7c8839bb09e3300a890e8a6e2e0ac9c4c2f75ca6fe5ac0e75472203866ed9772

Analysis

max time kernel
148s
max time network
129s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
20/10/2026, 12:55

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 9KB
Sample261020-p52eksbf72
SHA256 7c8839bb09e3300a890e8a6e2e0ac9c4c2f75ca6fe5ac0e75472203866ed9772
MD5 392de587e2942457c2fc414d403aa988
SHA1 bf856986af5bf72242a2e3f31e6114be4153e54c
SHA512 454aa28c7d3ddf82bffd4c0adda80981170e341939bc373997e58bedc6c8beca3e4cc687d5dfb69eb086da5cfe2c2657f0605852637c1f78826e410631a1f1d4
SSDEEP 192:zOsNq/lXB0c6PgMhwtWoxzxUwCcxjMtxuLEx99VSExXrwpLYltvNw3WGRmvQxKqW:zOoqdXB0c6PgMhwtnxzxUwCcxjMtxuYp
TLSH
T1CF120A1485CC1EB70583229BFA51B69E90BFCDB9E366E918F0FB08596AD1C8C97030F5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1968	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-895009113-1202185046-1686627690-1000\{14851AF3-2F4E-4E6F-87AF-A227FDCAA342}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1592	msedge.exe
1592	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3044	msedge.exe
3044	msedge.exe
3044	msedge.exe
3044	msedge.exe
3044	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3044	msedge.exe
3044	msedge.exe
3044	msedge.exe
3044	msedge.exe
3044	msedge.exe
3044	msedge.exe
3044	msedge.exe
3044	msedge.exe
3044	msedge.exe
3044	msedge.exe
3044	msedge.exe
3044	msedge.exe
3044	msedge.exe
3044	msedge.exe
3044	msedge.exe
3044	msedge.exe
3044	msedge.exe
3044	msedge.exe
3044	msedge.exe
3044	msedge.exe
3044	msedge.exe
3044	msedge.exe
3044	msedge.exe
3044	msedge.exe
3044	msedge.exe
3044	msedge.exe
3044	msedge.exe
3044	msedge.exe
3044	msedge.exe
3044	msedge.exe
3044	msedge.exe
3044	msedge.exe
3044	msedge.exe
3044	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3044	msedge.exe
3044	msedge.exe
3044	msedge.exe
3044	msedge.exe
3044	msedge.exe
3044	msedge.exe
3044	msedge.exe
3044	msedge.exe
3044	msedge.exe
3044	msedge.exe
3044	msedge.exe
3044	msedge.exe
3044	msedge.exe
3044	msedge.exe
3044	msedge.exe
3044	msedge.exe
3044	msedge.exe
3044	msedge.exe
3044	msedge.exe
3044	msedge.exe
3044	msedge.exe
3044	msedge.exe
3044	msedge.exe
3044	msedge.exe
3044	msedge.exe
3044	msedge.exe
3044	msedge.exe
3044	msedge.exe
3044	msedge.exe
3044	msedge.exe
3044	msedge.exe
3044	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 3044 wrote to memory of 4944	3044	msedge.exe	83
PID 3044 wrote to memory of 1968	3044	msedge.exe	84
PID 3044 wrote to memory of 2176	3044	msedge.exe	85
PID 3044 wrote to memory of 5048	3044	msedge.exe	86
PID 3044 wrote to memory of 2176	3044	msedge.exe	85
PID 3044 wrote to memory of 2176	3044	msedge.exe	85
PID 3044 wrote to memory of 5048	3044	msedge.exe	86
PID 3044 wrote to memory of 4324	3044	msedge.exe	87
PID 3044 wrote to memory of 2152	3044	msedge.exe	88
PID 3044 wrote to memory of 4324	3044	msedge.exe	87
PID 3044 wrote to memory of 4324	3044	msedge.exe	87
PID 3044 wrote to memory of 2152	3044	msedge.exe	88
PID 3044 wrote to memory of 2152	3044	msedge.exe	88
PID 3044 wrote to memory of 1568	3044	msedge.exe	89
PID 3044 wrote to memory of 1568	3044	msedge.exe	89
PID 3044 wrote to memory of 1568	3044	msedge.exe	89
PID 3044 wrote to memory of 3704	3044	msedge.exe	90
PID 3044 wrote to memory of 3704	3044	msedge.exe	90
PID 3044 wrote to memory of 3704	3044	msedge.exe	90
PID 3044 wrote to memory of 2516	3044	msedge.exe	96
PID 3044 wrote to memory of 2196	3044	msedge.exe	97
PID 3044 wrote to memory of 2516	3044	msedge.exe	96
PID 3044 wrote to memory of 2196	3044	msedge.exe	97
PID 3044 wrote to memory of 4576	3044	msedge.exe	102
PID 3044 wrote to memory of 3324	3044	msedge.exe	109
PID 3044 wrote to memory of 2028	3044	msedge.exe	110
PID 3044 wrote to memory of 1748	3044	msedge.exe	111
PID 3044 wrote to memory of 5040	3044	msedge.exe	113
PID 3044 wrote to memory of 5040	3044	msedge.exe	113
PID 3044 wrote to memory of 5068	3044	msedge.exe	114
PID 3044 wrote to memory of 5068	3044	msedge.exe	114
PID 3044 wrote to memory of 1592	3044	msedge.exe	115

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7fff6a0bc188,0x7fff6a0bc194,0x7fff6a0bc1a0
  2⤵
  PID:4944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1884,i,14754902678759222375,3818967510742151257,524288 --field-trial-handle=2936,i,3276117771687652005,6095816292969603400,262144 --variations-seed-version --mojo-platform-channel-handle=3016 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1784,i,235555946737445173,15803741991370976199,262144 --field-trial-handle=2936,i,3276117771687652005,6095816292969603400,262144 --variations-seed-version --mojo-platform-channel-handle=2912 /prefetch:2
  2⤵
  PID:2176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2340,i,16219785950263918836,10522952238609612371,524288 --field-trial-handle=2936,i,3276117771687652005,6095816292969603400,262144 --variations-seed-version --mojo-platform-channel-handle=3024 /prefetch:8
  2⤵
  PID:5048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3460,i,7592822755664472289,14701274726363958085,2097152 --field-trial-handle=2936,i,3276117771687652005,6095816292969603400,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  PID:4324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3464,i,1294993634408092802,11534273899370004658,2097152 --field-trial-handle=2936,i,3276117771687652005,6095816292969603400,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
  2⤵
  PID:2152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4216,i,15194579632109681243,8807672298613979795,2097152 --field-trial-handle=2936,i,3276117771687652005,6095816292969603400,262144 --variations-seed-version --mojo-platform-channel-handle=4212 /prefetch:1
  2⤵
  PID:1568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4220,i,11468855623346250160,11915905478889521302,2097152 --field-trial-handle=2936,i,3276117771687652005,6095816292969603400,262144 --variations-seed-version --mojo-platform-channel-handle=4372 /prefetch:2
  2⤵
  PID:3704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3592,i,8076548490997884133,11512651143696496333,524288 --field-trial-handle=2936,i,3276117771687652005,6095816292969603400,262144 --variations-seed-version --mojo-platform-channel-handle=5212 /prefetch:8
  2⤵
  PID:2516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3508,i,302325232740123063,3124606894590726057,524288 --field-trial-handle=2936,i,3276117771687652005,6095816292969603400,262144 --variations-seed-version --mojo-platform-channel-handle=5264 /prefetch:8
  2⤵
  PID:2196
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5744,i,12397715974829607986,6216020095081570300,524288 --field-trial-handle=2936,i,3276117771687652005,6095816292969603400,262144 --variations-seed-version --mojo-platform-channel-handle=5896 /prefetch:8
  2⤵
  PID:4288
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5744,i,12397715974829607986,6216020095081570300,524288 --field-trial-handle=2936,i,3276117771687652005,6095816292969603400,262144 --variations-seed-version --mojo-platform-channel-handle=5896 /prefetch:8
  2⤵
  PID:4576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4568,i,1986685576393876460,10470675018872124480,524288 --field-trial-handle=2936,i,3276117771687652005,6095816292969603400,262144 --variations-seed-version --mojo-platform-channel-handle=4488 /prefetch:8
  2⤵
  PID:3324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4552,i,7692698610861434015,6607936649507938408,524288 --field-trial-handle=2936,i,3276117771687652005,6095816292969603400,262144 --variations-seed-version --mojo-platform-channel-handle=4516 /prefetch:8
  2⤵
  PID:2028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4556,i,4651961970416848158,12291761378369646840,524288 --field-trial-handle=2936,i,3276117771687652005,6095816292969603400,262144 --variations-seed-version --mojo-platform-channel-handle=4512 /prefetch:8
  2⤵
  PID:1748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5188,i,4966129720843862566,15423817609597688512,524288 --field-trial-handle=2936,i,3276117771687652005,6095816292969603400,262144 --variations-seed-version --mojo-platform-channel-handle=6260 /prefetch:8
  2⤵
  PID:5040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5932,i,1262312034305460831,14185195870265842809,524288 --field-trial-handle=2936,i,3276117771687652005,6095816292969603400,262144 --variations-seed-version --mojo-platform-channel-handle=4556 /prefetch:8
  2⤵
  PID:5068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5536,i,674498719491881070,14245546210108938620,262144 --field-trial-handle=2936,i,3276117771687652005,6095816292969603400,262144 --variations-seed-version --mojo-platform-channel-handle=5756 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1592

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4412

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

0535b4fe-3b25-4a67-9790-dba9516dd0a2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\0535b4fe-3b25-4a67-9790-dba9516dd0a2.tmp
Size 18KB
SHA256 8dbf9c335a697c2b355e7fa2dadd552fcea6e400517fc1a7b45060c37dfe6e0c
MD5 ac8f7630ace7f776234bacd13de906fc
SHA1 bb9f8fdb7ad3cc661c39cf6476372bcd7478981e
SHA512 8901787034fc7a86b518d5c9ff73a401d062dea3e4266a60a058a8f3f7398f5d58e008a25563e5ead49b1f6de99f31b202353b1461495e12d3c3ddc6eba6a2e3
SSDEEP 384:DQkUSv0sN72uW9bswqh//RjR11P7/KIIl5:t000i/7P7yLj
TLSH
T186826C356C746C7B8EA39650F18B35139FB0C26BD6C92F649ADDAB2D01DA1DC2307922
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4eaa403a-2fd4-42f8-954d-5a5005b0f579.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\4eaa403a-2fd4-42f8-954d-5a5005b0f579.tmp
Size 8KB
SHA256 a71142e3af6105d1e08295351e30c259ccb721d7a8d66f08acee75be2d2062bb
MD5 27b66531ffcc87265784aa1b549eaa51
SHA1 dfa300aa00c0c43e62c49ddaf5830f3ce766677b
SHA512 f016ece66ed2c1b1a4f88f88b02c716fcc81e2d2da8b319f4cc5ce19267db0cffdc9d643a5797abec2d4513321d7c20ac758de41caa331b905c4d1283fb9e93a
SSDEEP 96:KqONkWQsjpfbUmjH5ih/cIPURHl8h4otop5kaDqBKP4v+Y1xf//ojduxfP7wFBC/:BONu6JUm0QmiUyl6so//F7+BCE4U6
TLSH
T19302E939AC786C7B8EF3AE45F08777239FA4116BA6911F40DAD82E1D01D715C1307826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

976ceb03-710e-435e-b968-f7fcb422e190.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\976ceb03-710e-435e-b968-f7fcb422e190.tmp
Size 18KB
SHA256 b6adec7e1d47fadb3e8170f61ac8439049d9252aef2e6bce079a2ba3801ea244
MD5 2de342c6c269a3b6dbb172a9edd245bb
SHA1 4dbc871f37e9ea6416e947a8a70ebda30ba514b0
SHA512 b2778b142ccff2f55b0165ec764cdc6dcfcc47736dec02ba8c608faee2a384e31c084129588155cfaa8984d116b1b184946071b35f46db3ed1213e635cd13fd9
SSDEEP 384:DQkUSv0sN7/uW9bswqh//RjR11P7/KIIl5:t0/0i/7P7yLj
TLSH
T1AD826C356C746C7B8EA39650F18B35139FB0C26BD6C92F649ADDAB2D01DA1DC2307922
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 928eda824fe964cd23927cf06086d7d24e20a3a5092daf1acee5b632c76c962a
MD5 4ac43ee6512ba8635b7ba6bd015c291b
SHA1 5f9e2474b00ec0e2a9472c049fbea550e26309aa
SHA512 e5ebf9e92458f66e31e080121135313e828b8ebade0bc0e085221ae0d4f5afe0d2035c566590cbfb5902d96f17befe7b24310b4fb9e647b999113175af800ebc
TLSH
T17BD022B2B3A038CFE300083302A083BA2C0A80F300FAE2208C30E08C0BCC02AC283880
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 93c2ca3ce74eca17f27aa90cc3323bb8d6aea5c365862a01a512ce14b9f825b4
MD5 e8a3239e6b22580d77fb537c7bea1fab
SHA1 a99ffe9234c27e560f1c607d3b6c6507928368a3
SHA512 17b0e6f99943a02540148a685b91c62eafca3ef65d9a628bfb59d3b69a93b27c7d3ac42bdc808c52b5b1eac9bf4466a1099df17cd3f5df0bbd5b5282ca8b904e
TLSH
T170D0247133D03CCFD7000433015043751C0540F300F5D3104C30D04C07CD055C143440
MD5 SHA1 SHA512 TLSH

Submit Download

40d3d645-ab8c-4a2d-98f0-2885698d1ca9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\40d3d645-ab8c-4a2d-98f0-2885698d1ca9.tmp
Size 27KB
SHA256 6eb8bcc0f339159841ce4883a21c351076a61b372cb72c38e96a16fe3b2711d1
MD5 9775ff4667a34963862344c44da7b1f0
SHA1 7a938ac647c0b4dd1befaef80126d17e759367e6
SHA512 03ef7aadffc13b4a52c64e8e2f620dd5f622e0213b64d9ca917f799f835994c5b3a45b9561087878db07648b41a59f2ed4e814f6eeb11455e8893a279f88e0bd
SSDEEP 768:YCKlm7QWvUYe08F1+UoAYDCx9Tuqh0VfUC9xbog/OVh/LlpPs/3robE:YCKlm7QWvUYe0u1ja8/L/E/kbE
TLSH
T1BDC2FA3B640CCB7E4FC05A9DDC5A6F976EA802C7A6588D4047FA984C02C77EA91274DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6e86cdb2-217f-4c3f-b641-39c3eda4c43a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\6e86cdb2-217f-4c3f-b641-39c3eda4c43a.tmp
Size 10KB
SHA256 34c76481828badb0f666a96d1a31c2d4311817f3665c18c70aa7327571288ca3
MD5 ced3373eb41225a1c48266c08e1005aa
SHA1 27c9a724df2ac61f6907c349c2420240e0495bdb
SHA512 46d5294414bd0ba9c6e33c0298592e1a9808a2bfbc44d6e975f8f529896eeb09ae6bccdf023c93e2bd4ecc5b516efb5c1415dfdde78d4d98c9a577033fb90088
SSDEEP 192:sxZVRzW2/fWs6OzIdpHHHW6+WNGY36+ISgIg58J:sxZVs2/fWsDsnHbGXpm
TLSH
T14222C8516E28697B8CCBE20DBB65BF13D6F9503661D11E48E6FCC61C05E6ACD220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7a1ec69f-0dcc-45d0-9a90-5b53dd4a01ad.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7a1ec69f-0dcc-45d0-9a90-5b53dd4a01ad.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

89a708d2-9962-4437-b3da-7e380b8c7482.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\89a708d2-9962-4437-b3da-7e380b8c7482.tmp
Size 9KB
SHA256 d395df538b1f211b077f0839bb29df6da7ad45e8ab7922bf23cedfe9ba9ef566
MD5 130bbd1e1989c0546359259431590b5f
SHA1 f4307d04ae6dbb30dc1b4a781e6ac5abaa39fd09
SHA512 b92b0b2a651b265e0667a62d71e2ba3a9ceb8825082c9dcec42412998da0bb883cb8a7140806fb4e0cb6ae80aee6bca837a91882eae7cb537960c26cb52ff06e
SSDEEP 192:sxZVRzW2/fWsYFzIdpdHHW6+WNGY36WzSgIgrJ:sxZVs2/fWsSsJHbGXW9
TLSH
T16822C8116E28A97B8CC7D20DBB65BF13D6FA5036A1D11E58EAFC861C05E66DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\000003.log
Size 33B
SHA256 68c7ad234755b9edb06832a084d092660970c89a7305e0c47d327b6ac50dd898
MD5 f27314dd366903bbc6141eae524b0fde
SHA1 4714d4a11c53cf4258c3a0246b98e5f5a01fbc12
SHA512 07a0d529d9458de5e46385f2a9d77e0987567ba908b53ddb1f83d40d99a72e6b2e3586b9f79c2264a83422c4e7fc6559cac029a6f969f793f7407212bb3ecd51
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG
Size 293B
SHA256 dfba436234d34436ea2f129b71dfb221a821a47625d01cd564706076b3eaeb44
MD5 0d41fa3b770f4c502827722d81db7f6c
SHA1 7b010bbdcb6a463975a56b05313db3ea13a9353b
SHA512 122254e8e4321dfeef8bcb9f5f5e822725601bcda38499bdf9ddddf93065291125b3e15b0b387a7e4fcdcc7a5029e2c44a8a182e3d56c00fd501fa8f8b4a1fb7
TLSH
T155E0C24944C5C23B9208A4D70168B38EC694B35A96D5BA0E0F10CD4C324A88CA9966A5
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 b1453c927864cbb92f4a3ac8414fd12054a79dbe4603f4b354e0c1309aba2dd0
MD5 8d726c84c5952b3469fd4ec906962461
SHA1 d9e5f053abc7e9474875d9b25d06a40d18bbb7fa
SHA512 7145c491757d5b0550fcc079a0162dc77bef7efa0fbd4a94f5838dcc9c67f2406a091e1a6529c05bd8ac7767f8a9ebe1c8d5d2bf94c35b257ccc56ec67f0279f
TLSH
T1485154CF97D14450F75A7A7482DD7E8732B759C34A8BBFC12494C9B71807F148825C98
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 5b98ba75aa8fa3a2e2d897df634a9843a43e9b071e12aae56916e8f44ad7bb04
MD5 0827110c49871d03fb5a17f696bdd6d3
SHA1 474e9ebae295a73708b75564c89e880b3a89e3d4
SHA512 081c461df315bbbeeba73ef3791da6622b99a979933edbbcca4e40013f47d0731e1c79a0707471904e4c8624b519a2757277f78db1e52583d0c0897a83bf1a86
TLSH
T1035174CF87D24490F75A7A7481EC7E8B32B759C24A8BBFC22494C9F71807F048825C98
MD5 SHA1 SHA512 TLSH

Submit Download

193629db-2b5b-49de-b952-9c2f1f25da63.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\193629db-2b5b-49de-b952-9c2f1f25da63.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

1d26f18e-2daa-43de-971d-6678515021cf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\1d26f18e-2daa-43de-971d-6678515021cf.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

5591af0d-4caf-41e2-9e87-5880658f8d2b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\5591af0d-4caf-41e2-9e87-5880658f8d2b.tmp
Size 949B
SHA256 d1933dea77473d86d6f686268454b81d78543cd5f8719b7400819fd97eea78a6
MD5 bd262602001f4d8a459b2d857565b8b9
SHA1 e2c409fe2478221bac2e5cd440f2ad4a7e13661a
SHA512 e0a61723b1aa6d1231de95bbab2fc81f5acc8cffaedc86b70d277f8f464802ff0ddaef862acdf84df1637b4a10090eae62688192681fd6b0668f1240f4458b66
TLSH
T1111197F3C3E585AE890157F05A24AE2BCE2C060642283C1999D8EF2B93E3069E00255B
MD5 SHA1 SHA512 TLSH

Submit Download

74cbac44-abef-43e9-bef0-0407e1dbf6fc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\74cbac44-abef-43e9-bef0-0407e1dbf6fc.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

b6d17bc2-c028-4045-a7c9-fbf50a9d4baa.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b6d17bc2-c028-4045-a7c9-fbf50a9d4baa.tmp
Size 9KB
SHA256 809d40cafb34d898c4ff1e50b4f83db0d7458712ac3fe2fc88d44901169e3a75
MD5 0805b0fae59755fb02d5c9efeecb7c29
SHA1 90c0d055697bbd44b25c3830b3b3d30a6f82a975
SHA512 15ec840329cff5439ef0fffb3124414cbead823b28e0503cb3cf95dc24992408eb8f5fdc935cd86c0db52d54e61c6482ff49d859cdb950c1d358bfa1eada8d24
SSDEEP 192:sxZVRzW2/fWs6FzIdpdHHW6+WNGY36WzSgIg5WJ:sxZVs2/fWsAsJHbGXWs
TLSH
T15B22C8116E38A97B8CCBD20DBB65BF13D6FA5036A1D11E58E6FC861C05E66CD220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d6d17a92-8500-4787-8685-2820ca467ab0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d6d17a92-8500-4787-8685-2820ca467ab0.tmp
Size 10KB
SHA256 fb4ad148883edd9da2ecac3c2f581a6a06ebbbbe38e7173d9083e87d667e90c1
MD5 8b11ea58decbdb91710f534f0102620d
SHA1 67e73dc1680d3e58412957872bf4d059e3018041
SHA512 6ee4e262df508ce2106d3723f4d76fc1f3990e99faa8148b25228d7ff19a8407a84c8e15679d0a382b7cbe5a28b5a1ecefea5d6c25bef896f6a9cfb7cb30755a
SSDEEP 192:sxZVRzW2/fWs6OzIdpdHHW6+WNGY36SXSgIg58J:sxZVs2/fWsDsJHbGXMm
TLSH
T1F222C8516E28A97B8CCBE20DBB55BF13E6F9503661D11E48E6FCC61C05E6ACD220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f8e45a25-331d-4bfa-a0bd-5f5346d02693.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\f8e45a25-331d-4bfa-a0bd-5f5346d02693.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bd1cbf89-62ff-4aec-8069-09f2cf59d9ac.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\bd1cbf89-62ff-4aec-8069-09f2cf59d9ac.tmp
Size 8KB
SHA256 2041234c809a508e4f9a33009b56744c79afb68761bae6afc814a93d44c91e64
MD5 c4e7c5a5da10d377f6c38da3f3e5a8da
SHA1 7e72a8c98df9d582df846fbaf6b3fa949b967629
SHA512 233a276d0ee73ecf20f6fd95708006a57f624f6a0f950d6f158bf8e2e752775b940aaef5a1e3a20571cd8432de7eb43a7bd95bb516869132f0cd1ef6f164b074
SSDEEP 192:xONe6JU/QmiUyR62o//F7jfez2fNxPSqOIU6:xONe6+B32o//RjRDP7U6
TLSH
T127120B35B8B8AC7B5EA39994F48336135EA4426BE7C96F94D5DC6E1C01DB19C130B823
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

da3d8287-6a76-4eec-b5ae-08f3def0f91d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\da3d8287-6a76-4eec-b5ae-08f3def0f91d.tmp
Size 21KB
SHA256 432209259596510a071e61e938b51f773848879ecce5faaf636bdc05c723c639
MD5 1ef08c8e8ef152cdfcb46d0e6da93011
SHA1 1a69fcdf5cc59f6c909175130f3199fb8bdc5861
SHA512 881b0861da27c0295f0294ff6650691d5bc94736be86577fa6b5510c4facd99a1e0e5551902490cf38055347f824c454b6eea7a6994cb26e12ae13c400ba0e1c
SSDEEP 384:CiFzQkUSv3zsNF8TUNTUlIl/uW9bswqh//RjRDpP7/KIIl5:JFdjswgg0i/BP7yLj
TLSH
T1FFA25D325CA4997B9EB79B40F54A3503DFB0826BDAC5AE60E7CDAA1D01DB1DC1307D12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9d795c7d-7fbe-4ff4-8481-a31eef2027a4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\9d795c7d-7fbe-4ff4-8481-a31eef2027a4.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 136fd588979ff73615f9721ef5272740c686d8f2399fe1ac1c64c614b77bcb90
MD5 b64e67bd94a1025f0009929df41157ca
SHA1 188cba2b20fb3c6ec4e3616533f370075104179c
SHA512 483122c52e628772cab26c6a5a1e1d7036b727a90c979a92c4c81bbe2fd6be47933be79991faedb2e546451802ff47d3a1244992c6bc9c800d2cb96807d97620
TLSH
T1C2410C5DA6F91148B3B77E1A9BF7A96D887E78732E0BD55E10110D4F0A27A00C871737
MD5 SHA1 SHA512 TLSH

Submit Download