da6f6356538b903676c47152bb015cbccf9e85e7118f401428e777c47e069d5a

Analysis

max time kernel
148s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
23/10/2026, 12:09

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 1KB
Sample261023-pbenqa118l
SHA256 da6f6356538b903676c47152bb015cbccf9e85e7118f401428e777c47e069d5a
MD5 f18e4806149aa5e092863433a992ec16
SHA1 52fc67eefaf7ffcdf61565a5f695f25c0761da66
SHA512 daa4da779678225482a2d3323bf333cedc1f5561ccb09241d1e1ac73c2c6a27676b682d5332b8507e2d43b45c9e708b5a024bca2105b121db34924565b9c8f82
TLSH
T10331ED17BB0C141BF3A52290BAB2771ACC0DDC63A31309B7F0A2503BEAE4518A3557F5
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4784	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2101206053-1414382737-268919432-1000\{6087DBFD-4396-4705-9C9D-3D53DF17CF91}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1068	msedge.exe
1068	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe

Suspicious use of WriteProcessMemory 35 IoCs

description	pid	Process	procid_target
PID 5032 wrote to memory of 1180	5032	msedge.exe	85
PID 5032 wrote to memory of 4784	5032	msedge.exe	86
PID 5032 wrote to memory of 2088	5032	msedge.exe	87
PID 5032 wrote to memory of 2088	5032	msedge.exe	87
PID 5032 wrote to memory of 2088	5032	msedge.exe	87
PID 5032 wrote to memory of 3264	5032	msedge.exe	88
PID 5032 wrote to memory of 3264	5032	msedge.exe	88
PID 5032 wrote to memory of 2716	5032	msedge.exe	89
PID 5032 wrote to memory of 2716	5032	msedge.exe	89
PID 5032 wrote to memory of 2716	5032	msedge.exe	89
PID 5032 wrote to memory of 396	5032	msedge.exe	90
PID 5032 wrote to memory of 396	5032	msedge.exe	90
PID 5032 wrote to memory of 396	5032	msedge.exe	90
PID 5032 wrote to memory of 4288	5032	msedge.exe	92
PID 5032 wrote to memory of 4288	5032	msedge.exe	92
PID 5032 wrote to memory of 4288	5032	msedge.exe	92
PID 5032 wrote to memory of 888	5032	msedge.exe	93
PID 5032 wrote to memory of 888	5032	msedge.exe	93
PID 5032 wrote to memory of 888	5032	msedge.exe	93
PID 5032 wrote to memory of 2240	5032	msedge.exe	97
PID 5032 wrote to memory of 2240	5032	msedge.exe	97
PID 5032 wrote to memory of 840	5032	msedge.exe	98
PID 5032 wrote to memory of 840	5032	msedge.exe	98
PID 5032 wrote to memory of 1824	5032	msedge.exe	100
PID 5032 wrote to memory of 1344	5032	msedge.exe	103
PID 5032 wrote to memory of 1344	5032	msedge.exe	103
PID 5032 wrote to memory of 1344	5032	msedge.exe	103
PID 5032 wrote to memory of 4988	5032	msedge.exe	110
PID 5032 wrote to memory of 4472	5032	msedge.exe	111
PID 5032 wrote to memory of 1904	5032	msedge.exe	112
PID 5032 wrote to memory of 3616	5032	msedge.exe	114
PID 5032 wrote to memory of 3616	5032	msedge.exe	114
PID 5032 wrote to memory of 2084	5032	msedge.exe	115
PID 5032 wrote to memory of 2084	5032	msedge.exe	115
PID 5032 wrote to memory of 1068	5032	msedge.exe	116

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x24c,0x7ff92094c188,0x7ff92094c194,0x7ff92094c1a0
  2⤵
  PID:1180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1984,i,14398485994946655887,17203124925924456358,524288 --field-trial-handle=2364,i,4091171937380563506,9287004979337314609,262144 --variations-seed-version --mojo-platform-channel-handle=2400 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1852,i,2903427955536193190,11303238702726718264,262144 --field-trial-handle=2364,i,4091171937380563506,9287004979337314609,262144 --variations-seed-version --mojo-platform-channel-handle=2360 /prefetch:2
  2⤵
  PID:2088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2388,i,17225005766684283228,2155280852457258503,524288 --field-trial-handle=2364,i,4091171937380563506,9287004979337314609,262144 --variations-seed-version --mojo-platform-channel-handle=2420 /prefetch:8
  2⤵
  PID:3264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3464,i,9454938735215343442,10658461435151911171,2097152 --field-trial-handle=2364,i,4091171937380563506,9287004979337314609,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:2716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3484,i,15243923803023275653,5637992883121081997,2097152 --field-trial-handle=2364,i,4091171937380563506,9287004979337314609,262144 --variations-seed-version --mojo-platform-channel-handle=3536 /prefetch:1
  2⤵
  PID:396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4236,i,16090553104717612676,16064157879670389902,2097152 --field-trial-handle=2364,i,4091171937380563506,9287004979337314609,262144 --variations-seed-version --mojo-platform-channel-handle=4324 /prefetch:1
  2⤵
  PID:4288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4256,i,3425071123606714021,10670552370284549924,2097152 --field-trial-handle=2364,i,4091171937380563506,9287004979337314609,262144 --variations-seed-version --mojo-platform-channel-handle=4372 /prefetch:2
  2⤵
  PID:888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3432,i,2766321622986820757,17508797651881324742,524288 --field-trial-handle=2364,i,4091171937380563506,9287004979337314609,262144 --variations-seed-version --mojo-platform-channel-handle=5136 /prefetch:8
  2⤵
  PID:2240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5116,i,7575715655214041665,7433961774275418350,524288 --field-trial-handle=2364,i,4091171937380563506,9287004979337314609,262144 --variations-seed-version --mojo-platform-channel-handle=5164 /prefetch:8
  2⤵
  PID:840
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5736,i,8573202448067878787,3410587416223990030,524288 --field-trial-handle=2364,i,4091171937380563506,9287004979337314609,262144 --variations-seed-version --mojo-platform-channel-handle=5908 /prefetch:8
  2⤵
  PID:3824
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5736,i,8573202448067878787,3410587416223990030,524288 --field-trial-handle=2364,i,4091171937380563506,9287004979337314609,262144 --variations-seed-version --mojo-platform-channel-handle=5908 /prefetch:8
  2⤵
  PID:1824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=6068,i,14668005199437501334,4918649200551343993,2097152 --field-trial-handle=2364,i,4091171937380563506,9287004979337314609,262144 --variations-seed-version --mojo-platform-channel-handle=6204 /prefetch:1
  2⤵
  PID:1344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4572,i,10386936190378288310,10915272584015904957,524288 --field-trial-handle=2364,i,4091171937380563506,9287004979337314609,262144 --variations-seed-version --mojo-platform-channel-handle=4544 /prefetch:8
  2⤵
  PID:4988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4556,i,13595640755747003719,10642671153717660253,524288 --field-trial-handle=2364,i,4091171937380563506,9287004979337314609,262144 --variations-seed-version --mojo-platform-channel-handle=4508 /prefetch:8
  2⤵
  PID:4472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4560,i,11794698094421504121,15200008259783460187,524288 --field-trial-handle=2364,i,4091171937380563506,9287004979337314609,262144 --variations-seed-version --mojo-platform-channel-handle=3596 /prefetch:8
  2⤵
  PID:1904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4256,i,3721724277648177164,9747107207712249761,524288 --field-trial-handle=2364,i,4091171937380563506,9287004979337314609,262144 --variations-seed-version --mojo-platform-channel-handle=3584 /prefetch:8
  2⤵
  PID:3616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5188,i,17696198960043413282,10279374851863000490,524288 --field-trial-handle=2364,i,4091171937380563506,9287004979337314609,262144 --variations-seed-version --mojo-platform-channel-handle=5132 /prefetch:8
  2⤵
  PID:2084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5304,i,15763303529104692598,795430641626244769,262144 --field-trial-handle=2364,i,4091171937380563506,9287004979337314609,262144 --variations-seed-version --mojo-platform-channel-handle=6164 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1068

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1344

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

329e929a-2bdb-4379-853f-e3569cbf2558.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\329e929a-2bdb-4379-853f-e3569cbf2558.tmp
Size 8KB
SHA256 e165c7d2836710559e5e70cfd4a858d0b1a4932c28fecb22c1b3448e0c2d336d
MD5 fcb0fa132ab6717ca1170baffb50b771
SHA1 03cf850cbd61429602fc37df2aa9ea7bb190bdd6
SHA512 70c94a58b765080eae9f0d268cb848639c5d0cfaf57977e026fb3c51734423711a156d39d9fa0cf118041c8fd2d71091dea27f7dcfbc751b9f60af21b29a4731
SSDEEP 192:WONS6iDeQmiUyKczq5u88PijzorLeLXiPwoEuZzqdLU6:WONS63Ozq5u8iu8LGXiYo7+LU6
TLSH
T1C4121B3678786C6F6DD3A855B48B36139EB5412BEB886F80D5EC172C05EF29C5307A23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

65fe324f-2949-451f-b2c9-abfd11573e50.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\65fe324f-2949-451f-b2c9-abfd11573e50.tmp
Size 18KB
SHA256 92f64a6c09b3320e37f02fa712737d21fb740611c1762a7db6b6076b2069fcee
MD5 38576a96f404fc68dec3f82fcdc89e57
SHA1 f75bc7d7484e9c70a7fd71dce4a471a921cdddc5
SHA512 9109775344116a7d544388a608f715c2f4143a193188d57cc429bbe66f61d140495eea9a248c3a5391a7885bfd919218ad19f7c3591690e6e40364853e48a3f3
SSDEEP 384:BQkUSv0sNnZO5fWBp5u8iu8LGXiYox+L2IsIIly:z069kvmiJW5sLc
TLSH
T158828D366CB86C2B9EA6E520F14E36438EB4811BD7D85F94D5DC6B2C05DE2D92307A23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9a133475-34ca-462e-a8fb-a728e5faeccf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\9a133475-34ca-462e-a8fb-a728e5faeccf.tmp
Size 21KB
SHA256 b1b2452fdd9cfac2d0c6da7fa303c7c99aa1e05cd5806ccaa0760d771ca79352
MD5 72469c3b02f71b7af2a532ec9a09d238
SHA1 7c18bf4a1e0a515f89e03bb160aec13bc13a8216
SHA512 9b2de1fc662fe5edfeb8928af6b9c60d22b725b14dbf823ea25e6eafaf8dfb1a83061f05c80074d73366acd834d3d0aaa6b7e4363184f728233260bd85de159d
SSDEEP 384:ViFzQkUSvqzsN58TUNTUlIlZO5fWBp5u8iu8LGXiYog+L2IsIIly:cFdiAwgN9kvmiIW5sLc
TLSH
T14DA26D375CA89C3FAEA69A50F54E3243CEB4415BC6989F94D6DD5A2C01DB1DC2307E23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 61a97be736e0441d45644d31b38bd9bef6c1bd260fa1ecbb5d099fa493fee6b4
MD5 99bbd8400adc948f85ebd87cb24b3fcb
SHA1 c8fb9564ede7ecb06cef446bdb527025127a796e
SHA512 75b3ee70eca487cbbfb3d5b4b25bae158ff99188ab36d55f391e9f80c51ce9fa433897d79a0ae37ad64698bc3eb5aa9a10a49116fb8f7f35ed0a6e98aa8321b7
TLSH
T109D022C8F2A0300CE00C3233A02BCE022B88CEA8F0032BCA000E8C80E8800C80CF2C8E
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 87a6b56b3a47cfd9f58f49b21d0040033c8cfd80b50e49b434794cefa7e29583
MD5 74ef2da89fa243ea7d0030317efca192
SHA1 ceb38f6fe8b62f80d617114db8b4617467417ae3
SHA512 285847f78095225db6f446ab877593c3e8e9c642b3beec1b15e7b1eec59d6b2f61ada0e2fb96cf36a3046dbd5102c274473cea5f978ee83b010039a4dc00d05d
TLSH
T10DD024C471D0340CD40C31335015CD011744CD54F00317C7000D4C40C4400C40CF1C4D
MD5 SHA1 SHA512 TLSH

Submit Download

7a854702-006b-4782-b79b-8781789563d7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7a854702-006b-4782-b79b-8781789563d7.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8f304736-f73e-4d1d-8e29-cd8a8c753133.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8f304736-f73e-4d1d-8e29-cd8a8c753133.tmp
Size 9KB
SHA256 0e6aeb8c7275722d50cd3b3939f1a6f8566a5f03aa7a1ce5c86ef9187be89094
MD5 0ca7ef3becf14581e4b1a3c7bf9aae85
SHA1 07085bf984db03c6c7fd3e03996d6ae2196aa62e
SHA512 4542acf5c55c11518ade716b44af60e3d1d1c84af40d5eb6bd68dba4dec8b309946de1a62af8f5198c7b72f63f1a9eb6c7dbebdb2a047de0fcaab9d09bbba8b0
SSDEEP 192:sxZsRoCWk/fkszfhIdpdwHW6+WNGYaJdD/Ig5xJ:sxZsQk/fkszfKKHbGHh
TLSH
T1A422C8527E28A97B8CC7D21DBA15BF53E6F9503291E41E48EAFC862C04E76CD220741F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG
Size 331B
SHA256 7126e8c02664c4d4f8618e703eaf3ce0c6b684e96354ce2a24a6f6c604a1c933
MD5 b0d6a7f5767c0ca06fd51605f16f4034
SHA1 81646dc7089184a18f327f5cd905d4a188111f07
SHA512 14c148943d95017e06df1305eee27b7e0ec596ee6f91d471deb09452c0d56a9ed0f8dd9655a03bab01196eadd5239d4d1ee2f328df21f77e5e5d873b34ffbcfa
TLSH
T109E020A824ECC62DB544748B027CD30D93806A1F97D0AD0D3B04C5C574868447691952
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 877faa613939561661dd9ed1b265c1adaa8ef42827acb22917bece2f04e1f6fb
MD5 aa0780330dc236d455d322dea7a1dcc3
SHA1 ff847b641344d64e8ed2fc31ad003bd36c89287e
SHA512 dff7e69d2f24fc39eef7ff34f9c64c19db522c17ad9a5fe82c21387d71a35b0cde84dd924e65424bafb6017590ecf561ca0bd98692125b9de1670e9672ce9324
TLSH
T18661A4B07F414964F7AC133E51DB12833F38159A9C6B1E59A0D4FE7864063B8593BC08
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 27abb75290e723a7a0d16a44d3bcedb796db30ec6bc36e9f2296ccf560e0f8f8
MD5 f51db3831a627d910cd98a64a3c0afcb
SHA1 755ede559023aa67a2c0193c9def93ddb4f77ac4
SHA512 0aac7d8cf57ff86dd7b9d1b2c82b73a2e31f619633fcf81fdb95f98bdc58f00cff5d434e0c7c4382998fa00b0e28b530910722c8ce75000c84fd6d72cc27076b
TLSH
T16561A4B07F404964F7AC533E51DB12833F38159A9C6B1E5AA0D4FE7864063B85D3BC08
MD5 SHA1 SHA512 TLSH

Submit Download

db4810b4-3e2d-4677-8da6-a3492a04c9bc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\db4810b4-3e2d-4677-8da6-a3492a04c9bc.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

3f13d7e2-046d-4022-ae47-fba7c3043483.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\3f13d7e2-046d-4022-ae47-fba7c3043483.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

52857e81-6009-41d8-af70-50ec73ab1637.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\52857e81-6009-41d8-af70-50ec73ab1637.tmp
Size 1KB
SHA256 cc78f2c2b5acdaba1bfb05ab39cc2c119de7763a68bce895d69c95ea9ce36792
MD5 6c1c3537484b8e8bca904c38fcb50cfa
SHA1 388c96939736d88467739d34ae05f0f8ddfe3b96
SHA512 eac0c4e6ced1694a7905eaa70953edcbdabe01b4a0c3967513d46b35d2ba1c042f1624d145594c78fd96b04c0e7328180bcef3e852cf2799d8bc16ef82ce42c5
TLSH
T1B521BEB3C6D4876E890156F05A24AE2BCE2D060682283C56C9E5EF2BA3E3075D10259F
MD5 SHA1 SHA512 TLSH

Submit Download

e6854658-2a56-4cac-b055-7a35b1a3601b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\e6854658-2a56-4cac-b055-7a35b1a3601b.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 408db32f858f2e2a7a4bacfb9f3a4f534ebb4ab23470a1626f1a9c3a2b2dd189
MD5 f1800eb71f5f2fd38b722c64a542fbc5
SHA1 e62f564931621b3e7b026b713cce35b77a138d4b
SHA512 695d1610c0149425b32df3272f4c498bf4ed862594b80ed33c411d98a0c8170ded5851e7ed56e64b4287b0c6ab1536aabd3d29747ce758aceb4bd44a12461a5a
SSDEEP 96:KHZQjPZzTxavKs4HxKg4auiUoKxuyuwK7am+:GZQjPZzTkvKjHl47TWr+
TLSH
T13F918F1372BA4340387D3948817A869B4A8235B33458AE7F7BAC41F64E6FE050DFD9D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b6335a84-14cd-4532-9c55-5562058f4cfa.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b6335a84-14cd-4532-9c55-5562058f4cfa.tmp
Size 9KB
SHA256 c4fb5143ad955c40322a2100e64b87b6df610e21490eade4aaf1a8e307ba6182
MD5 65aec5b7f460fcc95973bdeba87789c4
SHA1 345a443a5fa8ed266e6d3b0eb3ee207bc750f560
SHA512 16fc61b604c52971e9f529d8219ecfcd97f02ee9ea7dc4780e403d405f2fb085e85ba02e027a50e0fa8b4e686fad9171ca1e92930eafcf984955a5eb259ef1e0
SSDEEP 192:sxZsRoCWk/fksIfhIdpdwHW6+WNGYaJdD/IgrJ:sxZsQk/fksIfKKHbGH9
TLSH
T1AA22B8527E28A97B8CC7D21DBA15BF53E6F9503251E41E48EAFC862C04E7ADD220741F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c0a45ec2-e123-4070-8d61-a1567724a61a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c0a45ec2-e123-4070-8d61-a1567724a61a.tmp
Size 10KB
SHA256 c7b33bf97bea489c850381e4e5d301f55a549d97c3057ce4f380271415f90feb
MD5 d4bb3b97cb24a9f86c5b19dd980af3e5
SHA1 06ba3f0925f0ce22a4df87f2c0f37e2fef6a4eb6
SHA512 dcac44dddf9db165d0852dfbeba7fea8571134055e243d78fff842f28c3e81cc5b2be709c1e305da2583cd982dc1a4241850c31ad07f2cd332251b90e1b30653
SSDEEP 192:sxZsRoCWk/fksynfhIdpdwHW6+WNGYa+/D/Ig5rJ:sxZsQk/fksynfKKHbGUH
TLSH
T1DC22D8127E28AD7B8CD7D20DBA15BF43E6F9503291A41E48E6FC862C05E7ACD220741F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cc4249b4-b02f-4920-9ded-dcd165e59fa8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\cc4249b4-b02f-4920-9ded-dcd165e59fa8.tmp
Size 10KB
SHA256 96dfea4cdc9910a138714d186ac8917cb5761fd11e736e314548dfbe65d7f4f8
MD5 e0d1d1e335875128a1cc2ad502ef42b4
SHA1 75cb6e30d048757fd79f0bf6baffe6311ac6fddd
SHA512 49d7296b037654cb3732bf0e6006d671a1917b5a74077a471b7c9fdd32a31a7ac027c875823f60f96ec95d961fe5bdbe6519cea1c0c176a6a6f931c650a6c8e4
SSDEEP 192:sxZsRoCWk/fksynfhIdpHwHW6+WNGYaiED/Ig5rJ:sxZsQk/fksynfKQHbGJH
TLSH
T18F22D8527E28AD3B8CD7D21DBA15BF53E2F9507291A41E48E6FC862C05E7ACD220741F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d96dd570-4e24-4b76-bad2-7cd83fc557a8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d96dd570-4e24-4b76-bad2-7cd83fc557a8.tmp
Size 27KB
SHA256 a7c4333253667bfae18109b762a10b365ed6280c18d7888e1b775e20aad8eec7
MD5 04f7b298a13defa42ae3e5ff9c19e913
SHA1 82cd52343eb54178bd9f26c19d159bbb0fef10b6
SHA512 3c98ceb8c28d2334f888ec7717c3e97bad3405c735277e7af1735afdc5fed62458a8b45b95733b3b4c3794b2d85753c03260f8ebb08921c552df23a5a5146291
SSDEEP 768:0JyQRbrWvvlpZ8F1+UoAYDCx9Tuqh0VfUC9xbog/OVaKLlRXH3rrovZrC:0JyQRbrWvvlpZu1jaXKLf33YvZrC
TLSH
T1ECC2FA2B640CCB7E4FC01E9DDC6A6F976EA802C766688D4047FA984C02C77EE51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

633239c9-c952-4c39-bc86-082850d8f483.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\633239c9-c952-4c39-bc86-082850d8f483.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

a2bb5a2a-47f3-48cc-ad6b-82e5b2f5e294.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a2bb5a2a-47f3-48cc-ad6b-82e5b2f5e294.tmp
Size 18KB
SHA256 65c3b5c55c6abc97a0262c52a133e7d0443f061c4dabe0dcbf35ef5bc9961558
MD5 d46e04d84011dc110ddf5ae52af1cdd4
SHA1 c2ad1a43199cb5248712301bffa05ffa8b2858e2
SHA512 6f0e87d026bd0278acb9bd0a5fea9301bb6e3a6350885b28512073cc4a1027e9a9b1831f58568d0b3f7f39029d186cf3d6973f2bf2adea451469459df2dcda37
SSDEEP 384:IQkUSv0sNnEO5fWBp5u8iu8LGXiYox+L2IsIIly:A0N9kvmiJW5sLc
TLSH
T13C828D366CB86C2B9EA6E520F14F36438EB4811BD7D85F94D5DD6B2C05DE2D82307A23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a2eeea7f-9b2e-4c4d-b770-c5f6a971b5e1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a2eeea7f-9b2e-4c4d-b770-c5f6a971b5e1.tmp
Size 8KB
SHA256 5134284f44131730adc5059f06fa4c065f5db4a5a04b7d5447b76f5d56d97248
MD5 f4ee6bde57caf42ec33b84857a9174e1
SHA1 4ab9808893bb3287fa269fafa1dc0b85f13d09b2
SHA512 49d9ed0d8287719cfe88f737880dbc745841d1a707a9bcd435329829b0fdb38edfa422b044e4b4ee8a40af956975995e8e37dc0d0f010142f902f5620847f982
SSDEEP 192:SONo6iDCQmiUy2cHq5u88PijzorLeLSq3FZFU6:SONo6/4Hq5u8iu8LOzFU6
TLSH
T1A502E9397C787C6BAEE3AD05B54B37179FA5012FE6952B84D9E8162C01DB29C1307533
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0ce45eae-f457-46bf-8b33-478a87347944.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\0ce45eae-f457-46bf-8b33-478a87347944.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 2692da433a4ff4e92b62b2882069e116496309c3828a6e38a562e406ae183d5f
MD5 a0200707ff96e93313e23b4bdf9e4e5d
SHA1 b74d5e0712114b6d97b882d972e325db1bf5ae4b
SHA512 7be9201f90cc12b64427a13d9e86a3a6abb15d5a3188c318adb504750244e21fc76372067e770f23efbad805c8386662e72feabac7fed4007ce9a2693218ede9
TLSH
T1B7412A5CB6F91148B377BF599BF7A86E843BB9332E06D46D00110D4F0A66A00D872737
MD5 SHA1 SHA512 TLSH

Submit Download