704	msedge.exe	96
PID 4704 wrote to memory of 2916	4704	msedge.exe	96
PID 4704 wrote to memory of 4636	4704	msedge.exe	99
PID 4704 wrote to memory of 620	4704	msedge.exe	100
PID 4704 wrote to memory of 4636	4704	msedge.exe	99
PID 4704 wrote to memory of 620	4704	msedge.exe	100
PID 4704 wrote to memory of 5516	4704	msedge.exe	102
PID 4704 wrote to memory of 4596	4704	msedge.exe	106
PID 4704 wrote to memory of 4296	4704	msedge.exe	107
PID 4704 wrote to memory of 2424	4704	msedge.exe	108
PID 4704 wrote to memory of 4992	4704	msedge.exe	109
PID 4704 wrote to memory of 4992	4704	msedge.exe	109
PID 4704 wrote to memory of 6012	4704	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffc6d9cc188,0x7ffc6d9cc194,0x7ffc6d9cc1a0
  2⤵
  PID:1832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1976,i,6851941654179889037,6583822471704650139,262144 --field-trial-handle=3228,i,1699228375163727746,5067929793571288843,262144 --variations-seed-version --mojo-platform-channel-handle=3240 /prefetch:2
  2⤵
  PID:3348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2144,i,4294080596561264082,7581981775802499074,524288 --field-trial-handle=3228,i,1699228375163727746,5067929793571288843,262144 --variations-seed-version --mojo-platform-channel-handle=3468 /prefetch:11
  2⤵
  - System Time Discovery
  PID:1508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2432,i,1688324249947861978,9262570888958511469,524288 --field-trial-handle=3228,i,1699228375163727746,5067929793571288843,262144 --variations-seed-version --mojo-platform-channel-handle=2996 /prefetch:13
  2⤵
  PID:4976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3352,i,9763759391856995986,13455633714594793429,2097152 --field-trial-handle=3228,i,1699228375163727746,5067929793571288843,262144 --variations-seed-version --mojo-platform-channel-handle=3668 /prefetch:1
  2⤵
  PID:3000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3380,i,3831257807347987917,1943537134089047998,2097152 --field-trial-handle=3228,i,1699228375163727746,5067929793571288843,262144 --variations-seed-version --mojo-platform-channel-handle=3672 /prefetch:1
  2⤵
  PID:4300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4260,i,3176106806232965099,10777421147178860618,2097152 --field-trial-handle=3228,i,1699228375163727746,5067929793571288843,262144 --variations-seed-version --mojo-platform-channel-handle=4324 /prefetch:1
  2⤵
  PID:1844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4284,i,18101241627966313531,8292738033853860810,2097152 --field-trial-handle=3228,i,1699228375163727746,5067929793571288843,262144 --variations-seed-version --mojo-platform-channel-handle=4396 /prefetch:9
  2⤵
  PID:2916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5320,i,229928058018029172,9869703279147990566,524288 --field-trial-handle=3228,i,1699228375163727746,5067929793571288843,262144 --variations-seed-version --mojo-platform-channel-handle=5404 /prefetch:14
  2⤵
  PID:4636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5340,i,7295880719704603383,5579659282017622314,524288 --field-trial-handle=3228,i,1699228375163727746,5067929793571288843,262144 --variations-seed-version --mojo-platform-channel-handle=5392 /prefetch:14
  2⤵
  PID:620
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6024,i,7432433449063149673,6031550678145589679,524288 --field-trial-handle=3228,i,1699228375163727746,5067929793571288843,262144 --variations-seed-version --mojo-platform-channel-handle=5712 /prefetch:14
  2⤵
  PID:3764
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6024,i,7432433449063149673,6031550678145589679,524288 --field-trial-handle=3228,i,1699228375163727746,5067929793571288843,262144 --variations-seed-version --mojo-platform-channel-handle=5712 /prefetch:14
  2⤵
  PID:5516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1244,i,8686843306158276200,7978151934921708539,524288 --field-trial-handle=3228,i,1699228375163727746,5067929793571288843,262144 --variations-seed-version --mojo-platform-channel-handle=1316 /prefetch:14
  2⤵
  PID:4596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1236,i,15693535129290794904,14910741514070690917,524288 --field-trial-handle=3228,i,1699228375163727746,5067929793571288843,262144 --variations-seed-version --mojo-platform-channel-handle=4256 /prefetch:14
  2⤵
  PID:4296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1204,i,6857521095505121514,15405733677427946183,524288 --field-trial-handle=3228,i,1699228375163727746,5067929793571288843,262144 --variations-seed-version --mojo-platform-channel-handle=4400 /prefetch:14
  2⤵
  PID:2424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5636,i,14079613344637958499,17993660952360125332,524288 --field-trial-handle=3228,i,1699228375163727746,5067929793571288843,262144 --variations-seed-version --mojo-platform-channel-handle=4256 /prefetch:14
  2⤵
  PID:4992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6392,i,16044595060525623349,14024777010227876535,262144 --field-trial-handle=3228,i,1699228375163727746,5067929793571288843,262144 --variations-seed-version --mojo-platform-channel-handle=4848 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:6012

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1316

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5560

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

00e3cd61-fb5e-4ee4-a73e-7a3beb491e28.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\00e3cd61-fb5e-4ee4-a73e-7a3beb491e28.tmp
Size 37KB
SHA256 c5cd129c521c23039d73ece59606e082920e3c5fe38c1eba9ce64c2bdc190d51
MD5 dd9f8b61eb66e25a515d08fcb09aca7c
SHA1 4e59a965dbfe11a30dad8d1295dd6ae6b77ea2ec
SHA512 7886967f56ddb6aaffd395db8d950d67b5ef8ad4aac1f11e902dbe343328b0ceabee32fc94f32b6c4ecf22362562fc7ad989d32de50474402bde705fa3472ed0
SSDEEP 768:z/UxvxjgC+k3Qt0ybNbsZOeRFZD1fTos7Rzc/+Pu:GZj3+k3Q6/cY1fT/RIKu
TLSH
T1FB03CF39F8D85C378CE7E244B24A760BBFF055B399C91A9809ED6F0E158B7AD1307816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

15bac012-9895-420e-a5bd-cff1a0aca8c9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\15bac012-9895-420e-a5bd-cff1a0aca8c9.tmp
Size 36KB
SHA256 7e9b257d3f79a4f09b959337268a4b70cb95e5c8d9a3deaa62f32fbc523ae9f1
MD5 f4f4806ca554f008890fac995cf9de5b
SHA1 70b647addc4a5437e42a5fc0b3949f8a5975e5fe
SHA512 387ef608a2bb603b53b910726fa2d84ec78f82d1568503ff9be6beb1fdee0e5e3ac85f481944cadfa4937b7a6b6a08e31681d976d4361c6130c4c874179c2257
SSDEEP 768:nFQ/3Dwg8joybNbseOeRFZD1fTos7RjKp2sWak:6/3ac/FY1fT/RE2sTk
TLSH
T1E3F2AF36ECD49D779CFAE784F24A3602AFF05263C9D9968496DD9E0E00876ED130BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

537de787-8ea2-4bd6-8557-f4364baae617.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\537de787-8ea2-4bd6-8557-f4364baae617.tmp
Size 33KB
SHA256 2d90ac953919406a93222026ee34218d4c260315785d79731f6804c857034bba
MD5 633722aa456f2dadea9d483e91a1f8e6
SHA1 279b0487a641d8492bf81d0a267b4a9c7081a687
SHA512 4acdc58caae35e753001848106b402d20423b5a633ef788506be64e6a61481a3e644e3d6bd65a13e8bc45bf304aa9d98774c04faee1d641dba2aaaa2d74a5d27
SSDEEP 768:oh3ljoybNbsJOeRFZD1fTos7RjKp2sWak:oh3lc/sY1fT/RE2sTk
TLSH
T1F4F2BF35FCE49C774CEAE284B24676027FF09663DAC9568455DDAF0F0487BAE130B816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6e943a29-c1b4-45fe-9d9c-76b1963aabb4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6e943a29-c1b4-45fe-9d9c-76b1963aabb4.tmp
Size 33KB
SHA256 9bbfe4cf18147879412575fc0250c57e8cf4173ad63d23a5d96d38832d3e5fe7
MD5 865a21480a1dc3c0020da9c049a29160
SHA1 d2ddd6dfdc8df5a217b150d368231aca349cec3c
SHA512 357ecd6bd7548441c705dc2e3dc5bcd93f86f380e378a5179f520e83eeae28e458fe17a857c353b98e4ae5996ba9a474b098f47e13405d8b1aea264ff6ffcc18
SSDEEP 768:jh3AjoybNbsJOeRFZD1fTos7RjKp2sWak:jh3Ac/sY1fT/RE2sTk
TLSH
T1F3F2BF35F8E49C774CEAE284B24676027FF09663DAC95A8455DDAF0F0487BAE130B816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3e9dbfca-3f50-4b15-a9d6-e650147a39b4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\3e9dbfca-3f50-4b15-a9d6-e650147a39b4.tmp
Size 105KB
SHA256 0526a2a51e51d4fabd0b1d17ef03f5340c42a3dfcb2119ece19ca3fb7900a64d
MD5 844a3eca2c89c5806ce623a8aaa667a4
SHA1 92425b0bd5ebe6baf101dd06c4c2d65b1cabbe97
SHA512 19fb4fa602526e6121d2bbb2984c8130d972906c815cef03a10d6c046e88bc013fabfd2daed35ac6fc10b90eb453c529c4fb4c4b465fb957c45a55ec67aa247f
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7u:fwUQC5VwBIiElEd2K57P7u
TLSH
T1D2B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a201096456be1e380b7687844e70aa8e2d987a06740acf66db0d56e000a3b50d
MD5 36c9bdf74494657a1636bbc59af48eb0
SHA1 aea8177ffde7e43fa1b4cc5ce6c7cf68c2431306
SHA512 2cf6da34ccb1c58e4f6d50681952d27ffc828c4ede6f38ca0a5e429a4f520e426913b04469e4272eed54102a541263bbb54c2628f542fbe357a4afac921bb49e
TLSH
T143D02B79E7DC8512C0C2207C015811A231B37E00EB0802C00905400C18001C20323F0D
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4123fa2cc2e73053b7602d1d53a57b01f3a6cd8872729fcd7ed66886082b1b99
MD5 5100dc5469c5151f9ac793573116a7fa
SHA1 a8ffca7210c348bef0d710a66e334809b7f58988
SHA512 ead3d81382dc13f1d89e928af9189e5eec6cf3fabfb91ed18d73f1fe38b5e9f76e77fae594633baf6da19747d70fbb17eb97a8a36df60510a930f6006986acfc
TLSH
T1F4D02B75E7EC8412C0C2207C015911A231A37E00D70802C00A05801C18001C20322F09
MD5 SHA1 SHA512 TLSH

Submit Download

07b141e7-d420-4f96-9059-f5b1697cbf8f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\07b141e7-d420-4f96-9059-f5b1697cbf8f.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

82ffd9ce-aaaf-4dbb-a0f6-4f365f860d77.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\82ffd9ce-aaaf-4dbb-a0f6-4f365f860d77.tmp
Size 11KB
SHA256 bd197bb88666a16769c14711fb69afe05c63da789e3f7904de29068c21e459d5
MD5 c1179e71d426d202293dd85d43d10cdd
SHA1 023339172429e95ce33dea50e8e2c972d59cddda
SHA512 edbbcc7007d96148b77436d09c216503e1ad5fa5251ff353183a968448cc84827a40400e31c22d0ab428f374682764eb8d63b7c0760c51f094940c53bc4187f2
SSDEEP 192:sxRPRhb5/fvs1arK7x8jzoA8p4p/g6+WNIYDROeG9IgDyJ:sxRPz5/fvsi6V8/5IF6
TLSH
T13042D815AD68A97B8CCBE20DBB56BF53E2F9513360901E48B6FC961C04E76CD620780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 827e143da4aaa1788e482073b42692c0bccb2206c3ea72f990c473978ddfbf1c
MD5 65202a424f2ef2b57c2dba4a3116c9c9
SHA1 63d8c58d8ab2ecc0909923771e4359d404817a64
SHA512 6bedd2f18736d59edea5d48f15ea044845c36ad026ac4487b6d1fcb749f28c7ba8ab2187917c4c14e13d93aae45fa0be2b16cda8cd769653c961561049acfa60
TLSH
T1BE51A3CDD6A0FDEAD764543142ED268B3A3C91BF9B836E038694D4785B4BBE4534C314
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 7a03653e4d04bc3831c23aa22aec0371ca23dffcd0d258d216946bd7c1445a37
MD5 f86abaae40f7bca8883cbc3b3bd21e0b
SHA1 169bebc6263fe4f7e403ad71c13de6b1288e5ef1
SHA512 a74194d0342db7123ecea8259e9e3524a726ec78af37ca54e540dc9840d4f93fbc3cf7f2ce76de24b692e6bc807fe7c7f9253bd3e9480c1d365c5fef6a007edd
TLSH
T16E51A3CDD690FDEAD764543182EC268B3A3CA1BF9B836E038694E5785B4BBE4534C314
MD5 SHA1 SHA512 TLSH

Submit Download

e5c024d8-98bb-42b5-8fa5-a5c56851017a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\e5c024d8-98bb-42b5-8fa5-a5c56851017a.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

15025f47-26d8-4786-9620-3b8238e97a67.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\15025f47-26d8-4786-9620-3b8238e97a67.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

320a27c2-1770-4e3b-9279-3df2bb0f51b7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\320a27c2-1770-4e3b-9279-3df2bb0f51b7.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

eb289a9d-f132-404a-bf45-9c83aeb0bae4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\eb289a9d-f132-404a-bf45-9c83aeb0bae4.tmp
Size 2KB
SHA256 d6ac39b65a89c0ededdde533beb9d1a1e972b8659beb5813166b68d42deba21b
MD5 e23befbfa607b30d2fae040251efadc4
SHA1 51284698a0f391194fce555e14609865000eed85
SHA512 b4b3e60074f0635ef0aa2f5e42d643aa762ab8b9da3582220efed04bace2a2c182ec42dd4a2d357841f5f13f1dfbe5fbdc4d47ab6df35028e20afbd804483d94
TLSH
T14E41B0F7C3E8867D890156F4AB186E1BCE1D0955832C3C5AC9D49F2B93E34B1E14199F
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 9affb8fec4454ce03657e495bd805cae02eb04a74ad6745379d993a5be610b17
MD5 ccab9ae7a47928168219848f9bb0e5cf
SHA1 a24563fa4b43be55230bdd9b3622050a9395b70e
SHA512 bbf0d2add12b45973c65ddf70f8bc0dda5ca83f9dab904c45e35130d561a0e136db4a03b81b4edd2c2cab9b412c491b0747d51293c97ff097b7bcd24c137ea76
SSDEEP 48:KsyIPKTiMLyVfIBKoQUI7I9KoU4vyFJIxKqF:Ksy4KTiCOfOKoQD7GKoUSOJeKqF
TLSH
T19DB1D09070BF464038BE251A94B5976B424232B3711CE67B3FBD10958E27E086DFEED9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

dbf28e1c-bc8e-403a-adb9-7b73b2692998.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\dbf28e1c-bc8e-403a-adb9-7b73b2692998.tmp
Size 23KB
SHA256 91105b7d62233c0582ffbb1f1eaccfeab8124dc3b13d24a7d41e3fee278df0c5
MD5 e950d0b816575c37376ef1e4720aaf78
SHA1 2982171a076bc921671b54a25dd28e3092eac837
SHA512 5a04e2d024bb5468496f061be0472dbb7ae22d0d593de868d5830a02be3d6ee2878e8026580dfbc82680c7bd78ea06660fab549635050f63296920f05503f71b
SSDEEP 384:ScwYbpGfCtgaEFfA6KhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVO+9W+R9VroTye:SzYbpUWgasfA68F1+UoAYDCx9Tuqh0Vl
TLSH
T190B2D92B640CC77E4F804AADAC1A6F977E5802C796988D4047FE995C03C77EBA11A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

df1ff8b2-5c36-4a86-8c82-4c91b5b7e5f2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\df1ff8b2-5c36-4a86-8c82-4c91b5b7e5f2.tmp
Size 11KB
SHA256 ea78e61fae0240445c127683d74b52c7024d935f783f5cb34d9acaad176f0935
MD5 b5887f5aaa5b5d0bef6ff6d320e77fdd
SHA1 da76dd51fa0cb4ec6315c35fa9e3a1468e9fe441
SHA512 c1b39b6908dc3efa4cf9c45da6b5cdf68d11791c242b25120569e62b37e7e97eb01f000afedf853fec0cc8d32515a338ddc01791d56b8d9a7cea14e52972dcfa
SSDEEP 192:sxRPRhb5/fvs1QK7x8jzoA8p4p/g6+WNIYDFeG9IgDQJ:sxRPz5/fvsy6V8/5Icw
TLSH
T1B232D715AD68A97B4CCBE20DBB66BF53D2F9513360901E48B6FC961C04E76DD620780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e9fc08ae-4ac1-4c6d-8f5c-da7042826440.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e9fc08ae-4ac1-4c6d-8f5c-da7042826440.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f1555533-7f6f-45ba-a195-b77a46c51d23.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f1555533-7f6f-45ba-a195-b77a46c51d23.tmp
Size 11KB
SHA256 1e844c1b53bd0e076698f26469656af589a7d5a866c9288378d947464cf0c321
MD5 5b18fd909c9fc4f9fc7991452d114e19
SHA1 da460accada613eaaa175fec270d2e9708114910
SHA512 08f3902e1d793f9f04e6bf30edd6b5e69a3db278d776cd2b6b7294f976d57cbb7d7a1dbfa6719ea14c596722ae1df5e67778c20a336302cae1fae0e63384da2b
SSDEEP 192:sxRcRhb5/fvs4QK7xgjzoA8p4p/g6+WNIYDFeG9IgIJ:sxRcz5/fvsf6R8/5Ics
TLSH
T17E32B715AD68A97B8CCBE21DBB66BF53D2F9513360901E48B6FC961C04E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

b3f5ba7f-0006-4d33-906a-0c68d59d5e85.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\b3f5ba7f-0006-4d33-906a-0c68d59d5e85.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

f810daf9-6218-4132-aa04-d9f0fbcc3b9c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\f810daf9-6218-4132-aa04-d9f0fbcc3b9c.tmp
Size 38KB
SHA256 250568baab846fff477761dda805abb2cd357b075ce1ae374ad35712b32cd807
MD5 77b49d0edcc2a99aca9f9884b8e50af6
SHA1 1546d4b582323bdf00a81f1e93b1708ab1811dd8
SHA512 8adf213b31d139c0486982d1e9e5c1393d12977c7b10b17586697e180c15987f7b0275e1688872ccbfd30d09120113a871085fdbdcb2a952f7b61e0886f46ae6
SSDEEP 768:4/UxvxjgC+w3l5oybNbsJOeRFZD1fTos7RjKpnr:FZj3+w3lK/sY1fT/REnr
TLSH
T1D203BF39B8E86C338CF6E244B24A7647FFF4556399C9299809ED5E0F05CB7AD130B816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download