472a76ad1097f0672fc558e16b82f82388bb17c79043c3579bc4964576081af3

Analysis

max time kernel
148s
max time network
129s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
06/10/2026, 18:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 4KB
Sample261006-w2ke8aey2p
SHA256 472a76ad1097f0672fc558e16b82f82388bb17c79043c3579bc4964576081af3
MD5 bb72c85e4ab2559c8430271e4401f932
SHA1 5bdcfeafb59c5f4a09db40d6e0d6bd3838fb2c21
SHA512 bf38cf0eed3daa9bfe1b27421583e56c1ed1856bd0c10b2b13fdcfc6b3ca4dfed812ba49531fbeaad97fcded76c0a756713d580697c05da2392e654d8fa9d899
SSDEEP 96:ZGeAwkQR0SFCFnFwFlUqR+Apg61z/1mhPjZcDUJJar:GyR0SFCFnFwFlUqR+Apg61z/1mhPjZcz
TLSH
T1C5914265286354052013D23C7BDF670C6534A2039B5BCC2AB7ECB34FCF9154DD9A3A89
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
548	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-696679853-3915825385-3233721679-1000\{D5BB82B1-4360-4DBD-B7B9-A3A6F7C27863}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3108	msedge.exe
3108	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2992 wrote to memory of 5056	2992	msedge.exe	89
PID 2992 wrote to memory of 1580	2992	msedge.exe	90
PID 2992 wrote to memory of 548	2992	msedge.exe	91
PID 2992 wrote to memory of 1580	2992	msedge.exe	90
PID 2992 wrote to memory of 1580	2992	msedge.exe	90
PID 2992 wrote to memory of 4152	2992	msedge.exe	92
PID 2992 wrote to memory of 4152	2992	msedge.exe	92
PID 2992 wrote to memory of 2456	2992	msedge.exe	93
PID 2992 wrote to memory of 2860	2992	msedge.exe	94
PID 2992 wrote to memory of 2456	2992	msedge.exe	93
PID 2992 wrote to memory of 2456	2992	msedge.exe	93
PID 2992 wrote to memory of 2860	2992	msedge.exe	94
PID 2992 wrote to memory of 2860	2992	msedge.exe	94
PID 2992 wrote to memory of 4900	2992	msedge.exe	96
PID 2992 wrote to memory of 4504	2992	msedge.exe	97
PID 2992 wrote to memory of 4900	2992	msedge.exe	96
PID 2992 wrote to memory of 4900	2992	msedge.exe	96
PID 2992 wrote to memory of 4504	2992	msedge.exe	97
PID 2992 wrote to memory of 4504	2992	msedge.exe	97
PID 2992 wrote to memory of 1012	2992	msedge.exe	99
PID 2992 wrote to memory of 1012	2992	msedge.exe	99
PID 2992 wrote to memory of 6100	2992	msedge.exe	100
PID 2992 wrote to memory of 6100	2992	msedge.exe	100
PID 2992 wrote to memory of 2068	2992	msedge.exe	102
PID 2992 wrote to memory of 4920	2992	msedge.exe	106
PID 2992 wrote to memory of 3804	2992	msedge.exe	107
PID 2992 wrote to memory of 3252	2992	msedge.exe	108
PID 2992 wrote to memory of 2712	2992	msedge.exe	109
PID 2992 wrote to memory of 2712	2992	msedge.exe	109
PID 2992 wrote to memory of 3108	2992	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x328,0x7ffe7113c188,0x7ffe7113c194,0x7ffe7113c1a0
  2⤵
  PID:5056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1588,i,4335765471540762966,10955084533805856180,262144 --field-trial-handle=2324,i,15514308092894923236,5655405141346857945,262144 --variations-seed-version --mojo-platform-channel-handle=2320 /prefetch:2
  2⤵
  PID:1580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1784,i,3873949137221480772,5871506949418533294,524288 --field-trial-handle=2324,i,15514308092894923236,5655405141346857945,262144 --variations-seed-version --mojo-platform-channel-handle=2472 /prefetch:11
  2⤵
  - System Time Discovery
  PID:548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2388,i,13058599675467658448,11850101337481081125,524288 --field-trial-handle=2324,i,15514308092894923236,5655405141346857945,262144 --variations-seed-version --mojo-platform-channel-handle=2536 /prefetch:13
  2⤵
  PID:4152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3552,i,17133802241822613377,3123256793985599809,2097152 --field-trial-handle=2324,i,15514308092894923236,5655405141346857945,262144 --variations-seed-version --mojo-platform-channel-handle=3576 /prefetch:1
  2⤵
  PID:2456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3556,i,11542874459717998962,5627999324330051075,2097152 --field-trial-handle=2324,i,15514308092894923236,5655405141346857945,262144 --variations-seed-version --mojo-platform-channel-handle=3632 /prefetch:1
  2⤵
  PID:2860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4360,i,2502062414516477475,17959851930048660851,2097152 --field-trial-handle=2324,i,15514308092894923236,5655405141346857945,262144 --variations-seed-version --mojo-platform-channel-handle=4480 /prefetch:9
  2⤵
  PID:4900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4348,i,16690234566614319627,16081789001441522168,2097152 --field-trial-handle=2324,i,15514308092894923236,5655405141346857945,262144 --variations-seed-version --mojo-platform-channel-handle=4476 /prefetch:1
  2⤵
  PID:4504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3744,i,15499955987081973304,6331175940700669080,524288 --field-trial-handle=2324,i,15514308092894923236,5655405141346857945,262144 --variations-seed-version --mojo-platform-channel-handle=5416 /prefetch:14
  2⤵
  PID:1012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3728,i,58124074270994351,815796193201783076,524288 --field-trial-handle=2324,i,15514308092894923236,5655405141346857945,262144 --variations-seed-version --mojo-platform-channel-handle=5428 /prefetch:14
  2⤵
  PID:6100
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6100,i,16748101605930474575,13152257990293269679,524288 --field-trial-handle=2324,i,15514308092894923236,5655405141346857945,262144 --variations-seed-version --mojo-platform-channel-handle=6164 /prefetch:14
  2⤵
  PID:4528
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6100,i,16748101605930474575,13152257990293269679,524288 --field-trial-handle=2324,i,15514308092894923236,5655405141346857945,262144 --variations-seed-version --mojo-platform-channel-handle=6164 /prefetch:14
  2⤵
  PID:2068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4244,i,7763832611540684368,8797703571465450078,524288 --field-trial-handle=2324,i,15514308092894923236,5655405141346857945,262144 --variations-seed-version --mojo-platform-channel-handle=4480 /prefetch:14
  2⤵
  PID:4920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5080,i,5363860493270041443,2524518199999025223,524288 --field-trial-handle=2324,i,15514308092894923236,5655405141346857945,262144 --variations-seed-version --mojo-platform-channel-handle=5060 /prefetch:14
  2⤵
  PID:3804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5084,i,4848094100757174904,5110357877278428906,524288 --field-trial-handle=2324,i,15514308092894923236,5655405141346857945,262144 --variations-seed-version --mojo-platform-channel-handle=5072 /prefetch:14
  2⤵
  PID:3252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5656,i,7932873118740322151,1445669225251628372,524288 --field-trial-handle=2324,i,15514308092894923236,5655405141346857945,262144 --variations-seed-version --mojo-platform-channel-handle=5584 /prefetch:14
  2⤵
  PID:2712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=3036,i,9861264528675396662,15850296843840600625,262144 --field-trial-handle=2324,i,15514308092894923236,5655405141346857945,262144 --variations-seed-version --mojo-platform-channel-handle=804 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3108

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3400

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2920

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

2d000d7c-d51f-41d3-a95f-481ad106f167.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\2d000d7c-d51f-41d3-a95f-481ad106f167.tmp
Size 34KB
SHA256 4fcb49e388eb8f6ff4cf7aec79090d008ee4ea82a2cc0a85ac3f8da3cc14e04a
MD5 54cffe37e34c19c4e34cc12d2cfa0ac5
SHA1 dd28707090e1a465922263714e9be1d7fbef8bd1
SHA512 9a6e0badaab01c1e43e70c063d947db3d02a19eac5a46c3d06a48c253342c1c605e6728a34bd2a2e1383380179628a783a3cd29cd881dfb7e2de0411b5f3345f
SSDEEP 768:ky3p2cZ0rfZWc7SB8Bw4Ot5AEl94BHYjHwY4YGHUD2:ky3KBVa5AEncHYjQY4YUs2
TLSH
T112F2BE79DC6989238CF6E7C6FA07360B6EF18153E9851EC0D8DC7A0E1A4755E230781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3f37caa7-e269-4006-ab5b-8417ca7a9183.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\3f37caa7-e269-4006-ab5b-8417ca7a9183.tmp
Size 36KB
SHA256 31957882d7560953c94b7d35cde6ddd6913ef36cb151389eb7e7867ede1e00d5
MD5 c4684c05e7ad23db4452d1641edb6dd0
SHA1 e0a6d4d7e387ed210ce814a4bc436342c9674c41
SHA512 18b1065b59facb0bad99cb8738cc955eda3a4395eece0ce47002eaa8987ae04c3ca3b807233096fc2e976befda0e01db49b0beca56032d787f8e74c7bb05c00d
SSDEEP 768:pUFQB3BwgH2cZ0rfZWc7SBvBw4Ot5AEl94BHYjHwY4YGHUD2:p3B3fBVa5AEncHYjQY4YUs2
TLSH
T1B203AE76CCA889779CFADBC5FA1B32069EF18193E9816EC0E9C8690D154759E1307C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

65690d7c-5af4-46e6-a822-28997b0006ff.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\65690d7c-5af4-46e6-a822-28997b0006ff.tmp
Size 40KB
SHA256 7ffdaee1c59bfb1560c9e60a0b5e24210e993701531e176ab13e24b217ee8de7
MD5 3f62ebea8abab95be07d3deacac7923a
SHA1 551496134c5b9a306cdb4bd043d080875bbd728a
SHA512 ad1ba7db95c1a9d96c55a1736c6ec51eb06126f2d60cfe0faab201de313de2d28b3f055f78d53ad2515392a900a29815156e92b756530534530194a1e38c682c
SSDEEP 768:G/UxvxjgC+T3H2cZ0rfZWc7SBXBw4Ot5AEl94BHYjHwY4YGHUkI:7Zj3+T3HBVa5AEncHYjQY4YUrI
TLSH
T1A313CF39DC6959238CF6E785B60B378BAFF18563E4812DD488DC6D0E0A8725E230780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9f742008-23f6-43ce-b2ad-6af9efb2d025.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\9f742008-23f6-43ce-b2ad-6af9efb2d025.tmp
Size 38KB
SHA256 785fb32888d1a050d411a00b7a6e69c74d9ddc436186ecd9d523a7d4795c9ce1
MD5 6df66bf14ddd49545de218e49d7d6683
SHA1 0acf86d2c57355bc6253e155fa621c0739154e3b
SHA512 7efcc9ad7a092e21bb6e7a6bbf40aa0290bc2d92313d0de87049d68acbf458dabc48270c78c6bc1260ea941f1dcf8bf049734a9005eefd5e66e3313cb89214f9
SSDEEP 768:z/UxvxjgC+b3lVcZ0rfZWc7SEBw4Ot5AEl94BHYj/UAFTN/:GZj3+b3tBVa5AEncHYjcAFB/
TLSH
T10203BF39DCA55D23CCF69785770B7387AEF18463A5C12ED48DEC2D1E1A8725D130780A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 59619e39464102fa53912dd9a15237954c5125d546c48a72b8bdb58ad9eb9753
MD5 f80a0057aa895d42a15b594d07d09f76
SHA1 2478a67794a5362ccf809b7a2c8f64a03c72fa32
SHA512 4a9ec8459a11d9e573883d5eacfd5386cf838bad2bd0b33ff1b37017f5f2cf6bfcef877344a87892e3c49ce624e0cae52791ded1593b8233138de87fd2e5e634
TLSH
T1C6D02B75F668E9D2C140043C00410920706035066F6801C206030038040324B55022C7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 91a032a4ffcdd10503afdeb5220904a7e7cea899c3a55606bb3e90180ed9472e
MD5 f04321ebc7aa4a8f91bb5362a6c4c79b
SHA1 c98d3283204e4a0453e416a04c3ae56e4c3feed8
SHA512 c2faa7fae738d85299e6f63b9eaf33c25db5a255ea3f5f6a8551842b7e0cec73c7e8b5e86a9cfb9714287d2b382b57b7249bc70671dbfde2815d5937243570af
TLSH
T1DED02B71F678E8D2C140043C00420920705035061F6801C207034038040324B55012C3
MD5 SHA1 SHA512 TLSH

Submit Download

031a13d3-3bb1-442b-84a1-45190221e984.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\031a13d3-3bb1-442b-84a1-45190221e984.tmp
Size 23KB
SHA256 c7dfb1dea819de013cfa49901abfdf2cc33c0523ca7961c8e6fe4aca71f453ff
MD5 87a7df05a18ed713180f995ddcdb5ae4
SHA1 e6ab6f31f5987aa2f9043886c57becf43294012b
SHA512 4be1a2ddd2782af7da557d88499520f51bdf0d001a7fd7516a46bc452d9ca19c52b113b58baa7171970b80a5414a27a2419e62569260e6b98e7586dd41328295
SSDEEP 384:XLMDmVifCtgvdFfnvKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVC69lLRRSrohZI:XIDmVoWgvHfnv8F1+UoAYDCx9Tuqh0Vx
TLSH
T110B2EB2B600DC77F4F800A9DAC296FD77D9801CB9A588D4047FE994C02D77EA921A4DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

53546687-3fd1-44a3-b9e0-814a31258ebe.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\53546687-3fd1-44a3-b9e0-814a31258ebe.tmp
Size 10KB
SHA256 dce44190ead0224705e28d9c2fe03ba816dcd3092219be7e8b7300d13ab11174
MD5 faa8059d8cea27c85cf26b7404990865
SHA1 58441eec17c94d81c4d6b5b4c4ea84bdda5519f3
SHA512 99a7b7fb647c01997c040b4985d291f7575e2d34d73f2a6325f605c21205f44ecc5ef0b293c63b781ab8bf1479c8c4550d83e2d2371a7de4da1831a42952874b
SSDEEP 192:sxRyRPbY/fys1emzoA8p4p/g6+WNIYi7aQDGXIgDYJ:sxRyZY/fys1ebY/5ITCI
TLSH
T133329615AD28A97B8CCBE21DBB657F53D2F95032A5D11E48B6FC961C04EBACD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6e693956-509e-4301-8c87-1025ac4dac6b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\6e693956-509e-4301-8c87-1025ac4dac6b.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 e2302cc4608100403f5783658c6ea0d9dfee8cee562ef7db92c009ca13a1a1bb
MD5 6c5334e1b298ef8bf8441a922eb5be12
SHA1 76c9a332005a1ffcdff978dd8da139485e62e976
SHA512 05d1749e62d39556dd9800028abc75d72eea5931c9fa1bfd47dcc7436b278b60b5a9979070215c9bf3ca28e582f047f15bd7b846b04860fb7f7c8f0819667dec
TLSH
T1585171809691C46DF7D90132F6E2CC873E30DEC811A3CF1385D8C9F869867A640E5DE8
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 9cb6b42cdf02ed2bd1b537bbdfa7a5d12303c73ddeac137ac9f3984d3a1a6b4d
MD5 bf255092a843431629f88c9d0688f78a
SHA1 5d74d4e619226658bb080405214121048456be39
SHA512 07116d931d56db4b08ac8b52a7d6b2a44d6c888111abdfcd30c87c4651dfda5c5de481e80010d36cd5fa51c4658b569aabb551ccaeae092b1c4d7ea40f989643
TLSH
T1E55181849691C56DF7D90132F6E2CC8B3E30DEC815A3CF1385E8C9F868867A640E5DE8
MD5 SHA1 SHA512 TLSH

Submit Download

ffabe51d-f01a-44f3-af1a-7a27f2a55501.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\ffabe51d-f01a-44f3-af1a-7a27f2a55501.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

00e388f7-e9c2-44f1-b965-4cf1fac953ec.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\00e388f7-e9c2-44f1-b965-4cf1fac953ec.tmp
Size 1KB
SHA256 ab480dc319b369e4fe89d5bcf41d061d8b8f864963ac9faa90efde350a83aaa5
MD5 4cd4a3171820afedbe44d08e1857ee94
SHA1 78639f95d4b4a064b90ab5dbea9bb07faab08af1
SHA512 87e25f19d2b1ef009f27c7bfe3c0ded8c11332866fa0944b9ba823a87d96ffad341b45c3fd244b5d8dc2cdc4e47fbb1e79f083eeaae2753dd227669c341b4af5
TLSH
T18D41C0F7C3E8866EC90196F4AA14AF2BCE1D0915832C3C5AC9D4AF1B93E34B1E14195F
MD5 SHA1 SHA512 TLSH

Submit Download

51c04204-8d97-4468-9d73-f5971d6edf84.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\51c04204-8d97-4468-9d73-f5971d6edf84.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

e7e36aff-513e-40fb-901e-097db487328a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\e7e36aff-513e-40fb-901e-097db487328a.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

a5b0fb4d-e46b-48af-a4c9-570cefafcb9c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a5b0fb4d-e46b-48af-a4c9-570cefafcb9c.tmp
Size 10KB
SHA256 953fb66a0cb7073f929b743674e8e543a5c76e044455cd66bdf0c120b0ef2a5d
MD5 d4e37bc04c553fee6dd15e0ee81e87ab
SHA1 243a7baf731e7eda3ff15f1404ece3bbd126a053
SHA512 02bb77b0fd63bb29ea6aeae90b0e2df92a33ebd8d2830c9dc9ec3bcc70c4419e680557de07bf479d9afed8b7da80bd5c8aad3995b5f50ec89b6d33e3d1f17086
SSDEEP 192:sxRJRPbY/fyspemzoA8p4p/g6+WNIYiVaQDGXIgIJ:sxRJZY/fyspebY/5I1Cs
TLSH
T193229515AD68A97B8CCBD21DBB65BF53D2F91032A1D11E48B6FC961C04EBADD120740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b5e399fa-4a52-4f7d-b77a-d443a8ae40bb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b5e399fa-4a52-4f7d-b77a-d443a8ae40bb.tmp
Size 10KB
SHA256 4135eec0e1bedc272e95a1662029d03648f757344851ed0037c814d47795bde7
MD5 8004b8ca7bafadb5dfe9028f9f78c7fe
SHA1 c4e024d4403ac6c045e66e943a5447e3885852e4
SHA512 be61cabaafdea65e5f23fc923d286f80c270665ff72407e85aeec1e9de69211becc07abfbcbfc70d9fab3326ada134b338ea045281afdda40717ee4d7611033e
SSDEEP 192:sxRyRPbY/fyssemzoA8p4p/g6+WNIYiVaQDGXIgDiJ:sxRyZY/fyssebY/5I1CK
TLSH
T135329515AD68A97B8CCBD21DBB65BF53D2F91032A1D11E48A6FC961C04EBADD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5b1b4fac-631e-4a1d-bcf0-d92f2c42c20c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\5b1b4fac-631e-4a1d-bcf0-d92f2c42c20c.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

aaa2bd6e-2856-4669-bb3e-48ac8fe9323d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\aaa2bd6e-2856-4669-bb3e-48ac8fe9323d.tmp
Size 34KB
SHA256 1264417ac22d1e2337558b80d4fae7b87ced0de551d00a2046d0315f47c3927a
MD5 621f0192598e2deeea4036a03d7a2b2c
SHA1 9e8ec5336d988e172c1cf9a02f8a94e74b3b293b
SHA512 7f5821a540ceeb270fd4a6467495cba544c59fc9746824d2a1f0017bc3cd9c8b5fbaaf26c0dfec5a0ab06cbec19452753114c6051fbf8b278f8d6e7bd5f36519
SSDEEP 768:ey362cZ0rfZWc7SB8Bw4Ot5AEl94BHYjHwY4YGHUD2:ey33BVa5AEncHYjQY4YUs2
TLSH
T101F2BE79DC6989638CF6E7C6FA17360B6EF58193E9811EC0D8CC7A0E1A4755E230781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1055ef16-7c45-4e26-8ff5-82de86601f51.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\1055ef16-7c45-4e26-8ff5-82de86601f51.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download