3f43480f762294ffbc78b8d61fce1401c9e251dc0cdce08bfd44ff270a9f92eb

Analysis

max time kernel
148s
max time network
124s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
26/10/2026, 18:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 15KB
Sample261026-wy3sdsbf78
SHA256 3f43480f762294ffbc78b8d61fce1401c9e251dc0cdce08bfd44ff270a9f92eb
MD5 e7325cf9a94938998d0f7d608d343b2e
SHA1 70705f2aa1c829443554f3fc842a49089bcdf867
SHA512 53e629815c684ed4804dd3391a76aa489c3fc3a12e6381be17ed2697345c769fd335557a7e30dce0ebf12938e7927ffc1bbeed7cea064144a2f387cc52ceb0d8
SSDEEP 192:Pk7s9xQEC0qLtcnZPkg+YWjwBAzFtiMzMB39g01yS9J7yySCN9fKQISQ6:s7sLQBipkg+YWj9tiB39g0179fKQVQ6
TLSH
T19D62C9747CC220366A8210B7A637D58DB466D107EB078D99F2CC224E1F62EDDE6F45B8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4508	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-4057491610-3392471755-192832105-1000\{8A1FB6C0-E7DE-4053-A63E-32262A067265}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4676	msedge.exe
4676	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4116 wrote to memory of 3316	4116	msedge.exe	90
PID 4116 wrote to memory of 1148	4116	msedge.exe	92
PID 4116 wrote to memory of 4508	4116	msedge.exe	93
PID 4116 wrote to memory of 1148	4116	msedge.exe	92
PID 4116 wrote to memory of 1148	4116	msedge.exe	92
PID 4116 wrote to memory of 4976	4116	msedge.exe	94
PID 4116 wrote to memory of 4976	4116	msedge.exe	94
PID 4116 wrote to memory of 2088	4116	msedge.exe	95
PID 4116 wrote to memory of 2444	4116	msedge.exe	96
PID 4116 wrote to memory of 2088	4116	msedge.exe	95
PID 4116 wrote to memory of 2088	4116	msedge.exe	95
PID 4116 wrote to memory of 2444	4116	msedge.exe	96
PID 4116 wrote to memory of 2444	4116	msedge.exe	96
PID 4116 wrote to memory of 2348	4116	msedge.exe	97
PID 4116 wrote to memory of 2348	4116	msedge.exe	97
PID 4116 wrote to memory of 2348	4116	msedge.exe	97
PID 4116 wrote to memory of 4372	4116	msedge.exe	98
PID 4116 wrote to memory of 4372	4116	msedge.exe	98
PID 4116 wrote to memory of 4372	4116	msedge.exe	98
PID 4116 wrote to memory of 1124	4116	msedge.exe	100
PID 4116 wrote to memory of 1124	4116	msedge.exe	100
PID 4116 wrote to memory of 5472	4116	msedge.exe	101
PID 4116 wrote to memory of 5472	4116	msedge.exe	101
PID 4116 wrote to memory of 2788	4116	msedge.exe	103
PID 4116 wrote to memory of 4920	4116	msedge.exe	107
PID 4116 wrote to memory of 4836	4116	msedge.exe	108
PID 4116 wrote to memory of 5456	4116	msedge.exe	109
PID 4116 wrote to memory of 5348	4116	msedge.exe	110
PID 4116 wrote to memory of 5348	4116	msedge.exe	110
PID 4116 wrote to memory of 4676	4116	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ff9f664c188,0x7ff9f664c194,0x7ff9f664c1a0
  2⤵
  PID:3316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1840,i,9156305843782857547,1293287382501452515,262144 --field-trial-handle=2572,i,18195315347086159827,6642523502055532076,262144 --variations-seed-version --mojo-platform-channel-handle=2576 /prefetch:2
  2⤵
  PID:1148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2144,i,5250797126330202706,10464615119456095250,524288 --field-trial-handle=2572,i,18195315347086159827,6642523502055532076,262144 --variations-seed-version --mojo-platform-channel-handle=2628 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2388,i,1848624647248268991,3295712940108548512,524288 --field-trial-handle=2572,i,18195315347086159827,6642523502055532076,262144 --variations-seed-version --mojo-platform-channel-handle=3288 /prefetch:13
  2⤵
  PID:4976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3528,i,8110290853777694861,7122571314605870781,2097152 --field-trial-handle=2572,i,18195315347086159827,6642523502055532076,262144 --variations-seed-version --mojo-platform-channel-handle=3648 /prefetch:1
  2⤵
  PID:2088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=2756,i,1789455710226259484,13729008316849600642,2097152 --field-trial-handle=2572,i,18195315347086159827,6642523502055532076,262144 --variations-seed-version --mojo-platform-channel-handle=3656 /prefetch:1
  2⤵
  PID:2444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4220,i,3847904609583138800,9417151060350372981,2097152 --field-trial-handle=2572,i,18195315347086159827,6642523502055532076,262144 --variations-seed-version --mojo-platform-channel-handle=4272 /prefetch:1
  2⤵
  PID:2348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4224,i,1405982719591191010,17002724747275200970,2097152 --field-trial-handle=2572,i,18195315347086159827,6642523502055532076,262144 --variations-seed-version --mojo-platform-channel-handle=4476 /prefetch:9
  2⤵
  PID:4372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3740,i,8153554504141008360,6148067089000496310,524288 --field-trial-handle=2572,i,18195315347086159827,6642523502055532076,262144 --variations-seed-version --mojo-platform-channel-handle=5272 /prefetch:14
  2⤵
  PID:1124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3628,i,13409733464714437778,14846576368827919637,524288 --field-trial-handle=2572,i,18195315347086159827,6642523502055532076,262144 --variations-seed-version --mojo-platform-channel-handle=5336 /prefetch:14
  2⤵
  PID:5472
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6044,i,9414285717177173157,15868414834369291485,524288 --field-trial-handle=2572,i,18195315347086159827,6642523502055532076,262144 --variations-seed-version --mojo-platform-channel-handle=6060 /prefetch:14
  2⤵
  PID:4612
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6044,i,9414285717177173157,15868414834369291485,524288 --field-trial-handle=2572,i,18195315347086159827,6642523502055532076,262144 --variations-seed-version --mojo-platform-channel-handle=6060 /prefetch:14
  2⤵
  PID:2788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4700,i,6450721880890726771,6390787641021415653,524288 --field-trial-handle=2572,i,18195315347086159827,6642523502055532076,262144 --variations-seed-version --mojo-platform-channel-handle=1244 /prefetch:14
  2⤵
  PID:4920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4704,i,13029811120876849429,17877725283574884803,524288 --field-trial-handle=2572,i,18195315347086159827,6642523502055532076,262144 --variations-seed-version --mojo-platform-channel-handle=4848 /prefetch:14
  2⤵
  PID:4836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4516,i,13948502927858633883,12473662009376497269,524288 --field-trial-handle=2572,i,18195315347086159827,6642523502055532076,262144 --variations-seed-version --mojo-platform-channel-handle=4820 /prefetch:14
  2⤵
  PID:5456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1472,i,206336485618748795,10357390165382011265,524288 --field-trial-handle=2572,i,18195315347086159827,6642523502055532076,262144 --variations-seed-version --mojo-platform-channel-handle=5308 /prefetch:14
  2⤵
  PID:5348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=816,i,7885694567199079565,14140793875868521290,262144 --field-trial-handle=2572,i,18195315347086159827,6642523502055532076,262144 --variations-seed-version --mojo-platform-channel-handle=5644 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4676

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:6040

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1340

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

0ab3b7d6-2f09-4bb0-bf5f-f75fecbd5449.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\0ab3b7d6-2f09-4bb0-bf5f-f75fecbd5449.tmp
Size 38KB
SHA256 979505c2b56a7a739057af6b0f53710e6b278dd2f4338b1cdb1acb9778c8c872
MD5 471c4dccc63977e57306aeec405b0200
SHA1 334bb6708a2f4cdf7b021ff9a86c6ea38620ca76
SHA512 ad727893cc692b4da15d1ba1713fe708838bcf77c94cc878fc02a94771c1e0c1333c82aa26266483770da14a3b6f21a71ce5274b38c7852359c8c680f4490e4f
SSDEEP 768:f/UxvxjgC+I34FPKZ0E57Y0GZxJsXBdK8E7tSHUPpMs:yZj3+I3L70/JsXf70tSfs
TLSH
T1CB03C034F8A49D635DFBD790360A7387EEF446A3C6C54DA44AED6B0D028B2AD430791B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1cbde188-9156-4756-bc21-605f99e59849.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\1cbde188-9156-4756-bc21-605f99e59849.tmp
Size 36KB
SHA256 999647711972aa960896fdfd501011bfdab5d83fe2195b7e76e3ae3643962fbe
MD5 6df05a402395692a0141a70f4105e226
SHA1 babc5a540baab3ee9f80bdf3a1a575eab10c9068
SHA512 df7232d90206e15038e9ffe78d9a41a0a1e40c0f400699f33fc98e81a574e628d97589a06cba44e3419b26a0db524b1eb261fd3334b600cfbdf659c61f26771a
SSDEEP 768:kFdV3kwgBG9wBKZpE57Y0GZxJsXBdK8Z7t6dLg:IV36970/JsXf7ZtmU
TLSH
T146F29F31E890DA779EFBDB91B60A3243DEB482A3CAC48E94DBD95A1C01871DD1347D16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

212c9434-d388-4b25-896e-6cf01fba2777.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\212c9434-d388-4b25-896e-6cf01fba2777.tmp
Size 37KB
SHA256 a4cda59609f2c776fb2809d9bbf993d05ae9ae5bc8a84afc830e927fad9f7c77
MD5 235624cf806d2334177dbd46249e7346
SHA1 bcec53778b4e567ba5d7feea6b1f8837a736c9d0
SHA512 b9c659571006e73c58f06d1d31aa53d01ebb13163d8d4416366ac120e798c3b435a51ce4de35053cf242b437185add9b32cfa95700580262a782b3121215f860
SSDEEP 768:A/UxvxjgC+I3UpKZ9E57Y0GZxJsXBdK8lmSHUPpMs:tZj3+I3W70/JsXf7wSfs
TLSH
T1B503BF34E8509D735DFBE390360A7387EEF446B3D5C15DA48AEDAB0D028B26D434395A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3f91dcac-8864-4ef9-aa2c-8c0667d83780.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\3f91dcac-8864-4ef9-aa2c-8c0667d83780.tmp
Size 34KB
SHA256 15ae4974a2602de677042eb11785c82462b4cf859c273c25ecacba9a698c9fa1
MD5 4cc79b8c862ba84edf1ce47e1233a784
SHA1 b95c3a643d16d997714696229d397660acbe3531
SHA512 ec9be9356b939a720d84119909bfe738ad0e6442569d241fffd1b2c4f876fd7868baae9134e7ecaccda53a9915c5fd2aacfc61a2768935ddbdad53231798c972
SSDEEP 768:Ed3XG9wBKZxE57Y0GZxJsXBdK8Z7t6dLg:Ed3Xb70/JsXf7ZtmU
TLSH
T19FF2B134E8919E638DFBD790720A7283EEB48253CAC44E94DADE6B1C05CB1DE134791B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9476cee7-3b83-4d4e-8620-dbca9ea799e8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\9476cee7-3b83-4d4e-8620-dbca9ea799e8.tmp
Size 34KB
SHA256 018243d663f399812d471c6d1893ec79f2132dde90b06ec7a709a63d03f1563a
MD5 e80df3b2e6f6eaf0fcd50f7e6a87c397
SHA1 fcb41d0a5b7dcee10d0bcd842c655757a5190639
SHA512 5325edc8b6ee493419232e3fadce96de7947c2f868e2709aa09e8761a86870dece05e234fb5881836ae84ed4664bd7410ea07c00c631acfbe67d216fe4e1af4d
SSDEEP 768:Qd3cG9wBKZxE57Y0GZxJsXBdK8Z7t6dLg:Qd3cb70/JsXf7ZtmU
TLSH
T191F2B034E8919E638DFBD791720A7283EEB48263CAC44E94DADD6B1C05CB1DE134791B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

67528a1b-b52b-4739-ab40-e3682e7cd92e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\67528a1b-b52b-4739-ab40-e3682e7cd92e.tmp
Size 105KB
SHA256 aa204e7f585c1f2b64ec2dfe226fcda3dd40e2d6c7acaecb8bc39c51bf5021a2
MD5 82ef5ef3fd97f3d79a47f09529d45307
SHA1 4d70248d33884063e95777b4e6e0d998931440a1
SHA512 a3e3e08187ec16facc64907edae849970f4fffaceb0ff69b6b9421c352de4ae4396f6c7d28c814160c616bf604747c73d4cf8a04f10f2fc8fa4a07c14210288d
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P73:fwUQC5VwBIiElEd2K57P73
TLSH
T1F8B3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4945E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 fe09a9e94fbd795d6fab442dc426ef79e7bd47dbd80086b003cb1cd34d18db58
MD5 4da51a25f1a6b822ac642c6eae6f9a72
SHA1 9d4f1d1e83270c8d54d24725cd3d7f406de5967d
SHA512 c027a48a18b3b282e84d69320ca44ca416bceb43057eee8fcf4b2647669c307720f00240e17a22310df0488100938fd8b34a0660ca73adaa5f0433a1657b325a
TLSH
T16CD02BBCB76CC476E40210744042050052617004AC1704D10F0562448984080804114E
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 54a604899198f01e1a2f5ec52bac53679a6d2775840ba8c81ab97c59f718adf8
MD5 b266cfe7dc8e59a4693bec2c7307d768
SHA1 0ff4c63ce201552fd340f72d3376df63989a21f9
SHA512 6832b9d56510cdd21708734b256b052e90f313f920ebc959b4845a1a4fc17cfbfe75dfa04c5252540531ead21e0662a341763e79030c36867f2823312c51c0f9
TLSH
T1C1D02BB8B77CC476E40210784043050052517004581704D10F05A2448984080804014E
MD5 SHA1 SHA512 TLSH

Submit Download

22c36e0d-45cc-481e-b6dd-c0650ed8adb8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\22c36e0d-45cc-481e-b6dd-c0650ed8adb8.tmp
Size 11KB
SHA256 9054b43c61b1caa34371e16067595eca397c1c474bff2c326765b6207ddf7bf0
MD5 4a4a19e042ca3bb65da69389b9d23a34
SHA1 3262515a1e0d8f3c486e770bcba1097550f0b466
SHA512 1ab31791ac555615b091918eead49e428a452c8a15f53a0cf955d94a572856dfe6ff6b2e284037756ef51035cf6bac53054c145c58ecc70fd6f6bb042f0515c8
SSDEEP 192:sxRnRo4bB/frsGhhUzoA8p4v/g6+WNIYU2RCcTpGDIgD4J:sxRny2B/frsGhh1e/5IF4
TLSH
T1BB32C815AE28A93B8CCBD20DBB557F53E2F95032A1D11E48B6FC861C14E7ADD520780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3147f1b2-32de-40eb-96d4-806d3db79989.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3147f1b2-32de-40eb-96d4-806d3db79989.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

670ba9f2-7611-45db-bd1e-51017d7b94e1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\670ba9f2-7611-45db-bd1e-51017d7b94e1.tmp
Size 23KB
SHA256 320d1fcd38abf21a5ae9e11062b462868666a70ad8b49368e4629411cd89fbf3
MD5 1af3034d4aa962e3d17923373cc2244b
SHA1 513c75aa099b90028de200fd0c606739e84cfffe
SHA512 ab9e127c5085d40ac25fe5b985e5557598ac3061e9e44f40a6e32ca633ca9f98b849a7481f36aa52220a07d4401b73026b5c0b3094f5742f08e8da59b9d40710
SSDEEP 384:64qajXwfCtgmcFfsO7nKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OV+a9mWRuBroj:6JajXKWgm0fsO7n8F1+UoAYDCx9Tuqh3
TLSH
T1DEB2DA3B640DCB7F5FD00AAD9C19AF976D9802CB96588D4047FE984C02C77FA921A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7715c367-c6df-49c1-9874-6a343c4d3cf8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7715c367-c6df-49c1-9874-6a343c4d3cf8.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 82f6d63935e432734e2ca484bc96c64789bf226a728375a0763f3c3b626382f7
MD5 11759e7f7e01f74227eba2e95c0e42f6
SHA1 67c1f06f85a50d4fbab970080f406e40bd70aaaf
SHA512 5258f53db04d0190f5523bc15bbba5ea50a3d7f6c9601dc7f2c1f4f6ad3ac206a8e01d386c8f3fcb8193ce7e2a47a6e2df87faf860354aedd13a215942deb00c
TLSH
T1756171D762817651F7A80070A4F64FB3397C4AC6124F1D51F9ABD037AF3A711678604E
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 c5cbb99b12da84053b5ffa3c426e4f00c1eef9c802b8a68caba407f57565b9d4
MD5 a06ae360f6ece4fe68e326203871bbf3
SHA1 4bd6a2ae1004f95fc1b653157c3671695c29bcbf
SHA512 e92a3753e0206c3e4de9a6a81873cafd89f44b219d53934470c49dadbc15b9370cf795229569b7fbe4e9730d08455df0fcedf612f4ec2c5b9865ed794a9d7699
TLSH
T1E66171D362807651F7A80030A4F64FB6397C4AC5124F1D51F9ABD077AF3A711678604E
MD5 SHA1 SHA512 TLSH

Submit Download

0c2bfd15-0207-4f4f-b7f1-fc2910761eaf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\0c2bfd15-0207-4f4f-b7f1-fc2910761eaf.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

03c187d5-55c6-47f2-accb-78fd83480e29.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\03c187d5-55c6-47f2-accb-78fd83480e29.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

21f33d95-d961-4972-9e7a-396563cc4aff.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\21f33d95-d961-4972-9e7a-396563cc4aff.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

2ab267cf-7860-4404-9df1-b6707283b829.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\2ab267cf-7860-4404-9df1-b6707283b829.tmp
Size 2KB
SHA256 18e3f8c63010241bb0186df333d0bdea034763f5db217e79a86e33031642014f
MD5 e6baffc3ccbf09990fd0f0e1329235b1
SHA1 40215cb03a5ec506f7b1ea7496d06e92791a43b2
SHA512 f7ac9bc131f64d4c060ded3fba4ef9701f4a09f74e865f6abea2441804ec573e6d33c686944937f55527e55fa35eb2b8ccf73ee6240f82cc21f732f6df80c24c
TLSH
T17951CEF783E4867E990196F0AB146E2FCE2D0516432C3C5689E4AE5B93F2471E14169F
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 0258299ad3cd81f5f9a8d6752e3344695119cc73a412d855d25a7cecb7854956
MD5 6893827b91d0b8e6bb5450f15de44552
SHA1 8b858db35c70263b011227de40d9ffb50940b77c
SHA512 d6139a2a4f02a3951926bf3b67aea86efc932603df6934851be47972f20e4fee02228979ef2cbdedb52bbbcf9ab1b97103909ad2af26aaf35a7463ba7c051606
SSDEEP 192:sxRMRo4bB/frsPhhUzoA8p4v/g6+WNIYU2RfgTpGDIgIJ:sxRMy2B/frsPhh1e/5Ies
TLSH
T14F32A715AE68A93B8CCBD20DBB55BF53D6F95032A1D11E48F6FC861C04E7ADD520780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 3KB
SHA256 3d0bba2014abb7adbcb65c2ffec15a017ea96890888c9f04ef4427e6c31d35ad
MD5 d8440bdb4f53f2f304b48fcc6ed3ae90
SHA1 f056e52f2e3f9d9e431712c18e7746ee3f08c808
SHA512 476f627b7480d7a3745b9c53c9589b2abcd04df9f5c540dabbea0b211bff33969e8a5ebf69bf17f7e2ea9ada3833a16cadf836bcf7e0990269cd0edd5c1e28c9
TLSH
T13D816121313F4341387E35185094AA5B076231B634B8EA7F3BA921765E6BE084DFD9EE
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 d9f2d343efa424d40406ee7d096e6817a10e06f46c50d2d80c8d61e1255790c2
MD5 6a02250c7e0ce8f8fa8c902ec89abcbd
SHA1 faddb6ef210e9341716552ed1796c3878efeec8d
SHA512 b8d6c6cd4664a70fc50352e79968731f49b1d7f5a81b80f0333b66827377425eaf1262b3de391ef75944f48019d2248734315263db87b0b1e415af717ff5b70a
SSDEEP 96:KfSHui0IEgoQJzqqgKi1qsge6q5MytK8gKBiw9oBdPXX+dnCl/9+K3L/D+bF96zU:sSHui0IEVQJuq21qst6q5MytPx9oBdPe
TLSH
T1D7916821313F4341387E35185094AA5B076231B33478EA7F3BA961765E6BE084DFD9ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

c50a65d5-ec36-4d8a-a840-57124949a13b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c50a65d5-ec36-4d8a-a840-57124949a13b.tmp
Size 11KB
SHA256 f09f6d1dcc730221ee7b3bdc624c39bf8de0e0d224e9bae1039eeb074dadcccc
MD5 6c6faecc592cd7e10af7e4e77ba76334
SHA1 ab0b796e25b29b236338f79d27314fd4bd9946cb
SHA512 86e8bc59af295e5bc393d630de7a6c64c2556a1b77515f18d6f980092eabddaef0deeafc87f994b478e95a60364a419db11cb3e650c857774236567bba1f8880
SSDEEP 192:sxRnRo4bB/frsLhhUzoA8p4v/g6+WNIYU2RfgTpGDIgDCJ:sxRny2B/frsLhh1e/5Ie6
TLSH
T16A32B716AE68A93F8CCBD20DBB55BF53D6F95032A1D11E48B6FC861C04E7ADD520780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

37852105-a15b-4749-aa38-d4ef111ada94.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\37852105-a15b-4749-aa38-d4ef111ada94.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e0d59a24-e9b8-40b3-a3b8-038cd80cde3b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e0d59a24-e9b8-40b3-a3b8-038cd80cde3b.tmp
Size 39KB
SHA256 8b260493865d679b7fe75d672a23b21592416ac37542e767258f703d8c8bfddc
MD5 6328f4fab636161e1c3555e62dd8e167
SHA1 4817ac45b37c959707244b103e8cd9636c865732
SHA512 662eb82a8e91470d77610c9893c92a0742e1761f0605d4d18ea1d658c13c85f673520c3ebd7ec5259012cafa6f60fe8b0a9db62b905398860bd62a295550ca50
SSDEEP 768:f/UxvxjgC+p3lGXYBKZxE57Y0GZxJsXBdK8Z7tB9:yZj3+p3lP70/JsXf7ZtB9
TLSH
T1C703B035F8A4AD635DF7D390360A7387EEF445A3C6C54DA44AED5B0D068B2AE430781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c019005d-bec5-44e4-89a8-dcc8bb898c3f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\c019005d-bec5-44e4-89a8-dcc8bb898c3f.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download