efd0a63d4034d98a1b93854189520ff60268f161df22532df3f7f58db601089e

Analysis

user interaction
yes
max time kernel
148s
max time network
143s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260911-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260911-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
24/10/2026, 10:46

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 980KB
Sample261024-mt5lrabs6m
SHA256 efd0a63d4034d98a1b93854189520ff60268f161df22532df3f7f58db601089e
MD5 839bd6412ab3d97136ba4ef8d1439538
SHA1 abf8b70176583dc6b28abbe8190594f7909cdeb7
SHA512 81ae3e5b7547543348385e2bee9edef52001646b5acd874639e8491e6575beb30d340739809aa7694b872f9a50bff261bb346b766dd95dcccebd7156d8ea4e2f
SSDEEP 12288:XWkSrkSXkSRkSDkSkkS2kSnkSxkSUkSYkSqkSnkSeio7IZtW2T:XEf7Ib
TLSH
T1CB256FA4086868B29867A547DEF5EF3E4CE017394BC9C96EBDB7D39C01DCA104DEE412
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3016	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2584227348-426884507-1572084426-1000\{7C78C69D-091C-44B3-BFC1-538ED43BD0AF}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4688	msedge.exe
4688	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe

Suspicious use of WriteProcessMemory 29 IoCs

description	pid	Process	procid_target
PID 4752 wrote to memory of 4732	4752	msedge.exe	83
PID 4752 wrote to memory of 3016	4752	msedge.exe	84
PID 4752 wrote to memory of 2696	4752	msedge.exe	85
PID 4752 wrote to memory of 1560	4752	msedge.exe	86
PID 4752 wrote to memory of 2696	4752	msedge.exe	85
PID 4752 wrote to memory of 2696	4752	msedge.exe	85
PID 4752 wrote to memory of 1560	4752	msedge.exe	86
PID 4752 wrote to memory of 1036	4752	msedge.exe	87
PID 4752 wrote to memory of 3056	4752	msedge.exe	88
PID 4752 wrote to memory of 1036	4752	msedge.exe	87
PID 4752 wrote to memory of 1036	4752	msedge.exe	87
PID 4752 wrote to memory of 3056	4752	msedge.exe	88
PID 4752 wrote to memory of 3056	4752	msedge.exe	88
PID 4752 wrote to memory of 5616	4752	msedge.exe	99
PID 4752 wrote to memory of 5616	4752	msedge.exe	99
PID 4752 wrote to memory of 5616	4752	msedge.exe	99
PID 4752 wrote to memory of 2284	4752	msedge.exe	101
PID 4752 wrote to memory of 4448	4752	msedge.exe	102
PID 4752 wrote to memory of 4984	4752	msedge.exe	103
PID 4752 wrote to memory of 5648	4752	msedge.exe	104
PID 4752 wrote to memory of 6072	4752	msedge.exe	105
PID 4752 wrote to memory of 5648	4752	msedge.exe	104
PID 4752 wrote to memory of 6072	4752	msedge.exe	105
PID 4752 wrote to memory of 380	4752	msedge.exe	107
PID 4752 wrote to memory of 3332	4752	msedge.exe	110
PID 4752 wrote to memory of 3332	4752	msedge.exe	110
PID 4752 wrote to memory of 4688	4752	msedge.exe	111
PID 4752 wrote to memory of 5512	4752	msedge.exe	112
PID 4752 wrote to memory of 5512	4752	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffd07c5c188,0x7ffd07c5c194,0x7ffd07c5c1a0
  2⤵
  PID:4732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1956,i,17725083900446743599,16370488204952840876,524288 --field-trial-handle=2748,i,13193143041134420960,11320394027414135313,262144 --variations-seed-version --mojo-platform-channel-handle=2776 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1764,i,5070146061199499785,7886332202637351693,262144 --field-trial-handle=2748,i,13193143041134420960,11320394027414135313,262144 --variations-seed-version --mojo-platform-channel-handle=2744 /prefetch:2
  2⤵
  PID:2696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2288,i,16902060387855836434,6253148227574632523,524288 --field-trial-handle=2748,i,13193143041134420960,11320394027414135313,262144 --variations-seed-version --mojo-platform-channel-handle=2784 /prefetch:8
  2⤵
  PID:1560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3448,i,13858093805023448030,6516024228624430491,2097152 --field-trial-handle=2748,i,13193143041134420960,11320394027414135313,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:1036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3452,i,859342622710814100,1411399855587807802,2097152 --field-trial-handle=2748,i,13193143041134420960,11320394027414135313,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:3056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=5240,i,9621171206406862205,14442320191166041919,2097152 --field-trial-handle=2748,i,13193143041134420960,11320394027414135313,262144 --variations-seed-version --mojo-platform-channel-handle=5204 /prefetch:1
  2⤵
  PID:5616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5504,i,7474306959792657328,3841588997251848133,524288 --field-trial-handle=2748,i,13193143041134420960,11320394027414135313,262144 --variations-seed-version --mojo-platform-channel-handle=5412 /prefetch:8
  2⤵
  PID:2284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5496,i,17654807965405381390,3142307446861249809,524288 --field-trial-handle=2748,i,13193143041134420960,11320394027414135313,262144 --variations-seed-version --mojo-platform-channel-handle=5536 /prefetch:8
  2⤵
  PID:4448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5500,i,5543051325583033239,10235671166957263605,524288 --field-trial-handle=2748,i,13193143041134420960,11320394027414135313,262144 --variations-seed-version --mojo-platform-channel-handle=5580 /prefetch:8
  2⤵
  PID:4984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2128,i,17219732403682941571,14451003638417266732,524288 --field-trial-handle=2748,i,13193143041134420960,11320394027414135313,262144 --variations-seed-version --mojo-platform-channel-handle=5592 /prefetch:8
  2⤵
  PID:5648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5588,i,1824530989640853786,10640980858962654531,524288 --field-trial-handle=2748,i,13193143041134420960,11320394027414135313,262144 --variations-seed-version --mojo-platform-channel-handle=5560 /prefetch:8
  2⤵
  PID:6072
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6200,i,9256400629667250699,10265694957704170889,524288 --field-trial-handle=2748,i,13193143041134420960,11320394027414135313,262144 --variations-seed-version --mojo-platform-channel-handle=6216 /prefetch:8
  2⤵
  PID:5248
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6200,i,9256400629667250699,10265694957704170889,524288 --field-trial-handle=2748,i,13193143041134420960,11320394027414135313,262144 --variations-seed-version --mojo-platform-channel-handle=6216 /prefetch:8
  2⤵
  PID:380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,5372629518855957240,5425688471772791449,524288 --field-trial-handle=2748,i,13193143041134420960,11320394027414135313,262144 --variations-seed-version --mojo-platform-channel-handle=6276 /prefetch:8
  2⤵
  PID:3332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.4355 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5844,i,12618500707103944850,15564602090566662306,262144 --field-trial-handle=2748,i,13193143041134420960,11320394027414135313,262144 --variations-seed-version --mojo-platform-channel-handle=1260 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5844,i,12079692615603538381,13148606947853257723,524288 --field-trial-handle=2748,i,13193143041134420960,11320394027414135313,262144 --variations-seed-version --mojo-platform-channel-handle=6128 /prefetch:8
  2⤵
  PID:5512

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3928

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2344

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

15bbc2ba-8a09-40bd-988f-2b1b139e5c40.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\15bbc2ba-8a09-40bd-988f-2b1b139e5c40.tmp
Size 26KB
SHA256 030b524afc042305adb98ec6a01097afd1f61f639d05c3f76e5ac77a471929a7
MD5 dbf9a0206568da9e30620a81d603aeb6
SHA1 b281672fe0284c4dd52f04702d27ae3a009c6227
SHA512 e9ece4296176568a9190bc02004393922b56ed4bbde4f5461c866bcd61d3c3a5f697a8e584dce73ee8415ecd9b71ff0c66ae8f33dbf91af8776d83b19c937d57
SSDEEP 384:nfiFiZcI63sNS8TUNTUlImkrWXTJ/FsV2fZBwKGX2+jRr7O6R2Feo1gL/7IzsoS:qFQ63jwgGl6wBwb2MRr7TRbd
TLSH
T1F1C24B72EC94D9BBECEB8ED5A64A7A07EEF05153C58C8AD0E9D81D1D009B5AD030BC17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2ce58fd5-aec3-4a7c-a22e-b80bb7694d18.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\2ce58fd5-aec3-4a7c-a22e-b80bb7694d18.tmp
Size 25KB
SHA256 2a6455ccde14e2748e94315ab07d8c3dc6080ce9d70505a7bd63608abcaa7b5b
MD5 8ff0babac48e7b4da5e38f37565053ef
SHA1 51ff0d66983a9967bcb1a7534d9c4d2c2cfae09e
SHA512 3ba4e5afd12c46aa54b33751274c37a919ac1621d02272bf0709750f6e9f3febdddb76dd6661ddfe1c81292b172281e5725e3a73c88ebd2158500689bfed5b0d
SSDEEP 384:nRiFiZcI63sNW8TUNTUlI4kH5WXTNJ1IsV2fZBwKGX2+jArXfgL/7IzJoi:4FQ63TwgLa31fwBwb2MArXpZ
TLSH
T13CC24A72EC94D9BBECEB9BD5A74A7A03DEF05113858C8AD0E5D95D1D009B1AE030BC1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

70d2c578-85de-400b-905f-6116bf81383b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\70d2c578-85de-400b-905f-6116bf81383b.tmp
Size 25KB
SHA256 209f67d776e979a5bb8b5bbea3c11cfabf790ee38ab6d35b2492157203368390
MD5 a6eeb900d0eb2fb29eccefa135ad5e62
SHA1 5ba157d5a1da5b072061caf3c4b7de4ebecbd071
SHA512 338dd4e369c11dd06873212bdb57ed2cdc840d688b0e67aa439cb7d9402551268e25d220bdb8a49b7978b81bc502c23b0819421bd08d63898959fb330ed2b4b3
SSDEEP 384:nriFiZcI63sNT8TUNTUlImkrWXTT8JsV2fZBwKFV7O6R2Feo1gL/7IzsoS:GFQ63ewgG8GwBwSV7TRbd
TLSH
T169C24A36EC94DABBECEB8F99A74A7A47EEF01167858C4AC0E9D81D1D008759D1307C27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 98408bb8026fb16bc1e6d6fa002061ab6c45c5ca808aaaaef9139be0eefefc37
MD5 fd3ba47c8aa46eaeece09d419e5a194b
SHA1 d56e5f8e571faa0c003ac93bed53041842788761
SHA512 2b2a8e11d2151f8cb4676bc1b7bad6ee90a4ad697d9451b559a6d4280ad3906a9671866d4d471627bc9558d1b5152410bbee884e59e8c73a0606e83ac97158e7
TLSH
T1D0D02B288A4C55D0D06218350C254289309C9C10B84E0014949301B60C8B2B240A0070
MD5 SHA1 SHA512 TLSH

Submit Download

019f7df3-4e23-4490-9b5f-d62039618d54.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\019f7df3-4e23-4490-9b5f-d62039618d54.tmp
Size 414B
SHA256 5bff1df8d6796e14b12cd439b8f7c4c2a197775aadd037f2caf5768271930034
MD5 fc329bf16301231980bd1c3ed3ea5f51
SHA1 1ad17cf0ec8c3705b1984a6c6df07c26c1910c23
SHA512 5669e0c99d898b4ba254dda648cdfe877500c08b65bd30f9ad1a59e0fa43cefd92e9a1f54949e98008f8ea5a9fc54f1321e5b9dbb629fea4a550a6fd040a00a1
TLSH
T1F8E0A2A9DD62EC2B08FC071EA4450342EA5223A72A81990F373C800C8FB0A3602A282C
MD5 SHA1 SHA512 TLSH

Submit Download

040c6fb4-2fb1-4e34-a1a4-e863dbe274ad.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\040c6fb4-2fb1-4e34-a1a4-e863dbe274ad.tmp
Size 11KB
SHA256 8178d13b89fc9f58b412c444ca11ad50c494d410535beb5fb700f2aa15a7f6f4
MD5 f58b047e79adb94d37e14f3f12a0f054
SHA1 6e5b4ff101d31e74d7800afdc13f20a1f8e95cc9
SHA512 1890e97b158998b96176fa2d48a5a12aed1dc817928e8ea0efdfbe3e227e9ebcc537ff076408bee7df3741449171da49b1f768d7490b3e34fd381a9cde1c596a
SSDEEP 192:sxZ5RekL/f4sddIfpZ+zodpHSHW6+WNGYSLL8Ig5BTKJ:sxZ53L/f4sddgp/yHbGAbi
TLSH
T1F932E9156E68A53F9CC7E61DFA55BF43E7F95032A0911E44A6FC8A1C01EB6DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2a62e2b0-fe20-4c72-9986-1a07dd83d25e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2a62e2b0-fe20-4c72-9986-1a07dd83d25e.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

68c0b568-ccd7-45ba-a375-f2ad5bc4c5b8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\68c0b568-ccd7-45ba-a375-f2ad5bc4c5b8.tmp
Size 11KB
SHA256 3152339b893571d08bb7812160885a9a09dd43477134846b20627d29de86972c
MD5 e9ee017b137c5b0cf449630a40065a84
SHA1 34f8919d0d0e2da58a65023a70319343b21189b2
SHA512 03d4d0c6efce4af1d384e658097524f35e8cbee2be9b1d124be453cf0f92e3c8a9f3bc3e809e76a5892fc55058340f1d6521bd3a63143ddc5e6743395d64366f
SSDEEP 192:sxZURekL/f4sCdIfpC+zodpHSHW6+WNGYSzL8Ig5BTKJ:sxZU3L/f4sCdgpiyHbGobi
TLSH
T1E832E9156E68A93F8CC7E61DFA55BF43E6F95032A0911E44E6FC8A1C11EB6DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 4dc6197169d14fc64192ca95d38a15848057d4cfa1c7650f330cd1a6fe20dd1d
MD5 2415dad0d56c64042ec0a1e55eb11c2d
SHA1 c4694cfca3edfe8cfb43924de05a1afb356e1fec
SHA512 922ee39ecd7bffbb6f00fdc8a9a4cdd1cad39c4909b0adb27bda056d70bd43e19cbd272e72ec2d7ca6acbd59aeff0647919a91d8b368a65c605ab5553c431db4
TLSH
T149E026D808CDC23EA209A4D701FC631CDB903ABB96D0691E1700CA88704A440B7C7FE1
MD5 SHA1 SHA512 TLSH

Submit Download

072c0abe-0cb1-45da-a2c9-253ae6a4e8ed.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\072c0abe-0cb1-45da-a2c9-253ae6a4e8ed.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\file__0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

72620e29-c96d-4647-9308-2d6849f98bf8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\72620e29-c96d-4647-9308-2d6849f98bf8.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

c8bf52a6-693d-4eb3-98f0-6506cf33610c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\c8bf52a6-693d-4eb3-98f0-6506cf33610c.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

f1ef05f5-e1c4-4679-afd9-66fb2564befd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\f1ef05f5-e1c4-4679-afd9-66fb2564befd.tmp
Size 3KB
SHA256 88f7ba961f8de29221503f37dd43db89257acb0c5e20f54a6a37590f53bb83b4
MD5 4303380277267ad7591720ce21e10abc
SHA1 0b6ae93e52854a25cabc8e17dd50e0d4114e56b9
SHA512 efbc60c8703500453764126720dfc65aa729c2f6c854f20a55963e3c8c034213eb350172b3886259a7098e7acd44f616e43f703e4abe31d2aa68c6bf65235c22
TLSH
T1EB71BDB7C3D883BE891156F09B257E2BDE1D055A432C3C5688E4AF5B63F24B1D10269F
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3e8ad32ef6e0ff2c8dfb0722a7a862f0a1038fb3\fde832be-39d8-46bc-a8d2-0e17c4751f88\index-dir\temp-index
Size 1KB
SHA256 60cae00fd4c26fd3ff24a6379ff88ab9eb3b622d43c2d2462e41dd10e0125d3b
MD5 3c4e186a22c509959d8343443ab4d523
SHA1 467332fa83ef8567e656ac370dfb0a951af14c45
SHA512 30e57576f9e46e5000390c02a6554d9e5acae55ccb6dd81e4cfffc3a2f94271c7363f8038babdd48e421e2ffcb29ef26902534ed1d32f7d591cc8dccf46904c2
TLSH
T12531868CC59163EFD87511BA289054F2ABF11C29FC49C25082B8B3B534027B05B476FC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3e8ad32ef6e0ff2c8dfb0722a7a862f0a1038fb3\fde832be-39d8-46bc-a8d2-0e17c4751f88\index-dir\the-real-index
Size 48B
SHA256 7e2ec644358db9cc10d52ef0dc4fb9316f3afc377785b487742fceceacb542a3
MD5 300e39f535f7cb3e81424bed4829b22e
SHA1 2f2a35ccf463d324b317ed5d0fd724c04b0e8bba
SHA512 d7a1eea2f5093c4de188fb1b2b069c0cd011872bf4a84754e51fabbcdf01cc817f57eef65a922eeaea314e85a597826edebe199ef51bf65f185cddf03759cfd9
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3e8ad32ef6e0ff2c8dfb0722a7a862f0a1038fb3\index.txt
Size 105B
SHA256 c31a69ca13a7090d7849dbe7500c06ad8dac2f8bf184323f798bbce1f98bdfa2
MD5 f9c7e63b9547ce128cb6edf6bc5f6c5c
SHA1 a4479c15d15934e13a073fcd9b6c2d069e698ac0
SHA512 b7213185a359f3681307e608cc845655b4cca1b54106da43c126b4375bb280de21b7d5b2b47e883ef7b75d6e1056cde49b0041d4cf42de4301b6f7de37642b99
TLSH
T10BB01280D1731EF573A9070243090587AE1F8C06E870E5C8F08E300610306238EC49B7
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3e8ad32ef6e0ff2c8dfb0722a7a862f0a1038fb3\index.txt.tmp
Size 182B
SHA256 68f0758e767ba7cb95ac59aed2437bc89b059486ec59733b452f406f0a5e0562
MD5 ec684898bf7456636108f97323f6c050
SHA1 c684e97f5458da937af232baeac891d3a8f9e220
SHA512 710786184f6a90e96c91381beadf53be6174da03f23908ac3e58ccd2172cc1a91a71749cea6b58b1fa1a5ff1c87fed823de6567baca50273806ad70d12cf5c52
TLSH
T1E0C080C8D1731DB573685B10530514E79D6FDD03F86295CCF44A705714B4313C6969FA
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3e8ad32ef6e0ff2c8dfb0722a7a862f0a1038fb3\index.txt.tmp
Size 100B
SHA256 3b74092d16cdf1a1f9994f2a81ff5b59102ee8057acc827406ac30c2e37ed669
MD5 e6f944ccbe650b614491e8d9c080b631
SHA1 cc937ba586f35640159343d9b7bb0a882b9a63f8
SHA512 6e41485f5e0b90def07f118e413c67fbc758153ca2e632dfee8f36e5540b7b871c45789e4e2177bb9deb107fa3e8d98f6dc6d8c70523fa17240d2d4f4c82a810
TLSH
T1FFB012C4D5731EF5B2BD0718030A0557AE0F8006E4B0B5C8F89C204B05206234DC49B6
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3e8ad32ef6e0ff2c8dfb0722a7a862f0a1038fb3\index.txt.tmp
Size 98B
SHA256 1893d0218110f264a2d8940f1fddfc25bb62bc1652ea8fdc64f7f010d1202f92
MD5 a84afec657d084ea3c8ea460e03459d3
SHA1 0f49dd89b4ee1ff4fa511c77eea7947eafadc5d1
SHA512 05fbbd0bc10e005a0a8175fce804562addcfd8b9d31c9cf810038781b3201d4a51a980483320cd65aee4d67011f7d5f4506d6ca7ab34711e9366d5c9b407eecc
TLSH
T102B012C4D1731EF973BC4B1403090557EE0F8106E470A5CCF08C200704306234DC29B7
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 cf0d55f9d8ed16f749392d4d292880e714b7e593b4770c3742d6ef4ebcf61404
MD5 49ffef93b440103e4d3ec1366eda041f
SHA1 1282b883e4cfd758e2b57b414baf759071e61821
SHA512 0097fcb6cb289e9dfa39d96226f168d1f0aa54d4b19ad9f47b396b91528a645ea9e3ac2268ec78ece44e77430ce7865904ddb8d814d1e811ab2f9ec145a6aa94
SSDEEP 192:kZbVZZ/TCXNTj4F85lHPP6fu1FFL3beNFGLw5vSZVwLq/b9JNgxM/jn1j14zj8VL:khvZrCdTLGhSv3vQeD
TLSH
T173B2255170BB1351383E2D1C81B1871E8A4276A33028E67B7FBD51A68F6BE085DFD8D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

a57e6723-0266-463c-87bb-eb0315655b3c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a57e6723-0266-463c-87bb-eb0315655b3c.tmp
Size 27KB
SHA256 23e691710da01ce75291808b8a4170d0731f17527da260c424fa3732b459588a
MD5 c6f6b75f6b58bf056e4980f07d481ff3
SHA1 3d8532e19d147ae066ab4ecda5394320b516b36e
SHA512 bf1ff22df72ec90373e0dc1b4bf5d0fc73de05be37b724ea8225b313dca5f7c08dd569e300948321e3263fad4be785dca6eac4b9d8806f3985ea5061e6554b84
SSDEEP 768:sN6MRj/WvDppV8F1+UoAYDCx9Tuqh0VfUC9xbog/OVuuLlIa7PXroKn5:sN6MRj/WvDppVu1jaLuLisPEK5
TLSH
T19AC2EA3F380CCA7E5FC01A9DEC1A6F973E9802D766588D4087FA994C02C77EA51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a7a247f1-0ed1-4dcf-86f7-e3f5d50e8bca.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a7a247f1-0ed1-4dcf-86f7-e3f5d50e8bca.tmp
Size 11KB
SHA256 a7953be9a1e77d4a12b7010e0df35269eb902ec0f9367160cfde5338b35e951b
MD5 2bbd0f64f81cab36b624b6861cd3be91
SHA1 26ae5aa2635651e9f8e49cccde2d00305628eaf0
SHA512 761aacb9649de6612d4ba674970f7d860f6b012b4d3e338874ae9ca49cdc99b7f85fa4daa02324d8e0a91f3b0ab3a9e4e9e13711efdc5458d16ce33427ee7b64
SSDEEP 192:sxZURekL/f4skdIfpC+zodpHSHW6+WNGYSzL8IgjTKJ:sxZU3L/f4skdgpiyHbGoji
TLSH
T13732D8156E68A93F8CC7E619FA15BF43E6F95032A0901E48E6FC8A1C11E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 30a682fb18e64f78cf5b1409e99f9a9d839c33a1b41812d4ab9c9c63cc21412a
MD5 2553a1d01a842fb5e297a7f886159451
SHA1 64e0f533fe584d17b59f48a63dca1173a76a178e
SHA512 00b627ab24b525120a7d071458779ce14200aaeef95c31916ce5a16c80350aaa77ba8b0ab642494f1bb2aec9eff59ac201a9a131a90e112b10708c070dae0f73
SSDEEP 384:nziFiZcI63sNW8TUNTUlI4kH5WXTNJ1IsV2fZBwKGX2+jArXfgL/7IzJoi:eFQ63TwgLa31fwBwb2MArXpZ
TLSH
T1C6C23A72EC94D9BBECEB9BD5A74A7A03DEF05113858C8AD0E5D95D1D009B1AE030BC1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c85c1c91-ea89-4897-aa23-013432efbc18.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c85c1c91-ea89-4897-aa23-013432efbc18.tmp
Size 27KB
SHA256 c5fa6d7d51dcb9c1334cb1e8c72eeaf686c5dab0b1c17f48c78762f43861fd9b
MD5 51455366e1d1cf9f13ad608509a45056
SHA1 ee4b6f5b273033bb73226d0dd9a562f2da35472d
SHA512 06648398e834452c25362b438d9ae1c4831b3e0b078ffcc52affb3e371a4529a0b5f80ad88435af5d68d83237dab7df475055e558775a26d2ab35eea7fdea239
SSDEEP 384:nziFzQkUSvTx3sNW8TUNTUlI4kZ5WXTNJ1IsV2fZBwKGX2+jAr2IbuxgL/7IzGIC:eFd13TwgFa31fwBwb2MAr5buELd
TLSH
T119C23A36EC94EAABEDE79E94B70A3643EEE05113C58C8AD4E9C91D2C00CB1DD134BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f0306c2f-4f46-4081-b0ad-9f3b9b5e5b93.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\f0306c2f-4f46-4081-b0ad-9f3b9b5e5b93.tmp
Size 27KB
SHA256 414ea280268c3fa322964e3ffd84a0b835a12128b730d13fc7ad24a89889d976
MD5 eb2812e507fc641b938d04fee5993dbd
SHA1 2941b3cef3c281c56d082bb779293dc095d21272
SHA512 cd2eb52fcccac1a885c8f6b39a9a5c97490081028cfc9e34693fc4d3d4e849e000873c072c479bc07207c62fd2622bc532be886627af067b98cfa2ead55d9e2a
SSDEEP 384:nUiFzQkUSvTx3sNW8TUNTUlI4kZ5WXTyJ1IsV2fZBwKGX2+jTr2IbuxgL/7IzGIC:vFd13TwgFaA1fwBwb2MTr5buELd
TLSH
T12FC23A36EC94EAABEDE79E95B70A3643EEE05113C58C8AD4E9C91D2C00CB1DD134B916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 58ef48f3625f2777c3b697e9e3d4cc491607f88a92861eeaac0e2b3a52d11d50
MD5 91ccddcd0eed7c56242803d15f85c7b1
SHA1 0254766bbc61a96d353a259faef20a9e616d239a
SHA512 7beb2922c5c3798105fd910512c83ef1ddf0bb582b7b457caf0c8e2db65950e02684b89f21f33e4428aadb043342f4ccb170004c2e6436eef4a33bb791de5518
TLSH
T18541FB58A6FA1148B3776F56AFF6A86D447FB8772F0AE45E10010E4E0623A44C971B37
MD5 SHA1 SHA512 TLSH

Submit Download

memory/380-377-0x0000012E8BE00000-0x0000012E8CE00000-memory.dmp

Download