551846a1fa747177136d05e8a5fef2178b6d4e024accf2dad9a0471af0b7f3ee

Analysis

max time kernel
149s
max time network
136s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
20/10/2026, 12:47

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 68KB
Sample261020-pz7dmsbe45
SHA256 551846a1fa747177136d05e8a5fef2178b6d4e024accf2dad9a0471af0b7f3ee
MD5 7a9f64ad1b408a3aadc42633209404f2
SHA1 d4a5f8223742c0ac2f46613a3cd088f1e5d81634
SHA512 9a0d03b53c23ec9bb739e5d2162909b53eafec16a96c24aa97e227163b4a27d6e6ae68bde29b6dfa554f351779d86e5a98d00f94fe6092182f3dba3beb47137b
SSDEEP 1536:iYypLTzAAzqIABxRi0ghNxgefN3MU39DMglNJfXUJ1:i51TzAsABxhgeefR9DtCJ1
TLSH
T17763B5FB97B4C0E03D8E1BADDF336ACD2A1E60B8EB4199C462BCF814C693DD5455A900
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5476	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-650287814-2715975232-1279715623-1000\{8BFF4EE8-EF09-4F0C-A1E4-F290F6014337}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3292	msedge.exe
3292	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4360 wrote to memory of 2552	4360	msedge.exe	89
PID 4360 wrote to memory of 5476	4360	msedge.exe	91
PID 4360 wrote to memory of 1256	4360	msedge.exe	92
PID 4360 wrote to memory of 1256	4360	msedge.exe	92
PID 4360 wrote to memory of 2564	4360	msedge.exe	93
PID 4360 wrote to memory of 2564	4360	msedge.exe	93
PID 4360 wrote to memory of 2564	4360	msedge.exe	93
PID 4360 wrote to memory of 3260	4360	msedge.exe	94
PID 4360 wrote to memory of 3696	4360	msedge.exe	95
PID 4360 wrote to memory of 3260	4360	msedge.exe	94
PID 4360 wrote to memory of 3260	4360	msedge.exe	94
PID 4360 wrote to memory of 3696	4360	msedge.exe	95
PID 4360 wrote to memory of 3696	4360	msedge.exe	95
PID 4360 wrote to memory of 1264	4360	msedge.exe	96
PID 4360 wrote to memory of 1264	4360	msedge.exe	96
PID 4360 wrote to memory of 1264	4360	msedge.exe	96
PID 4360 wrote to memory of 3092	4360	msedge.exe	97
PID 4360 wrote to memory of 3092	4360	msedge.exe	97
PID 4360 wrote to memory of 3092	4360	msedge.exe	97
PID 4360 wrote to memory of 4392	4360	msedge.exe	100
PID 4360 wrote to memory of 3256	4360	msedge.exe	99
PID 4360 wrote to memory of 4392	4360	msedge.exe	100
PID 4360 wrote to memory of 3256	4360	msedge.exe	99
PID 4360 wrote to memory of 3956	4360	msedge.exe	102
PID 4360 wrote to memory of 4596	4360	msedge.exe	106
PID 4360 wrote to memory of 3244	4360	msedge.exe	107
PID 4360 wrote to memory of 5992	4360	msedge.exe	108
PID 4360 wrote to memory of 3620	4360	msedge.exe	109
PID 4360 wrote to memory of 3620	4360	msedge.exe	109
PID 4360 wrote to memory of 3292	4360	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2cc,0x7fff3c67c188,0x7fff3c67c194,0x7fff3c67c1a0
  2⤵
  PID:2552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1800,i,12233951563239718628,18322444254784676765,524288 --field-trial-handle=2620,i,15328954796108497471,1161408095406772325,262144 --variations-seed-version --mojo-platform-channel-handle=2676 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2316,i,4303484761314932058,10801690773345903229,524288 --field-trial-handle=2620,i,15328954796108497471,1161408095406772325,262144 --variations-seed-version --mojo-platform-channel-handle=2768 /prefetch:13
  2⤵
  PID:1256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1652,i,10718582437235161324,14284699500748233167,262144 --field-trial-handle=2620,i,15328954796108497471,1161408095406772325,262144 --variations-seed-version --mojo-platform-channel-handle=2608 /prefetch:2
  2⤵
  PID:2564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3572,i,9675010366025573747,4921961479789888868,2097152 --field-trial-handle=2620,i,15328954796108497471,1161408095406772325,262144 --variations-seed-version --mojo-platform-channel-handle=3576 /prefetch:1
  2⤵
  PID:3260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3624,i,1652089958191344667,2394059678896164969,2097152 --field-trial-handle=2620,i,15328954796108497471,1161408095406772325,262144 --variations-seed-version --mojo-platform-channel-handle=3684 /prefetch:1
  2⤵
  PID:3696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4256,i,11198249043171179143,1103722747770558918,2097152 --field-trial-handle=2620,i,15328954796108497471,1161408095406772325,262144 --variations-seed-version --mojo-platform-channel-handle=4320 /prefetch:1
  2⤵
  PID:1264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4344,i,10184945270204176091,10654359263313627259,2097152 --field-trial-handle=2620,i,15328954796108497471,1161408095406772325,262144 --variations-seed-version --mojo-platform-channel-handle=4264 /prefetch:9
  2⤵
  PID:3092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3796,i,13994695407577141802,1158702533746423952,524288 --field-trial-handle=2620,i,15328954796108497471,1161408095406772325,262144 --variations-seed-version --mojo-platform-channel-handle=5304 /prefetch:14
  2⤵
  PID:3256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3576,i,17947151550148065204,3918327802284893355,524288 --field-trial-handle=2620,i,15328954796108497471,1161408095406772325,262144 --variations-seed-version --mojo-platform-channel-handle=5332 /prefetch:14
  2⤵
  PID:4392
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6008,i,7196845686141453392,873226158900699414,524288 --field-trial-handle=2620,i,15328954796108497471,1161408095406772325,262144 --variations-seed-version --mojo-platform-channel-handle=6000 /prefetch:14
  2⤵
  PID:2548
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6008,i,7196845686141453392,873226158900699414,524288 --field-trial-handle=2620,i,15328954796108497471,1161408095406772325,262144 --variations-seed-version --mojo-platform-channel-handle=6000 /prefetch:14
  2⤵
  PID:3956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4592,i,6243572472771430730,77105544729548713,524288 --field-trial-handle=2620,i,15328954796108497471,1161408095406772325,262144 --variations-seed-version --mojo-platform-channel-handle=6132 /prefetch:14
  2⤵
  PID:4596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4344,i,6820805692249637624,6571191048923897359,524288 --field-trial-handle=2620,i,15328954796108497471,1161408095406772325,262144 --variations-seed-version --mojo-platform-channel-handle=5028 /prefetch:14
  2⤵
  PID:3244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4624,i,5118736885918630623,3689167493490168468,524288 --field-trial-handle=2620,i,15328954796108497471,1161408095406772325,262144 --variations-seed-version --mojo-platform-channel-handle=6516 /prefetch:14
  2⤵
  PID:5992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5480,i,12580323147465590829,13077547222272134760,524288 --field-trial-handle=2620,i,15328954796108497471,1161408095406772325,262144 --variations-seed-version --mojo-platform-channel-handle=5512 /prefetch:14
  2⤵
  PID:3620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5068,i,1729198299839410921,6117670479012238083,262144 --field-trial-handle=2620,i,15328954796108497471,1161408095406772325,262144 --variations-seed-version --mojo-platform-channel-handle=6148 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3292

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4664

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2436

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

0ccb7b18-06d1-4eed-a20c-1a9f76aea81b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\0ccb7b18-06d1-4eed-a20c-1a9f76aea81b.tmp
Size 33KB
SHA256 42fee076dee87862058b2d0283ec3ab18eff11874b66c0154289ead004bdbfef
MD5 98b4a026cd16b68183bc081d8294ed3f
SHA1 51ea493efcfad3f8e8780f1e21928e1e1590a3ab
SHA512 6d0da8b60e1d92a66e5f7f79b9f98eab986d1e0fd23cfae15dddee1966dc7abfa80743520f93df34450d7366e4c21ffd5a42b6327f89fba6b0c576cec36b7865
SSDEEP 768:t33kE9f9cTinpyEMbxyJugQVTJ7vvmeXvTLr:t33ksPpyEmxyJJq17vpTf
TLSH
T12BF2AE31AC75DD7389B782817789B6C3AFE4425398C91F94C8CD6A1D058B2ED670BC2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

22a87473-cc66-4366-85ae-d7c995405786.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\22a87473-cc66-4366-85ae-d7c995405786.tmp
Size 37KB
SHA256 e982aac7d4c824e2a2a498c6f0db28b1d9db5b2ada0baf51c27ce4930ef12a07
MD5 b16a67e8c96289b707b8f98a387f9efb
SHA1 5b1166dda0c6e12c86bae5877ea72dd59514969a
SHA512 82daa985f9c7a5d5ec2ab275e968e62f439fa18449ea24de7f0c64a3b59c725d5dafa78df862a04415e945fb9620c26dea936034191344ac68727eac6499013b
SSDEEP 768:p/UxvxjgC+k3Rcf9cTi/yEMbxyJugQVTJ7vvmevJSHtBk:cZj3+k3QP/yEmxyJJq17vDSbk
TLSH
T11A03CF35ACA59C7388F393843649E787EFF506A394C62BA885DD6F0D128B3AC5307817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

43f25057-c06e-467d-a6c0-ecb72fb168dc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\43f25057-c06e-467d-a6c0-ecb72fb168dc.tmp
Size 105KB
SHA256 10bf49f629ba90a1161d0117602435d1a511d1f7a5e47b20fe3a693551550e5a
MD5 71eab00578b8a3050d0ce445655db7b7
SHA1 5d8b06f8805760a18e17cebb8bf5d7f5043e6b1b
SHA512 be43de9b4dd545f3d61990b5e57cf08e702bc1c9f282e5e78b4586dfb34cb8ef3bc6ed1dfaeab69e5117101a833b785cd1e7e844338056be3018d33e6c4afa51
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7P:fwUQC5VwBIiElEd2K57P7P
TLSH
T1A7B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e0217c0f2953c25b5ecacbfc82728d57c809cf5450e9203a48d2faaff8836c2b
MD5 04b3b3f543557524e135a08dac44efda
SHA1 4f856c66c17971828ff8fd245186ea6b1b303bc7
SHA512 a11f6ce9f676e6157f7d9b86de7e7c3f0b7758052de5b00121c54342e363951818cf7787ed1baf39e636241455a76f6b90dc0405f5eaf0361a7c1056c3560c1a
TLSH
T1F5D02B71EFBB6C03D184207C100182C01620FC40BF6902C4170001A4042C5444313205
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 6ff73de37e74e04bc32af0dd2dd926bcd2d6c623deb8eb066c65071254002178
MD5 a569aede49695d8fc8b039ab7024fd75
SHA1 de14644ea578b78d3cd08753552602517297fd30
SHA512 b87c4dc8e3e3be51d402a4d2d6166ca389ae05ea059903425483e2dcc38b0f2394d29a7a81921700d62e2a403e94a7b3e6c02c186966742a945996df580c0065
TLSH
T18FD02B71EFBB6C03D184207C100282C01610FC406B6902C4170041B4042C5444313201
MD5 SHA1 SHA512 TLSH

Submit Download

0aeb8c7a-11c9-4794-b9da-58d14b10a66d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0aeb8c7a-11c9-4794-b9da-58d14b10a66d.tmp
Size 10KB
SHA256 a447a5df68d37b5bfce4fa8cd4fab2f0dde6d40065c167bbb80c932981bcbb7b
MD5 8b732971c1657902774728e8c6bd9186
SHA1 ca348dc9c28af64215b72e2fb1211c1259b9ddb2
SHA512 7e5ed0fb54e4713871a585825dd0d246a7cc82d5292652ce55540914b2b51348e4832e7becd00956d66f61773cf9b2534ab95bfd5a5bd2611a11cfcfaa8978c5
SSDEEP 192:sxRgR6br/fvsxyzoA8p4a/g6+WNIYF5XyGoIgDSJ:sxRgGr/fvsx/b/5ILa
TLSH
T1C132B415AD38A97B8CCBD21DBB65BF53D2F95032A1D11E48A6FC861C05E76DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

29502f6e-22fe-4464-b440-e68c39184822.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\29502f6e-22fe-4464-b440-e68c39184822.tmp
Size 23KB
SHA256 5a3f7ecbf2f91b31d902550b32379b04588ec94db9aa0b5e9015a05f9108010d
MD5 74c33a4d14e5dcd32a48ce2064cbcf03
SHA1 4b9a6f43093fbe2e950bd90ba65b6f4637cdf2e8
SHA512 2a46406ead178bcd87d6e5ef4811ea3fbbbed48a789eda757d626ea783f9e3a6d3486f6ce3c3602a02bceabb843846179d2d981bfa8b7df3b47a28add59d8743
SSDEEP 384:+0e2P7wfCtgwiFf4eKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVS29aSRnaro+PG:+l2P7KWgwef4e8F1+UoAYDCx9Tuqh0VI
TLSH
T13EB2D92F640CCB7E4FD04A9DAC196EDB6DAC02C796588D4047FE994C03C77EA921A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

48a551f5-177a-452c-8ffc-2778ee3582b8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\48a551f5-177a-452c-8ffc-2778ee3582b8.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

9915a487-425a-4c0b-a1a7-b172818a1282.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9915a487-425a-4c0b-a1a7-b172818a1282.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 b08342afd5463256499b76929839ef8a830da28581058d0a35ba9ab8bb3964d8
MD5 275e091c8bb894158e6a10528e05ad85
SHA1 e712d48c3b2d4dd2182ae4bfe38757675f01ea93
SHA512 980e17703ec3adcb0d869d78ee7ccd9ef940caf3d95bdc307b5b8e13b53622f431252aa9ad1185b90c98a92b167ef8e253df815451876f47cc0a3d31b71c3f0e
TLSH
T1CD5150822FA4B1A1FB5F333045F07D83F63096C1558B1E692589CDF87667FE47158188
MD5 SHA1 SHA512 TLSH

Submit Download

f9a859a4-fc34-4047-a259-0908f341aac7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\f9a859a4-fc34-4047-a259-0908f341aac7.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

5a43338f-95a5-477a-b0a6-aa15c2d9a182.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\5a43338f-95a5-477a-b0a6-aa15c2d9a182.tmp
Size 1KB
SHA256 9d5ad9d3b426b03a0149b7387be25f26f17cc86aefc98b3227df15476754f0cb
MD5 18832dcf51e897b80c2751d2e71c1db2
SHA1 adfa00b0ceab50898b2eed4b300ae37a5dbdd49e
SHA512 6f607ad76b2da96ba4d1b2fff063358bb641ed939bfe09994a132a0afea17976639973b0bc91f87f485188b651748ae7693f7955e44c8de3a89af3525ca4e066
TLSH
T1E731BCF787F4857E8A0196F0AA14AE1FCF2D0515431C7C6AC5E4AE2793F3472E041AAB
MD5 SHA1 SHA512 TLSH

Submit Download

798960b4-1206-4eac-ae87-1ffd85edef63.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\798960b4-1206-4eac-ae87-1ffd85edef63.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

e672c6c9-9903-4486-9245-fcf066e5c723.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\e672c6c9-9903-4486-9245-fcf066e5c723.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 5a450323dd91a4a43adb247c9bfeeda2fbb4a2bfd5a4b8fc9d0960a83a173c8e
MD5 afb7b427fc82d1bd456678ae7a6810d7
SHA1 cb07848b34e55a9dae750c62f0e789e4db72bf2c
SHA512 503b42e4675081a3cd5e16d692922af302f519d5dd0b7bac60f961a39f31864299e5a1d948e909a6542a5e743e516bfb9e41a8284d8fc4c79074f91ffe021a92
SSDEEP 48:KMGBkgO88dT4PQIaIdKVc9udR2No3Y8myDezeOeveTete1e1e+TelegelIaeze+B:KQhKKi8C2F6KGwpiYKnqOF
TLSH
T122919C23713B56103C7E39085195966A43563AB73028F57F7BEA41F64B6AF080EBE8DC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

dcc84d1a-d9d6-4ac0-8396-73213a569bc4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\dcc84d1a-d9d6-4ac0-8396-73213a569bc4.tmp
Size 11KB
SHA256 961e5ed60a80a6618b4da446ddae98fc95cb52f9ae07b0b635228a3bc88cf567
MD5 08812830bce9db0f12379740d4bdc97b
SHA1 a7cf7eb6f43ad7d52ba355cdb2e396a5c9a22d78
SHA512 f0c543e27b44147d3abd1a40813a76278cb9d90ab5de19c5e0e663e35ff71df967160bf0fa1080ff1b120fc165460eee5c8006d264135a70036229d84ea9e8a3
SSDEEP 192:sxRgR6br/fvsnKzoA8p4a/g6+WNIYFDnyGoIgDIJ:sxRgGr/fvsnHb/5ItY
TLSH
T13432C515AD38A97B8CCBD20DBB95BF13D2F95032A1D12E48A6FC861C05E76DD120380F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f1598fd9-b8cf-4d09-8e8a-13c2e949f82b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f1598fd9-b8cf-4d09-8e8a-13c2e949f82b.tmp
Size 10KB
SHA256 774a733d8f0c728d3af9d4f9977e177d72ded37b3aba4c0abb8e4a251f555336
MD5 c2a7e2ca46bff2c7e751fb509dbd63cc
SHA1 9b8cd8215ed56fdc827e8014c58d68ac0e5ae10d
SHA512 f9c7df361f9468aeb5d74f63a437526811e8e4957904115ce29f112be0f749cf1522200d92798a760909323d2d6907ae3eb0259c5530908b087211304d81a6d4
SSDEEP 192:sxRHR6br/fvs6yzoA8p4a/g6+WNIYF5XyGoIgIJ:sxRHGr/fvs6/b/5ILs
TLSH
T19632A415AD38A93B8CCBD21DBB69BF63D2F95032A1951E48E6FC861C05E66DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4e08c9ba-58e9-4b8a-8469-16e891489969.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\4e08c9ba-58e9-4b8a-8469-16e891489969.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 eecaad5ad65b26471fc283af38c5e5ed888aa370c1ce345b6f63955caa939221
MD5 2ff9c7d78cb2570bab73f29a6cfc3eaa
SHA1 699e1bb8f4433f9d1cdf90c32e0de2d5578c2354
SHA512 46ce8e79e4cb0e6e391964ed5163033a3f2ae9fc149f9db715cded3f5e32f9f56eab5ca820b8a5eeb4a0d2c5c02633abe6ab2235a1cd97c2714c76699891629f
SSDEEP 768:/33D99f9cTinpyEMbxyJugQVTJ7vvmeXvTLr:/33DpPpyEmxyJJq17vpTf
TLSH
T1E8F2AE31AC759D7389B782817789B6C3AFE44253D8C91B94C8CD5A1D058B2EE670BC2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a83ef4ac-df2e-41a1-9f67-6fec1c28f0db.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a83ef4ac-df2e-41a1-9f67-6fec1c28f0db.tmp
Size 36KB
SHA256 d9ec5340e8ac9623440c4effa9e9405956b8792e94a164d556be1ca83473ea0a
MD5 2b4d993f775f388c24cde7fe642bdd58
SHA1 a54be67c97f8a5eb296eff9a8e1d03ca82a4f2ec
SHA512 bb8f1133bcb0ed7cd84c2ab015b5f8ef7e1453b8d70d553779f3e70d4672ec0cac6ea73214a32815d6d481fdf9cc698c05b1fa90d03668732124292940688a33
SSDEEP 768:rFdp3mwgY99f9cTingyEMbxyJugQVTJ7vvmeXvTLr:bp3FpPgyEmxyJJq17vpTf
TLSH
T160F29E325C64CD779EB68780B7897683DFF042A3C8C56A94D6CD591D118B2ED234BC2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cd787e04-17c8-40d6-8d41-142e0236612a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\cd787e04-17c8-40d6-8d41-142e0236612a.tmp
Size 38KB
SHA256 acb70608f58fcd90432983cac275a746527ee95156d497e50145558de69b4adc
MD5 8638b0b00a53e5c9c685f8f6764df374
SHA1 bfae6f1a6463532486632be2f179216e6fb3cb0a
SHA512 7ae600a6dd41c2ff5b40a6d55f56f09c27749f654db3775c6da0db015869d486c831530ec5833cfa2f49c96a12fd23a9dc68426c2ae2231ded88057b8b1cacee
SSDEEP 768:Q/UxvxjgC+k3MXf9cTinzyEMbxyJugQVTJ7vvmeOvSHtBk:9Zj3+k3yPzyEmxyJJq17vWSbk
TLSH
T17B03C035AC659C7389F382843649F787EFF506A394C62AE484DD6E0D168B3AC530B81B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4d59156b-cdc5-43d8-9dd9-23e1786c5859.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\4d59156b-cdc5-43d8-9dd9-23e1786c5859.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download