020b82d69be0f3416efcb4de2945e60a0aff3540b8422d623fbbc7ca17adacd6

Analysis

max time kernel
148s
max time network
141s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
22/10/2026, 16:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 451KB
Sample261022-txecasstc1
SHA256 020b82d69be0f3416efcb4de2945e60a0aff3540b8422d623fbbc7ca17adacd6
MD5 e008212e30d2f36b5324cf8d6065b53a
SHA1 06efa43509aadc590ce9daa7b10023a413339d11
SHA512 520f0d07607bd5488f9468388b4d9a8fdd1bc8891dc9bef969136fca9b42085dffc27a3441a7c6dc9342ab8d12133cef60bedb2ccc72a847f101e21f597eccbe
SSDEEP 3072:pyUetD7dtqiRBXRB+RBfEMBEMYEMuFWqFWHFWxAb59F:QDb5n
TLSH
T143A4B633A254D9355CC718AEE798951C2A289306FF33468A73E9927FB2CEDF4191136C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3028	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1404337215-1550464601-2805570857-1000\{865D1801-B444-4266-B5EA-1887779E2837}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4324	msedge.exe
4324	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4672 wrote to memory of 1000	4672	msedge.exe	89
PID 4672 wrote to memory of 3376	4672	msedge.exe	90
PID 4672 wrote to memory of 3028	4672	msedge.exe	91
PID 4672 wrote to memory of 3376	4672	msedge.exe	90
PID 4672 wrote to memory of 3376	4672	msedge.exe	90
PID 4672 wrote to memory of 5560	4672	msedge.exe	92
PID 4672 wrote to memory of 5560	4672	msedge.exe	92
PID 4672 wrote to memory of 1460	4672	msedge.exe	94
PID 4672 wrote to memory of 3904	4672	msedge.exe	95
PID 4672 wrote to memory of 1460	4672	msedge.exe	94
PID 4672 wrote to memory of 1460	4672	msedge.exe	94
PID 4672 wrote to memory of 3904	4672	msedge.exe	95
PID 4672 wrote to memory of 3904	4672	msedge.exe	95
PID 4672 wrote to memory of 3408	4672	msedge.exe	96
PID 4672 wrote to memory of 3408	4672	msedge.exe	96
PID 4672 wrote to memory of 3408	4672	msedge.exe	96
PID 4672 wrote to memory of 1564	4672	msedge.exe	97
PID 4672 wrote to memory of 1564	4672	msedge.exe	97
PID 4672 wrote to memory of 1564	4672	msedge.exe	97
PID 4672 wrote to memory of 1072	4672	msedge.exe	99
PID 4672 wrote to memory of 3576	4672	msedge.exe	100
PID 4672 wrote to memory of 1072	4672	msedge.exe	99
PID 4672 wrote to memory of 3576	4672	msedge.exe	100
PID 4672 wrote to memory of 2808	4672	msedge.exe	102
PID 4672 wrote to memory of 4632	4672	msedge.exe	106
PID 4672 wrote to memory of 3320	4672	msedge.exe	107
PID 4672 wrote to memory of 844	4672	msedge.exe	108
PID 4672 wrote to memory of 3480	4672	msedge.exe	109
PID 4672 wrote to memory of 3480	4672	msedge.exe	109
PID 4672 wrote to memory of 4324	4672	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffed949c188,0x7ffed949c194,0x7ffed949c1a0
  2⤵
  PID:1000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1660,i,9312729631899020176,5785112701273382810,262144 --field-trial-handle=2312,i,17675274592966809837,11551435439724578424,262144 --variations-seed-version --mojo-platform-channel-handle=2308 /prefetch:2
  2⤵
  PID:3376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1880,i,121623583362469631,2281365034214108402,524288 --field-trial-handle=2312,i,17675274592966809837,11551435439724578424,262144 --variations-seed-version --mojo-platform-channel-handle=2932 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2420,i,13876254224539573680,11990888297709941114,524288 --field-trial-handle=2312,i,17675274592966809837,11551435439724578424,262144 --variations-seed-version --mojo-platform-channel-handle=3064 /prefetch:13
  2⤵
  PID:5560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3664,i,7043976682453916712,4206943785808969921,2097152 --field-trial-handle=2312,i,17675274592966809837,11551435439724578424,262144 --variations-seed-version --mojo-platform-channel-handle=3688 /prefetch:1
  2⤵
  PID:1460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3684,i,16276370101589659848,10423571286123994455,2097152 --field-trial-handle=2312,i,17675274592966809837,11551435439724578424,262144 --variations-seed-version --mojo-platform-channel-handle=3704 /prefetch:1
  2⤵
  PID:3904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4320,i,6474041895893323587,13514295243158278949,2097152 --field-trial-handle=2312,i,17675274592966809837,11551435439724578424,262144 --variations-seed-version --mojo-platform-channel-handle=4392 /prefetch:1
  2⤵
  PID:3408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4372,i,4748933279812228464,5794154867135401704,2097152 --field-trial-handle=2312,i,17675274592966809837,11551435439724578424,262144 --variations-seed-version --mojo-platform-channel-handle=4400 /prefetch:9
  2⤵
  PID:1564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3872,i,6646844804084801351,14291600740422658837,524288 --field-trial-handle=2312,i,17675274592966809837,11551435439724578424,262144 --variations-seed-version --mojo-platform-channel-handle=3836 /prefetch:14
  2⤵
  PID:1072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3876,i,4897133079786770707,11751137951740580428,524288 --field-trial-handle=2312,i,17675274592966809837,11551435439724578424,262144 --variations-seed-version --mojo-platform-channel-handle=5504 /prefetch:14
  2⤵
  PID:3576
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6108,i,10451046080168305468,9515207075231745536,524288 --field-trial-handle=2312,i,17675274592966809837,11551435439724578424,262144 --variations-seed-version --mojo-platform-channel-handle=6124 /prefetch:14
  2⤵
  PID:2216
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6108,i,10451046080168305468,9515207075231745536,524288 --field-trial-handle=2312,i,17675274592966809837,11551435439724578424,262144 --variations-seed-version --mojo-platform-channel-handle=6124 /prefetch:14
  2⤵
  PID:2808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5400,i,16795334422989622210,4142717306516163138,524288 --field-trial-handle=2312,i,17675274592966809837,11551435439724578424,262144 --variations-seed-version --mojo-platform-channel-handle=5416 /prefetch:14
  2⤵
  PID:4632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5248,i,2401858812474496563,11490389276741059354,524288 --field-trial-handle=2312,i,17675274592966809837,11551435439724578424,262144 --variations-seed-version --mojo-platform-channel-handle=4316 /prefetch:14
  2⤵
  PID:3320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5232,i,10744421863787237762,9073773133220923181,524288 --field-trial-handle=2312,i,17675274592966809837,11551435439724578424,262144 --variations-seed-version --mojo-platform-channel-handle=5220 /prefetch:14
  2⤵
  PID:844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5228,i,10264066304999297039,16543813503517933918,524288 --field-trial-handle=2312,i,17675274592966809837,11551435439724578424,262144 --variations-seed-version --mojo-platform-channel-handle=6192 /prefetch:14
  2⤵
  PID:3480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5672,i,14831864707790695301,14732018372953412171,262144 --field-trial-handle=2312,i,17675274592966809837,11551435439724578424,262144 --variations-seed-version --mojo-platform-channel-handle=5960 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4324

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2976

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:700

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

099dd8c6-4805-4b89-b8c4-34107852e9e2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\099dd8c6-4805-4b89-b8c4-34107852e9e2.tmp
Size 33KB
SHA256 6e301bdec90a827b7a13664698944fcaa2344208e9397aa96fde638dac43ab29
MD5 210f023a659b7659c4cd30cbf1c3360a
SHA1 769a746b31e0565056c072424a9f91267779c432
SHA512 648e065e3c6285355fd22f8164369a29cc0cbbd11e84ca74fa4ddde6a48926deb43a4363e083e5d1462108d58ff8ab823c79618f37b0e842aebabdc07f079652
SSDEEP 768:xC3a8Dtc7fZrKIHxp5XSwQs88uBkiT2AecNLo:xC3hqtrl/ILNB11k
TLSH
T1CFF2AF35FC949D639CB2A381B65B3746BFF0A107C8C40A948ADE651E02CB35D774B857
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

20594fdb-27ad-4aac-9e37-80504a178242.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\20594fdb-27ad-4aac-9e37-80504a178242.tmp
Size 38KB
SHA256 41d22816ff1bdc49976f630f86b8125ab0cb57443fc28b3eae0fceb7ddb5ca81
MD5 884509e3c8a8c32b26b07fb79dc364b4
SHA1 a46ea9e3dc488c5d3bfb41a8a30ce2b774618715
SHA512 99bbe808bb0e84d6e948446fb959ed916eb4d80c6660b97e9486af9c4d4b8311185b44ee8cedb643b6174b16df267f5321a7ae2bce01bdad6024cd88005c7eec
SSDEEP 768:T/UxvxjgC+W3Rsrc7fZrKIHFp5XSwQs88uBkiTzA/P84g:mZj3+W3RXtrlrILNB6Hg
TLSH
T12603C039F8945863ACB393813A5B275BAFF06053C4C41AA44DEE7A0E03CB75D674B897
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

58a04aab-ac00-458f-a568-ad57837f0fa2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\58a04aab-ac00-458f-a568-ad57837f0fa2.tmp
Size 33KB
SHA256 a4682c65d774311076514337e6369a32e02b163ce3ab9463373ab2b90000bd57
MD5 8ed03a99df15124265b013a9888633e8
SHA1 45152e9299d38603ff2bb7bcba9f1fb7d264f6f3
SHA512 27c35c87d239bb6e08e2af488ef5a568b92669b70f9dab0a3c0c8ae1b6d21c62b7076ac1fa126ed4706aaae8046ad2f47db9c73e9925a75002d69af02e8ec721
SSDEEP 768:vC3T8Dtc7fZrKIHxp5XSwQs88uBkiT2AecNLo:vC34qtrl/ILNB11k
TLSH
T186F2AF35FC949D639CB2A381B65B3746BFF0A107C8C40A948ADE661E02CB35D774B867
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

97bb07d7-3b66-4ba5-be56-a8354f49d6fd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\97bb07d7-3b66-4ba5-be56-a8354f49d6fd.tmp
Size 36KB
SHA256 f19ea961bea52081e51bc239ac77007dde6d3c79400b2c36bb7ac95bc5ef9936
MD5 469c1fd7f0be2a88d9b6662c05850b58
SHA1 f4276074093dd73cca9a6b13a3eb8d2edf453f3d
SHA512 b1b65b96bb0d0ab10b04aaabac8772a75c3d21adfc04799bbff321435fc374e9b7790e89633f7f5fdb2f8a09cf14cae00cd15638a7f7e0f234a0c0ddf46900c1
SSDEEP 768:vFdm3Hwgb8Dtc7fZrKIHcRp5XSwQs88uBkiT2AecNLo:Pm3Cqtrl8/ILNB11k
TLSH
T1B1F2BE36AC84C977ECB69B81BA5E3306AFF09147C8C40A94DBDD691D02C728C634BC67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 932f01682de6215b2c3b5faeb96a07b886e28db2ff6f8242a36da556c4292464
MD5 667b54168424526a7188593696f59ace
SHA1 deeb9f5ad1bccaabad57a386f08ba0c0740b2f81
SHA512 698f5a88d262c546b9bf21ead67e8dbe00ce6bd13f196761a5910f59ff69ca7532cacdf03c070f8d3b9f5d4fb8990b358e9b60ace9e48a0848e4a9da1d92b3ed
TLSH
T1D4D02B79F95ECD23E85204F540D1420832A77581DC04418125018C080A603850001182
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a0b193400a27c0cdf94ac11f5fb5b0747828b5b461169cefeffb96191b9e4834
MD5 edaab58c014c1abbfa900853b2ab2696
SHA1 e35eb02c0343d109af1ddd7dbd39dee3b989aea3
SHA512 b3cca7ed39fd4708b9c01cbefd67aab972f585372e01b5fa39d4a0840a7f579725d1202ab2916cda4e7635fb16dbc74178888461c7b6a2b3ea91d273ce2909ea
TLSH
T1BBD02B75F96ECC23E85204F940D24208329775818C0441812601CC080A603850000182
MD5 SHA1 SHA512 TLSH

Submit Download

23bb8b7b-edef-4990-86b3-41dc78fda530.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\23bb8b7b-edef-4990-86b3-41dc78fda530.tmp
Size 23KB
SHA256 07d95112f49ea87f1243b5acc19fa9abb1870722b9af7de96ed9af30eb264157
MD5 0f00c3002df99f78e16ab19749043cac
SHA1 976e313155caa33e75f80d068c6709b55713c6bc
SHA512 81700765905f4a1692f5aaa4312cadfdb34927effe96e400f95c371df5e7e451b7360b31d26919ae01fe71306cbbdcaf832348e79f2025fea0335bf190246edb
SSDEEP 384:USupCD0fCtg82FfrLKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVQc9hnRXbroJeZ:U/pCDmWg8KfrL8F1+UoAYDCx9Tuqh0VA
TLSH
T1E3B2D92B640CCB7F4FC04A9EA8197FD77D9802CB9A588D4047FE995C02C77EA92194DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7895112e-5f6b-4129-9dbc-c9c502f4711e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7895112e-5f6b-4129-9dbc-c9c502f4711e.tmp
Size 11KB
SHA256 9fe80be41ab84bda3772a10524d791e4ceda3831ed248f49288de046e2a5f75d
MD5 d69cdde158bfe6fb020dbd54f595b08b
SHA1 c20b227770e212dba545794a973d1cefbfaeab27
SHA512 6f808c682390ad03f5eb51c0f0f72c5183b1db8408329753523ac224ab8cf3887b69498de2d818974c94aba9a2eba056f8ecde46c30e677510b15d055c9ae295
SSDEEP 192:sxR6R+7bO/fMPseHRRSzoA8p4L/g6+WNIYEGHqGpIgDEJ:sxR6UO/fMPsezy/5ISM
TLSH
T17632A716AD24A93B9CDBD21DFB557F53D6F95032A1D01E48B6FC8A1C04E76DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 ccd22afc3759adc2a115613a5bc6a90210ead9b6e2f56d4666b0ca255b8035ec
MD5 b4db2071c43875d28aef339e38f6261a
SHA1 7172734781b9d5c01bb20f28671d076de41e9eef
SHA512 de7341956233847d9369f7766decc38b9a1069f28928fc5c33d8132a13de5c07e6810d827833377f70139bc5dc0ee5a383acc77e1069ec8692df99fefa75625a
TLSH
T10D5120439762A074FBA509F360DD3B8F363A8572A44F1EC21594D4B87B4E7194935C38
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 752bf15a8eb60e7f7d5b589d223493706f183338d83b2d6500efa61ef86ba5df
MD5 0963a426200399fda764c05ce075265b
SHA1 6e4aeab33d8dfbcc15772d33d2ae62a6743817b4
SHA512 4003d775e49c5983af6d62ce4411ca03e5b0bfcf199c938fcd52546154b86261ae482943db9e3dc562e82f465496bf9e84f1a131f6f7dd46aabb18333efaf9f2
TLSH
T13C5120439762A074FBA909F360DD3B8F363A8972A44F1EC21594D4B87B4E7194D35C38
MD5 SHA1 SHA512 TLSH

Submit Download

98df1121-229e-427d-a495-7b46cbe7ec10.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\98df1121-229e-427d-a495-7b46cbe7ec10.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

664914f5-d779-4896-8bfd-ea9561291b8c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\664914f5-d779-4896-8bfd-ea9561291b8c.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

8b6e2a85-67b4-46eb-92a2-0933d357ef79.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\8b6e2a85-67b4-46eb-92a2-0933d357ef79.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

e0c95fb4-0ca3-4696-8a7b-3d5d63aeb398.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\e0c95fb4-0ca3-4696-8a7b-3d5d63aeb398.tmp
Size 1KB
SHA256 9ae02c414a77565aa2446af2ffdeb5c99d5fca7b8d16d3378e0def893839c334
MD5 7cfd8cb43e7cbdb1c8adc67f4daa1c74
SHA1 716f10b755f283339282f6484a2524a600a0c2cc
SHA512 cb6db4bbf8079cb90d998eba48e91ee0a248551a9e97a540009ac558ce9e4659328ce27c6a71fa59542f6a3572ad394349cf5e8842cb28fc666df817f5d6bdb7
TLSH
T1BF31E2F787F4857E8A0186F0BA14AE2FCE1C0515432C7CA985E4AE2793F3472E041A9F
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 1KB
SHA256 17730b2706f16d913c05cb63b0104d785c65e66b58584a340ef3689c2a388591
MD5 7739a9fb1bc96aa1c8674c749fc81f2b
SHA1 35409694bca4016f444a0f3a2986f5232457415a
SHA512 9a1a07b0a4a33e597e66b3bf6c9fd78f6c47b087e978c4474c9300a2a3fa8bfb2002a7aa5d1240aba63c05cf183e02957561f2e2218cf629f89a778a0b1249c8
TLSH
T12321BE58683F633128FD3798185A94160A51307539ECF4FEB6EB9176092BE004EFF9C9
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

ce2fd8f7-6e6a-46a2-b4f7-c6c735d57e65.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ce2fd8f7-6e6a-46a2-b4f7-c6c735d57e65.tmp
Size 11KB
SHA256 a7fc3cc3854ec2e382106b718a925d06e15508f279d94dc3e3562781dcc6f549
MD5 515e91f04f3af0a8a04a6f225ef7882b
SHA1 afae2b7e94e7eb6f0710c170f7e8a297fe6f290f
SHA512 fda632910ea03593cfbcb0cb239c5c3a9e7d65f1ceb40387385dba832fea9baad07e6fa2abc236546bb9560faa810ff06e24b591c139d5a164a3378d49688364
SSDEEP 192:sxRNR+7bO/fMPsBHRRSzoA8p4L/g6+WNIYEGHqGpIgIJ:sxRNUO/fMPsBzy/5ISs
TLSH
T13B32A716AD28A93B9CCBD21DBB657F53D6F95032A1D01E48F6FC8A1C04E76DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d8c0735c-fbf8-45d3-84b0-004cbe35f428.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d8c0735c-fbf8-45d3-84b0-004cbe35f428.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

efe62f2b-5120-4d00-97cd-4e241898727c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\efe62f2b-5120-4d00-97cd-4e241898727c.tmp
Size 11KB
SHA256 82e680521cda5102d7b165f6cdccc889b1cc406f024c06372ccf7b2675f3dbbf
MD5 00ff651b958581fc3255cd671f3f46f9
SHA1 d1cd305e2a4ad5b5f6c8e4da5f18566774ad3f44
SHA512 ae5be0b84da5cf63b165ecab1b2283d512e90a7f175bd7f2d9b68e212581c3366d689e27f51f01807bb45bacda826b9b660421772c5b30a2019570fb3a036c86
SSDEEP 192:sxR6R+7bO/fMPsZ0HRRSzoA8p4L/g6+WNIYE9RqGpIgD2J:sxR6UO/fMPsZ0zy/5Iv2
TLSH
T1F832B716AD24A93BDCCBE21DBB557F53D6F95032A0D01E48B6FC8A1C14E76DE220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0fde1dd8-568b-4ff0-9c5c-7570abe96f9c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\0fde1dd8-568b-4ff0-9c5c-7570abe96f9c.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

eedbc07a-b9cb-4ac4-ad2e-e58e073f8e01.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\eedbc07a-b9cb-4ac4-ad2e-e58e073f8e01.tmp
Size 37KB
SHA256 031ce9924e51d1fff433fb292b761ba5870e16abb00f1e0fb1d4fcc4a48ad813
MD5 d04e13473c9f9a1c262b14e83940ddb4
SHA1 5513c609fed0296b3a2ce09fbd52e5bce5865263
SHA512 14beb50c14458303515d468cd51bf79136f94d98083de17e8e6a4f564abf68409fb0f9a383b8ed8cd5c293b0eea7edb3e4360d0a01d5efc414dc8e7148e0fc0b
SSDEEP 768:R/UxvxjgC+W3igcc7fZrK5p5XSwQs88uBkiTCo/P84g:kZj3+W3i0tryILNBZHg
TLSH
T16B03C039EC945863ACB39385375A275BAFF06053C4C41BA889EE7A0E029B75D6307897
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8cffd400-b69c-4703-a9cb-a0a5add1c5b3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\8cffd400-b69c-4703-a9cb-a0a5add1c5b3.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download