1e1b0ae4e41dc893e184648ad7bbddc21067729ee56244092aa379faae0d97bc

Analysis

max time kernel
149s
max time network
144s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
06/10/2026, 12:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 289KB
Sample261006-pg3mqsx16q
SHA256 1e1b0ae4e41dc893e184648ad7bbddc21067729ee56244092aa379faae0d97bc
MD5 553eaa17718273c485951d3b7dc2abda
SHA1 a6406306c3afa606dbde7fb29472b51167998db7
SHA512 e298e830cfd11bfef853d71aed6f4a3f62bdbe38cad2f6d946f0753b5841a4b8ab8b4cba3783b0dce805b204d47bf049142b9d6d2ad0baeb7e8a1e1b94abee23
SSDEEP 3072:oKtwgrdczEbtyjaDPcn3wJ7wsmmF1TyaZdkCDR19A2zUZB8x3NFAxhAGvpG+:VrtylngJ7toCs
TLSH
T17A543B8E6BB7313532138279BD9BA324B17C8113D9069DE1BCBDC2545FC276202BB69D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4472	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-240542094-4193773837-3211495583-1000\{6947A683-BE89-40AA-81A5-6A0F84DF9D1E}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4476	msedge.exe
4476	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe
3724	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3724 wrote to memory of 4760	3724	msedge.exe	87
PID 3724 wrote to memory of 3500	3724	msedge.exe	89
PID 3724 wrote to memory of 4472	3724	msedge.exe	88
PID 3724 wrote to memory of 3500	3724	msedge.exe	89
PID 3724 wrote to memory of 3500	3724	msedge.exe	89
PID 3724 wrote to memory of 3684	3724	msedge.exe	90
PID 3724 wrote to memory of 3684	3724	msedge.exe	90
PID 3724 wrote to memory of 4316	3724	msedge.exe	91
PID 3724 wrote to memory of 4316	3724	msedge.exe	91
PID 3724 wrote to memory of 4316	3724	msedge.exe	91
PID 3724 wrote to memory of 4424	3724	msedge.exe	93
PID 3724 wrote to memory of 4424	3724	msedge.exe	93
PID 3724 wrote to memory of 4424	3724	msedge.exe	93
PID 3724 wrote to memory of 1752	3724	msedge.exe	95
PID 3724 wrote to memory of 1752	3724	msedge.exe	95
PID 3724 wrote to memory of 1752	3724	msedge.exe	95
PID 3724 wrote to memory of 4176	3724	msedge.exe	94
PID 3724 wrote to memory of 4176	3724	msedge.exe	94
PID 3724 wrote to memory of 4176	3724	msedge.exe	94
PID 3724 wrote to memory of 1568	3724	msedge.exe	99
PID 3724 wrote to memory of 2444	3724	msedge.exe	100
PID 3724 wrote to memory of 1568	3724	msedge.exe	99
PID 3724 wrote to memory of 2444	3724	msedge.exe	100
PID 3724 wrote to memory of 2408	3724	msedge.exe	103
PID 3724 wrote to memory of 3268	3724	msedge.exe	113
PID 3724 wrote to memory of 4108	3724	msedge.exe	114
PID 3724 wrote to memory of 3816	3724	msedge.exe	115
PID 3724 wrote to memory of 5056	3724	msedge.exe	124
PID 3724 wrote to memory of 5056	3724	msedge.exe	124
PID 3724 wrote to memory of 4476	3724	msedge.exe	128

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x290,0x7ffb680cc188,0x7ffb680cc194,0x7ffb680cc1a0
  2⤵
  PID:4760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1752,i,11908814255745933386,1163069341847178390,524288 --field-trial-handle=2540,i,3310626213258930748,3716133101116518672,262144 --variations-seed-version --mojo-platform-channel-handle=2580 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1624,i,2280400923203393602,1066131388944537079,262144 --field-trial-handle=2540,i,3310626213258930748,3716133101116518672,262144 --variations-seed-version --mojo-platform-channel-handle=2536 /prefetch:2
  2⤵
  PID:3500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2300,i,4760907199469363817,12787224892441973828,524288 --field-trial-handle=2540,i,3310626213258930748,3716133101116518672,262144 --variations-seed-version --mojo-platform-channel-handle=3084 /prefetch:8
  2⤵
  PID:3684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3444,i,4019008248256268597,8633139418058416607,2097152 --field-trial-handle=2540,i,3310626213258930748,3716133101116518672,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:1
  2⤵
  PID:4316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3448,i,9189637923017654878,9593581246373982644,2097152 --field-trial-handle=2540,i,3310626213258930748,3716133101116518672,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:4424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4160,i,3415241247726553913,12013243236414840105,2097152 --field-trial-handle=2540,i,3310626213258930748,3716133101116518672,262144 --variations-seed-version --mojo-platform-channel-handle=4156 /prefetch:1
  2⤵
  PID:4176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4168,i,18303518345677485153,13349836114552994739,2097152 --field-trial-handle=2540,i,3310626213258930748,3716133101116518672,262144 --variations-seed-version --mojo-platform-channel-handle=4220 /prefetch:2
  2⤵
  PID:1752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5096,i,8256514576725965496,1247260567337481294,524288 --field-trial-handle=2540,i,3310626213258930748,3716133101116518672,262144 --variations-seed-version --mojo-platform-channel-handle=5092 /prefetch:8
  2⤵
  PID:1568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5112,i,16186059953233819771,13130130259131795846,524288 --field-trial-handle=2540,i,3310626213258930748,3716133101116518672,262144 --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:8
  2⤵
  PID:2444
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5640,i,13766987779061226927,12539797594384183839,524288 --field-trial-handle=2540,i,3310626213258930748,3716133101116518672,262144 --variations-seed-version --mojo-platform-channel-handle=5860 /prefetch:8
  2⤵
  PID:908
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5640,i,13766987779061226927,12539797594384183839,524288 --field-trial-handle=2540,i,3310626213258930748,3716133101116518672,262144 --variations-seed-version --mojo-platform-channel-handle=5860 /prefetch:8
  2⤵
  PID:2408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4328,i,16693267602949430582,6440826463547252513,524288 --field-trial-handle=2540,i,3310626213258930748,3716133101116518672,262144 --variations-seed-version --mojo-platform-channel-handle=560 /prefetch:8
  2⤵
  PID:3268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4264,i,5343141090705666166,3044059085796913056,524288 --field-trial-handle=2540,i,3310626213258930748,3716133101116518672,262144 --variations-seed-version --mojo-platform-channel-handle=4304 /prefetch:8
  2⤵
  PID:4108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4204,i,3717440565574196283,2963569795649491955,524288 --field-trial-handle=2540,i,3310626213258930748,3716133101116518672,262144 --variations-seed-version --mojo-platform-channel-handle=4288 /prefetch:8
  2⤵
  PID:3816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5168,i,4871832092932941171,9928363614235427951,524288 --field-trial-handle=2540,i,3310626213258930748,3716133101116518672,262144 --variations-seed-version --mojo-platform-channel-handle=6236 /prefetch:8
  2⤵
  PID:5056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6156,i,17688988257319283955,1959266697281855401,262144 --field-trial-handle=2540,i,3310626213258930748,3716133101116518672,262144 --variations-seed-version --mojo-platform-channel-handle=752 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4476

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:860

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

27540720-4491-40ed-9ff5-399f070a1e77.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\27540720-4491-40ed-9ff5-399f070a1e77.tmp
Size 21KB
SHA256 1987b63c56aa5b94a69873d34e408cd3b207b98449410fd547fd6c92d354f863
MD5 0d7e64593c13ebfd525fb6dd62701e1b
SHA1 f8ce1c10a8614e7b7996df0eda3abe6d9262bb21
SHA512 de5d9ad328cd145a071e4e156c18a6e3420bac05fda5597e3a300bb27dccf763e354b958616ad77fbf6d0aa7c1a03afa7be5a8d243190bbce413ff4fc928491b
SSDEEP 384:REiFiZcI/zsNA8TUNTUlIlrH7ZEfsvUSHX58Ek8TJrXtL9VZh6DKhHTo7:RfFQ7RwgdBU0acp9fYGHTk
TLSH
T191A27D7388A8DD7FADF6AA45F54A36039EF490A3C689AB94D3EC5E1D009B1D81307C17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

884c5ca8-6608-4b12-939c-218b55885fba.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\884c5ca8-6608-4b12-939c-218b55885fba.tmp
Size 18KB
SHA256 ac3bfd8adbe78cd9f6df2e0ccce4d40276c7325869a658129f0a4c42bc07074f
MD5 559a1bfb940cadb6ce1766a788bea2db
SHA1 b341bcdb9fd757cd893185335ef1893271207815
SHA512 ff8895ad0e0e393327a9b46f038d2fe8155372ba095d3c4b0fed2af72a78b80e5b149f6439d22db135dae57ced7c43a402ab9ecdb2ad193237979049368bed82
SSDEEP 384:JJZcIhsNArH7ZEfsvUSHX58Ek8TJrXtI9VZh6DKhHTo7:JBhXBU0ac+9fYGHTk
TLSH
T1DF828D3298B8AD7A5CF6B145F44626035FF49053D6C96F84C6FC6F1D00DA698230BD27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

914b8b89-2d9a-4fc5-bb2c-cea271a78b0e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\914b8b89-2d9a-4fc5-bb2c-cea271a78b0e.tmp
Size 8KB
SHA256 b1db66de7f7ff222b67c89f68f97426e4794225a132a38f9291e046c95664c9a
MD5 b7274eb489bd1c9a6a86893c65c008af
SHA1 ca44baf36cf8961c68d04f8b823544d840ea057f
SHA512 d0ababce722c76c2858929254ac1675f37ff9bbaa2bd9920d5238cbb5abb5f9a9101772fcbae5cdc21e2542444f33f9fad1e0ab2a7211811dcdabcdb3dc74fd0
SSDEEP 192:1ONE6wlDgQmiUyrKW4X58gZ0jzorTJfDl0jU6:1ONE6kgZW4X58Ek8TJJmU6
TLSH
T17C02E935E9687C6B8EF2AD09F48627139FE5112BD6952F44CAE81B1D00D765C2306927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 db998f2ab3bc4e87d03b65e45c5cbb178df73d3cf3485b0f37651dcc2814f3c4
MD5 5f5f54c76a35e981894cc5fb6daba05e
SHA1 f502dcb8644de3724c621965a3a911c911ca900d
SHA512 5b35d9868c8c7bc14be58b8d1c82589ffa8c6d4d639a122de36a7603d6e1fdaa95347b26ba4692476227aad23f224b54f96b3ed88d347aa1c403e5ce05da56b9
TLSH
T16FD080B5D9756AF4E465253C02230604714C95425D433105D55145960D9D7C354D7DE9
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 98f220c14bd3d385f1dd482d8b868745c75685e4a2573b4336f235cf3bdce6c1
MD5 6ce50f5d79ab86d6489a63e08ead9ec4
SHA1 d52fb22446c08230d0edc8374b1dcaed1af585ea
SHA512 fd66aaada3f82de40a9236f167ecb23bc285a49f72374f567e078118a8bdb229e4fadc26c639553cfacaa7d7ba44e0419f17b4bb4a9a8999b51bdd037a28783a
TLSH
T189D02BF4E69455E4D441283C11130304314CC4001C033010C46141D21D8D7C2009A068
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 02cf6c2debe9573f3713554c359339f3deb6fa4abd8c14fc6d2577e42ce2d830
MD5 eec56aca3717cde66f2f4d578de1d4d9
SHA1 965ee07ac77588f49d8c4fdf547b37349747a74f
SHA512 90d05594a407bba8ca844c3df6d127aec4c8ecb87f3d2106da447965d8445c3863cdc5a376c90818be642f5dbacedbbb845f24cc640f422e049733d24470df99
TLSH
T163D02BF4A6D459E4D841283C11130304314CC4001C037111C46141D20D8E7C2009A068
MD5 SHA1 SHA512 TLSH

Submit Download

1d91ff99-8709-4398-a788-fdb8705fdfea.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\1d91ff99-8709-4398-a788-fdb8705fdfea.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

28845e01-33b3-4b64-a94a-f8597d3ba7d6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\28845e01-33b3-4b64-a94a-f8597d3ba7d6.tmp
Size 9KB
SHA256 d54e338b4b651ea02ac3b419da485966b8de7fac8a4e2c8aa15e5bfe8baee5f4
MD5 0a256e3b164f4ab661698e8b0e57f77f
SHA1 0806803e129d67e2fc9f4a5e02ec909e2bb5aede
SHA512 c05b51925c581a4c43f973c3f8c2d32fb470130dc4d3412a201c656712fa6d25e31c72ea3930957fe8101b92eaed085b2f9e72197f6e704015964db6c488a7a1
SSDEEP 192:sxZVqRFW5/f+ssoxIdpdqHW6+WNGYrb1iIg5tJ:sxZVqK5/f+sB6YHbGD5
TLSH
T1B92295526E28A97B8CC7E209FA55BF53D6F9603251D51E48AAFC861C04E7ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

45a564ad-eb85-485d-b8c6-caf2b6419b60.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\45a564ad-eb85-485d-b8c6-caf2b6419b60.tmp
Size 27KB
SHA256 9ea4944149a578482c7b8268b4ab785def5fe7726bd58baa2626fec015d4a5dc
MD5 b076c47944fe355bcacf151eb19da0f4
SHA1 cc486232e0a7b316544724f25dac6be5f85768c0
SHA512 bc78e8cd9feb9731c78d67682f4830c7f642b32e46090acf0484d99e7e9082720f8e855704de77eeeab1589906e478de6c02f468fffaec9dcd1de4b24999c434
SSDEEP 768:IFy4J/DWvbtBh8F1+UoAYDCx9Tuqh0VfUC9xbog/OVCiLlc2TbXroRuN:IFy4J/DWvbtBhu1jajiLm0bE0N
TLSH
T1F2C2FB3B684CCB7E4FC01A9DED5E6F973E9802C79A948D4047FA954C02C77EA51264CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

68ba7291-c0ca-4a68-979e-2a1b89e0cc34.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\68ba7291-c0ca-4a68-979e-2a1b89e0cc34.tmp
Size 10KB
SHA256 c39dda8e84cc40b778fd982438295b65dd17e39bd7edf500023ed301641d9f7b
MD5 31659d386ed5f7ec09e5c14fc2d9e6d5
SHA1 6c55999b2ae64002f8b89e5adf4644438f7454a3
SHA512 f028fba0b7f0ffe701c76cedc053f2bcd3e9085fae85d892557f20b2686c1ea57e3cb6184a57cefe91736f2a63d3b6d91a183ba3d5cb087c8d6b1bfef943cccf
SSDEEP 192:sxZVqRFW5/f+ssWxIdpdqHW6+WNGYr11iIg5HJ:sxZVqK5/f+sH6YHbGTP
TLSH
T1A522A6526E28A97F8CCBE20DBA55BF53E6F9503251D51E48EAFC861C04E7ADD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 99208abb26a41ca8a462da6381c9763c4ac24a2ca8261b835a256e8364c54e7a
MD5 3b111d28911c21ab8a45ac255d29740c
SHA1 a66260c856da96597dd6179b16f9375124a8b46b
SHA512 4ffb502c9252246b0fa7bc307df5316b99207595633db0778fad4c9504ef01f0a174363d322138003bd569718bbf865c7bb434ad6e042046ce2539bb2116bd71
TLSH
T162518485D3924598F7E6A470D2ECD5A7B6BC4483E983DE4AC5F5F6BEDA0A3806029340
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 d280b2d9c19a7ae1ab6a26bc53f36201b71e892505e910f9303b815acd1a08f7
MD5 37b8584f5c38e634ccda40b76b5ad974
SHA1 2cc117e709b79e5bd6cb1057ae97110d36249b24
SHA512 20b837f6eb6a25d18f59ac8130edd3e0a4d4d5d2bba4197324e56884b986f2e84150656d4c55c2cf06a572b9458b6b8a16684a9984edf8b6e73576cc6e29300d
TLSH
T10A519481D7924598F7EAA470D2ECD5A7B6BC44C3E983DE4AC5F5F6BEDA0A3806024340
MD5 SHA1 SHA512 TLSH

Submit Download

c7bd7e4e-7198-4eb1-84f1-9a400fad82b2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\c7bd7e4e-7198-4eb1-84f1-9a400fad82b2.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

0e43a50a-32d2-4aad-9480-009a027eb9aa.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\0e43a50a-32d2-4aad-9480-009a027eb9aa.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

1861efce-0ef2-4a7e-9551-87c434f76db2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\1861efce-0ef2-4a7e-9551-87c434f76db2.tmp
Size 2KB
SHA256 f0fa0310d9d71a70f59f072c83e1f4cdcbe620b83bca430654055c78c85ff5d1
MD5 ffb4dac0d0bd3c1189210fc1f2ece74f
SHA1 74d3873afaf7f0c3daef09899f8ec200597b122e
SHA512 262d5e0f2898bb0be86dcf641628a6676b0999f69a84d3fdf3fc64bc0f931492f97e9ad4ba389591c5570380f6536d95ccbff55515f6ffcd77701cd588d8347f
TLSH
T1AE51BDF6C3D5876E881566F09B25AE2ACD1D051B42283C5AC8F8EF4F63F24B0D20169F
MD5 SHA1 SHA512 TLSH

Submit Download

621715d7-ec56-457a-a117-cd8e2e0e7802.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\621715d7-ec56-457a-a117-cd8e2e0e7802.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 4f19d55c0ca90fdfc4dba7685c0f20ca033920c1f9a55968bc4e1d4e1dea121c
MD5 f3bec6bc79442d2d13378497ac743690
SHA1 c5dce307e0e9c8091c41f04c8b1263636671aa77
SHA512 d6e5c4545d744e36553a64895aa9103758bbd2799a5ac60191020d1ce0b94a0a5ea7a150b0c9d282e5d9cdcd9c90fbf077a855e08de4c00bd54e69085575338c
SSDEEP 48:KIDI1Ks04jyLaFoUaYoZbED0ISMZK9w1qZxCJY7coqyLQ5QIQVQpQzQ3QLQkbQ33:KIDCKs0+eZeKCMKGn2KY/X
TLSH
T1AB91104531AF020179BD298C8076C71B424236B7715DEA2B7F7D40A59E6FE086EFD8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a902e80a-b589-4ec2-badf-145fe07531bf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a902e80a-b589-4ec2-badf-145fe07531bf.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

be5a5778-76e9-4f68-b607-4cbbcb9ca194.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\be5a5778-76e9-4f68-b607-4cbbcb9ca194.tmp
Size 9KB
SHA256 2e606bef0c39d999a8fcdd273532d273c8c75be7896946399e80316e420eb1a5
MD5 7c82ce5d94b161e1b01d1bd4d6f24831
SHA1 a71377851c603bf762c43b7b494cf921b8632f1b
SHA512 542175b02ee524e03b522cbf4018b62db4fdf37dbb8dc3ebce6a19e7dec2f7a5f51de0fb01bad3a7e6eba6798cc3768d6d2942c898f0b701c0c16c1f2b449b6f
SSDEEP 192:sxZVqRFW5/f+shoxIdpdqHW6+WNGYrb1iIgrJ:sxZVqK5/f+sO6YHbGD9
TLSH
T1DE1295526E28A97B8CC7E20DFA25BF53D6F9503251D51E48EAFC861C04E7ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c23feb51-ed4e-42ed-9bab-cd8a0b0ef68d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c23feb51-ed4e-42ed-9bab-cd8a0b0ef68d.tmp
Size 10KB
SHA256 15826a3654b221d9165db02b81e9efba1468923e336214f3f3587c746482383c
MD5 9b73ff4cb9e106650e24f70b39e86228
SHA1 d2f88c5d0df4bab2e390632c9b2bea4f4d58dab0
SHA512 98458b8278167e6b72ca18a155d2be92af2edd22d29eb613385d394d3b4dc13b994537cb104879e630c572f29837a6a1dc8239a2ed87ec1d60b9da3874d4e049
SSDEEP 192:sxZVqRFW5/f+ssWxIdpHqHW6+WNGYrm1iIg5HJ:sxZVqK5/f+sH6KHbG+P
TLSH
T14422A6526E28A97B8CC7E20DFA55BF53E6F9603251D51E48EAFC861C04E7ADD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d9377658-acb7-46ae-9404-5a8b379141fa.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\d9377658-acb7-46ae-9404-5a8b379141fa.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a936c58b-7492-4476-ab25-b1843de2eb79.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a936c58b-7492-4476-ab25-b1843de2eb79.tmp
Size 8KB
SHA256 b461e319460010ed918e2293ddbf73eb7e4c8beb206d8315a951b1d045b9a6a1
MD5 184bcfc212a34019b71366b7dd005332
SHA1 33a7e12b162e4daeae852157de69316046241e36
SHA512 147e779a8930befb27027597221c6ff3fcefc6eddb28bee08842e56afc0c48b740270efb15ed8a865e7630a8fdbb11d28ebc4d38d737570ee77ee9779ce87cbf
SSDEEP 192:1ONZ6wlDbQmiUye6KO4X58gZ0jzorTJrXHNUvebqfKU6:1ONZ6kN9zO4X58Ek8TJrXt/9U6
TLSH
T1AB120936E5B8BC2B5DE2A445F08735136EA55117EA896F80D6FC1B1C01DF2AC530ED17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e5e303e2-abe9-49fa-8473-948698d83107.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e5e303e2-abe9-49fa-8473-948698d83107.tmp
Size 18KB
SHA256 978fcfb932884be25a641f6f084bf29c477764a34b0f680c5ca76b288aad6009
MD5 72b6ab2d2307f92bfb9472182d5d2d51
SHA1 db219f394f0d80a08726516ba6e03a06f63637ce
SHA512 051a5f973a60d3e46a82ffab40957b3c197a14ffa3889aa220a929d34bee3e34ea10299fb714b047ac0c40def71d42ba01a1b7a24142d23e3efdc548ff81c6e3
SSDEEP 384:FZcIhsNAgH7ZEfsvUSHX58Ek8TJrXtI9VZh6DKhHTo7:9hkBU0ac+9fYGHTk
TLSH
T1C0828C32A8B8AD7A5DF6B146F4462A035FF49053D6C96F84C6FC6F1D00DA698230BD27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b5da9de5-7c1e-4a62-b2b0-ca441488abe1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\b5da9de5-7c1e-4a62-b2b0-ca441488abe1.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 2971ec9de528083b442852fd7991f89a183fc8a5471abe5f312c2407a20c02a0
MD5 13ff6c405575bf7a70278e6cddeab154
SHA1 dc6be7bdc64efc9f1f2b0ee7a481342ecdb58e44
SHA512 18b79b38ed8bb87d107f765dc5f5cbcb9bff2b9f41675646337b3545ecffdb73acd745957c180fa122da91d2bf12414c978614344f6333b49461223fc948a7f0
TLSH
T11B410A58AAEA1148B3777F169BF6A86D887EBD771F07D49D00110D4F0A63A40C86173B
MD5 SHA1 SHA512 TLSH

Submit Download