5c4b05fc1fb23b4eadf64c9498bb7dce2a092595865d0e32d498153a83d0a06f

Analysis

max time kernel
148s
max time network
128s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
20/10/2026, 16:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 2KB
Sample261020-txqqbsstez
SHA256 5c4b05fc1fb23b4eadf64c9498bb7dce2a092595865d0e32d498153a83d0a06f
MD5 f6dbab0ef589559a098730991303691d
SHA1 deb7c503a4a0e923a2fdd0bc9fbce3b8a47a7ded
SHA512 70010339f8d1fc89cb5ebd81add35f3b4bc5d4172afd19ba4766527c3e0a6554234bece24831ddaedfc1612c76c3d51218a5567996f0891aa0e3abe4dd600dbb
TLSH
T1B24177D2742C910F0360AB426577F21D99FEC0F455505461B9E86DACF6E0F4F872B86A
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2780	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2714045687-1127350534-2056456672-1000\{E70D8ADA-21D9-47EF-8B35-9A1F2919A522}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5020	msedge.exe
5020	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1208	msedge.exe
1208	msedge.exe
1208	msedge.exe
1208	msedge.exe
1208	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
1208	msedge.exe
1208	msedge.exe
1208	msedge.exe
1208	msedge.exe
1208	msedge.exe
1208	msedge.exe
1208	msedge.exe
1208	msedge.exe
1208	msedge.exe
1208	msedge.exe
1208	msedge.exe
1208	msedge.exe
1208	msedge.exe
1208	msedge.exe
1208	msedge.exe
1208	msedge.exe
1208	msedge.exe
1208	msedge.exe
1208	msedge.exe
1208	msedge.exe
1208	msedge.exe
1208	msedge.exe
1208	msedge.exe
1208	msedge.exe
1208	msedge.exe
1208	msedge.exe
1208	msedge.exe
1208	msedge.exe
1208	msedge.exe
1208	msedge.exe
1208	msedge.exe
1208	msedge.exe
1208	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
1208	msedge.exe
1208	msedge.exe
1208	msedge.exe
1208	msedge.exe
1208	msedge.exe
1208	msedge.exe
1208	msedge.exe
1208	msedge.exe
1208	msedge.exe
1208	msedge.exe
1208	msedge.exe
1208	msedge.exe
1208	msedge.exe
1208	msedge.exe
1208	msedge.exe
1208	msedge.exe

Suspicious use of WriteProcessMemory 34 IoCs

description	pid	Process	procid_target
PID 1208 wrote to memory of 3840	1208	msedge.exe	90
PID 1208 wrote to memory of 2780	1208	msedge.exe	91
PID 1208 wrote to memory of 1608	1208	msedge.exe	92
PID 1208 wrote to memory of 1608	1208	msedge.exe	92
PID 1208 wrote to memory of 1608	1208	msedge.exe	92
PID 1208 wrote to memory of 1952	1208	msedge.exe	93
PID 1208 wrote to memory of 1952	1208	msedge.exe	93
PID 1208 wrote to memory of 6056	1208	msedge.exe	95
PID 1208 wrote to memory of 6056	1208	msedge.exe	95
PID 1208 wrote to memory of 6056	1208	msedge.exe	95
PID 1208 wrote to memory of 4496	1208	msedge.exe	96
PID 1208 wrote to memory of 4496	1208	msedge.exe	96
PID 1208 wrote to memory of 4496	1208	msedge.exe	96
PID 1208 wrote to memory of 1500	1208	msedge.exe	97
PID 1208 wrote to memory of 1500	1208	msedge.exe	97
PID 1208 wrote to memory of 1500	1208	msedge.exe	97
PID 1208 wrote to memory of 4296	1208	msedge.exe	98
PID 1208 wrote to memory of 4296	1208	msedge.exe	98
PID 1208 wrote to memory of 4296	1208	msedge.exe	98
PID 1208 wrote to memory of 4840	1208	msedge.exe	100
PID 1208 wrote to memory of 4840	1208	msedge.exe	100
PID 1208 wrote to memory of 3872	1208	msedge.exe	101
PID 1208 wrote to memory of 3872	1208	msedge.exe	101
PID 1208 wrote to memory of 4544	1208	msedge.exe	103
PID 1208 wrote to memory of 2576	1208	msedge.exe	107
PID 1208 wrote to memory of 1672	1208	msedge.exe	108
PID 1208 wrote to memory of 2988	1208	msedge.exe	109
PID 1208 wrote to memory of 4192	1208	msedge.exe	110
PID 1208 wrote to memory of 4192	1208	msedge.exe	110
PID 1208 wrote to memory of 5540	1208	msedge.exe	111
PID 1208 wrote to memory of 5540	1208	msedge.exe	111
PID 1208 wrote to memory of 4716	1208	msedge.exe	113
PID 1208 wrote to memory of 4716	1208	msedge.exe	113
PID 1208 wrote to memory of 5020	1208	msedge.exe	114

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2c8,0x7ffdeb27c188,0x7ffdeb27c194,0x7ffdeb27c1a0
  2⤵
  PID:3840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1872,i,2890015379929648848,13914990864843314142,524288 --field-trial-handle=2800,i,10988987258354604914,11546385962811815172,262144 --variations-seed-version --mojo-platform-channel-handle=2828 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1556,i,5130519614484611882,9517779150419144812,262144 --field-trial-handle=2800,i,10988987258354604914,11546385962811815172,262144 --variations-seed-version --mojo-platform-channel-handle=2796 /prefetch:2
  2⤵
  PID:1608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2264,i,4483387409117028434,8128423809077712404,524288 --field-trial-handle=2800,i,10988987258354604914,11546385962811815172,262144 --variations-seed-version --mojo-platform-channel-handle=2836 /prefetch:13
  2⤵
  PID:1952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3652,i,2402636120399149446,17684036659065605196,2097152 --field-trial-handle=2800,i,10988987258354604914,11546385962811815172,262144 --variations-seed-version --mojo-platform-channel-handle=3680 /prefetch:1
  2⤵
  PID:6056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3688,i,10650175769635288829,4044901320959098575,2097152 --field-trial-handle=2800,i,10988987258354604914,11546385962811815172,262144 --variations-seed-version --mojo-platform-channel-handle=3704 /prefetch:1
  2⤵
  PID:4496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4376,i,10834617782855408763,14976626777316214960,2097152 --field-trial-handle=2800,i,10988987258354604914,11546385962811815172,262144 --variations-seed-version --mojo-platform-channel-handle=4872 /prefetch:1
  2⤵
  PID:1500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4388,i,11508301853802682411,6136216170047919774,2097152 --field-trial-handle=2800,i,10988987258354604914,11546385962811815172,262144 --variations-seed-version --mojo-platform-channel-handle=4860 /prefetch:9
  2⤵
  PID:4296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5524,i,8790437193546869602,16329908630183898779,524288 --field-trial-handle=2800,i,10988987258354604914,11546385962811815172,262144 --variations-seed-version --mojo-platform-channel-handle=3856 /prefetch:14
  2⤵
  PID:4840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5512,i,2084072123435998595,2069046557224675048,524288 --field-trial-handle=2800,i,10988987258354604914,11546385962811815172,262144 --variations-seed-version --mojo-platform-channel-handle=3776 /prefetch:14
  2⤵
  PID:3872
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6052,i,17695413524937413058,4347206013042647041,524288 --field-trial-handle=2800,i,10988987258354604914,11546385962811815172,262144 --variations-seed-version --mojo-platform-channel-handle=6076 /prefetch:14
  2⤵
  PID:4480
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6052,i,17695413524937413058,4347206013042647041,524288 --field-trial-handle=2800,i,10988987258354604914,11546385962811815172,262144 --variations-seed-version --mojo-platform-channel-handle=6076 /prefetch:14
  2⤵
  PID:4544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4888,i,16735968261382431046,1974542249737782650,524288 --field-trial-handle=2800,i,10988987258354604914,11546385962811815172,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:14
  2⤵
  PID:2576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4908,i,7480158336780644804,4438841252007616607,524288 --field-trial-handle=2800,i,10988987258354604914,11546385962811815172,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:14
  2⤵
  PID:1672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4860,i,18383543534889537536,9658571854668190490,524288 --field-trial-handle=2800,i,10988987258354604914,11546385962811815172,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:14
  2⤵
  PID:2988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3808,i,3498263890728521614,9218842231249421633,524288 --field-trial-handle=2800,i,10988987258354604914,11546385962811815172,262144 --variations-seed-version --mojo-platform-channel-handle=2036 /prefetch:14
  2⤵
  PID:4192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6640,i,3208280891200187976,3540559982313278848,524288 --field-trial-handle=2800,i,10988987258354604914,11546385962811815172,262144 --variations-seed-version --mojo-platform-channel-handle=6712 /prefetch:14
  2⤵
  PID:5540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6288,i,6915274728665183804,8080998702070442298,524288 --field-trial-handle=2800,i,10988987258354604914,11546385962811815172,262144 --variations-seed-version --mojo-platform-channel-handle=5708 /prefetch:14
  2⤵
  PID:4716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6492,i,11966492011273407382,2536368716348511696,262144 --field-trial-handle=2800,i,10988987258354604914,11546385962811815172,262144 --variations-seed-version --mojo-platform-channel-handle=816 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5020

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1928

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:6112

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

194ed112-c375-4121-89d7-f1e86b7606a5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\194ed112-c375-4121-89d7-f1e86b7606a5.tmp
Size 34KB
SHA256 3eefd1438a3b79dcf444b677cfed72349c4d3b4ed91b9e1cb1c9ad7bba03caa9
MD5 9aee608c2537fad4aa74f2c3fc3be2e9
SHA1 27c3fbe2ace9f3fde0b7224fa66ceffad88fb598
SHA512 e5c0d8ae9d6448936c8d2f8187c07accbe130893de031b3df07fc6fe22e7c55826470921dc2fb173e76b0cae6b45bf5c864f5e027ba92340d079a29e3845b320
SSDEEP 768:QS3CHfKnJ8a2xDc9bsMSJz/Fn//WxTMLN:QS31CzVQbs7JTgOp
TLSH
T102F2BF75AC9069A7CDE3A7807A9E3647BFF48603D5C81A48D5CEAA1C06C72DD2307C27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5f3287da-4b88-4e3b-be1e-268ec085ee0b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\5f3287da-4b88-4e3b-be1e-268ec085ee0b.tmp
Size 34KB
SHA256 55681df798520527dcad0e12682b0ac3508621088018bf4ccda972f5c389b337
MD5 0207953be3c259b4e81a96e90e18eff4
SHA1 cf7b68fbc5540c29aeef40fa479961916ec30569
SHA512 65c30fb5916d1e8da1db9ae483b7fe4ca8cbb6b3017a97f13a93d936f6831e9eb344a52a48b499722ca252e40b7a3168d88e631c30be85aa7b5cdb267c18291f
SSDEEP 768:qS39lfKnJ8a2xDc9bsMSJz/Fn//WxTMLN:qS3KCzVQbs7JTgOp
TLSH
T1BAF2BF75AC9069A7CDE39780BA9E3647BFF48643D5C81A48D5CEAA1C06C72DD2307C27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

be680aae-041e-4107-8d97-5153ecf2fe96.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\be680aae-041e-4107-8d97-5153ecf2fe96.tmp
Size 105KB
SHA256 36138979757d4e71ef05f08e5474db36d940b11e0e5038b1bc41edf6d9480864
MD5 1ffead718e2d4a1c853bdde71605a629
SHA1 bec748fbabd1ff5b25bcc88b57845b8ef801ffa3
SHA512 2d9d536f4d1f11cec455a2c5b7bd5485bf92d28d29a4af0c14a218e58f3db936b6de9aa72bdb015a143ce31a5dcdb74cea83b1d9addd898b44e718cacc158e4e
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P73:fwUQC5VwBIiElEd2K57P73
TLSH
T1F6B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 355a29997d085f70c135b61fb8e48fe3b3d9b6030190662c9d930bd533b88c78
MD5 5121c8953b32388eb96bb70d0d12fd00
SHA1 e62d74f75b188deb1ec8b8dabcff7c16e7ba9ba5
SHA512 c8f0ff682c9ed7e02559e599a97078b0a2e39f928b301598e0196d5d9dd6ffac13da9bd34262b0120793cb2472ac6c7a93a178d4abcd0a5a2c6df1e9a193de10
TLSH
T13CD02BF4528C9C63C4CA30740425458100263401B948D2903501478849401B914433E7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 97f58c0ff1008d9a744980b06de74b1bc42fdd2408c0871566ecacc80738c498
MD5 ffa34db42a6c31e411546fdfd8772d96
SHA1 cd3fa45407492f90d8b070cf009147d20a8b4151
SHA512 72fd2a1188869d257eaee37d23569752bb0744ad1a5cad19b6a4b2e60f4d5f74f1ccf0a0b24a6e31d4d512e939f7b384fb86433ec7496296acb712e8334d5e32
TLSH
T18BD02BF0529C9C63C4CA307804264581001634017548D2903601878849401B914423D3
MD5 SHA1 SHA512 TLSH

Submit Download

087d96b2-2574-455c-a5a4-d61aa063b985.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\087d96b2-2574-455c-a5a4-d61aa063b985.tmp
Size 10KB
SHA256 1253bd0e41005ea9e2421f1d0a63e130213e89a096a93bb5ab35aef6c0060379
MD5 d77470f4ab5aa3f4e864b8a506c44cd0
SHA1 be888e21672ff99a0569af811fcb39015d0f9285
SHA512 69fc2d3e07af426313d55ff4a8e2fdbde8965e332fd990049dc4d9cddc19e46699797344da997f836686cf82da7126948aa9c8f35dc9f968378e43cca79e66d4
SSDEEP 192:sxRtR2bj/f5slrzoA8p4A/g6+WNIYt7gsGTIgIJ:sxRtqj/f5slKN/5ITs
TLSH
T116329415AE28B93B8CC7D21DFA69BF53D2F95032A1951E48F6FC861C04E76DD221780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

21f7db99-c9e9-43f5-9b5b-54f6cef0da87.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\21f7db99-c9e9-43f5-9b5b-54f6cef0da87.tmp
Size 11KB
SHA256 1a5471c19d2af37082557d1e1344fce00bbba29353916fa1f368b3aef101c3fd
MD5 0e13caf37d17d0ced91d8e9579421f3e
SHA1 96d95ba13f27e74e561d609e8e75dff766183da4
SHA512 e22f4765ded95d3c8bcbb02485419498024baef0b8865902f279ba7cfb84e60e9e289d28a134f256a2c69e763424299e843be837f717656a315656ab61e80a70
SSDEEP 192:sxRuR2bj/f5s5rzoA8p4A/g6+WNIYt7gsGTIgDVJ:sxRuqj/f5s5KN/5ITD
TLSH
T19D329515AD28BA3B8CC7D21DFA69BF53D2F95032A0D51E48B6FC861C04E76DD221780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

88915801-5dfd-4a14-a1d5-9512383d682f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\88915801-5dfd-4a14-a1d5-9512383d682f.tmp
Size 11KB
SHA256 8f097c419a6c9b5422355023aa4fd3ab3235788def83bff7fd9866421f8ed47a
MD5 4237a3491bb687a3ff6d7ea594d568fc
SHA1 92e756981c6153d0cbda389b6019261cd72cc30a
SHA512 22f6ca445f14f9cc2b1ea701ec11b10d8b3faa329d12bf05c9c47aacfc7acc21aa04fa8247933c185c9e18f5e853c987cae5c97faee862fad3978d3091890aa1
SSDEEP 192:sxRuR2bj/f5scFrzoA8p4A/g6+WNIYtmSsGTIgDbJ:sxRuqj/f5s4KN/5I2B
TLSH
T143329415AD28AA3B9CC7D21DFA69BF53D2F95032A0951E48A6FCC61C04E76DD221780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8be1f1ef-78dd-44c7-a2db-7a3b9c6e2997.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8be1f1ef-78dd-44c7-a2db-7a3b9c6e2997.tmp
Size 23KB
SHA256 5d8eb845be625d65c4ead77f3e5cfca1ca836ddb045c75c17fa58bb3dc50a344
MD5 49f7f447f85b8f598e95a098536d1d67
SHA1 35a5e2f5f7d77e2f222a47ffdc2486abb66bacc1
SHA512 a96ef30024d74b7161b6c60d0be50aa618846f9f0ae874ab4307564de5007e0f3c4d162d128fafce50435bd796546690ef997b09fd9b1cf11761da8dd6b7f0df
SSDEEP 384:dFIGx9efCtgmkFfk6KhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OV6W9G+RhiromL3:dmGx9sWgmMfk68F1+UoAYDCx9Tuqh0V5
TLSH
T19FB2DA3B640CCB7E9FC00A9DAD196F976D9802C796548D4047FE984C03C77EB912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 834f0c8b41b0809bacee217ece18888f85dc063eb34c8ddacb81751d5a286293
MD5 258e020aeac707a4e845ebdb79062d50
SHA1 d8d429e909e723b5998370cf18ed23b51b63e4f3
SHA512 cf3cff0f8f2aafe8ed82b510fa214eed720008d7f2e321676fb0971c232fc37cc2f0ddb77274a3a4adb3d3e980ee78239378e1af5d625dd96fd04594e0a52bb4
TLSH
T197E0CDD415CAD62EF20C74C742BC634CC7E0361BE7C4799E1B14CD887247554BAD6794
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 24588fe6e858426b0aae410be04d6a8f2d4d5633cead4691293aa86f8129f10b
MD5 2b49d89b732ea27b6786976b3cd60556
SHA1 8fda9e7345bdc3f2c4398b368e9965971c805bf3
SHA512 6e9eba48eb9a1f2ef9cf0fbe2d53f233d08fd57b5c1637011842d4f237ddd7ca106c939aacd330e9fed970f2a9225c091268da0384f125c6af3233412ef5daad
TLSH
T16DE086DC45CAC23EE20CA4C7157C674CD7E02A1BEAD4699E2704C68CB346565E792791
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 9db1313966b3324f398ba9039804cf65edc5334df226200a22e31f55a5e0c385
MD5 05180d2e07ef0834a42db628406069c0
SHA1 3b9828cd2ba27eb06226e746d86b05932e3bad0f
SHA512 1407443ad99885be9c8c3de46f0f100592165020a29a9484302199cc785fccdcdc4d75fb89f0d3d03d310f02d27ccdbcd7809aae196e64b8f9b256fe10ec6da1
TLSH
T1D8611C939DB09160FBBB0AF183F05D833534499CD5B31E90F2A8D574B83E72201D01B6
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 97b74af36544ca85ccad99640fd11910683af7c98bcda9201958aa4912c3705c
MD5 66aeb0eef63276b3304e32651a04bfc3
SHA1 291f32f7884efb890c0b09e0a868dd06cf268670
SHA512 7b0858276d7d67081e413e095b8af224fe3880465ba8716fe82d6275781e28d733b7e1962c6a89d273d9c525b5f966a5f62c561292d6c0ef33d83387240583d2
TLSH
T14B611C539D7091A0FBBB0AF187F05D873934499CD9B31E91F2A8D574B83E72201D01B6
MD5 SHA1 SHA512 TLSH

Submit Download

24665930-d861-4ff7-b29c-63d9b9d00327.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\24665930-d861-4ff7-b29c-63d9b9d00327.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

6c36241d-1db8-40e7-acd5-f1cbefea0546.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\6c36241d-1db8-40e7-acd5-f1cbefea0546.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

fe82e80e-128b-4b84-8a12-6a682312dadb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\fe82e80e-128b-4b84-8a12-6a682312dadb.tmp
Size 1KB
SHA256 b6ef0e1b42b7076c34224df6c7b4ab04f16f8dd66906f91056a9ae867d31636f
MD5 53bb7c8a80f4f3525f1dccc66bd4b2d5
SHA1 a51abae5ff626eff780fe2910a2d8f32b571c815
SHA512 25a75c855d997710f78966ec46f03e0540c666301cea336625aa24db54ab7fbc50a5897e89ed4c36bd6f058732f582135acefbb236495320d2f92397df225696
TLSH
T15F319CF783B4957E8A0196F0AA18AE1FCF2C0511431C7C6A89E4AE2793F3462E041A5B
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 643662389e50b78fd934f4616299e99eb190a11e7485e11e8554546db0ccf1f4
MD5 a261970a8aac756eafec76aa78108ec0
SHA1 87326f839636e1a09ed8b527fdb8f87884c86a15
SHA512 e4a452d76b7c01f1ca6021af8de7aa97eca4516c3f0fb449fe16e5abcac5537d583539f2ce781c508368e2fd6415271da77189d069fd1c6b06c86211ae8e123e
SSDEEP 24:KA2BuocIxKKhI1iSrslyX6dqhkZI/KFhS1qSgLdErkg6IRKoh01qS9yRyXRil5:KIfIxK8IM7ypeI/KDScH1IRKe08jyC
TLSH
T11791A250313B571139BD3A4851A496AF07A231633028AA7BBBE951B64F3FE081DFD8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

b7b023e4-2684-4d2c-b076-006af3d058e7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b7b023e4-2684-4d2c-b076-006af3d058e7.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c9b09962-bbde-4475-b9c0-caaff1d1b324.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c9b09962-bbde-4475-b9c0-caaff1d1b324.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

4db6ecde-c5b8-4255-94e1-5c5cd023558d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\4db6ecde-c5b8-4255-94e1-5c5cd023558d.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

d2be4400-c4ab-4122-9d9c-26ec2c06577e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d2be4400-c4ab-4122-9d9c-26ec2c06577e.tmp
Size 38KB
SHA256 a714311df71dd34dd45185941d18714ec1c4b97d6e69e7ec5117688ea3342016
MD5 8f634bb78fe88b983dd9a1269673220e
SHA1 2322c7694cea022c512d437ea165c9dac96883e9
SHA512 b657a8a05ae8336455d9956c12a6e83926d8f2d512c6c73bf9f7de484d6f242cf281ffaa7fbc3316cf0c3f24475cb722681d60c58d25eeeb9c01d5a6b47b75b4
SSDEEP 768:M/UxvxjgC+U3F9KnJ8aVxDc9bsMSJz/FnG/WSHXPyK/:5Zj3+U36CmVQbs7JTHSb/
TLSH
T14A03CF7AEC5058A7CDF767803A8EB647AFF84943D5C5299449DE6E0C07CB3AC1307826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ef7cefb9-94b1-47a0-a9cf-eec42a9e0007.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ef7cefb9-94b1-47a0-a9cf-eec42a9e0007.tmp
Size 37KB
SHA256 abc52002b73d826226e2a9e5d44eb408ef8c01d3ecb063eff94f67eed9aacf5c
MD5 ad9dad78c76251909312a61a11852dfb
SHA1 dd99a89fb40f66b0afd5b800d595a87fb2047402
SHA512 5ce6892447e1e6c60f3eb9e31d093ba7d8d52d9e50740b009911b013e35b053da802f7bbeb0da7f13d44a97a913c22599c98517d26e2de8e7afa7badfb4c8bfe
SSDEEP 768:z/UxvxjgC+U3Q9KnJSxDc9bsMSJz/FnnsSHXPyK/:GZj3+U3D8VQbs7JTKSb/
TLSH
T13403D03AEC5058A7CDF767803A8AA747AFF84953D5C52A9849DD6E0C07C73AC1307827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

36af2c00-903f-49d0-be64-aec70cd6e8ef.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\36af2c00-903f-49d0-be64-aec70cd6e8ef.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

f91b029f-fcb7-40f3-8e4a-340b4bd623a3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\f91b029f-fcb7-40f3-8e4a-340b4bd623a3.tmp
Size 36KB
SHA256 75ea5be7be96346179d917ba766be6e692fc42f9d1b698a01c5e7f7ce3789dda
MD5 47692a6bf367476075062c68915d3674
SHA1 a091b8ed88358395feafca6c77f3cd829006d1da
SHA512 62b28eb9c743a802fac5e56c84ad7388762292c7b07ebdac2de18c7275273dc589080f7ea04508f2c606a9652e23c3e54b4f227a353b4cdf5502013f7b7295ac
SSDEEP 768:pFdK3awgtHfKnJ8azxDc9bsMSJz/Fn//WxTMLN:VK3/CEVQbs7JTgOp
TLSH
T151F2B0779C809AA7CDE79B80BE9E3647AFF44153C9C96A44D6CEAD1C02872DD2307C12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download