dbe56391d38fd5931a6d149249f1113024b8aea2af25fa8674fc5c3e99cf4c84

Analysis

max time kernel
148s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
20/10/2026, 12:55

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 2KB
Sample261020-p5z7hsbf64
SHA256 dbe56391d38fd5931a6d149249f1113024b8aea2af25fa8674fc5c3e99cf4c84
MD5 cb1fc49764c26340f3f059f7fba932dc
SHA1 dee6828bc5016de3a1f5fcffc7509ca040daace5
SHA512 a06e656cf0e0a49dee6ec593eb303b1660d7c64cdaf6dc8db2f3f4c1ab7d94f1f35921524a2d8e6733b7161e1a20a2ddf5e4d8d1c580461f3c01eb02628b52ab
TLSH
T1BB517272E192643BA127C5DE7070939EB0E6C402C7976A176DFD9378CACAE939B1134C
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4668	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-240542094-4193773837-3211495583-1000\{6C77A90A-662E-4C0C-9212-5F65946F47A3}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3968	msedge.exe
3968	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4384 wrote to memory of 4632	4384	msedge.exe	84
PID 4384 wrote to memory of 4668	4384	msedge.exe	85
PID 4384 wrote to memory of 436	4384	msedge.exe	86
PID 4384 wrote to memory of 436	4384	msedge.exe	86
PID 4384 wrote to memory of 436	4384	msedge.exe	86
PID 4384 wrote to memory of 3820	4384	msedge.exe	87
PID 4384 wrote to memory of 3820	4384	msedge.exe	87
PID 4384 wrote to memory of 4612	4384	msedge.exe	89
PID 4384 wrote to memory of 4612	4384	msedge.exe	89
PID 4384 wrote to memory of 4612	4384	msedge.exe	89
PID 4384 wrote to memory of 3456	4384	msedge.exe	90
PID 4384 wrote to memory of 3456	4384	msedge.exe	90
PID 4384 wrote to memory of 3456	4384	msedge.exe	90
PID 4384 wrote to memory of 3008	4384	msedge.exe	91
PID 4384 wrote to memory of 3808	4384	msedge.exe	92
PID 4384 wrote to memory of 3008	4384	msedge.exe	91
PID 4384 wrote to memory of 3008	4384	msedge.exe	91
PID 4384 wrote to memory of 3808	4384	msedge.exe	92
PID 4384 wrote to memory of 3808	4384	msedge.exe	92
PID 4384 wrote to memory of 4656	4384	msedge.exe	96
PID 4384 wrote to memory of 4700	4384	msedge.exe	97
PID 4384 wrote to memory of 4656	4384	msedge.exe	96
PID 4384 wrote to memory of 4700	4384	msedge.exe	97
PID 4384 wrote to memory of 4468	4384	msedge.exe	99
PID 4384 wrote to memory of 5088	4384	msedge.exe	108
PID 4384 wrote to memory of 3116	4384	msedge.exe	109
PID 4384 wrote to memory of 1468	4384	msedge.exe	110
PID 4384 wrote to memory of 2020	4384	msedge.exe	112
PID 4384 wrote to memory of 2020	4384	msedge.exe	112
PID 4384 wrote to memory of 3968	4384	msedge.exe	113

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2a8,0x7ffd0022c188,0x7ffd0022c194,0x7ffd0022c1a0
  2⤵
  PID:4632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1716,i,4496107522892925536,10294049136850939600,524288 --field-trial-handle=2224,i,3608740980044438519,12520427219398129566,262144 --variations-seed-version --mojo-platform-channel-handle=2296 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1640,i,1576273811647048379,4680224111326588292,262144 --field-trial-handle=2224,i,3608740980044438519,12520427219398129566,262144 --variations-seed-version --mojo-platform-channel-handle=2188 /prefetch:2
  2⤵
  PID:436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2580,i,11835346080898752780,1904005299607503022,524288 --field-trial-handle=2224,i,3608740980044438519,12520427219398129566,262144 --variations-seed-version --mojo-platform-channel-handle=2728 /prefetch:8
  2⤵
  PID:3820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3448,i,14101210747012001352,15487460083472786966,2097152 --field-trial-handle=2224,i,3608740980044438519,12520427219398129566,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:1
  2⤵
  PID:4612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3460,i,16208111530052685350,10289309869024030371,2097152 --field-trial-handle=2224,i,3608740980044438519,12520427219398129566,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:3456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4220,i,5314545452856196096,13784093833972529690,2097152 --field-trial-handle=2224,i,3608740980044438519,12520427219398129566,262144 --variations-seed-version --mojo-platform-channel-handle=4312 /prefetch:1
  2⤵
  PID:3008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4232,i,15806037080706453450,8762777681029151547,2097152 --field-trial-handle=2224,i,3608740980044438519,12520427219398129566,262144 --variations-seed-version --mojo-platform-channel-handle=4316 /prefetch:2
  2⤵
  PID:3808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4964,i,16949708111836059400,8099013042528470939,524288 --field-trial-handle=2224,i,3608740980044438519,12520427219398129566,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:8
  2⤵
  PID:4656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4928,i,13540156676753043744,16280315380406628627,524288 --field-trial-handle=2224,i,3608740980044438519,12520427219398129566,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:8
  2⤵
  PID:4700
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5852,i,17565441071541936604,7272308082174645950,524288 --field-trial-handle=2224,i,3608740980044438519,12520427219398129566,262144 --variations-seed-version --mojo-platform-channel-handle=5864 /prefetch:8
  2⤵
  PID:4368
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5852,i,17565441071541936604,7272308082174645950,524288 --field-trial-handle=2224,i,3608740980044438519,12520427219398129566,262144 --variations-seed-version --mojo-platform-channel-handle=5864 /prefetch:8
  2⤵
  PID:4468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4364,i,12397130735682481717,18073814550036487625,524288 --field-trial-handle=2224,i,3608740980044438519,12520427219398129566,262144 --variations-seed-version --mojo-platform-channel-handle=4372 /prefetch:8
  2⤵
  PID:5088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4512,i,8077361968888185135,13311587689308913061,524288 --field-trial-handle=2224,i,3608740980044438519,12520427219398129566,262144 --variations-seed-version --mojo-platform-channel-handle=4500 /prefetch:8
  2⤵
  PID:3116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4516,i,11485639636159005698,7568667067115146504,524288 --field-trial-handle=2224,i,3608740980044438519,12520427219398129566,262144 --variations-seed-version --mojo-platform-channel-handle=5884 /prefetch:8
  2⤵
  PID:1468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3676,i,8096658331787802317,3428397237011888458,524288 --field-trial-handle=2224,i,3608740980044438519,12520427219398129566,262144 --variations-seed-version --mojo-platform-channel-handle=6404 /prefetch:8
  2⤵
  PID:2020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5428,i,4768467302684173496,16130026081248527639,262144 --field-trial-handle=2224,i,3608740980044438519,12520427219398129566,262144 --variations-seed-version --mojo-platform-channel-handle=6160 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3968

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4780

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

09ade9d4-e8dc-4203-8abc-e026443fd51c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\09ade9d4-e8dc-4203-8abc-e026443fd51c.tmp
Size 18KB
SHA256 34f608963d298cb46a55e1966935c09d949fc83b5d206d157cbf9b061e598c64
MD5 f0882601c08db07574efa2e2ca1ba756
SHA1 49e9a20cbe86f6303aa33f75356a103db23f1430
SHA512 f413400f18c268a25c292f8788b8db2376cc861f7b5d0fbb79393a01ea402c4402284d66ddbf334cb9c621ad7f9115edb873d6e5383c0f6a4ad3c53d6f60f953
SSDEEP 384:kQkUSv0sNjLJZrfYHX58EMOzAA9/e0JfIIIl7:U0oh2aHOZE0JfILN
TLSH
T1B5827C317C78AD374AF7A110F28A35439FB9916BDA852F90C6CC6B2D01DA2EC2307D16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4b95bbf1-838a-40a2-85d1-2220cefc9363.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\4b95bbf1-838a-40a2-85d1-2220cefc9363.tmp
Size 18KB
SHA256 426b872a7a168fe52aa67129fc5dae059c7d068b2f9ec0509692cb7da9812cf5
MD5 c5594b2528b7b61ad0539c5778095a59
SHA1 251216ac97f335ed96a7b731a68452adf62fb2af
SHA512 381477c6d1b8fc978981b1e7252f88e18efd5069add3dffcab9cbce370d17a9e73c024d529835850d6ad28550f684810a32f723249e0812e67f89495bf696e87
SSDEEP 384:2QkUSv0sNjqJZrfYHX58EMOzAA9/e0JfIIIl7:W0Dh2aHOZE0JfILN
TLSH
T1E8827C317C78AD374AF7A150F28A35439FB9916BD6852F94C6CC6B2D01DA2EC2307D16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

528e4e3f-4b50-438b-af37-e870452cff41.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\528e4e3f-4b50-438b-af37-e870452cff41.tmp
Size 8KB
SHA256 057c39cdf08d3900a2d3120093dc72d20cb4071d496464576934e701ab736c2b
MD5 f141bf4d7ec8d72875016fb8a3bb50e8
SHA1 a201cc76ee26370148ffe351968efc8bce63de5f
SHA512 6f5b30ec21cecdef44ec5fd9732694649806c285f887230a98e06bb670ae00b3b86c2c70ce9d904223ebe17b289a58d1893a2fa2225c95d75db461e06fae7fba
SSDEEP 192:1ONf6wlDgQmiUyr/W4X58gZMOKoAaDlbqnU6:1ONf6kgQW4X58EMOzAqKU6
TLSH
T10602FA35B9687C7B8EF2AE09F58B27139FE5102BE5512F84DAEC1A2D00D765C1307922
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5ca07f1a-4889-4d84-b1ee-beead8281ee8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\5ca07f1a-4889-4d84-b1ee-beead8281ee8.tmp
Size 8KB
SHA256 52c2bc88f3e625142c6636f3fc82cd13985fcdd32641f5242b1463f1c0d9ba7a
MD5 f167ed084d1df0ce8092e4d2699218b7
SHA1 78227c7bf2d7b43795c5851992946a773fb6fd86
SHA512 acbdc96001823f1c6ab727e9fd38960b9db0ad4b4c94b7dde934ea17201ac2758b7585ab7d2f3c66fe93325fb0ff2182c3772309e5922891bd29af18cb9e4ef7
SSDEEP 192:4ONO6wlDRQmiUyNN/o4X58gZMOKoAA9AveJqkj8U6:4ONO6kvWo4X58EMOzAA9b0U6
TLSH
T1CA120832B9A8AC3B1DE2A554F58735039FA9512BEB456FD0C5DC2A2C01DB66C230BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 58b461967016818ce2213ba739aa830e079c4747cc98baea5feaffc8b09c915d
MD5 8800a672498272bad98dd79644e30101
SHA1 14a42c33d6271869cc680cadc5ae061e7092e3ae
SHA512 a17f90c73859841f3e0a3211d7f8d1027a7f8ec3a4ef87ddc96b1a39e0b52bc65decb3dd694a7092e22f06f2124864535e2e8632387dd42184abe2d3e22d7e12
TLSH
T135D022F2F32200E8C8C02A3C20030B080208C8000C833220C832C0C23ECCBC0A88F08C
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7b81d8521f4289b1259fa60587a7bc7131f06581c3a734224a7de2fe2669bfb7
MD5 46bc1ee7f1b3386bbc305d48ade31614
SHA1 b5e469cf75c16715fb850bd86db01e329da2928e
SHA512 09a97914c725107f4c125aa0ff0826f0410030841011f0bc5c9eed9e023261ab13abc5f59c9c311d02baf1b25e7398de5ea81438c8a8ede3cc60ca3906edfce9
TLSH
T152D022F2B3A208E8CCC02A3C20030B080208C8000C83B320C832C0C22ECEBC0A88F08C
MD5 SHA1 SHA512 TLSH

Submit Download

0dceb995-1d75-48de-a9c1-6397dd6c24ae.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0dceb995-1d75-48de-a9c1-6397dd6c24ae.tmp
Size 27KB
SHA256 d0fbf34546c4c971862f64b2d9239d8079e6b15033f1f24e2221f147e8ab9f95
MD5 b7afec0aedaf2887356d47d1301d486f
SHA1 2a75b74296215076e90040c00e11203470bb8d87
SHA512 e9dd078e6bd9728deacaad8f975b9366bd0d935a3d00c9b1650787dd5c67cf0952b9f6c5f6e036dd9f8c5100ad5ff907bddba72665600a4eda1e534ba1212d6a
SSDEEP 768:0ty4J/DWvbtBh8F1+UoAYDCx9Tuqh0VfUC9xbog/OVCiLlc2TbvroROE:0ty4J/DWvbtBhu1jajiLm0b80E
TLSH
T14EC20B3B640CCA7E4FC00A9DDD5E6FDB3E9802C796948D4047FA994C02C77EA91264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

53cd284e-f3fc-4237-a004-316a708dbca6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\53cd284e-f3fc-4237-a004-316a708dbca6.tmp
Size 9KB
SHA256 38329ca8184f862c28c638ff5abcf9c5a97eb081903efb805cedebf256866d43
MD5 a89c429b3d6844e5eb5bd116cc85b0ed
SHA1 525e29621ae61cf9f2fc5dffbbca504c70bb709f
SHA512 c79a7a44263f1a75ead030902cfbe8c8a895a995c6f767b74e9249a128ec58716e192a2a607aa32626351c121f3037c7d6f50a7b50c8b1ef32f5e46daf2c6038
SSDEEP 192:sxZZRHW//fssw6IdpdfHW6+WNGYrvoScIgrJ:sxZZM//fsswTJHbGR9
TLSH
T1BD22D9126E28A57B8CC7E20DBB55BF03D6F9503661D41E48EAFC861C05E7ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

83b2be52-d6c9-4135-8ad1-f5350db2e8e1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\83b2be52-d6c9-4135-8ad1-f5350db2e8e1.tmp
Size 10KB
SHA256 c296c85014f391d40adb0f31ca33d96f11bbeeee1b740adb2550c57ada8e73b8
MD5 c730c3b56b0d69033bf69ef86cdb4d7b
SHA1 800753e8f93390fec4b3920d7ffeabedb30d622d
SHA512 756f958bac82cbcf5c06ff2f5ab5cb79a92037358649ac41068f2daca59cd863d0c7a63dcd61fee757383f0547129480e1ab8a08aeb4bf2758d57020f5f27ffd
SSDEEP 192:sxZZRHW//fssd6IdpHfHW6+WNGYr3TScIg5zJ:sxZZM//fssdT/HbGi/
TLSH
T15322D952AE28A97B8CC7E20DBB55BF03D6F9503665911E48B6FCC61C05E7ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 ffe1e79575b90eade8ee8536afb3ef8ebd4e6f57a3ca349a7a81843ee1af9646
MD5 5ce697ac7c51418552c2ca9463ea11ce
SHA1 4aaecaffce35ff90b6ecd1029e2529aba60c2c63
SHA512 e8b51aa2c9a1daa8f38f1ef5d82aff1e0df5ff4bb4fdb4c430185af5efaa079941df016475d783893e62cf6363b74f89f3f32dba2a5d7d37bed447d0826d8c35
TLSH
T1F0610B88DBA0407BFB8AA07092DC108736FD408E57AFDF5A12F8ECF95F0A3617044114
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 b8afb535b29be8c005992f27a3331493379ec0443a03b241ca346f54594185e1
MD5 395c1fd55bb99b7e811af38ab18483c7
SHA1 00285340c8b1ebc7ed8bd1984437d32d131f9bc0
SHA512 be2c6d4586ccad9a8bca919f26ef3a366b322d3783afd70d6f5a9f270a159eaae8f8c8ead49487ee482b6257ed02e0173c08aec8d1f802c42719ae4781c2930e
TLSH
T1B2611C88DBA0407BFB8AA07096EC108B36FD408E57AFDF5A12F8ECF95F0A3617044114
MD5 SHA1 SHA512 TLSH

Submit Download

079c8fa6-16d0-41e7-8bc1-a37ab896673e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\079c8fa6-16d0-41e7-8bc1-a37ab896673e.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

bfc21794-d10e-4445-8ee9-307322899fc4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\bfc21794-d10e-4445-8ee9-307322899fc4.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

ed60c72e-01c3-4c1a-94e2-184fef82d84b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\ed60c72e-01c3-4c1a-94e2-184fef82d84b.tmp
Size 1KB
SHA256 354c959795bca69785c5ea838affcac365b9f89c6c51bc60809f218a1c5eee82
MD5 af34fdce2245c8a26eb9ee6c8a98e61a
SHA1 dbfbf8e1d4d702bbbb9534f9b928d9eb5eff2354
SHA512 0519522cf9183559346331eea4dd4be29b3805dae98295a7669c0c332e9f29141d8fb19beda064180fea4fdcc36a7e8ebe5490b2193fdb28ab4b5b3c503eea6f
TLSH
T1E211CCF3C7E5966E8A0156F09A28AE2BDE2C0506431C3C158AD4FF2B93F3075E0025AF
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 cbcfd87f3fa936b67f9561fef37ebee45cd344a081c0200172b10e012acf09aa
MD5 c6b1c315088acdfb00d1d3f02cad6430
SHA1 e69da52135958a767ec10a8620379a010e7b005d
SHA512 6fc6c0156474227f02b480d68261e96a6215831aaead57354625a5f8741dfba390695adecdc02e101ef7c9147be7022c123baa8888baebd6b3f363f908035df7
SSDEEP 48:KIDI1Ks04jyL2xMwuUUNb4PgISINK9s1uNxmdYHY02yLdcRtfLPwbD2jISlwK9lr:KIDCKs0+WheKiwKaq0KziHE
TLSH
T160912F4536BF020539BD2A8881B68B5F124136B77158E63B7FBD40A29B2FE041DFD8D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c7d92635-ed91-494c-a017-cae3e39cdc3c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c7d92635-ed91-494c-a017-cae3e39cdc3c.tmp
Size 10KB
SHA256 f5f9bc7f04b6718dbeae409caf59bf085afa576880c64ea080b3824c6006457e
MD5 412c8e4dc42138f97c45096ad9d13a1d
SHA1 deda25288f30aefdf9e92b12afbfab30e2550103
SHA512 a997b383bbf6ea9a610519a8671ec22e98e9fc71c1d66364757761edd38aa170b828c6a9a06d342eeee9d1fbb4d6bd2e5557efa3554c715e017baffb8db4579d
SSDEEP 192:sxZZRHW//fssd6IdpdfHW6+WNGYrFkScIg5zJ:sxZZM//fssdTJHbG1/
TLSH
T1AE22E952AE28A97B8CC7E20DBB55BF03D6F9503661951E48B6FCC61C05E7ACD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d89a4251-4f04-481b-98aa-6b7fec255e21.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d89a4251-4f04-481b-98aa-6b7fec255e21.tmp
Size 9KB
SHA256 911156c4f3b52b6d7e83fb74042117cdf61a9445dd96f4747c9dded477de8a16
MD5 c4e471e7db9cfe83218e8901cbe0683e
SHA1 b3a23796e31beafa42a6b9516d35a15b162be466
SHA512 b0e658e36e7dd79e40ecfb1db02946f1e3da8173b6650a5301a8f245cfda0f24a659cd3d3937793c5c9aaf3d0000b07e9696256d6821756752edc26c4fc0d011
SSDEEP 192:sxZZRHW//fss06IdpdfHW6+WNGYrvoScIg5JJ:sxZZM//fss0TJHbGRp
TLSH
T1AE22C812AE28A97B8CC7D20DBB55BF03D6F9543661D51E48AAFC861C05E7ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f49f5df9-c48e-4a44-a2be-20866210f179.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f49f5df9-c48e-4a44-a2be-20866210f179.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a1e5523a-4fd4-4dc8-ae1e-e866fa3baea9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a1e5523a-4fd4-4dc8-ae1e-e866fa3baea9.tmp
Size 21KB
SHA256 e6bc2b6104310d000086f82ea964f4525a60d138ab889669f00ff364671d3da5
MD5 c57f45fef894bdc2d815caf963a2ef7a
SHA1 56bc674f167e8fadaef895beda336f12eb197d45
SHA512 db39057712a2d7f09fcb6399c990b958a3a7233d3599619addad1108e52937d6fcd9a3b8f145d81bb8fd8ea55b24d37fd52023f6f4f3e5b97dad8a58098a8f65
SSDEEP 384:UiFzQkUSvuzsN98TUNTUlIlLJZrfYHX58EMOzAA9Ca0JfIIIl7:vFdugwgjh2aHOZP0JfILN
TLSH
T13DA27D326CA8DE3B9EF79A40F69A31038FB5916BD985AFA0D7CC691C01DA1DC2307D15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e0b06bb9-ef43-44ab-b515-111d7092d9c2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\e0b06bb9-ef43-44ab-b515-111d7092d9c2.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 933bd7eb6f52a7295bf5419c5cefdd48e584543667e0b8d5fbaa67c8dd965a34
MD5 a65e5bca752f5b3822841cd0f3655366
SHA1 3d9f3071751797d10758a57b1158c633a3fe19cc
SHA512 2d8576d862ddf1950cf6326dc2470ba651350235e69b2f9bf2886a6d74e9bed3cc724da2907efba449302fdd6c41d083202217d6a8410ad7219bbe01943eac9c
TLSH
T19C411858A7F91148B3B73E5AABF7786D48BFB9772E06D49D10110E4E0662A40CC71B33
MD5 SHA1 SHA512 TLSH

Submit Download