5276c430211ba86c6737edbc9be612334088704a6855c7c91a51b896c2d67ef5

Analysis

max time kernel
148s
max time network
144s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
03/10/2026, 12:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 39KB
Sample261003-plbptazwcx
SHA256 5276c430211ba86c6737edbc9be612334088704a6855c7c91a51b896c2d67ef5
MD5 f47b0aec31fee658ba46b06f7625be73
SHA1 b173005bdf3385c8efda60aaef13f29e85a08ab6
SHA512 38d27c0a04a561fedd6e23eb476af014c5c477fd716e37cec5db6b30073b7a1652f827b77266569de5a8da0bb7139fdffb1d47814a2fd256f7568b6a213940d1
SSDEEP 768:1oeZrZhKU2tRHxkDfEOlcRowmL1Oh/gdrpgP8tb+xTG+/:V7EOlqowmLsh/y1b+xGk
TLSH
T17F030C1EE26434791E1749922FD52F8D7928AC0AEB0707D8B59FC13C97EB6A1053738E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5988	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-4154726816-2055034831-2297277433-1000\{20E356FE-63D3-4072-8B75-7F28FBD76D3B}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3012	msedge.exe
3012	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe
4948	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4948 wrote to memory of 5540	4948	msedge.exe	88
PID 4948 wrote to memory of 5344	4948	msedge.exe	89
PID 4948 wrote to memory of 5988	4948	msedge.exe	90
PID 4948 wrote to memory of 5344	4948	msedge.exe	89
PID 4948 wrote to memory of 5344	4948	msedge.exe	89
PID 4948 wrote to memory of 4836	4948	msedge.exe	92
PID 4948 wrote to memory of 4836	4948	msedge.exe	92
PID 4948 wrote to memory of 2696	4948	msedge.exe	93
PID 4948 wrote to memory of 3312	4948	msedge.exe	94
PID 4948 wrote to memory of 2696	4948	msedge.exe	93
PID 4948 wrote to memory of 2696	4948	msedge.exe	93
PID 4948 wrote to memory of 3312	4948	msedge.exe	94
PID 4948 wrote to memory of 3312	4948	msedge.exe	94
PID 4948 wrote to memory of 3772	4948	msedge.exe	95
PID 4948 wrote to memory of 3772	4948	msedge.exe	95
PID 4948 wrote to memory of 3772	4948	msedge.exe	95
PID 4948 wrote to memory of 4912	4948	msedge.exe	96
PID 4948 wrote to memory of 4912	4948	msedge.exe	96
PID 4948 wrote to memory of 4912	4948	msedge.exe	96
PID 4948 wrote to memory of 1048	4948	msedge.exe	98
PID 4948 wrote to memory of 1048	4948	msedge.exe	98
PID 4948 wrote to memory of 524	4948	msedge.exe	99
PID 4948 wrote to memory of 524	4948	msedge.exe	99
PID 4948 wrote to memory of 6124	4948	msedge.exe	101
PID 4948 wrote to memory of 4212	4948	msedge.exe	105
PID 4948 wrote to memory of 2320	4948	msedge.exe	106
PID 4948 wrote to memory of 932	4948	msedge.exe	107
PID 4948 wrote to memory of 3728	4948	msedge.exe	108
PID 4948 wrote to memory of 3728	4948	msedge.exe	108
PID 4948 wrote to memory of 3012	4948	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7fff2e35c188,0x7fff2e35c194,0x7fff2e35c1a0
  2⤵
  PID:5540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1576,i,10996368271392742381,14850995331370245268,262144 --field-trial-handle=2480,i,743648193538331422,16159134632195324333,262144 --variations-seed-version --mojo-platform-channel-handle=2476 /prefetch:2
  2⤵
  PID:5344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1852,i,15760636379745520938,6524011928188521113,524288 --field-trial-handle=2480,i,743648193538331422,16159134632195324333,262144 --variations-seed-version --mojo-platform-channel-handle=2516 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2228,i,11709301337582848420,10933162730308944701,524288 --field-trial-handle=2480,i,743648193538331422,16159134632195324333,262144 --variations-seed-version --mojo-platform-channel-handle=2648 /prefetch:13
  2⤵
  PID:4836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3592,i,12606872454294718098,16217474983638852610,2097152 --field-trial-handle=2480,i,743648193538331422,16159134632195324333,262144 --variations-seed-version --mojo-platform-channel-handle=3584 /prefetch:1
  2⤵
  PID:2696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3580,i,1084641029669347628,4320210939020046626,2097152 --field-trial-handle=2480,i,743648193538331422,16159134632195324333,262144 --variations-seed-version --mojo-platform-channel-handle=3576 /prefetch:1
  2⤵
  PID:3312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4348,i,14811137780051118097,4687125169492900473,2097152 --field-trial-handle=2480,i,743648193538331422,16159134632195324333,262144 --variations-seed-version --mojo-platform-channel-handle=4856 /prefetch:1
  2⤵
  PID:3772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4380,i,2043614306564847521,9923712469274348797,2097152 --field-trial-handle=2480,i,743648193538331422,16159134632195324333,262144 --variations-seed-version --mojo-platform-channel-handle=4944 /prefetch:9
  2⤵
  PID:4912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3832,i,14845474114482374685,4947110180891014012,524288 --field-trial-handle=2480,i,743648193538331422,16159134632195324333,262144 --variations-seed-version --mojo-platform-channel-handle=5408 /prefetch:14
  2⤵
  PID:1048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3844,i,16270885031828026430,10575813404347083082,524288 --field-trial-handle=2480,i,743648193538331422,16159134632195324333,262144 --variations-seed-version --mojo-platform-channel-handle=5432 /prefetch:14
  2⤵
  PID:524
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5888,i,18327961883245802478,1948253398533311865,524288 --field-trial-handle=2480,i,743648193538331422,16159134632195324333,262144 --variations-seed-version --mojo-platform-channel-handle=5908 /prefetch:14
  2⤵
  PID:1804
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5888,i,18327961883245802478,1948253398533311865,524288 --field-trial-handle=2480,i,743648193538331422,16159134632195324333,262144 --variations-seed-version --mojo-platform-channel-handle=5908 /prefetch:14
  2⤵
  PID:6124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5100,i,14299920046882157289,18089717494964753642,524288 --field-trial-handle=2480,i,743648193538331422,16159134632195324333,262144 --variations-seed-version --mojo-platform-channel-handle=4844 /prefetch:14
  2⤵
  PID:4212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5176,i,16262922178219320559,17117700892740520588,524288 --field-trial-handle=2480,i,743648193538331422,16159134632195324333,262144 --variations-seed-version --mojo-platform-channel-handle=5168 /prefetch:14
  2⤵
  PID:2320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5180,i,3296655229440536377,18241619945159037230,524288 --field-trial-handle=2480,i,743648193538331422,16159134632195324333,262144 --variations-seed-version --mojo-platform-channel-handle=5108 /prefetch:14
  2⤵
  PID:932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6516,i,17558644510344469211,9007912253621563892,524288 --field-trial-handle=2480,i,743648193538331422,16159134632195324333,262144 --variations-seed-version --mojo-platform-channel-handle=5432 /prefetch:14
  2⤵
  PID:3728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=3468,i,11217134829354245731,573425440115337167,262144 --field-trial-handle=2480,i,743648193538331422,16159134632195324333,262144 --variations-seed-version --mojo-platform-channel-handle=708 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3012

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4460

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4824

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

51672bc5-6a42-4008-8b14-235b365b22e7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\51672bc5-6a42-4008-8b14-235b365b22e7.tmp
Size 38KB
SHA256 9d33e9ceca593b2f5bab0f02964c0475052b0028653131068a265a6788e390a5
MD5 02e267dacd96e0eea8a937589c57a02e
SHA1 68d8bb5dde3a7dd8449ed4c09178c0cc41d1072e
SHA512 f90a588a8a5aea186c9bb244976e7ff91031b3c2ef0b65bd3000704336fa8ffc286fcb290cce33cf70c94c37261928ea8168ee011b5cd300c31a4ca8c11aae8d
SSDEEP 768:z/UxvxjgC+s3YlrPrcybNbwbwOeRFZD1fTos7RjHozxjf:GZj3+s3ubgdY1fT/RDoFjf
TLSH
T14D03BF3AF8A46D738CF6E240B24A7687BFF4566385C9189845EC5F0E09CBBAD1347816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6ea860d3-04b7-4989-88ef-bcba00ebf832.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6ea860d3-04b7-4989-88ef-bcba00ebf832.tmp
Size 36KB
SHA256 db2ea7e53bf37e21e8a2399984132ff347dd8b43e83576bb7a23a168ff13296a
MD5 521cedf7cbbe9c3aa7be6ceed325973b
SHA1 05422ebaaaa7d728d94f176cc397f20100a1d007
SHA512 54b2057375b10d9d86dfb71959a31b4b3e3918b66ec59ba7ef7eff23e4378e773a3d8d3ed47e20fbeb9c9f181f993bcebe57f55163eea0ff374dd0affa7127e2
SSDEEP 768:9FQI3Kwg4lrP2cybNbwbmOeRFZD1fTos7RjH2sjZ7:MI35bJTY1fT/RD2st7
TLSH
T1C1F2AE37E8E48E779CFAD744B24A7603AFF08263C9C9959495DC5E1E0487AAE034BC25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

81a34625-9e5a-47a0-8a46-24807f1c51ed.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\81a34625-9e5a-47a0-8a46-24807f1c51ed.tmp
Size 33KB
SHA256 87d5339f7f67e117fd11d20b94014719c636115b633db2cc1ac5a4e255d590aa
MD5 69d0d7a4a285d7c14eb3736b6c3337d9
SHA1 b506fd6156520dadcff0a0be4db0c73143d3be5e
SHA512 7aa84f4569cb79194b319a2b7df014e76a16412f6ce1738468547401e2a1594936a33730e283e73829a71d98d9745f4f0e2c996186c3d81b101a192f8f8ebe1b
SSDEEP 768:P13YlrP2cybNbwbwOeRFZD1fTos7RjH2sjZ7:P13ubJdY1fT/RD2st7
TLSH
T1ABF2AE36F8B45D774CF6D244B24676037FB49663CAC9598844DC6F1E08CBBAE134B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9564a66d-bdd7-432b-b6d0-a7a84ce3c15b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\9564a66d-bdd7-432b-b6d0-a7a84ce3c15b.tmp
Size 37KB
SHA256 cd3176d6960c6335807445bd4464d02f99932188cf05bbe3a170f070e8db6302
MD5 3d3d9597330a95646f4f638b5266ab1f
SHA1 d966210264a7333aa1cb18373d97652f4987a414
SHA512 34ccbb02ac3dbb6f0d013335bf30d8118d8a855808958e19df49a4fdf5bf8dc02ca798ad53da64436bfe956ad1e335fb4f4198f7cf79fed2b6820b0386cedf45
SSDEEP 768:z/UxvxjgC+k3zipybNbwBOeRFZD1fTos7RzQ/+Pu:GZj3+k3zE+Y1fT/RMKu
TLSH
T1D503CF3AF8D86D338CF6E244720A764BBFF455B389C91A9809ED6F0E158B79D1307816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a201096456be1e380b7687844e70aa8e2d987a06740acf66db0d56e000a3b50d
MD5 36c9bdf74494657a1636bbc59af48eb0
SHA1 aea8177ffde7e43fa1b4cc5ce6c7cf68c2431306
SHA512 2cf6da34ccb1c58e4f6d50681952d27ffc828c4ede6f38ca0a5e429a4f520e426913b04469e4272eed54102a541263bbb54c2628f542fbe357a4afac921bb49e
TLSH
T143D02B79E7DC8512C0C2207C015811A231B37E00EB0802C00905400C18001C20323F0D
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4123fa2cc2e73053b7602d1d53a57b01f3a6cd8872729fcd7ed66886082b1b99
MD5 5100dc5469c5151f9ac793573116a7fa
SHA1 a8ffca7210c348bef0d710a66e334809b7f58988
SHA512 ead3d81382dc13f1d89e928af9189e5eec6cf3fabfb91ed18d73f1fe38b5e9f76e77fae594633baf6da19747d70fbb17eb97a8a36df60510a930f6006986acfc
TLSH
T1F4D02B75E7EC8412C0C2207C015911A231A37E00D70802C00A05801C18001C20322F09
MD5 SHA1 SHA512 TLSH

Submit Download

07afd855-f9ac-491e-b07e-ee2271c4298f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\07afd855-f9ac-491e-b07e-ee2271c4298f.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

14a7a32e-d646-4e88-8784-98eeb90bed5e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\14a7a32e-d646-4e88-8784-98eeb90bed5e.tmp
Size 23KB
SHA256 f8cab5d9155c1a1a486f952469e92a493933a147a23c4d221407cc12d7287963
MD5 620a643d6b258b66ed6ef848d970b1d5
SHA1 6cb66f407b6eedc0e86029a9e9ad33516245c792
SHA512 07fe755a1761267244d3dbf5b99bcb5bbcc4c2a731fcce7a3f217cf3d2bcc5e8e05a72e4c083f1e787e1cdc421cb33a0101ec69091c12cefddb5fd5671aef9dd
SSDEEP 384:ScwYbpGfCtgaEFfA6KhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVO+9W+R9WroTyO:SzYbpUWgasfA68F1+UoAYDCx9Tuqh0Vc
TLSH
T16FB2DA2B640CC77E4F804AADEC1A6F977D5802C796988D4047FE995C03C77EBA21A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1f5d3d55-5d27-4892-a7eb-0a2affa552fa.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\1f5d3d55-5d27-4892-a7eb-0a2affa552fa.tmp
Size 11KB
SHA256 211eff1dc52efa941acce0e9b7823475eb23f6f21b3dbf6f749299061f197533
MD5 e152bda825475cba48a806ccddbe3f6c
SHA1 61cd71e03382e11b3669855a1a4e10ab27b9e930
SHA512 0317f3aa2bc3b3127d9f02c0c286e79973c58b4bdd6cb041f23a25f5a03fd51b73f11cea98f13f48c50f8251c29215f5ab81f7202e1e0323822f9e514795e368
SSDEEP 192:sxRGR3bE/fhsAK7xotzoA8p4S/g6+WNIYDFqGlIgIJ:sxRG9E/fhsA6/b/5Iks
TLSH
T10832B8559D28A97B8CC7D319BB55BF53D2F9513260D02E48B6FC8A2C04E76DE620780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3927210b-dd8d-4adb-b929-53c270d09421.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3927210b-dd8d-4adb-b929-53c270d09421.tmp
Size 11KB
SHA256 e824d7bcae8c86b063bdd0b5224d281d36a4ee46f3bd31f4ce56941329dc40ed
MD5 87d1588a0da65c323df73e93aa945d6c
SHA1 4f9c661b46aec87b73311377c79de3f04004187d
SHA512 d69edef514b4ade8416ee1ebc4deed01d1ae6676b5a3d6a6eb84e6f529799b3bdf8c58dd319836c33bac5e2d49699b36b1ec33abff654e873faefd9f7bcdd53c
SSDEEP 192:sxR5R3bE/fhsIK7xotzoA8p4S/g6+WNIYDxqGlIgD6J:sxR59E/fhsI6/b/5ImK
TLSH
T16142C8559D28A97B8CCBD71DBB55BF53D2F9513260D02E48B6FC8A2C04E76DE220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

73e5f4f3-836f-49e4-b6bf-d015f9335e79.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\73e5f4f3-836f-49e4-b6bf-d015f9335e79.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 1KB
SHA256 3023df8f920cdda49d32426f66594d54157e86bf60e8a551a802cce6449c0d67
MD5 3bcce700c4e892b38c51b19cfd1ffcfb
SHA1 097e0629d907d88048f3c2b3a27becc864486698
SHA512 4654c0f9663f4ed851e795099c40721a55970dae01f53af3fb4d3c2a445b5de49b8facfc831cb25723b9864a10890793d7f60af3c9b61d3befb777a6b4cb089b
TLSH
T1B531CE8CFFA864E6F798057140DA3B4BF634ABE1D9CB1F0A146DC5FE9B567211100396
MD5 SHA1 SHA512 TLSH

Submit Download

994b32a5-800e-40c1-a174-8c3f682993a4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\994b32a5-800e-40c1-a174-8c3f682993a4.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

2f8e4baf-d05d-4ee4-be78-d71e7b504b6e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\2f8e4baf-d05d-4ee4-be78-d71e7b504b6e.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

a8cf6220-0974-474c-8840-98e34f05dc5d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\a8cf6220-0974-474c-8840-98e34f05dc5d.tmp
Size 2KB
SHA256 74431ec212aada1ae9bec86072458abcd8006b82d4845880a145d3fd0cda859b
MD5 9bf24bddb13995e190a6b3c2d537428c
SHA1 5e79f45ae2850133a10e5626fa08515fe55580ac
SHA512 85e53b3a4af0a7ef64c74d462ebcc18e05c8e6301fcdf22753c75e128443adef118e16571d0ce7f7bb2070e445f280a04a7582112f4f2727bc9250f19c01c341
TLSH
T13751A0F7C3E8867D890156F4AB146E2BCE1D0955432C3C5AC8E4AF5BA3E24B1E24169F
MD5 SHA1 SHA512 TLSH

Submit Download

d34fa511-9c79-49de-82a9-fdca55b5b74e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\d34fa511-9c79-49de-82a9-fdca55b5b74e.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 a6e4072d53153f6357ccbb6ef0f03cc6daa05ae01cac8c1207d65f71f91fb1b5
MD5 d6bc7434c4faac887de8656e3e266c12
SHA1 47f9f44779a62c2407803240872e2790ffc70949
SHA512 38db9b3eb803986011678798d81b106c6580d151e77daff87aa5b0dfd266e32ce8ddbe92d080c23c6b4ce44421e433d0a67b0e13eed6d55eb42bdacd5dfc1f56
SSDEEP 96:KYfKKI8u+fGKc0DTqKEs+GrWKQ0ovMh93u:c5xxRJt
TLSH
T15DC1B0107A7E020039BE290A81B4D72F52927773745AE63B7F7C40A59A6BE046DFCCC9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

f3bb61bc-b752-44c6-8ad0-4af0a7de2d70.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f3bb61bc-b752-44c6-8ad0-4af0a7de2d70.tmp
Size 11KB
SHA256 049113a6175022f7716032c2e119c5d1b083543676760551fcafd0eae09f49ac
MD5 2518597cfbf3798929f7a88bf65ec8ba
SHA1 e2320e4099c8d8e74ab956744c88aca9568bbeb9
SHA512 ced91d5f4e91f40337494fc6f5dfeeda6961962140033b1efeb4e45f5befc28b59f1608fce13dd5f24a606db537c3d5c2f5c14bf13b30788d2a63e5c3f1a2cb4
SSDEEP 192:sxR5R3bE/fhsQK7xotzoA8p4S/g6+WNIYDFqGlIgDoJ:sxR59E/fhsQ6/b/5IkA
TLSH
T19E32B7559D28A97B8CCBD319BB55BF53D2F9513260D02E48B6FC8A2C04E76DE620780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1636bc00-44d5-4536-84bc-0474ef1571d7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\1636bc00-44d5-4536-84bc-0474ef1571d7.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

baacc068-f7a5-40ef-b91e-90cab92e9cae.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\baacc068-f7a5-40ef-b91e-90cab92e9cae.tmp
Size 33KB
SHA256 c05085da695c6991357ca08df74713e3aad32ad68fefa1bb50d32c346c829a0e
MD5 4b665becd3e920fe192bdec8858db292
SHA1 41c475c2710a155fd398d7404a6276f65eb71c33
SHA512 22858c9cc14df7808a8ed18d89596d8799847b168cc8d36c0b8871efe58a25c92b2cf050e37d81e7791bdfcbb21399666da10e1c24e756d998af988b2ad2b5fb
SSDEEP 768:S13hlrP2cybNbwbwOeRFZD1fTos7RjH2sjZ7:S13jbJdY1fT/RD2st7
TLSH
T17BF2AE36F8A45D778CF6D244B24676037FB49663CAC9598844DC6F1E08CBBAE134B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d6893998-56ef-4d80-b41e-b3a66851cfc9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\d6893998-56ef-4d80-b41e-b3a66851cfc9.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download