fb47468a2cd3953c7131431991afcc6a2703f14640520102eea0a685a7e8d6de

Analysis

max time kernel
148s
max time network
137s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
23/10/2026, 12:09

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 615B
Sample261023-pbfwsabv4x
SHA256 fb47468a2cd3953c7131431991afcc6a2703f14640520102eea0a685a7e8d6de
MD5 7df3d7cf3358af3f470ac7229387ef94
SHA1 c51a3f0e6de4eb802d5630941c3fd9e1d0efae4b
SHA512 098db3badb76a319c211d685b869e15bbc51e2658a912514b253d2a5ef3a61981dad1726f1ccb494f21b7869e655b88446c5c5c91fd76d4e33885a0b5aef3bad
TLSH
T152F0029BE3002227B48343013CB35A21775503E40354CB5578C74DD3EF2A913F4175B8
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4240	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-895009113-1202185046-1686627690-1000\{C0A72F9C-2DEF-4DCE-9F2E-D4BEB5A12F8E}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2796	msedge.exe
2796	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 3992 wrote to memory of 3568	3992	msedge.exe	86
PID 3992 wrote to memory of 4240	3992	msedge.exe	87
PID 3992 wrote to memory of 2224	3992	msedge.exe	88
PID 3992 wrote to memory of 2224	3992	msedge.exe	88
PID 3992 wrote to memory of 2224	3992	msedge.exe	88
PID 3992 wrote to memory of 4348	3992	msedge.exe	90
PID 3992 wrote to memory of 4348	3992	msedge.exe	90
PID 3992 wrote to memory of 976	3992	msedge.exe	91
PID 3992 wrote to memory of 976	3992	msedge.exe	91
PID 3992 wrote to memory of 976	3992	msedge.exe	91
PID 3992 wrote to memory of 1100	3992	msedge.exe	92
PID 3992 wrote to memory of 1100	3992	msedge.exe	92
PID 3992 wrote to memory of 1100	3992	msedge.exe	92
PID 3992 wrote to memory of 1984	3992	msedge.exe	93
PID 3992 wrote to memory of 3320	3992	msedge.exe	94
PID 3992 wrote to memory of 1984	3992	msedge.exe	93
PID 3992 wrote to memory of 1984	3992	msedge.exe	93
PID 3992 wrote to memory of 3320	3992	msedge.exe	94
PID 3992 wrote to memory of 3320	3992	msedge.exe	94
PID 3992 wrote to memory of 3700	3992	msedge.exe	100
PID 3992 wrote to memory of 2516	3992	msedge.exe	101
PID 3992 wrote to memory of 3700	3992	msedge.exe	100
PID 3992 wrote to memory of 2516	3992	msedge.exe	101
PID 3992 wrote to memory of 3892	3992	msedge.exe	103
PID 3992 wrote to memory of 3808	3992	msedge.exe	113
PID 3992 wrote to memory of 1424	3992	msedge.exe	114
PID 3992 wrote to memory of 4468	3992	msedge.exe	115
PID 3992 wrote to memory of 3752	3992	msedge.exe	123
PID 3992 wrote to memory of 3752	3992	msedge.exe	123
PID 3992 wrote to memory of 4292	3992	msedge.exe	125
PID 3992 wrote to memory of 4292	3992	msedge.exe	125
PID 3992 wrote to memory of 2796	3992	msedge.exe	126

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ff97891c188,0x7ff97891c194,0x7ff97891c1a0
  2⤵
  PID:3568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1952,i,14388248102747970565,13819027905338066334,524288 --field-trial-handle=2292,i,1252213284922413059,8911423731175935731,262144 --variations-seed-version --mojo-platform-channel-handle=2332 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1724,i,13640831096295964678,13092928668566665388,262144 --field-trial-handle=2292,i,1252213284922413059,8911423731175935731,262144 --variations-seed-version --mojo-platform-channel-handle=2288 /prefetch:2
  2⤵
  PID:2224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2600,i,12601286036278394549,17437792792641535268,524288 --field-trial-handle=2292,i,1252213284922413059,8911423731175935731,262144 --variations-seed-version --mojo-platform-channel-handle=2608 /prefetch:8
  2⤵
  PID:4348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3452,i,2234101632763440727,14333358063948349354,2097152 --field-trial-handle=2292,i,1252213284922413059,8911423731175935731,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3472,i,16194365458259734492,8373455197711222280,2097152 --field-trial-handle=2292,i,1252213284922413059,8911423731175935731,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:1
  2⤵
  PID:1100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4240,i,7425518699285606422,11363044863998872439,2097152 --field-trial-handle=2292,i,1252213284922413059,8911423731175935731,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:2
  2⤵
  PID:1984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4228,i,11199274232110469972,8912140929385523162,2097152 --field-trial-handle=2292,i,1252213284922413059,8911423731175935731,262144 --variations-seed-version --mojo-platform-channel-handle=4280 /prefetch:1
  2⤵
  PID:3320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,10593944364265494030,4068887753751681458,524288 --field-trial-handle=2292,i,1252213284922413059,8911423731175935731,262144 --variations-seed-version --mojo-platform-channel-handle=5168 /prefetch:8
  2⤵
  PID:3700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5132,i,3855944819992844799,9779004196709696037,524288 --field-trial-handle=2292,i,1252213284922413059,8911423731175935731,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:8
  2⤵
  PID:2516
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5920,i,10925359478196740770,5620907705636586970,524288 --field-trial-handle=2292,i,1252213284922413059,8911423731175935731,262144 --variations-seed-version --mojo-platform-channel-handle=5936 /prefetch:8
  2⤵
  PID:4468
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5920,i,10925359478196740770,5620907705636586970,524288 --field-trial-handle=2292,i,1252213284922413059,8911423731175935731,262144 --variations-seed-version --mojo-platform-channel-handle=5936 /prefetch:8
  2⤵
  PID:3892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4296,i,6435524143419543853,3431385211791606119,524288 --field-trial-handle=2292,i,1252213284922413059,8911423731175935731,262144 --variations-seed-version --mojo-platform-channel-handle=4328 /prefetch:8
  2⤵
  PID:3808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4220,i,7318427000690075755,11652370095904775572,524288 --field-trial-handle=2292,i,1252213284922413059,8911423731175935731,262144 --variations-seed-version --mojo-platform-channel-handle=4308 /prefetch:8
  2⤵
  PID:1424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4232,i,16498099689444673978,9842907429514494532,524288 --field-trial-handle=2292,i,1252213284922413059,8911423731175935731,262144 --variations-seed-version --mojo-platform-channel-handle=6264 /prefetch:8
  2⤵
  PID:4468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6296,i,6858350798451561635,2887501781781662609,524288 --field-trial-handle=2292,i,1252213284922413059,8911423731175935731,262144 --variations-seed-version --mojo-platform-channel-handle=5400 /prefetch:8
  2⤵
  PID:3752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5900,i,16200266611203837132,3459143709554282927,524288 --field-trial-handle=2292,i,1252213284922413059,8911423731175935731,262144 --variations-seed-version --mojo-platform-channel-handle=5848 /prefetch:8
  2⤵
  PID:4292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6204,i,6230351287041779408,7028102008437928403,262144 --field-trial-handle=2292,i,1252213284922413059,8911423731175935731,262144 --variations-seed-version --mojo-platform-channel-handle=6208 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2796

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1812

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

26a140a1-160c-431d-b5b4-a056dd8645fa.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\26a140a1-160c-431d-b5b4-a056dd8645fa.tmp
Size 8KB
SHA256 ddda6c432b22c8ff6c849947e434e27ede326a8cfed557d89cb9c2a0be65675c
MD5 a5fca5d6d0d309ed2ef317c2efa6617a
SHA1 065b25a2b215914a2d97f805cabd91136c62a3a1
SHA512 cbb99f53bd669ecd29c302e28e26755d71f92e94412bf65596a576be3bffacfc97077be26911d9a3dc9e4d0bf081aa1dccea92d565cc53fed20dbd59d953563c
SSDEEP 192:ION86JUJQmiUykgBo//0ZbQLcNNxZNBqqU6:ION86+nEBo//0ZbQw1bU6
TLSH
T117120835B874EC775DA2A594F08376239E74406B9B89AF90D6DC2B2C06DB16CA307827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2ae0299b-c6e7-49e2-9f3a-3d9e1eaeed5a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\2ae0299b-c6e7-49e2-9f3a-3d9e1eaeed5a.tmp
Size 21KB
SHA256 4ea6ab05542064a43dfa2d17894a3639ea718b84cf053c8bb7345cbacde47f80
MD5 4e9a89524c117a6e1d9ab482801e202a
SHA1 d75a37a6864e3363506131fc0c16c89730b05658
SHA512 4675ab024e1cf7312dd955baefa7470d34f2fdf8c97dfbef8567a2f21295200d8fd277be75885074f8af34916c5420355122e4f8817854f6156269c69303cd58
SSDEEP 384:FiFzQkUSvtzsN78TUNTUlIlDBqgMc2BbbgTh//0ZbQwcb2Ixu7IIlp:MFdVGwgagM3y1/sZzcb5xu7L3
TLSH
T1E8A25C336CA4DC7BAEB69A90F54A3653CEB040A7D6959FA4D7CDAA1C01CB1DC2307D12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

53b6b279-5cde-45be-bb2c-9121727b5fbb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\53b6b279-5cde-45be-bb2c-9121727b5fbb.tmp
Size 18KB
SHA256 d1ab664e89dafc163552878b3de3e9040799a19902d184a9ea449414c36f2bf0
MD5 6400e8f95af5428d578941437b9dab12
SHA1 516432baca90255f79b2787bfb613b282ff49134
SHA512 348cad13e80fb6af2c49a4e43eba84a4d0c843d3c3aaffb6919deb2b87da7e62f7194a49aa258fd03b37d00e8321cfc71545365e645c184ad6d8f366261828be
SSDEEP 384:yQkUSv0sNZDBqgMc2BbbgTh//0ZbQwKb2Ixu7IIlp:q09gM3y1/sZzKb5xu7L3
TLSH
T155827D366CB5AC379DA3E590F0463653DE70806BD7D45FA4D6CDAB2C05CB1A82307A23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dcacaf69-60ee-4b2f-85c1-0fece6513cc2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\dcacaf69-60ee-4b2f-85c1-0fece6513cc2.tmp
Size 105KB
SHA256 70186446beefb5f52a8af72dc666f019127ca772ab346b24c242d8d83b3dbd41
MD5 8d16574ea95ad59e658fb6fff1145f82
SHA1 42a86208229e0acc976e3871eed70b257d3c129f
SHA512 ebf403f83599040727e9e64202ac06775ca09653730607a6ba8c761b4cae67d1081bcafb880105f893dabfba290a649f0680da526b9ba72be3a3764ea147eb6e
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7z:fwUQC5VwBIiElEd2K57P7z
TLSH
T154B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 04d384e503ac7726cb96f043e69cad98489c2eafc2665c80e33cb016d873b6e5
MD5 c5a323aac1462c81d1642ed0f7b1b5a2
SHA1 c07fc90a5c5d549ecbf33b4bc8cb6cb9ca204f88
SHA512 222a743460a5faf30304aa1d67f0e10e2db3eb1a339b1bbf5ca524b4a2fcaa1361289e4358333bae502b5bb38029cddb6902b4cd64293b0ad42b474cee75f892
TLSH
T1B2D02BA4A3D839C9E112183602214366348D40A15057E010CCA0518907C91538281460
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0e249170bbcfe30a2a7f421f287b6f81c1c4b71b07e845351f15d008b660ff09
MD5 81d112607d82fd2070ddb7aeeb981683
SHA1 14d14f6413d240f3629ae2eba8f5d1139dc415d0
SHA512 983c5ff8fde2dccf9dc8cf1c11f0008f124b59c2922b2ae470dc2c7595c82289abfd0b4819d73f1bf062a77e62e9ed53318e5f62978a688554f46d0a6c41cbfb
TLSH
T1CFD02BA463D83DC9E512183602204366348D40A15057E111CCA0518907CA1938281460
MD5 SHA1 SHA512 TLSH

Submit Download

4142aee6-2f85-47dd-86eb-ec0fef3e1d1a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\4142aee6-2f85-47dd-86eb-ec0fef3e1d1a.tmp
Size 10KB
SHA256 84e2dcb4ae610c9bb139e8eaab67be9b56d6a6e32d6de472febd9dbd50b70ec4
MD5 9383ce3bb616d6fd4746e5a1aa7f6dc5
SHA1 3eb43ba7531bb71f030875ab410855c0b59638f6
SHA512 5bfca7283f8a991e7f0d27eeefbe00f1c29bc6821509cac323ec8a53888d69e965a75fa11951916be9b5924556840fcc1f32e598315d6d4dedd98e3b4c27ce14
SSDEEP 192:sxZZR9WN/fDs2FIdpHTHW6+WNGY36cZU0JkIg52J:sxZZON/fDs22zHbGXVY
TLSH
T11E22B7526E286D7B8CDBE20DBA25BF53E6F9503251E01E58A6FCC61C05E76CD220741F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

56545fe5-204e-47ec-b748-d07ec71fc038.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\56545fe5-204e-47ec-b748-d07ec71fc038.tmp
Size 10KB
SHA256 76ec4f1e99550b292674435c3de62aea049ecf302609d3fc688e8ed9849ba945
MD5 f2870c53296a51954c6cb53060531bd8
SHA1 1adc5d861ce64bf348a990b2abb2e2031b6ea57d
SHA512 ce75550e9c8315f821bbd637a1766664a5f3b20fbfe7db377635eb3c22fc0c2ab6ecf202ff63167e1c0cf49a40c2366acf8e0d9f9e5e4d1982a38167de078764
SSDEEP 192:sxZZR9WN/fDs2FIdpdTHW6+WNGY364mU0JkIg52J:sxZZON/fDs22dHbGXsY
TLSH
T18D22B7516E28A97B8CDBE20DBA25BF53E6F9503291E01E58E6FCC61C05E76CD220741F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6c495572-a19f-4ec9-91c2-4e05549b1a11.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\6c495572-a19f-4ec9-91c2-4e05549b1a11.tmp
Size 9KB
SHA256 7ed80cb23f07fa7597a0acf7ac82db772144a606ee093ab95f96ca4883fd2c58
MD5 194f88991ec7e32064b89597987f0881
SHA1 7e805b43ddadb041fc6d432f12cd5ae797cf9ba8
SHA512 159811bbd8844861018a4ca74349047b703549186a862e0fabce781e92c9abe1503afa316f72868fc9caf253ebf7c15cc500f115d73454632ad0c298db031a1f
SSDEEP 192:sxZZR9WN/fDsMFIdpdTHW6+WNGY36W0U0JkIgrJ:sxZZON/fDsM2dHbGXG9
TLSH
T10A22A8516E38A97B8CD7D20DBA25BF53E6F9503251E01E58E6FC861C05E66DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 d20af4ffd103ce228c7112b243d12878853d74ed553d062633a3cc4b53e70137
MD5 4b8fd402440b80fa3a31dd9f26c07dba
SHA1 5ad0b3f7289811f0af390f97a84262d8f91b85d1
SHA512 3ec27207c1e4cc22107633fd00882ba5645daa8d7b2a103754c0187de1e811818862c654804894220907e96c87a8ec2e5a0b17cada6724b7981384d1acb5adb1
TLSH
T120E07D8414C8C23EB68874C7437C630D8B813A1AE7C46E0E3708C9C472878D8B6CA790
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 653e2b2432ae7d02ce5ba4c7be00a1b6c77c42a25dd7a5711fa23f4e7f88e4d1
MD5 4a4bfd11eaf1e16aef91898ee6aeca71
SHA1 877523287d5d68c8a09c7e0b6f3a01e586f6638f
SHA512 b1f5c4b822a506a88cb5405f2d63a0bb67113c464f58095400caf43514f2855acc361f37fd794edcdf0705166bbc756427ce72f8278c1d2806459f738aeeeaee
TLSH
T1565193440EAB71A0DB894634D2EF3583B6F069BC31A7AE651797D8782BCEB47ACC4050
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 540d90b84e5f7d689401fb16464e88a5d163792cb88f9e179da7a5120940d431
MD5 79bc26524cfea9cd7b50785c482b3908
SHA1 581383aa8a62b5dee45b35aea48ab01a0c7c68a1
SHA512 62ed926908418125de3e9759f0d7f75dd08e232fc5b2b26ba821bcf9ffd9b7ff7db77e5109709238dc3c7e5281b79b6371b83428de1a465af07381b7398ada74
TLSH
T1FC5193440E9B71A0DB984634D2EF31C7B6F069BC31A3AE651797D8782BCEB47ACC4050
MD5 SHA1 SHA512 TLSH

Submit Download

577b93c2-8cbb-4f1f-97fd-6cd2166cfda6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\577b93c2-8cbb-4f1f-97fd-6cd2166cfda6.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

d9a1489a-d845-4dd1-93fb-efac62d83e73.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\d9a1489a-d845-4dd1-93fb-efac62d83e73.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

efa26b7d-ff2a-408a-a2cf-8b8117bd0fdc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\efa26b7d-ff2a-408a-a2cf-8b8117bd0fdc.tmp
Size 949B
SHA256 73522df4951a6b202fe6474a8f68aa0b1687cef74928876d280f6f090fd05ae1
MD5 aed7289d114c88f4741143d72f09cffc
SHA1 5e0626723bf829522bd18e934482f0f50a2c1c26
SHA512 a0f7c43d95cd6491a6fd37a8cda8cb7bbc0b2313d485a51043b1d31171000130454b59cf53957402709ce4995b2d3f3acfc2d61c8efd1ce6bf4f4b12bde436c1
TLSH
T1B8117DF3C3D5856E890556F05A24AE2BCE1D0506821C7C19C9D8EF2793F3475E10655F
MD5 SHA1 SHA512 TLSH

Submit Download

f1056821-e5a6-4a97-a192-aed1b7dcacbb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\f1056821-e5a6-4a97-a192-aed1b7dcacbb.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 ec4f918c7bd78fc1458d48c32c3946f0c744b53dd2aa222bbd8d77cec797cbc8
MD5 ce0aeda91b3bc62f442248f7c9fc2bd1
SHA1 00894732c216bd9dcd2ac40da763004f8200d8c1
SHA512 521eac05509f49cadabbde1167de6f7e71b3ff15e3bc93028141fc0d0cb35e32463f3b64c3d83d58d7533ee5bf1a17aac5b9919526c0a7a72755919822876e53
SSDEEP 96:KkOoKvaqBKD+6YkQkgkZPeykKmBewkia65Ya5ulSK+YI:uHJVlx
TLSH
T1FA91C01071BB064038BE399C9575876A564275B3341AE62BBFBC00A55E2FE084FFE8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bc16a002-38f1-488a-9b87-88d7e289ab88.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\bc16a002-38f1-488a-9b87-88d7e289ab88.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c85788a3-6692-4af7-b0b3-464bce10288e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c85788a3-6692-4af7-b0b3-464bce10288e.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

cb42bf2f-abd5-4cef-92af-c7178434b9ca.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\cb42bf2f-abd5-4cef-92af-c7178434b9ca.tmp
Size 9KB
SHA256 535f2595cfaf5f36718b9209d802894577d1aed28b06a953847c04adab7dcb20
MD5 f9b5c53282124a8689735e3503780120
SHA1 fdc12728b71640e151230fb408f6b2a6cb7acf79
SHA512 6174445514ba543344c98b5cc25c9499f65522a4a85e1c05e4c0cb4a10d8b241863a7e5b4ccc2a9b629923cb34610dda20bfcb5eefbe642cf9b7b859b73150eb
SSDEEP 192:sxZZR9WN/fDsbFIdpdTHW6+WNGY36W0U0JkIg5UJ:sxZZON/fDsb2dHbGXGK
TLSH
T17322B7516E38A97B8CDBD20DBB25BF53E6F9503291E01E58E6FC861C05E66CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

daa31ee7-8de8-4acf-a4f3-ca6c6a0e7238.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\daa31ee7-8de8-4acf-a4f3-ca6c6a0e7238.tmp
Size 27KB
SHA256 b6b5f4c58b3fa39d652abb92121f5729cd7e4ebdb0887e99dc24be23926333ff
MD5 edb01f16a73bc6bc18d6e8838b448ea8
SHA1 b74c7346f37a7d9eee525378d9e878ccc817b15b
SHA512 652e639a9441cf8f22b360221558102ea2c56306e347c27baacbffd58c2e8323a5f77c2ed6f975223f350d13ae85f7ea5ac8527e0b1539ecd053089d29665732
SSDEEP 768:bTKlm7QWvUYe08F1+UoAYDCx9Tuqh0VfUC9xbog/OVh/LlpPs/QroNRG:bTKlm7QWvUYe0u1ja8/L/E/7NRG
TLSH
T1FDC2FA3B640CCB7E4FC05E9DDC5A6F976EA802C7A6588D4047FA984C02C77EA91264DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

992197c3-9f14-4874-b929-98155d0e0c4b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\992197c3-9f14-4874-b929-98155d0e0c4b.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

a0d3424d-4946-4ab5-8f69-bdef0ce9271f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a0d3424d-4946-4ab5-8f69-bdef0ce9271f.tmp
Size 18KB
SHA256 72507b8d0e1bd3186f8684cddef2b076699819d5136a94a8922f7e121a1f5f27
MD5 a8e82f8527b5990e87bd0c2c6bde7a34
SHA1 a865a45f2479c7cf94eb6a1c069c10f2b46a35a7
SHA512 e030bd6cad3f8c22ac1f38fcd33d7dd9ef6e354c5912d6b6fa97fceaccd13c0ab5c1e9057a6f2b892a3b0f4fa20dd6572deadc2ffbc608cef96093d0f8f6f098
SSDEEP 384:6QkUSv0sNZKBqgMc2BbbgTh//0ZbQwKb2Ixu7IIlp:i0AgM3y1/sZzKb5xu7L3
TLSH
T10D827D36ACB5AC379EA3A590F0463653DE74806BD7D45FA4D6CD6B2C06CB1A82307D23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

eba22673-bdee-4834-8849-84cb95530d5f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\eba22673-bdee-4834-8849-84cb95530d5f.tmp
Size 8KB
SHA256 0cfc9f284cd8fc5f2f43e3380ba03c1a4fcc2eae02ca986acfd4265a2393d020
MD5 60b0d49f9e4bf7104409df6f52de9d0a
SHA1 6cda49b9bfe6d4a1e68cd246b3554290a04d228e
SHA512 21c2f7cfae405ceb9d08f3bcde6561f4e0c3f66e3da585dd0d9fbb95459b2c3f1380b63efb532feea130c02a9e9711c6e15c611adc6f302020112af9af5e9cd1
SSDEEP 96:KqONk4QsjpfbUmjH5ih/cIPURHl8h4otop5eaDsBKP4v+Y1xf//ojd6xlYtYqsoD:BON86JUm0QmiUyTgso//0ZeBCZNH/U6
TLSH
T12902D839BC78BCBB9EE3AE45F48777239FA4106B96915F84DAD86A1C01D715C2303827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

043c3601-39f4-41d9-b3fe-383045c3f45d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\043c3601-39f4-41d9-b3fe-383045c3f45d.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 350cf6cf0f506fa771a32d2d6ad59c3df55b0b526644e3598e867926bf59d528
MD5 5895203ca78733a09bbf2d02de33179c
SHA1 11674b989f1271e20e88f4374df1949fe998e15b
SHA512 4883b48c0487cb82d1c5abbe37db4cd02f5eaf3562dfefd28b1de004aaed29719fa407772558db30638cb7cbf71bca2cec9fcf3e4a67d0324f4d07331fe4bf04
TLSH
T1F941165CA6F91108B3B36E4AABF6A86E447FBC772E06D56D00110E4F0A62B41C971733
MD5 SHA1 SHA512 TLSH

Submit Download