df39cf800cf55fa9a1e0c92b3952a18799bb1d80ce4d77625b7eb6e5db6ea417

Analysis

max time kernel
148s
max time network
140s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
23/10/2026, 00:23

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 3KB
Sample261023-aptbpsaz9q
SHA256 df39cf800cf55fa9a1e0c92b3952a18799bb1d80ce4d77625b7eb6e5db6ea417
MD5 2e5d5d9f1d267670ddfea0fa60aa429b
SHA1 b944ad205d22a6c009304c66ed3ca10a3b3b0e12
SHA512 f80f02801b93b48d9c346a40c8eb341e0e3880fe0ecf62b4fc407abb885d80a0be72232b44d2fa2917ad6ad01870cad5f4e3e2dce9fa14b061c837ae63c65740
TLSH
T182718355A78190057173C3A6FB32574AFBA2C053C7068649BBFD61858FF281AC6637CA
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2892	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-939655444-3071939294-1401108526-1000\{D09343E6-3203-4A73-BDCD-FE65EB0EB7F6}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3384	msedge.exe
3384	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
1664	msedge.exe
1664	msedge.exe
1664	msedge.exe
1664	msedge.exe
1664	msedge.exe
1664	msedge.exe
1664	msedge.exe

Suspicious use of FindShellTrayWindow 43 IoCs

pid	Process
1664	msedge.exe
1664	msedge.exe
1664	msedge.exe
1664	msedge.exe
1664	msedge.exe
1664	msedge.exe
1664	msedge.exe
1664	msedge.exe
1664	msedge.exe
1664	msedge.exe
1664	msedge.exe
1664	msedge.exe
1664	msedge.exe
1664	msedge.exe
1664	msedge.exe
1664	msedge.exe
1664	msedge.exe
1664	msedge.exe
1664	msedge.exe
1664	msedge.exe
1664	msedge.exe
1664	msedge.exe
1664	msedge.exe
1664	msedge.exe
1664	msedge.exe
1664	msedge.exe
1664	msedge.exe
1664	msedge.exe
1664	msedge.exe
1664	msedge.exe
1664	msedge.exe
1664	msedge.exe
1664	msedge.exe
1664	msedge.exe
1664	msedge.exe
1664	msedge.exe
1664	msedge.exe
1664	msedge.exe
1664	msedge.exe
1664	msedge.exe
1664	msedge.exe
1664	msedge.exe
1664	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1664	msedge.exe
1664	msedge.exe
1664	msedge.exe
1664	msedge.exe
1664	msedge.exe
1664	msedge.exe
1664	msedge.exe
1664	msedge.exe
1664	msedge.exe
1664	msedge.exe
1664	msedge.exe
1664	msedge.exe
1664	msedge.exe
1664	msedge.exe
1664	msedge.exe
1664	msedge.exe
1664	msedge.exe
1664	msedge.exe
1664	msedge.exe
1664	msedge.exe
1664	msedge.exe
1664	msedge.exe
1664	msedge.exe
1664	msedge.exe
1664	msedge.exe
1664	msedge.exe
1664	msedge.exe
1664	msedge.exe
1664	msedge.exe
1664	msedge.exe
1664	msedge.exe
1664	msedge.exe

Suspicious use of WriteProcessMemory 39 IoCs

description	pid	Process	procid_target
PID 1664 wrote to memory of 2116	1664	msedge.exe	85
PID 1664 wrote to memory of 2892	1664	msedge.exe	86
PID 1664 wrote to memory of 2264	1664	msedge.exe	87
PID 1664 wrote to memory of 2264	1664	msedge.exe	87
PID 1664 wrote to memory of 2264	1664	msedge.exe	87
PID 1664 wrote to memory of 3760	1664	msedge.exe	88
PID 1664 wrote to memory of 3760	1664	msedge.exe	88
PID 1664 wrote to memory of 3828	1664	msedge.exe	89
PID 1664 wrote to memory of 3828	1664	msedge.exe	89
PID 1664 wrote to memory of 3828	1664	msedge.exe	89
PID 1664 wrote to memory of 5084	1664	msedge.exe	90
PID 1664 wrote to memory of 5084	1664	msedge.exe	90
PID 1664 wrote to memory of 5084	1664	msedge.exe	90
PID 1664 wrote to memory of 2728	1664	msedge.exe	92
PID 1664 wrote to memory of 2728	1664	msedge.exe	92
PID 1664 wrote to memory of 2728	1664	msedge.exe	92
PID 1664 wrote to memory of 1736	1664	msedge.exe	93
PID 1664 wrote to memory of 1736	1664	msedge.exe	93
PID 1664 wrote to memory of 1736	1664	msedge.exe	93
PID 1664 wrote to memory of 4764	1664	msedge.exe	97
PID 1664 wrote to memory of 536	1664	msedge.exe	98
PID 1664 wrote to memory of 4764	1664	msedge.exe	97
PID 1664 wrote to memory of 536	1664	msedge.exe	98
PID 1664 wrote to memory of 4732	1664	msedge.exe	99
PID 1664 wrote to memory of 4732	1664	msedge.exe	99
PID 1664 wrote to memory of 4732	1664	msedge.exe	99
PID 1664 wrote to memory of 5012	1664	msedge.exe	102
PID 1664 wrote to memory of 2968	1664	msedge.exe	103
PID 1664 wrote to memory of 5012	1664	msedge.exe	102
PID 1664 wrote to memory of 2968	1664	msedge.exe	103
PID 1664 wrote to memory of 2968	1664	msedge.exe	103
PID 1664 wrote to memory of 4196	1664	msedge.exe	104
PID 1664 wrote to memory of 5040	1664	msedge.exe	106
PID 1664 wrote to memory of 3020	1664	msedge.exe	113
PID 1664 wrote to memory of 2568	1664	msedge.exe	114
PID 1664 wrote to memory of 2560	1664	msedge.exe	115
PID 1664 wrote to memory of 1580	1664	msedge.exe	117
PID 1664 wrote to memory of 1580	1664	msedge.exe	117
PID 1664 wrote to memory of 3384	1664	msedge.exe	118

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2a0,0x7ffb8ecdc188,0x7ffb8ecdc194,0x7ffb8ecdc1a0
  2⤵
  PID:2116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1796,i,15054327855666482243,16949949803188851398,524288 --field-trial-handle=2240,i,16053781699444784341,16568472610423468020,262144 --variations-seed-version --mojo-platform-channel-handle=2276 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1628,i,16471952572403187270,5659681649126037825,262144 --field-trial-handle=2240,i,16053781699444784341,16568472610423468020,262144 --variations-seed-version --mojo-platform-channel-handle=2116 /prefetch:2
  2⤵
  PID:2264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2624,i,16769942649197726967,18286543320181895592,524288 --field-trial-handle=2240,i,16053781699444784341,16568472610423468020,262144 --variations-seed-version --mojo-platform-channel-handle=2760 /prefetch:8
  2⤵
  PID:3760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3460,i,17457028297435786308,12920113104565455730,2097152 --field-trial-handle=2240,i,16053781699444784341,16568472610423468020,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:3828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3464,i,13849857065952051768,2752517238857843097,2097152 --field-trial-handle=2240,i,16053781699444784341,16568472610423468020,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:5084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4180,i,7695110564335571726,1389417330329050712,2097152 --field-trial-handle=2240,i,16053781699444784341,16568472610423468020,262144 --variations-seed-version --mojo-platform-channel-handle=4192 /prefetch:1
  2⤵
  PID:2728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4252,i,920899577292840063,940440620699880097,2097152 --field-trial-handle=2240,i,16053781699444784341,16568472610423468020,262144 --variations-seed-version --mojo-platform-channel-handle=3440 /prefetch:2
  2⤵
  PID:1736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5136,i,4924628814230727951,3818503786972838964,524288 --field-trial-handle=2240,i,16053781699444784341,16568472610423468020,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
  2⤵
  PID:4764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,5712420039929272721,5957083224617875622,524288 --field-trial-handle=2240,i,16053781699444784341,16568472610423468020,262144 --variations-seed-version --mojo-platform-channel-handle=5208 /prefetch:8
  2⤵
  PID:536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=5468,i,9756461007971949129,9282116389113598131,2097152 --field-trial-handle=2240,i,16053781699444784341,16568472610423468020,262144 --variations-seed-version --mojo-platform-channel-handle=5472 /prefetch:1
  2⤵
  PID:4732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6092,i,13408126306149868066,17338102417139833719,524288 --field-trial-handle=2240,i,16053781699444784341,16568472610423468020,262144 --variations-seed-version --mojo-platform-channel-handle=4200 /prefetch:8
  2⤵
  PID:5012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=6104,i,12378254647678174221,10081678569626698766,2097152 --field-trial-handle=2240,i,16053781699444784341,16568472610423468020,262144 --variations-seed-version --mojo-platform-channel-handle=6128 /prefetch:1
  2⤵
  PID:2968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6672,i,3882479633203655880,737066744505128344,524288 --field-trial-handle=2240,i,16053781699444784341,16568472610423468020,262144 --variations-seed-version --mojo-platform-channel-handle=6636 /prefetch:8
  2⤵
  PID:4196
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6656,i,10376301144304997158,17582491211163436078,524288 --field-trial-handle=2240,i,16053781699444784341,16568472610423468020,262144 --variations-seed-version --mojo-platform-channel-handle=6760 /prefetch:8
  2⤵
  PID:3576
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6656,i,10376301144304997158,17582491211163436078,524288 --field-trial-handle=2240,i,16053781699444784341,16568472610423468020,262144 --variations-seed-version --mojo-platform-channel-handle=6760 /prefetch:8
  2⤵
  PID:5040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4260,i,2067944728027028202,5092015233156822266,524288 --field-trial-handle=2240,i,16053781699444784341,16568472610423468020,262144 --variations-seed-version --mojo-platform-channel-handle=6824 /prefetch:8
  2⤵
  PID:3020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4352,i,13165433837172093608,3315932771046297796,524288 --field-trial-handle=2240,i,16053781699444784341,16568472610423468020,262144 --variations-seed-version --mojo-platform-channel-handle=6724 /prefetch:8
  2⤵
  PID:2568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4288,i,9861368016835647088,15665711244882715376,524288 --field-trial-handle=2240,i,16053781699444784341,16568472610423468020,262144 --variations-seed-version --mojo-platform-channel-handle=4404 /prefetch:8
  2⤵
  PID:2560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2788,i,12578648052651871857,11928050980381035120,524288 --field-trial-handle=2240,i,16053781699444784341,16568472610423468020,262144 --variations-seed-version --mojo-platform-channel-handle=5452 /prefetch:8
  2⤵
  PID:1580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6632,i,11475095472455505164,13020595382298300409,262144 --field-trial-handle=2240,i,16053781699444784341,16568472610423468020,262144 --variations-seed-version --mojo-platform-channel-handle=6540 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3384

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3200

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

0ad2f3f5-f145-4f99-87cd-a45c06be1fca.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\0ad2f3f5-f145-4f99-87cd-a45c06be1fca.tmp
Size 18KB
SHA256 85c0b379ef27267e210a2314e951f11bd26da8b46385c96ea3f01a12cb163e9c
MD5 47d6e173310399c63b6a53b08b1d260f
SHA1 83a8096047236944989d3890903d7ee87c963760
SHA512 1aa3093fc5b309f164557e9034a57711c493bead98226e2c529b8671993741cf7677332e400e113bb04c9ec1322798e1d06d73b1f064c6aa91f32c7e1f0eeddb
SSDEEP 384:7QkUSv0sNtfBLy1peYLUDzIGmS/IICpiGyqb2I8IIl9:10Au1U31gZiGHb58LP
TLSH
T1C8826C36A878AC378FA3E550F54639139EB48227D6D92F94D6DDAB1C01CE2DC2307A16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

337f3ef4-2072-4359-bb67-49baf0cfb20a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\337f3ef4-2072-4359-bb67-49baf0cfb20a.tmp
Size 18KB
SHA256 c3b80b16f17ce529eaf91877446f2ffe57726384e3d9406dc91e3069cf5e7ace
MD5 8271ec1dfe00fe4d18ed6f9527fb7526
SHA1 74830338a5c7e63ce8028350896c768fa8fcf96f
SHA512 c3e2d78060e21c394f126115fc8a7a2594ba5b677a24f151fcd77ffcd289e97b16452b8db60f57583937b7187355a3876c887aea2d18137ed7fb27391192ccff
SSDEEP 384:rQkUSv0sNtOBLy1peYLUDzIGmS/IICpiGyqb2I8IIl9:l0xu1U31gZiGHb58LP
TLSH
T1FC826C36A878AC378FA3E550F54A39139EB48227D6D92F94D5DDAB1C01CE29C2307A16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6be9be38-500d-4e05-8b3b-7b6f6155101b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6be9be38-500d-4e05-8b3b-7b6f6155101b.tmp
Size 21KB
SHA256 23b1a14b982cebe644aed1db9a05379ac6e9d71c0a0ca6d86c8054473a6ad690
MD5 8264dcc4b07517033c0fba94a4890269
SHA1 ca07617b0d4d834a2e0ab36d9d0b2ce010221ac9
SHA512 58f9fbd0898630617b110c5d156913e91705657c8d8cf87e109f631cd695b06927793d251f46e31bc6e0043127f13b6b3ac109e57145a2c80462b99b421da4bf
SSDEEP 384:0iFzQkUSvAzsN38TUNTUlIlfBLy1peYLUDzIGmS/IICs/iGyqb2I8IIl9:PFdc2wgfu1U31gc/iGHb58LP
TLSH
T1A7A26C339CA8E93BDFB79A50F64A3913DEB08167C9D5ABA4E6C99A1C01CB1DC1307D11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a82246f88da27a43b1718bd24e8cdfa3c17ae97a8d238e7befd5fac9a384a0a9
MD5 89669bdc21a8230bc30fb1b7dd97b74a
SHA1 2a5e6b394e76cb0c70b0bba2c18c74bbdd1a4cf6
SHA512 0c8eb5310ea11fffab4f6974f3ba27683ef8dd0cc87e73007e67d163fd017b83b6c0025e8e6b07401acc6ea67dcf75918453237e2f7dcf47044e2050973484b7
TLSH
T1C3D022F8FBE28020F0B23A3200BCC3C30008AB0820A803303C33200C2C880CAE22BE8C
MD5 SHA1 SHA512 TLSH

Submit Download

1538bc02-63d9-4ea2-9927-752a281c2e1e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\1538bc02-63d9-4ea2-9927-752a281c2e1e.tmp
Size 10KB
SHA256 5ab627ac7b1c8ed186f91dfa65f4962909f97ece6d9fb0a88d5d4c5f0f0c5a15
MD5 786a979304fba4099b7703c60f55d51b
SHA1 9c830aa7db43443a5c0573fb8821fe0981f7e673
SHA512 8ca92cd9d58538ea9d4f729b38aed88fecb8b90e6b7b12d2d994e395ee073d5599fe2af3d6e9d53dccf1fee01e2f6866be42a5f5bb1388d3c0ddde2d250ca799
SSDEEP 192:sxZvRsnV/f+s7uVIdpHxHW6+WNGYapaeaNIg54J:sxZvMV/f+s7zRHbG0O
TLSH
T11522B7126F28A97B8CC7D20DBB55BF53E6F9503391A11E48A6FC862C05E7ADD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

58d77ad5-579c-49b2-86e3-541e7accd29d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\58d77ad5-579c-49b2-86e3-541e7accd29d.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5e54be78-304a-435b-a6b0-c733164ea17a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5e54be78-304a-435b-a6b0-c733164ea17a.tmp
Size 27KB
SHA256 1c8114f2728eb514cc20e4facbe2d676beca9ebd6b97de1fe760346fc9332eef
MD5 d7592eef3f70e694d708a771e39686e9
SHA1 72927a0f25b58ef748c2850daac9c90d97c9e9cd
SHA512 9ffd72b3a2f5f7dfb290f0b580b97cff8faf7b59c72318e5cc8182705be0494bee9df9e4c59538d3fb2f4b1200f714bf06242f2c1c7d4e5ac9f05617c1c014c0
SSDEEP 768:wcWPcLKWvKeEe8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjlLlACy7Dro4tfeFmR/:wcWPcLKWvKeEeu1jaClLiF7w4tWFmR/
TLSH
T1F1C2FB3B644CCB7E4FC01A9DDC5A6FA77E9802C79A644D4047FE944C02C77EA912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

674e285e-4fa0-42dd-a6d7-a7baf8564c79.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\674e285e-4fa0-42dd-a6d7-a7baf8564c79.tmp
Size 9KB
SHA256 4f5831d79c29ae377bab0db4e12fc5f2dbc2f7613caffe62124002ccecaeb5e5
MD5 abb2a72400750df5325fe321d9a3b0c2
SHA1 4ce40e76974e7bb6564709e5b6f61685bdfa30da
SHA512 8701be4b4f21010dd9eafdb3ef41f8ee84d340e786c52302e2d18aa885e6b93ef7230698f3de12deec5fd3515c4de5844d3c33491ccb57d558d5326e3f623dad
SSDEEP 192:sxZvRsnV/f+s5uVIdpdxHW6+WNGYaplj7NIgrJ:sxZvMV/f+s5zbHbGF9
TLSH
T10F2296126F28A97B8CC7D21DBF15BF53E6F9503291E51E58AAFC861C04E6ADD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7efddb3a-df54-4475-8a71-7e5ae5152e24.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7efddb3a-df54-4475-8a71-7e5ae5152e24.tmp
Size 10KB
SHA256 2b9909d694a98f6f230e8fda7c4ce5ba636a85020a6c0ba0e7a279b654044610
MD5 16a9451f254239a35da567e44b18d462
SHA1 bda7802b12bd03d8f1cf170c1309eb39a1191db0
SHA512 6156b62c7182de24576e9067933a6c72e054648755afefe3f0b231813d02e955778ab7ffcabfc9ac21c1e6951d9553667869b5769d0f2c37ecbdc67008976dc7
SSDEEP 192:sxZvRsnV/f+swuVIdpdxHW6+WNGYaplj7NIg5SJ:sxZvMV/f+swzbHbGFk
TLSH
T1DF2297126F38A97B8CC7D21DBB55BF53E6F9503291E11E48A6FC861C05E6ADD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 91c26b793f77ca3779166174bf9773d906b470a8ee9d3301020df10ad81a5b40
MD5 00fc2bf349724aab0cd4cf722384a9ce
SHA1 89240bb805cbe98b9cdd303e07b2eaa9998282e2
SHA512 3a3146b51fa9c35f27063d963637731eabc98ac9e94dc23975991acc556e3473b7b4dea6b374c0e0d28ccb3c9484917ec2f3a301ec7254f65b85ff7fe71b8bcc
TLSH
T1DB51DB91CEED8468FBAC45BFA9D37E873EF05A40695F5FD524E4E3B85B063418100856
MD5 SHA1 SHA512 TLSH

Submit Download

321ca3e8-ad26-4b5e-938d-12f6040f7a6f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\321ca3e8-ad26-4b5e-938d-12f6040f7a6f.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

4e69beed-3d83-430a-818e-7f499d7f3c1f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\4e69beed-3d83-430a-818e-7f499d7f3c1f.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

523ea05d-7171-49af-a96e-3b1fedae4d53.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\523ea05d-7171-49af-a96e-3b1fedae4d53.tmp
Size 949B
SHA256 1c126bbbff35a3499af378c73c78a6ca6b1db74ff8861e394b975450ab0656e2
MD5 3515b416bb95daf9d56e6a05eaf15fd7
SHA1 be17bb9459bbd8a776c8e38bfd9f6de82ef831a5
SHA512 e3c74ad20b69ba79eb4988c0a0a493f427eaba11824b681e4a7f1c51656dcad0a813fc129ea7a7de8eb2b193665fb27c047df4960e9e5934eaf333b193ad81d5
TLSH
T13D117DF3C3D5C5AE890156F05A24AE1BDE1D0606432C7C1585E4EF2797F3075D00259B
MD5 SHA1 SHA512 TLSH

Submit Download

87832b60-45fb-46ad-ae8c-44ae702c8664.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\87832b60-45fb-46ad-ae8c-44ae702c8664.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 43b8691fc14f6e6f9bc0377b1499a4a2a582a422c176fae78948bd13eedec404
MD5 6c93d542da332b043cd9f06bb3f0847b
SHA1 df670b9b785cf3413df2d0dc58d0c4d2320c3556
SHA512 a59e97efb0bb7b2a798551b1c4b23b86ee02a5d6166d0fbd4b83063258ff73fe1c5f14452d310a5bd64c154dc53e24063cd0969e97605886130fda14082515b8
SSDEEP 96:KyFkBFnvvu1/21HluKfbHjuLtluzVvYtMpNv3H213+9HN2KfTHb2LltWrZwwKl66:5FkBFnvvq/2VlFbHjmtluzVvYtMpNv36
TLSH
T1DFB14700317BA210387E2748607686AB42523073301CEE7FBBBD55B28E6EE565DFD9D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b2c13feb-2031-46d7-8c88-6fba83d6a7c7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b2c13feb-2031-46d7-8c88-6fba83d6a7c7.tmp
Size 10KB
SHA256 099b7163795bf7e539750c1905393c65e4a18a3108f8ab0138cd5976ea9d8d4a
MD5 8e95cf669d524e563683382c072b85ff
SHA1 cc054a73579f4291fde695e7af9e984c1794355d
SHA512 693946778081c68554147677e935661f787c7d7305734fa9ffbf06fc3b74f773eb7443d574b0e9f8f27d00e9738c92e6a795a2068bda54a0e3778d29778713fc
SSDEEP 192:sxZvRsnV/f+s7uVIdpdxHW6+WNGYapZ97NIg54J:sxZvMV/f+s7zbHbGrO
TLSH
T1BD22A7126F28A97B8CC7E20DBB557F53E6F9503291D11E58A6FC861C05E7ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e255d28a-1733-4a1b-9cb3-292906d55c56.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e255d28a-1733-4a1b-9cb3-292906d55c56.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

44a863d8-55f0-4844-b7d3-0db4aff6db70.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\44a863d8-55f0-4844-b7d3-0db4aff6db70.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

bbd1bae1-ab37-495f-859f-5967ec3e5117.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\bbd1bae1-ab37-495f-859f-5967ec3e5117.tmp
Size 8KB
SHA256 992e0f5cfd72ad53b0fd0d848b359710807a468c1b7fa87bb7c2a0a24f0507e2
MD5 0917502169739c5fa6ecec2fcb052915
SHA1 4694daee36220e8f72d88f0e1b820c2c3923e822
SHA512 3e1d23b203caaa16070fa6879602828e4c9d7e8583644e77037f13031c99768d3372a791cfb9b5667e46f069064a87a397db117694fac4ef483e50ebb6122124
SSDEEP 192:aONC6IE7QmiUyg4gVTPuIGmSrLRC7sGA6U6:aONC6Dtx/JPuIGmS/SsGjU6
TLSH
T1AE02F835AC7C7C7B9EF3AD48F5876B236EA5112BA5952F84D9E81A0D00D724C1303922
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cd245970-bd7a-4f09-9a7c-3f37ddb73a62.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\cd245970-bd7a-4f09-9a7c-3f37ddb73a62.tmp
Size 8KB
SHA256 9e0547dd066fd585217849f0b9f3495ded6c1144469b50cac9072cafc6eb0c19
MD5 bac3226ef20ef4ac0244f14ad5839620
SHA1 d2c0af0d867466cd206bb8d38e2f9a11cf61e157
SHA512 93d4f8d3d58f64c0f33d3b981aac89a308bb2d29c5e47cdc71a732a8c43f0b64c65700a1661e5ee0279965ed5ca5eabf476213cc56b595bc69c2828e34855c9d
SSDEEP 192:WONI6IEPQmiUygKgVTRuIGmSrLIICE27HG/qJqbU6:WONI6DRxxJRuIGmS/IIC9HGyqbU6
TLSH
T1F8120A36A878BC7B9EA3A954F4873E239DA58227E7C97F90D5DC1A0C01DF25C130B916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c184d513-426a-43b1-bc40-51fd3e3c6da5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\c184d513-426a-43b1-bc40-51fd3e3c6da5.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 a00b1927378eab1e29477f485ba8c4f7b1c50d9caebc5812a471438097ad52d7
MD5 cba812040ee8b0719ea0e7345c10213e
SHA1 cf57129ae587f104f42fc7a017862b17fffd3a7d
SHA512 291326a077fbc9e942f8d25ae7da4ab342b141f1df9e19ed90ee21a6046b0379829b8b1175e51c20391320e9f8b6bf585b4d6f4b5032c7ad36c9d31b15fa4636
TLSH
T111411559B6E91148B3B76F4A9BF7A4AD487ABC333E07D49D10110E4F0A22B40C9B1B37
MD5 SHA1 SHA512 TLSH

Submit Download

3b920f8a-e5d9-4b7a-8dcf-98600b6c56e5.tmp

Path C:\Users\Admin\Downloads\3b920f8a-e5d9-4b7a-8dcf-98600b6c56e5.tmp
Size 10KB
SHA256 8c3fa05198afe3269f4b2afda8c21a353380cc62baf29597a1ef4318a12dff71
MD5 90a0d795fb01c1cfb2cf2e9ebd5373f1
SHA1 99fd799a1345978913b597ed5229ccacd4509fbb
SHA512 b083051b61347f640b1e52739386829d1663bf5c705fb3fb78329c8bc37b32c5696c94ee10d47c99e9fbeeb87dcf8b2e878437b4a93a882ada35de28590e9c33
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download