c000045d653fded42e7f0e9d01a1a19bc7fc77bdf1500a84991209df1879a336

Analysis

max time kernel
148s
max time network
131s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
06/10/2026, 17:06

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 80KB
Sample261006-vmljasdy4k
SHA256 c000045d653fded42e7f0e9d01a1a19bc7fc77bdf1500a84991209df1879a336
MD5 3e5484886913eb2495987ddb902ad8e9
SHA1 8e1b90e03546cd720d78b0f5f4701675335dbe63
SHA512 856170750956ba3dc4f0c23576bbdededb56ea5adff3fc530385076007542bc4d843a919ec9fbfec4bd504bbe0bc7380f8bedcbae48f6fe13ac9ba9447e71f26
SSDEEP 768:w/OQTkmKzHNRnwQPJLsJ0zblmrJKZJUYaClFTtN/J3+9m4xKTzuq9SmlhIF3MCp3:w/OKkmKzHNBwizblZLtKq9SmlqlJt
TLSH
T13E83656391E1982A0352E0D2D418BF09B982C55FDE1A8D2177DD1D9EBFE2D62DCB390C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1424	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-4154726816-2055034831-2297277433-1000\{BA42A44D-DC11-4B33-B775-4291438F2DB8}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5236	msedge.exe
5236	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 832 wrote to memory of 2084	832	msedge.exe	88
PID 832 wrote to memory of 4800	832	msedge.exe	90
PID 832 wrote to memory of 1424	832	msedge.exe	89
PID 832 wrote to memory of 4800	832	msedge.exe	90
PID 832 wrote to memory of 4800	832	msedge.exe	90
PID 832 wrote to memory of 4740	832	msedge.exe	91
PID 832 wrote to memory of 4740	832	msedge.exe	91
PID 832 wrote to memory of 616	832	msedge.exe	92
PID 832 wrote to memory of 124	832	msedge.exe	93
PID 832 wrote to memory of 616	832	msedge.exe	92
PID 832 wrote to memory of 616	832	msedge.exe	92
PID 832 wrote to memory of 124	832	msedge.exe	93
PID 832 wrote to memory of 124	832	msedge.exe	93
PID 832 wrote to memory of 5344	832	msedge.exe	95
PID 832 wrote to memory of 5332	832	msedge.exe	96
PID 832 wrote to memory of 5344	832	msedge.exe	95
PID 832 wrote to memory of 5344	832	msedge.exe	95
PID 832 wrote to memory of 5332	832	msedge.exe	96
PID 832 wrote to memory of 5332	832	msedge.exe	96
PID 832 wrote to memory of 4860	832	msedge.exe	98
PID 832 wrote to memory of 4860	832	msedge.exe	98
PID 832 wrote to memory of 624	832	msedge.exe	99
PID 832 wrote to memory of 624	832	msedge.exe	99
PID 832 wrote to memory of 1052	832	msedge.exe	101
PID 832 wrote to memory of 5900	832	msedge.exe	105
PID 832 wrote to memory of 2440	832	msedge.exe	106
PID 832 wrote to memory of 5744	832	msedge.exe	107
PID 832 wrote to memory of 4412	832	msedge.exe	108
PID 832 wrote to memory of 4412	832	msedge.exe	108
PID 832 wrote to memory of 4156	832	msedge.exe	109
PID 832 wrote to memory of 4156	832	msedge.exe	109
PID 832 wrote to memory of 5236	832	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffb0363c188,0x7ffb0363c194,0x7ffb0363c1a0
  2⤵
  PID:2084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1952,i,9964013338640846073,8652101318657832327,524288 --field-trial-handle=2656,i,6413786848280625048,5690977476568794629,262144 --variations-seed-version --mojo-platform-channel-handle=2684 /prefetch:11
  2⤵
  - System Time Discovery
  PID:1424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1592,i,17677942761445038358,2402473987691321468,262144 --field-trial-handle=2656,i,6413786848280625048,5690977476568794629,262144 --variations-seed-version --mojo-platform-channel-handle=2652 /prefetch:2
  2⤵
  PID:4800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2228,i,18334335064290177578,11709934490704354567,524288 --field-trial-handle=2656,i,6413786848280625048,5690977476568794629,262144 --variations-seed-version --mojo-platform-channel-handle=2956 /prefetch:13
  2⤵
  PID:4740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3612,i,930303924283079439,14291804109574631658,2097152 --field-trial-handle=2656,i,6413786848280625048,5690977476568794629,262144 --variations-seed-version --mojo-platform-channel-handle=3636 /prefetch:1
  2⤵
  PID:616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3608,i,11813438233578951967,15095193622108696395,2097152 --field-trial-handle=2656,i,6413786848280625048,5690977476568794629,262144 --variations-seed-version --mojo-platform-channel-handle=3632 /prefetch:1
  2⤵
  PID:124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4304,i,10028383847228592383,44652481957499775,2097152 --field-trial-handle=2656,i,6413786848280625048,5690977476568794629,262144 --variations-seed-version --mojo-platform-channel-handle=4348 /prefetch:1
  2⤵
  PID:5344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4344,i,12063844398381047702,57843540210925882,2097152 --field-trial-handle=2656,i,6413786848280625048,5690977476568794629,262144 --variations-seed-version --mojo-platform-channel-handle=4396 /prefetch:9
  2⤵
  PID:5332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3804,i,7091728104286960588,14695894455749975791,524288 --field-trial-handle=2656,i,6413786848280625048,5690977476568794629,262144 --variations-seed-version --mojo-platform-channel-handle=5384 /prefetch:14
  2⤵
  PID:4860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3880,i,14607434120184325914,5686277376004201705,524288 --field-trial-handle=2656,i,6413786848280625048,5690977476568794629,262144 --variations-seed-version --mojo-platform-channel-handle=5380 /prefetch:14
  2⤵
  PID:624
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6064,i,6366615303343293870,9184740215969724337,524288 --field-trial-handle=2656,i,6413786848280625048,5690977476568794629,262144 --variations-seed-version --mojo-platform-channel-handle=6080 /prefetch:14
  2⤵
  PID:1716
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6064,i,6366615303343293870,9184740215969724337,524288 --field-trial-handle=2656,i,6413786848280625048,5690977476568794629,262144 --variations-seed-version --mojo-platform-channel-handle=6080 /prefetch:14
  2⤵
  PID:1052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6104,i,17922936291710683310,11201798881232080275,524288 --field-trial-handle=2656,i,6413786848280625048,5690977476568794629,262144 --variations-seed-version --mojo-platform-channel-handle=6172 /prefetch:14
  2⤵
  PID:5900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6064,i,8333484490858568932,2643784712437242655,524288 --field-trial-handle=2656,i,6413786848280625048,5690977476568794629,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:14
  2⤵
  PID:2440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6156,i,1950408579731973079,3811737999948828475,524288 --field-trial-handle=2656,i,6413786848280625048,5690977476568794629,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:14
  2⤵
  PID:5744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5508,i,13674616889321731088,1705454590651336304,524288 --field-trial-handle=2656,i,6413786848280625048,5690977476568794629,262144 --variations-seed-version --mojo-platform-channel-handle=5396 /prefetch:14
  2⤵
  PID:4412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5448,i,10640179280440191947,1248724680722484861,524288 --field-trial-handle=2656,i,6413786848280625048,5690977476568794629,262144 --variations-seed-version --mojo-platform-channel-handle=6440 /prefetch:14
  2⤵
  PID:4156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6060,i,3135948753807731346,973679875320995065,262144 --field-trial-handle=2656,i,6413786848280625048,5690977476568794629,262144 --variations-seed-version --mojo-platform-channel-handle=1584 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5236

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2416

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:388

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

2cf4ea86-30af-4f9f-b2b9-697b7ece4d2c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\2cf4ea86-30af-4f9f-b2b9-697b7ece4d2c.tmp
Size 33KB
SHA256 db42ad7e48a66ca642395e7648efe063eafbaf1ca594c8fbeb7f713863945874
MD5 6a55bc8556de8c8df192bf51487faaf1
SHA1 ee77617fa7e4ecf914aa61904162fa594919f920
SHA512 db4d0def60ce14fa3064a2162eb440fe02f9676eefcfe49a755462c1eb241503cd50fd810e3c0c8d4e32c889197b3ffe1b66a9c553b35d2c2463a311aebb566e
SSDEEP 768:je3knvybNbaqANYOeRFZD1fTos7RjL4YGHOM:je3kviQjY1fT/R34YUOM
TLSH
T1EDF2AF36F8A45D734CF5E285A2467A477FF48653CACD198484DC6F0E05DBBAE130781A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

87646fce-530f-4b25-9184-79155ae80c0d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\87646fce-530f-4b25-9184-79155ae80c0d.tmp
Size 37KB
SHA256 39e54fc7d1106178cfdbae6ccb9f1b10fbc18100c9810e76c6c0d827ae4ecc42
MD5 cd2dd1e02248ca9768ab0f52eac910a0
SHA1 36e1f2a85464e882c071a0a614470aab86ea7e36
SHA512 42473a89c469644476bbc3f8aad2743c53e579e6fa0e5f66eb207fd8302a2322838484cd55466d27de22e2a60b2b0d5700140ebdf27055240e4a333d0779381a
SSDEEP 768:z/UxvxjgC+k3wLGybNbaqGOeRFZD1fTos7Rzq/+Pu:GZj3+k3w6idY1fT/RuKu
TLSH
T10F03CF3AF8D85D338CF6E244B24A764BBFF415B386C91A9809ED6F0E158B79D1307816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a201096456be1e380b7687844e70aa8e2d987a06740acf66db0d56e000a3b50d
MD5 36c9bdf74494657a1636bbc59af48eb0
SHA1 aea8177ffde7e43fa1b4cc5ce6c7cf68c2431306
SHA512 2cf6da34ccb1c58e4f6d50681952d27ffc828c4ede6f38ca0a5e429a4f520e426913b04469e4272eed54102a541263bbb54c2628f542fbe357a4afac921bb49e
TLSH
T143D02B79E7DC8512C0C2207C015811A231B37E00EB0802C00905400C18001C20323F0D
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4123fa2cc2e73053b7602d1d53a57b01f3a6cd8872729fcd7ed66886082b1b99
MD5 5100dc5469c5151f9ac793573116a7fa
SHA1 a8ffca7210c348bef0d710a66e334809b7f58988
SHA512 ead3d81382dc13f1d89e928af9189e5eec6cf3fabfb91ed18d73f1fe38b5e9f76e77fae594633baf6da19747d70fbb17eb97a8a36df60510a930f6006986acfc
TLSH
T1F4D02B75E7EC8412C0C2207C015911A231A37E00D70802C00A05801C18001C20322F09
MD5 SHA1 SHA512 TLSH

Submit Download

6adfe853-7e7a-4c9b-977f-d361df4b3db7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\6adfe853-7e7a-4c9b-977f-d361df4b3db7.tmp
Size 11KB
SHA256 041ba80b0ef0c15b919a3429e54f37be36a5d51de9bd79d51a41ce55fadd2956
MD5 dc9207c734bc6dcb4ea4615115f31332
SHA1 5b5dac133f8cd3bf7e79b54cfb0bcd67ba9904c8
SHA512 8b9b18b597f15069a98e0413364bdf298931343308462beec7911beee7aa407c9c03afb9f4736d2193f94c23ffeb5e7eb87ae95e2c74a45adaf4f43fb3b3d5c1
SSDEEP 192:sxRtRlbM/f4sDK7xgszoA8p40/g6+WNIYDaQGoiIgD1J:sxRt/M/f4sD6W5/5IRj
TLSH
T10B32A615AD28A97B8CCBE21DBB66BF53D2F95032A0D41E48A6FC861C05F76DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 c8f7d70d53fd320d00e1dd884b1d5ad8eaeabdb80639c55887f8961c78f8f48d
MD5 970924b4177060452fecc8e4bf31f0c1
SHA1 25e5b9152b941a6944d39337a3c4876e0e612b68
SHA512 d32bbdac12c822cbd07f585324a2c0e0bf79306f7e00505f61536c264e7fe49a3385120447e166670be5123c5f5a1b7cf0365837b857aa3bb4fe291ae5318f28
TLSH
T135E07DE406C8C22EE7086CA70168D30ED3823A5FD2C66E0E5744CFC57846870B3C2FA0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 af84c8ea53abe6cb1ef4dc2a37cc222ce184a7661e291a36bc9f2d3bf84a053f
MD5 e4e99bcb579bdc9fe0c7a2bce85a22e0
SHA1 fb7402d73bf9e045bf574d4912b3670643b16797
SHA512 57dc85b801c4b3222ef68c1712b660d4a7ddf8a38d7a145f8105b78d1a4e2da4c62922618e29d6c4bf6ef7001d20921450b6fce0926dec93631b98262eb8b169
TLSH
T11951654F9158C060DFF8503282D596873A3615B8E943AD222768DD379F8FFE3A0E00E8
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 370ed4fc860e31c51663ca2f1518b23f17b89041b5ea24442159d1c1cba9f0ba
MD5 c82c62e80962de27a4b9335c331a90af
SHA1 52313ecd50c07f71edeba293befc826f3669e700
SHA512 e6f725e39ae727e24971431cc553ceea0e04353d8526838125477b4bbcbbc6fdf0ac4a368bcc93c9c4849b86bc4d4f7a810fd411dc879cf4e43c16c62e2237cf
TLSH
T14B51664F9158C061DFF8503282D596973A3615B8E943AD622768DD779F8FFE3A0E00E8
MD5 SHA1 SHA512 TLSH

Submit Download

6f917de3-50cc-4aae-9ba5-c39f13793079.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\6f917de3-50cc-4aae-9ba5-c39f13793079.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

6847113a-019d-4578-bc45-fb1826f546d3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\6847113a-019d-4578-bc45-fb1826f546d3.tmp
Size 3KB
SHA256 2b5f70de165f98ced13b0a3bc48f2f21c963096e81010a4e88d7e1e41b6062a5
MD5 87b2e118f147b0d19693c946886d0f0f
SHA1 0b44480457950ae5ba33da035bb512bd8cd46588
SHA512 e11658b2bdcaf2545ad861af273c8f3ce60c2baa6c6f31a70febda5982068abc44b3e71d3dda590ea52aeb200026c64d9c93dee0c06120665c1f449dbde42a83
TLSH
T1B261BEF7C3E4867D8A1152F4EB146E2BCE1D0556836C3C5689E0AE1F63F24B1E14159F
MD5 SHA1 SHA512 TLSH

Submit Download

87f73843-428a-459e-b1fa-4a44ee109695.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\87f73843-428a-459e-b1fa-4a44ee109695.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

ad036244-a83a-4616-89c6-3acecf19f94f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\ad036244-a83a-4616-89c6-3acecf19f94f.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

a6ed3ace-b94f-4bc8-868a-7061509b9d90.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a6ed3ace-b94f-4bc8-868a-7061509b9d90.tmp
Size 11KB
SHA256 38d9058e3a60b33916abe84da0a18c3cc4a48a54b591c46fcde9817e2247f4d7
MD5 afa3afaaa860e5dcca3c192f6fa95e6b
SHA1 db8f89347ca605468b066ba4dd41678e2f015d5b
SHA512 858c6113d32f72dae4cbcacaddda4a5d3c0ae34c693a99d6e9ee57ab14733d5d22fec1979bd40b595ed651a8517c5e622a0c9ea2cd33e81eec4ba8ed44c0ffde
SSDEEP 192:sxR+RlbM/f4syK7xgszoA8p40/g6+WNIYDFQGoiIgIJ:sxR+/M/f4sy6W5/5ICs
TLSH
T1E0329715AD28A97B8CC7E21DBB66BF53D2F95032A0D45E58B6FC861C04E76DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cdbb5907-f2ad-4c53-b1a0-2d9fc4760de3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\cdbb5907-f2ad-4c53-b1a0-2d9fc4760de3.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cf97c8b5-747a-4eff-a6f3-0b50d5d1685f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\cf97c8b5-747a-4eff-a6f3-0b50d5d1685f.tmp
Size 11KB
SHA256 3e146e40b0266ee50a9866727a777362b407a36ffbc97c89519f86dcf0d5f152
MD5 665bc68d273138d9096bca268ba9362a
SHA1 3d143ceb5617baf8d5c0ea80d18331cff14d26db
SHA512 feef47966c8554b5124b995cce5987e8b49a966c93b2406e345d090e074690f62ee5638d3279efc9537194e0271e002a3ca5f24c4dcc4a3a1eb592939b5a05ca
SSDEEP 192:sxRtRlbM/f4sXK7xgszoA8p40/g6+WNIYDFQGoiIgDzJ:sxRt/M/f4sX6W5/5ICJ
TLSH
T107329615AD28A97B8CCBE21DFB66BF53D6F95032A0D41E58A6FC861C04E76DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e0ee4d55-59bf-45d7-9c9c-bd02c3e8577a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e0ee4d55-59bf-45d7-9c9c-bd02c3e8577a.tmp
Size 23KB
SHA256 abbc0f86db19682e4b8b486b66142dfe80208d609b04adf0d5b66376010118ce
MD5 8420d27c95a005e74a880008f8741921
SHA1 ec56cf8570f2f9f5dec9df0cb4a35ab6fcfe88b0
SHA512 fd060248f6e04b492c5e04e7e95542fc6e04f5699e4c2b4707073b67430782c9441303f7e7e1a326e742d6b31ec9b85f15027c5375824723c38025a7ccd45ed6
SSDEEP 384:ScwYbpGfCtgaEFfA6KhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVO+9W+R9AroTyS:SzYbpUWgasfA68F1+UoAYDCx9Tuqh0Vy
TLSH
T1CEB2D92B640CC77E4F804AADEC1A6F977D5802C796988D4047FE994C03C77EBA11A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3cc8a83f-1c33-4787-b11a-20e12f194bce.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\3cc8a83f-1c33-4787-b11a-20e12f194bce.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

baf56afa-b019-4616-9316-0be26a8097bd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\baf56afa-b019-4616-9316-0be26a8097bd.tmp
Size 38KB
SHA256 d0a519ca67e90f9716b699744a4bb6fc9b9b2e68525f144ff0783c8288641a1b
MD5 ef90a326c5d7f14abf2cb6643185fd7b
SHA1 c501b8fc0e38bc461c22f6f99cdbda5a6059b926
SHA512 9c662c94f267ccd903479386e9f46a6d3cc93a408882e8bec9953da1d9e3a6ab001cdabc8dbe57da2166d8c6cda669b898940ae91e2a280c2a6309f2c9ea0416
SSDEEP 768:G/UxvxjgC+/3fjvybNbaqANFOeRFZD1fTos7RjLsKF:7Zj3+/3fbiQoY1fT/R3sKF
TLSH
T1D203C03ABCE45D334CF6E284B24A7647BFF4456386C9299849DC6F0E05CB7AD134B816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bbcc1a50-41b6-4835-9a5a-5add62b91c14.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\bbcc1a50-41b6-4835-9a5a-5add62b91c14.tmp
Size 33KB
SHA256 32e340608498ef1609e40de3975cba0d48f8c91d2a771fdbe3cc743b0123fd91
MD5 3f76bec2d3dda25de9bd60b3a754d229
SHA1 d1050327d712a425da0fd927d248f5cc9250a07b
SHA512 3348d1d2f14aa5168d293f616d30c44799359ea3c2d37226ba9f0a78a9b2fb66f6e7f63ef3b4a2afd0f7aca9fb8a7946d807bfb1244fabbbd7ddd81126ac2ba9
SSDEEP 768:ee3fnvybNbaqANYOeRFZD1fTos7RjL4YGHOM:ee3fviQjY1fT/R34YUOM
TLSH
T17EF2AF36FCA49D734CF5E285A2467A477FF48653CACD198884DC6F0E05DBBAA130781A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e9ffb7a7-78f2-4475-9990-f453f6345e3c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e9ffb7a7-78f2-4475-9990-f453f6345e3c.tmp
Size 36KB
SHA256 2b3971a05be8a89ccd726304ba3d3b61c7ca8bdaa3c4f14930c63d442b508341
MD5 c70616772fd9972d7f042c0c2bf1957c
SHA1 d43f5d554d6c64bbd3e92d1b44f488216b78e538
SHA512 31949c5fc7115353f046c109e717461e0d06f041de70c4df24208480e330dfcb566d8683baa970a4827561ec808e85d2ffe8465ff1779cf03aaf6a5684cd8f4c
SSDEEP 768:9FQs3DwgwnvybNbaqAN8OeRFZD1fTos7RjL4YGHOM:Ms3+viQ3Y1fT/R34YUOM
TLSH
T115F2AE37ACD48D779CFAD685E20A3606AFF042A3CACD559495CC6E0E0197AED1307C1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

48d67b8e-f09a-4824-9dff-0cde37a441fd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\48d67b8e-f09a-4824-9dff-0cde37a441fd.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download